last executing test programs: 13m7.682286739s ago: executing program 1 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb3, 0xf5}}, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x40}]}]]}, 0x68}}, 0x0) 13m7.444663872s ago: executing program 1 (id=863): syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x443a, &(0x7f00000088c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1400) rmdir(&(0x7f0000000180)='./bus\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 13m5.350922693s ago: executing program 1 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0xfff}}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13m3.910491544s ago: executing program 1 (id=879): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) 13m3.021259287s ago: executing program 1 (id=882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 13m1.815855505s ago: executing program 1 (id=886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x35}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) 13m1.302093352s ago: executing program 32 (id=886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x35}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) 15.721720405s ago: executing program 0 (id=3237): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xbc}}, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.129230513s ago: executing program 4 (id=3244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000009000000040000000300000000000000", @ANYRES32, @ANYRES32], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4, 0x2}, 0x20) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) r7 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x13, 0x400, 0x70bd2c}, 0x14}}, 0x200d4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="87000000000000003e1573d3951242"], 0x8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010002000000f8dbdf25010000005c00088058000080240002007b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf124000100f44da367a88ee6564f020211456727082f5cebee8b1bf5ab1837341b459b39220400018008000300a1dcc10e14000200776730"], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x24) write$binfmt_elf64(r5, 0x0, 0x0) epoll_create(0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) 9.972630401s ago: executing program 4 (id=3246): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000540)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000801) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) shutdown(0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000040)) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xce, 0x0, &(0x7f0000000080)) 8.733961349s ago: executing program 3 (id=3249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.836427777s ago: executing program 2 (id=3250): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 6.67077265s ago: executing program 3 (id=3251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 6.597668011s ago: executing program 0 (id=3252): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5.086261584s ago: executing program 3 (id=3253): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 5.072952994s ago: executing program 2 (id=3254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 5.040160584s ago: executing program 0 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x8, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.715189234s ago: executing program 2 (id=3256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000009000000040000000300000000000000", @ANYRES32, @ANYRES32], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4, 0x2}, 0x20) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) r7 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x13, 0x400, 0x70bd2c}, 0x14}}, 0x200d4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="87000000000000003e1573d3951242"], 0x8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010002000000f8dbdf25010000005c00088058000080240002007b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf124000100f44da367a88ee6564f020211456727082f5cebee8b1bf5ab1837341b459b39220400018008000300a1dcc10e14000200776730"], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x24) write$binfmt_elf64(r5, 0x0, 0x0) epoll_create(0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) 3.714930814s ago: executing program 3 (id=3257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0a00fa1b04"], 0x7) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.713543134s ago: executing program 4 (id=3258): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.33450267s ago: executing program 4 (id=3259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 2.568864291s ago: executing program 0 (id=3260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 2.567615801s ago: executing program 3 (id=3261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2.528409002s ago: executing program 2 (id=3262): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.483951083s ago: executing program 4 (id=3263): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.401847439s ago: executing program 3 (id=3264): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000540)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000801) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) shutdown(0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000040)) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xce, 0x0, &(0x7f0000000080)) 1.398621489s ago: executing program 0 (id=3265): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005) socket$nl_netfilter(0x10, 0x3, 0xc) 1.137675873s ago: executing program 2 (id=3266): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) 771.227748ms ago: executing program 4 (id=3267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 217.11µs ago: executing program 0 (id=3268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab", 0x1e}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 0s ago: executing program 2 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) kernel console output (not intermixed with test programs): 444] loop0: detected capacity change from 0 to 512 [ 551.777118][ T9444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 551.840400][ T9444] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.932: iget: bad i_size value: 38620345925642 [ 551.857956][ T9444] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.932: couldn't read orphan inode 15 (err -117) [ 551.876133][ T9444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.049084][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 552.058220][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 552.140667][ T9444] EXT4-fs (loop0): shut down requested (1) [ 552.199639][ T9264] Bluetooth: hci2: command tx timeout [ 552.305368][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.314711][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.086166][ T28] audit: type=1326 audit(1782907453.887:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.2.940" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff47099ce59 code=0x0 [ 553.243240][ T9261] veth0_vlan: entered promiscuous mode [ 553.285556][ T9261] veth1_vlan: entered promiscuous mode [ 553.387398][ T9261] veth0_macvtap: entered promiscuous mode [ 553.412251][ T9261] veth1_macvtap: entered promiscuous mode [ 553.471481][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.505174][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.531561][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.550100][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.577107][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.614628][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.661914][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.671827][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.715998][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.749703][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.768983][ T9261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.824362][ T9261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.833158][ T9261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.858367][ T9261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.888554][ T9475] loop0: detected capacity change from 0 to 40427 [ 553.948496][ T9475] F2FS-fs (loop0): invalid crc value [ 553.988328][ T9475] F2FS-fs (loop0): Found nat_bits in checkpoint [ 554.107272][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.149504][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.193225][ T9475] F2FS-fs (loop0): Start checkpoint disabled! [ 554.268097][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.291065][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.301366][ T9475] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 554.675324][ T1088] kworker/u4:6: attempt to access beyond end of device [ 554.675324][ T1088] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 554.736225][ T1088] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 554.743345][ T1088] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 554.766204][ T1088] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 556.031256][ T9561] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 556.052892][ T9561] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 556.321402][ T9566] loop0: detected capacity change from 0 to 4096 [ 556.381959][ T9566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.983021][ T9555] loop4: detected capacity change from 0 to 32768 [ 557.038899][ T9555] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.952 (9555) [ 557.100861][ T9555] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 557.130361][ T9555] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 557.160269][ T9555] BTRFS info (device loop4): enabling disk space caching [ 557.168701][ T9555] BTRFS info (device loop4): force clearing of disk cache [ 557.189842][ T9555] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 557.238888][ T9555] BTRFS info (device loop4): use zstd compression, level 3 [ 557.257703][ T9555] BTRFS info (device loop4): disk space caching is enabled [ 557.419498][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.495021][ T9555] BTRFS info (device loop4): enabling ssd optimizations [ 557.513592][ T9555] BTRFS info (device loop4): auto enabling async discard [ 557.554113][ T9555] BTRFS info (device loop4): rebuilding free space tree [ 557.639076][ T9555] BTRFS info (device loop4): disabling free space tree [ 557.670895][ T9555] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 557.722627][ T9555] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 558.105963][ T9261] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 559.292107][ T9645] loop0: detected capacity change from 0 to 64 [ 559.952652][ T9628] loop4: detected capacity change from 0 to 40427 [ 559.996782][ T9628] F2FS-fs (loop4): invalid crc value [ 560.030032][ T9628] F2FS-fs (loop4): Found nat_bits in checkpoint [ 560.219329][ T9628] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 560.490185][ T9261] syz-executor: attempt to access beyond end of device [ 560.490185][ T9261] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 560.551954][ T9261] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 561.002427][ T9701] overlayfs: failed to clone upperpath [ 563.179683][ T9760] overlayfs: failed to clone upperpath [ 564.284563][ T9777] loop4: detected capacity change from 0 to 32768 [ 564.377911][ T9777] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 564.504794][ T9777] XFS (loop4): Ending clean mount [ 565.067433][ T9261] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 565.807951][ T9820] loop4: detected capacity change from 0 to 1024 [ 565.821363][ T9820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.862619][ T9820] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 565.918485][ T9820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.262788][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.169315][ T6358] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 567.199588][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 567.375155][ T6358] usb 5-1: Using ep0 maxpacket: 8 [ 567.404526][ T6358] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 567.423343][ T6358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.438241][ T6358] usb 5-1: Product: syz [ 567.458395][ T6358] usb 5-1: Manufacturer: syz [ 567.472481][ T6358] usb 5-1: SerialNumber: syz [ 567.542376][ T6358] usb 5-1: config 0 descriptor?? [ 567.834305][ T6358] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 567.904622][ T9874] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1048'. [ 569.025635][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1061'. [ 569.365262][ T6358] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 569.392571][ T6358] usb 5-1: USB disconnect, device number 2 [ 569.452636][ T9921] syz_tun: entered allmulticast mode [ 569.469173][ T9920] syz_tun: left allmulticast mode [ 569.796245][ T9938] Illegal XDP return value 4291391488 on prog (id 42) dev syz_tun, expect packet loss! [ 570.028559][ T9948] sctp: [Deprecated]: syz.2.1078 (pid 9948) Use of int in max_burst socket option deprecated. [ 570.028559][ T9948] Use struct sctp_assoc_value instead [ 572.287488][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 573.127705][T10030] gretap1: entered allmulticast mode [ 573.160749][T10030] team0: Port device gretap1 added [ 573.221362][T10032] bridge0: port 3(team0) entered blocking state [ 573.256896][T10032] bridge0: port 3(team0) entered disabled state [ 573.263525][T10032] team0: entered allmulticast mode [ 573.323726][T10032] team_slave_0: entered allmulticast mode [ 573.346705][T10032] team_slave_1: entered allmulticast mode [ 573.406288][T10032] team0: entered promiscuous mode [ 573.441406][T10032] team_slave_0: entered promiscuous mode [ 573.466746][T10032] team_slave_1: entered promiscuous mode [ 573.506480][T10032] gretap1: entered promiscuous mode [ 574.312750][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 574.381622][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'. [ 574.929850][T10066] netlink: 'syz.0.1108': attribute type 4 has an invalid length. [ 575.313153][T10068] netlink: 8772 bytes leftover after parsing attributes in process `syz.2.1109'. [ 576.915649][T10125] overlayfs: failed to clone upperpath [ 577.517986][T10118] loop4: detected capacity change from 0 to 32768 [ 577.577191][T10118] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 577.748181][T10118] XFS (loop4): Ending clean mount [ 578.051486][ T28] audit: type=1800 audit(1782907476.940:5): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1120" name="file1" dev="loop4" ino=4427 res=0 errno=0 [ 578.144795][ T9261] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 578.619029][T10170] overlayfs: failed to clone upperpath [ 578.645374][T10170] overlayfs: failed to clone lowerpath [ 578.839730][T10177] lo: entered allmulticast mode [ 578.941045][T10180] lo: entered promiscuous mode [ 578.944364][ T6358] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 578.951638][T10180] batadv_slave_0: entered promiscuous mode [ 578.966953][T10180] syz_tun: entered promiscuous mode [ 578.972979][T10179] syz_tun: left promiscuous mode [ 578.984183][T10179] batadv_slave_0: left promiscuous mode [ 578.998254][T10179] lo: left promiscuous mode [ 579.160267][ T6358] usb 5-1: Using ep0 maxpacket: 8 [ 579.174810][ T6358] usb 5-1: unable to get BOS descriptor or descriptor too short [ 579.195441][ T6358] usb 5-1: config 4 interface 0 has no altsetting 0 [ 579.207256][ T6358] usb 5-1: string descriptor 0 read error: -22 [ 579.213839][ T6358] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 579.226690][ T6358] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 579.260559][ T6358] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 579.268371][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025b9f400: rx timeout, send abort [ 579.280347][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025b9f400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 579.320304][ T6358] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 579.332347][ T6358] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 579.339841][ T6358] usb 5-1: media controller created [ 579.391599][ T6358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.423967][T10193] gretap2: entered allmulticast mode [ 579.453665][T10193] team0: Port device gretap2 added [ 579.484247][T10195] bridge0: port 3(team0) entered blocking state [ 579.495594][T10195] bridge0: port 3(team0) entered disabled state [ 579.518341][T10195] team0: entered allmulticast mode [ 579.534649][T10195] team_slave_0: entered allmulticast mode [ 579.547229][ T6358] zl10353_read_register: readreg error (reg=127, ret==0) [ 579.551628][T10195] team_slave_1: entered allmulticast mode [ 579.590081][T10195] team0: entered promiscuous mode [ 579.622541][T10195] team_slave_0: entered promiscuous mode [ 579.651310][T10195] team_slave_1: entered promiscuous mode [ 579.668836][T10195] gretap2: entered promiscuous mode [ 579.678770][ T6358] usb 5-1: USB disconnect, device number 3 [ 580.782284][T10230] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 580.968333][ T28] audit: type=1326 audit(1782907479.626:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.2.1148" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff47099ce59 code=0x0 [ 582.182588][ T6149] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 582.422473][ T6149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.435238][ T6149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.461392][ T6149] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.499660][ T6149] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.521157][ T6149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.543659][ T6149] usb 5-1: config 0 descriptor?? [ 583.021829][ T6149] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 583.105084][ T6149] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 583.372951][T10275] loop4: detected capacity change from 0 to 8 [ 583.439325][T10275] squashfs image failed sanity check [ 583.552680][ T8245] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 583.573955][ T6149] usb 5-1: USB disconnect, device number 4 [ 584.440399][T10337] kvm: kvm [10336]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0x11e) = 0x60000000000 [ 584.479928][T10344] overlayfs: failed to clone upperpath [ 584.531863][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.538419][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.273383][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1183'. [ 585.290928][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1183'. [ 585.303383][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1183'. [ 586.007612][T10367] NILFS (nullb0): couldn't find nilfs on the device [ 586.166976][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.351566][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.487173][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.043627][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'. [ 588.103869][T10393] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1195'. [ 588.928555][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'. [ 589.125564][ T6149] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 589.353052][ T6149] usb 5-1: Using ep0 maxpacket: 16 [ 589.374291][ T6149] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 589.394238][ T6149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.405503][ T6149] usb 5-1: Product: syz [ 589.410268][ T6149] usb 5-1: Manufacturer: syz [ 589.416228][ T6149] usb 5-1: SerialNumber: syz [ 589.431944][ T6149] usb 5-1: config 0 descriptor?? [ 589.456758][ T6149] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 589.471316][ T6149] usb 5-1: Detected FT-X [ 589.689607][ T6149] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 590.687591][ T6149] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 590.833360][ T6149] usb 5-1: USB disconnect, device number 5 [ 590.960126][ T6149] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 590.989544][ T6149] ftdi_sio 5-1:0.0: device disconnected [ 591.035211][T10457] fuse: Bad value for 'fd' [ 591.880625][T10492] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 594.734200][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.820516][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.909012][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.424235][T10546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.455330][T10546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.477676][T10546] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 596.496623][T10546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 597.210260][T10564] syz_tun: entered allmulticast mode [ 597.806961][T10571] bridge_slave_0: left allmulticast mode [ 597.812843][T10571] bridge_slave_0: left promiscuous mode [ 597.818603][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.831196][T10571] bridge_slave_1: left allmulticast mode [ 597.837055][T10571] bridge_slave_1: left promiscuous mode [ 597.843244][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.861528][T10571] bond0: (slave bond_slave_0): Releasing backup interface [ 597.883214][T10571] bond0: (slave bond_slave_1): Releasing backup interface [ 597.931738][T10571] team0: Port device team_slave_0 removed [ 597.945849][T10571] team0: Port device team_slave_1 removed [ 597.969043][T10571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.980670][T10571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.991495][T10571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.000630][T10571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.153245][T10575] tipc: Enabling of bearer rejected, failed to enable media [ 600.466500][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 600.565063][T10630] tipc: Enabling of bearer rejected, failed to enable media [ 603.616979][T10647] loop4: detected capacity change from 0 to 40427 [ 603.662421][T10647] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 603.670319][T10647] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 603.774255][T10647] F2FS-fs (loop4): invalid crc value [ 603.802258][T10647] F2FS-fs (loop4): Found nat_bits in checkpoint [ 603.950438][T10647] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 603.966528][T10647] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 605.186333][T10679] tipc: Enabling of bearer rejected, failed to enable media [ 605.361225][T10682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.444691][T10686] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 605.669396][T10686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.746467][T10686] bond1: (slave lo): making interface the new active one [ 605.755960][T10686] bond1: (slave lo): Enslaving as an active interface with an up link [ 605.769112][T10686] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 606.912522][T10706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.059232][T10706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.115876][T10706] netlink: 'syz.4.1288': attribute type 10 has an invalid length. [ 607.229541][T10706] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 608.781516][T10730] loop4: detected capacity change from 0 to 512 [ 608.967773][T10730] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1296: invalid indirect mapped block 2 (level 1) [ 608.986969][T10730] EXT4-fs (loop4): 1 truncate cleaned up [ 608.994591][T10730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.354579][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.752991][T10753] IPVS: Error joining to the multicast group [ 612.019006][ T6149] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 612.955634][ T6149] usb 5-1: Using ep0 maxpacket: 8 [ 613.019839][ T6149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.041636][ T6149] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 613.063859][ T6149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.097649][ T6149] usb 5-1: config 0 descriptor?? [ 613.341074][ T6149] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 613.621975][ T8305] usb 5-1: USB disconnect, device number 6 [ 613.627988][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 616.394670][T10846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 616.402014][T10846] IPv6: NLM_F_CREATE should be set when creating new route [ 618.065228][T10846] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.075897][T10846] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.085413][T10846] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.094872][T10846] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.161489][T10846] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.170740][T10846] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.180149][T10846] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.189206][T10846] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.773333][T10902] syzkaller0: entered promiscuous mode [ 618.779100][T10902] syzkaller0: entered allmulticast mode [ 619.052063][T10910] tipc: Enabling of bearer rejected, already enabled [ 621.476458][T10920] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.485607][T10920] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.494747][T10920] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.503839][T10920] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.722968][ T28] audit: type=1804 audit(1782907524.605:7): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1367" name="bus" dev="ramfs" ino=23554 res=1 errno=0 [ 631.755979][ T28] audit: type=1804 audit(1782907524.605:8): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1367" name="bus" dev="ramfs" ino=23554 res=1 errno=0 [ 632.113291][T11035] tipc: Enabling of bearer rejected, already enabled [ 632.917141][T11035] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 633.417045][ T28] audit: type=1326 audit(1782907528.048:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 633.491165][ T28] audit: type=1326 audit(1782907528.048:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 633.552914][ T28] audit: type=1326 audit(1782907528.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 633.652517][ T28] audit: type=1326 audit(1782907528.094:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 633.703309][ T28] audit: type=1326 audit(1782907528.094:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 633.761350][ T28] audit: type=1326 audit(1782907528.094:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 633.792056][ T28] audit: type=1326 audit(1782907528.094:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 633.897967][ T28] audit: type=1326 audit(1782907528.094:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11045 comm="syz.0.1383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 634.258029][T11063] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 642.841672][T11118] tipc: Enabling of bearer rejected, failed to enable media [ 646.103190][T11136] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 646.968156][T11139] netlink: 'syz.3.1405': attribute type 10 has an invalid length. [ 646.976320][T11139] team0: left allmulticast mode [ 646.981374][T11139] team_slave_0: left allmulticast mode [ 646.986882][T11139] team_slave_1: left allmulticast mode [ 646.992435][T11139] team0: left promiscuous mode [ 646.997243][T11139] team_slave_0: left promiscuous mode [ 647.003615][T11139] team_slave_1: left promiscuous mode [ 647.009244][T11139] gretap2: left promiscuous mode [ 647.014719][T11139] bridge0: port 3(team0) entered disabled state [ 647.120684][T11139] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.131176][T11139] bond0: (slave team0): Enslaving as an active interface with an up link [ 651.090376][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.096903][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.972458][T11216] tipc: Enabling of bearer rejected, failed to enable media [ 667.988375][T11333] overlayfs: failed to clone lowerpath [ 668.422098][T11337] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 670.849071][T11379] tipc: Enabling of bearer rejected, failed to enable media [ 673.859152][T11404] syzkaller0: entered promiscuous mode [ 673.884905][T11404] syzkaller0: entered allmulticast mode [ 673.913254][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.920986][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.927830][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.934720][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.941579][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.948384][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.955261][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.962144][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.968983][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.975839][T11404] tc action pedit offset must be on 32 bit boundaries [ 673.982707][T11404] 0: reclassify loop, rule prio 0, protocol 800 [ 676.029764][ T9264] Bluetooth: hci2: command 0x0406 tx timeout [ 678.260192][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 680.722374][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 680.722388][ T28] audit: type=1800 audit(1782907571.715:39): pid=11455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1477" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 682.046140][T11461] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 682.137853][T11461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 682.148194][T11461] bond1: entered promiscuous mode [ 682.153380][T11461] bond1: entered allmulticast mode [ 682.158980][T11461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.192734][T11461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.204907][T11461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 682.214232][T11461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 682.224382][T11461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 682.235595][T11461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 682.266731][T11461] bond1: (slave geneve2): making interface the new active one [ 682.287207][T11461] geneve2: entered promiscuous mode [ 682.303995][T11461] geneve2: entered allmulticast mode [ 682.319967][T11461] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 687.144210][T11492] syzkaller0: entered promiscuous mode [ 687.149781][T11492] syzkaller0: entered allmulticast mode [ 687.264236][T11492] tipc: Started in network mode [ 687.269212][T11492] tipc: Node identity 7ec98a4228fe, cluster identity 4711 [ 687.277893][T11492] tipc: Enabled bearer , priority 0 [ 687.311279][T11491] tipc: Resetting bearer [ 687.434767][T11491] tipc: Disabling bearer [ 692.675989][T11531] syzkaller0: entered promiscuous mode [ 692.683567][T11531] syzkaller0: entered allmulticast mode [ 697.287073][T11552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 697.340672][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 697.359663][T11556] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 697.416628][T11566] netlink: 'syz.2.1504': attribute type 4 has an invalid length. [ 697.432913][T11566] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1504'. [ 700.017288][T11594] lo: Caught tx_queue_len zero misconfig [ 700.024240][T11594] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 701.107282][T11600] loop4: detected capacity change from 0 to 512 [ 701.306816][T11600] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 701.354533][T11600] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: comm syz.4.1511: inode #1792: comm syz.4.1511: iget: illegal inode # [ 703.746289][T11600] EXT4-fs (loop4): no journal found [ 705.208219][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 708.444238][T11630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.451584][T11630] IPv6: NLM_F_CREATE should be set when creating new route [ 709.998723][T11636] sctp: [Deprecated]: syz.4.1516 (pid 11636) Use of int in maxseg socket option. [ 709.998723][T11636] Use struct sctp_assoc_value instead [ 711.966258][T11641] overlayfs: failed to clone upperpath [ 714.307004][T11671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 714.314417][T11671] IPv6: NLM_F_CREATE should be set when creating new route [ 717.630613][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 717.637570][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 718.088225][T11700] team0: left allmulticast mode [ 718.093921][T11700] team_slave_0: left allmulticast mode [ 718.101024][T11700] team_slave_1: left allmulticast mode [ 718.110683][T11700] team0: left promiscuous mode [ 718.134193][T11700] team_slave_0: left promiscuous mode [ 718.156798][T11700] team_slave_1: left promiscuous mode [ 718.162621][T11700] gretap1: left promiscuous mode [ 718.177270][T11700] bridge0: port 3(team0) entered disabled state [ 718.355675][T11700] bridge_slave_0: left allmulticast mode [ 718.385867][T11700] bridge_slave_0: left promiscuous mode [ 718.394083][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.462529][T11700] bridge_slave_1: left allmulticast mode [ 719.606663][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.813383][T11700] bond0: (slave bond_slave_0): Releasing backup interface [ 719.879643][T11700] bond0: (slave bond_slave_1): Releasing backup interface [ 719.940635][T11700] team0: Port device team_slave_0 removed [ 719.996558][T11700] team0: Port device team_slave_1 removed [ 720.008073][T11700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.015673][T11700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.027685][T11700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.048508][T11700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.132442][T11700] bond1: left allmulticast mode [ 720.141337][T11700] ip6gretap1: left allmulticast mode [ 720.153374][T11700] bond1: left promiscuous mode [ 720.171774][T11700] ip6gretap1: left promiscuous mode [ 720.203057][T11700] team0: Port device macvlan2 removed [ 720.252646][T11700] bond1: (slave ip6gretap1): Releasing active interface [ 720.317111][T11700] team0: Port device gretap1 removed [ 721.024901][T11714] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 721.255801][T11720] 9pnet_virtio: no channels available for device syz [ 721.358873][T11723] 9pnet_fd: p9_fd_create_tcp (11723): problem connecting socket to 127.0.0.1 [ 721.383429][T11723] tipc: Cannot configure node identity twice [ 723.234012][T11738] sctp: [Deprecated]: syz.0.1551 (pid 11738) Use of int in maxseg socket option. [ 723.234012][T11738] Use struct sctp_assoc_value instead [ 729.682501][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 734.031246][T11813] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 734.109995][T11813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 734.119338][T11817] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 (while UP) [ 734.546039][T11820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.769667][T11820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.778567][T11820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.787887][T11820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.807876][T11820] bond4: (slave geneve2): making interface the new active one [ 734.844918][T11820] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 735.770299][T11831] overlayfs: failed to clone upperpath [ 739.270390][T11855] xt_policy: too many policy elements [ 743.156218][ T28] audit: type=1326 audit(1782907629.369:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 743.936411][ T28] audit: type=1326 audit(1782907630.089:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 743.990612][ T28] audit: type=1326 audit(1782907630.089:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 744.051676][ T28] audit: type=1326 audit(1782907630.089:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 744.251543][ T28] audit: type=1326 audit(1782907630.089:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 744.279374][ T28] audit: type=1326 audit(1782907630.108:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 745.081393][ T28] audit: type=1326 audit(1782907630.108:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 745.146369][ T28] audit: type=1326 audit(1782907630.108:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 745.176822][ T28] audit: type=1326 audit(1782907630.108:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 745.215148][ T28] audit: type=1326 audit(1782907630.108:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.3.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 745.917104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 764.907403][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 767.511217][T11989] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 767.546895][T11989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 767.770535][T11989] bond2: (slave geneve2): making interface the new active one [ 768.174956][T11989] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 771.563393][T12022] Device name cannot be null; rc = [-22] [ 772.222109][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 772.222152][ T28] audit: type=1326 audit(1782907656.068:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 772.855841][ T28] audit: type=1326 audit(1782907656.068:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 772.908971][ T28] audit: type=1326 audit(1782907656.068:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 772.958556][ T28] audit: type=1326 audit(1782907656.068:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 773.034369][ T28] audit: type=1326 audit(1782907656.078:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 773.103291][ T28] audit: type=1326 audit(1782907656.078:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 773.395662][ T28] audit: type=1326 audit(1782907656.078:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 773.549396][ T28] audit: type=1326 audit(1782907656.078:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 773.573998][ T28] audit: type=1326 audit(1782907656.078:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 773.598490][ T28] audit: type=1326 audit(1782907656.078:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.3.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 776.724634][T12041] overlayfs: failed to clone upperpath [ 782.866010][T12068] bridge1: entered promiscuous mode [ 782.871587][T12068] bridge1: entered allmulticast mode [ 784.069944][T12072] syz.2.1635: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 784.124628][T12072] CPU: 0 PID: 12072 Comm: syz.2.1635 Not tainted syzkaller #0 [ 784.132282][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 784.142416][T12072] Call Trace: [ 784.145754][T12072] [ 784.148760][T12072] dump_stack_lvl+0x18c/0x250 [ 784.153513][T12072] ? show_regs_print_info+0x20/0x20 [ 784.158788][T12072] ? load_image+0x420/0x420 [ 784.163351][T12072] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 784.169830][T12072] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 784.176391][T12072] warn_alloc+0x246/0x340 [ 784.180779][T12072] ? stack_trace_save+0xaa/0x100 [ 784.185771][T12072] ? zone_watermark_ok_safe+0x230/0x230 [ 784.191438][T12072] ? kasan_set_track+0x5f/0x70 [ 784.196265][T12072] ? kasan_set_track+0x4e/0x70 [ 784.201101][T12072] ? __kasan_kmalloc+0x8f/0xa0 [ 784.205933][T12072] ? xsk_init_queue+0xad/0x100 [ 784.209061][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.210743][T12072] ? xsk_setsockopt+0x413/0x750 [ 784.217188][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.221876][T12072] ? do_sock_setsockopt+0x175/0x1a0 [ 784.221907][T12072] ? __x64_sys_setsockopt+0x182/0x200 [ 784.221936][T12072] __vmalloc_node_range+0x129/0x1320 [ 784.222025][T12072] ? free_vm_area+0x50/0x50 [ 784.248750][T12072] vmalloc_user+0x74/0x80 [ 784.253145][T12072] ? xskq_create+0xbf/0x170 [ 784.257736][T12072] xskq_create+0xbf/0x170 [ 784.262136][T12072] xsk_init_queue+0xad/0x100 [ 784.266796][T12072] xsk_setsockopt+0x413/0x750 [ 784.271535][T12072] ? xsk_poll+0x670/0x670 [ 784.275923][T12072] ? __fget_files+0x28/0x460 [ 784.280672][T12072] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 784.286282][T12072] ? security_socket_setsockopt+0x7e/0xa0 [ 784.292059][T12072] ? xsk_poll+0x670/0x670 [ 784.296439][T12072] do_sock_setsockopt+0x175/0x1a0 [ 784.301522][T12072] ? __fdget+0x180/0x210 [ 784.305834][T12072] __x64_sys_setsockopt+0x182/0x200 [ 784.311102][T12072] do_syscall_64+0x55/0xb0 [ 784.315586][T12072] ? clear_bhb_loop+0x40/0x90 [ 784.320315][T12072] ? clear_bhb_loop+0x40/0x90 [ 784.325046][T12072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.331000][T12072] RIP: 0033:0x7ff47099ce59 [ 784.335480][T12072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.355168][T12072] RSP: 002b:00007ff46ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 784.363653][T12072] RAX: ffffffffffffffda RBX: 00007ff470c16090 RCX: 00007ff47099ce59 [ 784.371698][T12072] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 784.379738][T12072] RBP: 00007ff470a32e6f R08: 0000000000000029 R09: 0000000000000000 [ 784.387763][T12072] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.395798][T12072] R13: 00007ff470c16128 R14: 00007ff470c16090 R15: 00007ffc91f8a278 [ 784.403945][T12072] [ 784.412357][T12072] Mem-Info: [ 784.416806][T12072] active_anon:39931 inactive_anon:0 isolated_anon:0 [ 784.416806][T12072] active_file:18509 inactive_file:40428 isolated_file:0 [ 784.416806][T12072] unevictable:4637 dirty:83 writeback:0 [ 784.416806][T12072] slab_reclaimable:11861 slab_unreclaimable:94582 [ 784.416806][T12072] mapped:30330 shmem:39239 pagetables:751 [ 784.416806][T12072] sec_pagetables:0 bounce:0 [ 784.416806][T12072] kernel_misc_reclaimable:0 [ 784.416806][T12072] free:1300062 free_pcp:9889 free_cma:0 [ 786.669259][T12072] Node 0 active_anon:152824kB inactive_anon:0kB active_file:74036kB inactive_file:161560kB unevictable:11848kB isolated(anon):0kB isolated(file):0kB mapped:116024kB dirty:412kB writeback:0kB shmem:143160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11836kB pagetables:2972kB sec_pagetables:0kB all_unreclaimable? no [ 786.725900][T12081] loop4: detected capacity change from 0 to 512 [ 786.738818][T12072] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 786.801263][T12072] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.867152][T12072] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 786.877770][T12081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.894528][T12072] Node 0 DMA32 free:1309356kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:144988kB inactive_anon:0kB active_file:74036kB inactive_file:160724kB unevictable:5748kB writepending:412kB present:3129332kB managed:2586936kB mlocked:4212kB bounce:0kB free_pcp:30176kB local_pcp:9096kB free_cma:0kB [ 786.926047][T12072] lowmem_reserve[]: 0 0 0 0 0 [ 786.931267][T12072] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.958617][T12072] lowmem_reserve[]: 0 0 0 0 0 [ 786.963567][T12072] Node 1 Normal free:3894444kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17468kB local_pcp:7712kB free_cma:0kB [ 786.963600][T12081] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.003926][T12072] lowmem_reserve[]: 0 0 0 0 0 [ 787.008722][T12072] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 787.021712][T12072] Node 0 DMA32: 1009*4kB (ME) 1112*8kB (UME) 751*16kB (UME) 483*32kB (UME) 293*64kB (UME) 137*128kB (UME) 29*256kB (UM) 28*512kB (UME) 31*1024kB (UM) 11*2048kB (UM) 283*4096kB (UM) = 1311892kB [ 787.041590][T12072] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 787.053321][T12072] Node 1 Normal: 251*4kB (UE) 60*8kB (UE) 38*16kB (UE) 104*32kB (UE) 32*64kB (UME) 7*128kB (UME) 2*256kB (UM) 1*512kB (E) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3894444kB [ 787.074073][T12072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 787.087669][T12072] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 787.097319][T12072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 787.112476][T12072] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 787.146933][T12072] 90113 total pagecache pages [ 787.168434][T12072] 0 pages in swap cache [ 787.289970][T12072] Free swap = 124396kB [ 787.302817][T12072] Total swap = 124996kB [ 787.472206][T12072] 2097051 pages RAM [ 787.497539][T12072] 0 pages HighMem/MovableOnly [ 787.668344][T12072] 416931 pages reserved [ 787.672600][T12072] 0 pages cma reserved [ 787.786946][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 787.822521][T12081] Bluetooth: hci4: Frame reassembly failed (-84) [ 787.875730][T12081] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 787.908047][T12088] overlayfs: failed to clone upperpath [ 790.130748][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 791.178791][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.709103][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 792.458885][T12115] binder: 12112:12115 ioctl 4018620d 0 returned -22 [ 793.265432][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 797.462280][T12155] Device name cannot be null; rc = [-22] [ 799.742141][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 804.221886][T12199] xt_connbytes: Forcing CT accounting to be enabled [ 805.324503][T12210] Set syz0 is full, maxelem 0 reached [ 810.273650][T12243] bond3: entered promiscuous mode [ 810.279328][T12243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 812.853706][T12262] loop4: detected capacity change from 0 to 128 [ 812.877052][ T9264] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 813.986363][T12263] fuse: Bad value for 'group_id' [ 814.313827][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 814.313843][ T28] audit: type=1326 audit(1782907695.055:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 814.345388][ T28] audit: type=1326 audit(1782907695.055:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 814.721086][T10862] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 814.729602][ T28] audit: type=1326 audit(1782907695.055:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 816.328871][ T28] audit: type=1326 audit(1782907695.110:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 816.401530][T12276] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 816.417742][ T28] audit: type=1326 audit(1782907695.110:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 816.956345][ T28] audit: type=1326 audit(1782907695.110:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 817.093672][ T28] audit: type=1326 audit(1782907695.138:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 817.157991][ T28] audit: type=1326 audit(1782907695.138:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 817.252120][ T28] audit: type=1326 audit(1782907695.138:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 817.282000][ T28] audit: type=1326 audit(1782907695.138:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.1684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 817.970965][T10862] usb 5-1: device descriptor read/all, error -71 [ 818.014389][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 818.023435][T12298] netlink: 'syz.2.1692': attribute type 2 has an invalid length. [ 818.032051][T12298] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 818.682749][T12309] Device name cannot be null; rc = [-22] [ 818.811063][T12311] loop4: detected capacity change from 0 to 64 [ 820.635370][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 820.635389][ T28] audit: type=1326 audit(1782907698.951:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 820.796559][ T28] audit: type=1326 audit(1782907698.951:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 821.022777][ T28] audit: type=1326 audit(1782907698.951:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 821.299983][ T28] audit: type=1326 audit(1782907698.951:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 822.108571][ T28] audit: type=1326 audit(1782907698.951:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 822.135095][ T28] audit: type=1326 audit(1782907698.960:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 822.269885][ T28] audit: type=1326 audit(1782907698.960:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 822.297587][ T28] audit: type=1326 audit(1782907698.960:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 822.364780][ T28] audit: type=1326 audit(1782907698.960:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 822.430066][ T28] audit: type=1326 audit(1782907698.960:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.0.1695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 822.507216][T12330] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 826.067047][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 826.067067][ T28] audit: type=1326 audit(1782907705.912:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.366484][T12348] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 826.376339][ T28] audit: type=1326 audit(1782907705.912:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.435846][ T28] audit: type=1326 audit(1782907705.912:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.509821][ T28] audit: type=1326 audit(1782907705.912:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.549554][ T9264] Bluetooth: hci2: command 0x0406 tx timeout [ 826.565413][ T28] audit: type=1326 audit(1782907705.912:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.604898][ T28] audit: type=1326 audit(1782907705.912:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.629531][ T28] audit: type=1326 audit(1782907705.912:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.654052][ T28] audit: type=1326 audit(1782907705.912:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.679053][ T28] audit: type=1326 audit(1782907705.912:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 826.703454][ T28] audit: type=1326 audit(1782907705.912:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.0.1713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 827.092731][T12361] o2cb: This node has not been configured. [ 827.098703][T12361] o2cb: Cluster check failed. Fix errors before retrying. [ 827.106095][T12361] (syz.3.1706,12361,1):user_dlm_register:674 ERROR: status = -22 [ 827.114334][T12361] (syz.3.1706,12361,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 829.136387][ T9264] Bluetooth: hci3: unexpected event for opcode 0x080b [ 829.256571][T12385] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 829.533027][T12377] loop4: detected capacity change from 0 to 32768 [ 829.550424][T12377] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 829.729680][T12261] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 829.743092][ T9264] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 829.751934][ T9264] Bluetooth: hci2: unexpected event for opcode 0x203e [ 831.460972][T12399] loop4: detected capacity change from 0 to 32768 [ 831.470875][T12399] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.1721 (12399) [ 831.526251][T12399] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 831.555356][T12399] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 831.570025][T12399] BTRFS info (device loop4): using free space tree [ 831.959091][T12441] tipc: Started in network mode [ 831.964195][T12441] tipc: Node identity 4, cluster identity 4711 [ 831.970590][T12441] tipc: Node number set to 4 [ 832.758087][T12399] BTRFS info (device loop4): enabling ssd optimizations [ 832.765218][T12399] BTRFS info (device loop4): auto enabling async discard [ 833.060053][ T9261] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 833.421549][T12456] libceph: resolve 'c' (ret=-3): failed [ 834.091641][ T9264] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 834.102921][ T9264] Bluetooth: hci2: Injecting HCI hardware error event [ 834.114697][ T51] Bluetooth: hci2: hardware error 0x00 [ 834.609609][T12462] loop4: detected capacity change from 0 to 40427 [ 834.654286][T12462] F2FS-fs (loop4): invalid crc value [ 834.688104][T12462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 834.884331][T12462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 837.105843][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 837.129828][T12491] loop4: detected capacity change from 0 to 32768 [ 837.251969][T12491] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 837.582516][T12261] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 839.184378][T12513] loop4: detected capacity change from 0 to 32768 [ 839.936328][T12548] loop4: detected capacity change from 0 to 4096 [ 840.572254][T12563] loop4: detected capacity change from 0 to 24 [ 841.569941][T12567] loop4: detected capacity change from 0 to 32768 [ 841.642431][T12567] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 841.963306][T12567] XFS (loop4): Ending clean mount [ 842.004293][T12598] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 842.016767][T12598] veth0_vlan: left promiscuous mode [ 842.027634][T12598] veth0_vlan: entered promiscuous mode [ 842.043574][T12598] team0: Device veth0_vlan failed to register rx_handler [ 842.143418][ T9261] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 842.686540][T12606] loop4: detected capacity change from 0 to 4096 [ 842.709018][T12606] __ntfs_error: 128 callbacks suppressed [ 842.709040][T12606] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 842.741396][T12606] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 842.780533][T12606] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 842.813409][T12606] ntfs: volume version 3.1. [ 843.142754][ T9261] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 843.472525][T12617] loop4: detected capacity change from 0 to 4096 [ 843.499645][T12617] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 843.520648][T12617] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 843.558042][T12617] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 843.583728][T12617] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 843.620707][T12617] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 843.750210][T12617] ntfs: volume version 3.1. [ 843.785499][T12617] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 844.246010][ T51] Bluetooth: hci3: Invalid handle: 0x9c98 > 0x0eff [ 844.623652][T12635] loop4: detected capacity change from 0 to 32768 [ 844.733430][T12638] syz.3.1813: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 844.759704][T12638] CPU: 0 PID: 12638 Comm: syz.3.1813 Not tainted syzkaller #0 [ 844.767254][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.777365][T12638] Call Trace: [ 844.780699][T12638] [ 844.783683][T12638] dump_stack_lvl+0x18c/0x250 [ 844.788432][T12638] ? show_regs_print_info+0x20/0x20 [ 844.793738][T12638] ? load_image+0x420/0x420 [ 844.798306][T12638] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 844.804782][T12638] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 844.811352][T12638] warn_alloc+0x246/0x340 [ 844.815749][T12638] ? stack_trace_save+0xaa/0x100 [ 844.820758][T12638] ? zone_watermark_ok_safe+0x230/0x230 [ 844.826390][T12638] ? kasan_set_track+0x5f/0x70 [ 844.831207][T12638] ? kasan_set_track+0x4e/0x70 [ 844.836026][T12638] ? __kasan_kmalloc+0x8f/0xa0 [ 844.840928][T12638] ? xsk_init_queue+0xad/0x100 [ 844.845744][T12638] ? xsk_setsockopt+0x413/0x750 [ 844.850640][T12638] ? do_sock_setsockopt+0x175/0x1a0 [ 844.855906][T12638] ? __x64_sys_setsockopt+0x182/0x200 [ 844.861336][T12638] __vmalloc_node_range+0x129/0x1320 [ 844.866715][T12638] ? free_vm_area+0x50/0x50 [ 844.871290][T12638] vmalloc_user+0x74/0x80 [ 844.875674][T12638] ? xskq_create+0xbf/0x170 [ 844.880226][T12638] xskq_create+0xbf/0x170 [ 844.884609][T12638] xsk_init_queue+0xad/0x100 [ 844.889258][T12638] xsk_setsockopt+0x413/0x750 [ 844.894025][T12638] ? xsk_poll+0x670/0x670 [ 844.898403][T12638] ? __fget_files+0x28/0x460 [ 844.903057][T12638] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 844.908678][T12638] ? security_socket_setsockopt+0x7e/0xa0 [ 844.914454][T12638] ? xsk_poll+0x670/0x670 [ 844.918839][T12638] do_sock_setsockopt+0x175/0x1a0 [ 844.923927][T12638] ? __fdget+0x180/0x210 [ 844.928233][T12638] __x64_sys_setsockopt+0x182/0x200 [ 844.933531][T12638] do_syscall_64+0x55/0xb0 [ 844.938005][T12638] ? clear_bhb_loop+0x40/0x90 [ 844.942734][T12638] ? clear_bhb_loop+0x40/0x90 [ 844.947465][T12638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.953429][T12638] RIP: 0033:0x7f5295b9ce59 [ 844.957902][T12638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.977573][T12638] RSP: 002b:00007f52969c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 844.986061][T12638] RAX: ffffffffffffffda RBX: 00007f5295e16090 RCX: 00007f5295b9ce59 [ 844.994088][T12638] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 845.002152][T12638] RBP: 00007f5295c32e6f R08: 0000000000000029 R09: 0000000000000000 [ 845.010179][T12638] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.018201][T12638] R13: 00007f5295e16128 R14: 00007f5295e16090 R15: 00007fffcde48ce8 [ 845.026248][T12638] [ 845.040806][T12638] Mem-Info: [ 845.044094][T12638] active_anon:37993 inactive_anon:0 isolated_anon:0 [ 845.044094][T12638] active_file:18509 inactive_file:41166 isolated_file:0 [ 845.044094][T12638] unevictable:768 dirty:289 writeback:1 [ 845.044094][T12638] slab_reclaimable:11534 slab_unreclaimable:95389 [ 845.044094][T12638] mapped:28470 shmem:33046 pagetables:857 [ 845.044094][T12638] sec_pagetables:0 bounce:0 [ 845.044094][T12638] kernel_misc_reclaimable:0 [ 845.044094][T12638] free:1306966 free_pcp:6214 free_cma:0 [ 845.132848][T12638] Node 0 active_anon:152272kB inactive_anon:0kB active_file:74036kB inactive_file:164768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113880kB dirty:1156kB writeback:4kB shmem:130648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12056kB pagetables:3228kB sec_pagetables:0kB all_unreclaimable? no [ 845.232264][T12638] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 845.277779][T12638] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 845.372417][T12638] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 845.401333][T12638] Node 0 DMA32 free:1316336kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:152136kB inactive_anon:0kB active_file:74036kB inactive_file:163632kB unevictable:1536kB writepending:1160kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:16708kB local_pcp:9992kB free_cma:0kB [ 845.469861][T12638] lowmem_reserve[]: 0 0 0 0 0 [ 845.480904][T12638] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 845.553584][T12638] lowmem_reserve[]: 0 0 0 0 0 [ 845.558432][T12638] Node 1 Normal free:3894444kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17468kB local_pcp:7712kB free_cma:0kB [ 845.613692][T12638] lowmem_reserve[]: 0 0 0 0 0 [ 845.618602][T12638] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 845.646098][T12638] Node 0 DMA32: 62*4kB (U) 438*8kB (UE) 361*16kB (UME) 204*32kB (UME) 193*64kB (UME) 140*128kB (UME) 87*256kB (UM) 66*512kB (UME) 31*1024kB (UM) 11*2048kB (UM) 283*4096kB (UM) = 1315832kB [ 845.678558][T12638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 845.706647][T12638] Node 1 Normal: 251*4kB (UE) 60*8kB (UE) 38*16kB (UE) 104*32kB (UE) 32*64kB (UME) 7*128kB (UME) 2*256kB (UM) 1*512kB (E) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3894444kB [ 845.748701][T12638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.776000][T12638] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 845.798208][T12638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.826338][T12638] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 845.878974][T12638] 89686 total pagecache pages [ 845.883757][T12638] 0 pages in swap cache [ 845.902408][T12638] Free swap = 124644kB [ 845.907068][T12638] Total swap = 124996kB [ 845.911336][T12638] 2097051 pages RAM [ 845.915573][T12638] 0 pages HighMem/MovableOnly [ 845.928845][T12638] 416931 pages reserved [ 845.933205][T12638] 0 pages cma reserved [ 846.076097][T12657] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1822'. [ 846.358860][T12649] loop4: detected capacity change from 0 to 32768 [ 846.406397][T12649] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 846.695488][T12649] XFS (loop4): Ending clean mount [ 846.722384][T12649] XFS (loop4): Quotacheck needed: Please wait. [ 846.785423][T12649] XFS (loop4): Quotacheck: Done. [ 846.897980][ T9261] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 847.637486][T12683] ucma_write: process 467 (syz.4.1828) changed security contexts after opening file descriptor, this is not allowed. [ 848.745825][T12689] loop4: detected capacity change from 0 to 32768 [ 848.768109][T12689] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 848.852923][T12261] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 850.133729][T12695] loop4: detected capacity change from 0 to 32768 [ 850.154217][T12695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1835 (12695) [ 850.233120][T12695] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 850.262907][T12695] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 850.283233][T12695] BTRFS info (device loop4): force clearing of disk cache [ 850.290645][T12695] BTRFS info (device loop4): metadata ratio 0 [ 850.308644][T12695] BTRFS info (device loop4): enabling ssd optimizations [ 850.332509][T12695] BTRFS info (device loop4): using spread ssd allocation scheme [ 850.358627][T12695] BTRFS info (device loop4): using free space tree [ 850.536149][T12702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.546331][T12695] BTRFS info (device loop4): auto enabling async discard [ 850.570579][T12695] BTRFS info (device loop4): rebuilding free space tree [ 850.734522][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 850.743127][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 850.803692][ T9261] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 853.641098][T12731] loop4: detected capacity change from 0 to 262144 [ 853.738865][T12731] F2FS-fs (loop4): Found nat_bits in checkpoint [ 853.805538][T12731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 854.891050][ T9264] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 857.171395][T10861] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 857.376982][T10861] usb 5-1: Using ep0 maxpacket: 8 [ 857.390182][T10861] usb 5-1: config 0 interface 0 has no altsetting 0 [ 857.397152][T10861] usb 5-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 857.406968][T10861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.427363][T10861] usb 5-1: config 0 descriptor?? [ 857.913192][T10861] ntrig 0003:1B96:0005.0003: unknown main item tag 0x1 [ 857.930099][T10861] ntrig 0003:1B96:0005.0003: invalid report_size 33719 [ 857.948270][T10861] ntrig 0003:1B96:0005.0003: item 0 2 1 7 parsing failed [ 857.962690][T10861] ntrig 0003:1B96:0005.0003: parse failed [ 857.968600][T10861] ntrig: probe of 0003:1B96:0005.0003 failed with error -22 [ 858.178671][T10859] usb 5-1: USB disconnect, device number 9 [ 859.307745][ T9264] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 859.318630][ T9264] Bluetooth: hci3: Injecting HCI hardware error event [ 859.331080][ T9264] Bluetooth: hci3: hardware error 0x00 [ 859.392270][T12906] 9pnet_fd: Insufficient options for proto=fd [ 859.522701][ T6356] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 859.599079][T12916] team0: Device ipvlan2 failed to register rx_handler [ 859.741446][ T6356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.770835][ T6356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.791653][ T6356] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 859.814923][ T6356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.847461][ T6356] usb 5-1: config 0 descriptor?? [ 860.324950][ T6356] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 860.332450][ T6356] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 860.340327][ T6356] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 860.348171][ T6356] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 860.355703][ T6356] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 860.387541][ T6356] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 860.746725][ T6356] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -71 [ 860.772006][ T6356] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -71 [ 860.793159][ T6356] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 860.814841][ T6356] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 860.834639][ T6356] playstation: probe of 0003:054C:0DF2.0004 failed with error -71 [ 860.878704][ T6356] usb 5-1: USB disconnect, device number 10 [ 861.436163][T12946] macsec1: entered allmulticast mode [ 861.441875][T12946] veth1_macvtap: entered allmulticast mode [ 861.558303][ T9264] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 861.781583][T12944] loop4: detected capacity change from 0 to 32768 [ 861.871628][T12944] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 862.234895][ T9261] ocfs2: Unmounting device (7,4) on (node local) [ 862.669885][T12973] loop4: detected capacity change from 0 to 128 [ 862.698951][T12973] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 862.745605][T12973] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 862.756421][T12973] FAT-fs (loop4): Filesystem has been set read-only [ 862.768133][T12973] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 863.658491][T12983] loop4: detected capacity change from 0 to 32768 [ 863.680401][T12983] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1960 (12983) [ 863.728195][T12983] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 863.752666][T12983] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 863.773861][T12983] BTRFS info (device loop4): metadata ratio 0 [ 863.787529][T12983] BTRFS info (device loop4): using free space tree [ 863.887540][T12983] BTRFS info (device loop4): enabling ssd optimizations [ 863.912419][T13006] vxcan1: tx drop: invalid sa for name 0x0000000000040002 [ 863.932331][T12983] BTRFS info (device loop4): auto enabling async discard [ 864.420973][ T9261] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 864.722571][T13022] lo: Caught tx_queue_len zero misconfig [ 865.592565][T13038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1974'. [ 865.618728][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1974'. [ 865.666898][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1974'. [ 868.056165][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'. [ 869.979611][T13156] binder: 13155:13156 ioctl c0306201 200000000080 returned -14 [ 870.006430][T13156] binder: 13155:13156 ioctl c0306201 2000000003c0 returned -14 [ 870.494740][T10861] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 870.733929][T10861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.754418][T10861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.773114][T10861] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 870.788220][T13180] overlayfs: failed to clone upperpath [ 870.793928][T10861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.820751][T10861] usb 5-1: config 0 descriptor?? [ 871.293112][T10861] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 871.393656][T10861] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 871.451722][T10861] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 872.220449][T10864] usb 5-1: USB disconnect, device number 11 [ 872.305744][T10864] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 874.114450][T13254] netlink: 'syz.3.2047': attribute type 12 has an invalid length. [ 874.122389][T13254] netlink: 'syz.3.2047': attribute type 29 has an invalid length. [ 874.155662][T13254] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2047'. [ 874.180583][T13254] netlink: 'syz.3.2047': attribute type 12 has an invalid length. [ 874.203611][T13254] netlink: 'syz.3.2047': attribute type 29 has an invalid length. [ 874.225056][T13254] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2047'. [ 874.607396][T13268] loop4: detected capacity change from 0 to 512 [ 874.642796][T13268] EXT4-fs: Ignoring removed orlov option [ 874.664994][T13268] EXT4-fs: Ignoring removed mblk_io_submit option [ 874.709203][T13268] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.2052: corrupted in-inode xattr: e_value size too large [ 874.784227][T13268] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2052: couldn't read orphan inode 15 (err -117) [ 874.827531][T13268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.890416][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.355498][T13332] trusted_key: syz.3.2076 sent an empty control message without MSG_MORE. [ 876.933989][T13341] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2080'. [ 877.839025][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2084'. [ 877.874574][T13351] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 879.120146][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2093'. [ 879.291464][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 880.172913][T13411] overlayfs: failed to clone upperpath [ 880.936519][T13422] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 881.778476][T13452] overlayfs: failed to clone upperpath [ 881.915823][T13458] loop4: detected capacity change from 0 to 512 [ 882.013330][T13458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.037048][T13458] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 882.176917][T13468] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 1029 vs 206 free clusters [ 882.314344][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.937671][T13507] overlayfs: failed to clone upperpath [ 883.977243][T13509] overlayfs: failed to clone upperpath [ 883.990035][T13509] overlayfs: failed to clone upperpath [ 884.467808][T10874] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 884.683744][T10874] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.709405][T10874] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 884.723398][T10874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 884.731740][T10874] usb 5-1: Product: syz [ 884.736178][T10874] usb 5-1: Manufacturer: syz [ 884.741265][T10874] usb 5-1: SerialNumber: syz [ 884.943023][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 884.983969][T10874] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 885.264361][ C1] usblp0: nonzero write bulk status received: -71 [ 885.266555][T10861] usb 5-1: USB disconnect, device number 12 [ 885.298489][T10861] usblp0: removed [ 886.639415][T13587] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2179'. [ 886.649993][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 886.650010][ T28] audit: type=1326 audit(1782907761.839:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.3.2181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x0 [ 888.935335][T13672] tipc: Disabling bearer [ 889.244515][T10861] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 889.454126][T10861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.486941][T10861] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 889.500947][T10861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.513822][T10861] usb 5-1: config 0 descriptor?? [ 889.766640][T10861] usbhid 5-1:0.0: can't add hid device: -71 [ 889.775696][T10861] usbhid: probe of 5-1:0.0 failed with error -71 [ 889.790388][T10861] usb 5-1: USB disconnect, device number 13 [ 890.121496][T13714] ref_ctr increment failed for inode: 0xc2d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807bcaa600 [ 890.404381][T10861] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 890.613372][T10861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.631702][T10861] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 890.640932][T10861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.679541][T10861] usb 5-1: config 0 descriptor?? [ 891.575262][T10861] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 891.584067][T10861] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 891.974459][T10874] usb 5-1: USB disconnect, device number 14 [ 891.974458][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 892.405816][T13767] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2254'. [ 892.704743][T13778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2258'. [ 892.738910][T13778] syzkaller1: entered promiscuous mode [ 892.744488][T13778] syzkaller1: entered allmulticast mode [ 893.050814][T13792] overlayfs: failed to clone upperpath [ 893.397632][T13805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 894.372131][ T6356] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 894.587401][ T6356] usb 5-1: Using ep0 maxpacket: 32 [ 894.601648][ T6356] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 894.620075][ T6356] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 894.653247][ T6356] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 894.682730][ T6356] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 894.712226][ T6356] usb 5-1: config 0 interface 0 has no altsetting 0 [ 894.731718][ T6356] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 894.748929][ T6356] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 894.758051][ T6356] usb 5-1: Product: syz [ 894.762978][ T6356] usb 5-1: Manufacturer: syz [ 894.767644][ T6356] usb 5-1: SerialNumber: syz [ 894.777269][ T6356] usb 5-1: config 0 descriptor?? [ 894.797243][ T6356] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 894.827833][ T6356] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 895.168649][T10861] usb 5-1: USB disconnect, device number 15 [ 895.168662][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 895.182718][T13824] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 895.194054][T10861] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 895.507864][T13878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2297'. [ 895.523101][T13878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2297'. [ 895.535107][T13878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2297'. [ 897.128917][T13908] CUSE: unknown device info "" [ 897.134812][T13908] CUSE: unknown device info "Ö" [ 897.145120][T13908] CUSE: unknown device info "" [ 897.150810][T13908] CUSE: unknown device info "" [ 897.161631][T13908] CUSE: unknown device info "" [ 897.170386][T13908] CUSE: unknown device info "" [ 897.176809][T13908] CUSE: unknown device info "ðÿÿÿ" [ 897.193336][T13908] CUSE: unknown device info "" [ 897.220973][T13908] CUSE: unknown device info "" [ 897.226706][T13908] CUSE: unknown device info "" [ 897.243373][T13908] CUSE: unknown device info "" [ 897.257103][T13908] CUSE: unknown device info "r" [ 897.285106][T13908] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 897.296659][T13908] CUSE: unknown device info "ÿÿÿÿ" [ 897.324933][T13908] CUSE: unknown device info "" [ 897.331705][T13908] CUSE: unknown device info "€" [ 897.336748][T13908] CUSE: DEVNAME unspecified [ 897.585300][T13910] overlayfs: failed to clone upperpath [ 898.284626][T13931] NILFS (nullb0): couldn't find nilfs on the device [ 900.909575][T13967] team0: Mode changed to "loadbalance" [ 901.314671][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2333'. [ 901.544188][T13968] loop4: detected capacity change from 0 to 32768 [ 901.612246][T13968] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 901.816884][ T9261] ocfs2: Unmounting device (7,4) on (node local) [ 902.402406][T14004] NILFS (nullb0): couldn't find nilfs on the device [ 904.113838][T10864] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 904.319792][T10864] usb 5-1: Using ep0 maxpacket: 16 [ 904.343577][T10864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.374084][T10864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.416286][T10864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 904.442605][T10864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 904.499068][T10864] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.592739][T10864] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 904.627489][T10864] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 904.669670][T10864] usb 5-1: Manufacturer: syz [ 904.733282][T10864] usb 5-1: config 0 descriptor?? [ 905.371853][T10864] rc_core: IR keymap rc-hauppauge not found [ 905.384303][T10864] Registered IR keymap rc-empty [ 905.397218][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.447634][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.495809][T10864] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 905.529460][T10864] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 905.557144][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.588480][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.620393][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.658987][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.696270][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.739560][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.777390][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.837069][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.870240][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.917922][T10864] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 905.959577][T10864] mceusb 5-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 905.979137][T10864] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 906.023869][T10864] usb 5-1: USB disconnect, device number 16 [ 909.114005][T14095] Invalid ELF header len 7 [ 909.154714][T14099] loop4: detected capacity change from 0 to 512 [ 909.247717][T14099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.284252][T14099] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.657846][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.497373][T10861] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 910.709622][T10861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.735729][T10861] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 910.755924][T10861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.780397][T10861] usb 5-1: config 0 descriptor?? [ 910.802614][T10861] pwc: Askey VC010 type 2 USB webcam detected. [ 911.228533][T10861] pwc: recv_control_msg error -32 req 02 val 2b00 [ 911.248358][T10861] pwc: recv_control_msg error -32 req 02 val 2700 [ 911.267050][T10861] pwc: recv_control_msg error -32 req 02 val 2c00 [ 911.278345][T10861] pwc: recv_control_msg error -32 req 04 val 1000 [ 911.296381][T10861] pwc: recv_control_msg error -32 req 04 val 1300 [ 911.349481][T10861] pwc: recv_control_msg error -32 req 04 val 1400 [ 911.364648][T10861] pwc: recv_control_msg error -32 req 02 val 2000 [ 911.372159][T10861] pwc: recv_control_msg error -32 req 02 val 2100 [ 911.606805][T10861] pwc: recv_control_msg error -71 req 02 val 2500 [ 911.687393][T10861] pwc: recv_control_msg error -71 req 02 val 2400 [ 911.748647][T10861] pwc: recv_control_msg error -71 req 02 val 2600 [ 911.787293][T10861] pwc: recv_control_msg error -71 req 02 val 2900 [ 911.825283][T10861] pwc: recv_control_msg error -71 req 02 val 2800 [ 911.872523][T10861] pwc: recv_control_msg error -71 req 04 val 1100 [ 912.026113][T10861] pwc: recv_control_msg error -71 req 04 val 1200 [ 912.080717][T10861] pwc: Registered as video103. [ 912.106864][T10861] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 912.195546][T10861] usb 5-1: USB disconnect, device number 17 [ 912.806221][T14162] 9pnet_fd: Insufficient options for proto=fd [ 914.636027][T14200] 9pnet_fd: Insufficient options for proto=fd [ 917.304090][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.310497][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 919.787404][T14299] loop4: detected capacity change from 0 to 1024 [ 919.826884][T14299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.066104][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.729684][T14323] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 924.192065][T14380] loop4: detected capacity change from 0 to 32768 [ 924.209494][T14380] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2459 (14380) [ 924.226038][T14380] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 924.238749][T14380] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 924.248020][T14380] BTRFS info (device loop4): turning on async discard [ 924.258796][T14380] BTRFS info (device loop4): metadata ratio 0 [ 924.267359][T14380] BTRFS info (device loop4): setting nodatasum [ 924.274125][T14380] BTRFS info (device loop4): using free space tree [ 924.313127][T14380] BTRFS info (device loop4): enabling ssd optimizations [ 924.487628][ T9261] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 927.180950][T14475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2494'. [ 927.203108][T14475] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 927.627927][T14480] syzkaller0: entered promiscuous mode [ 927.648922][T14480] syzkaller0: entered allmulticast mode [ 929.493461][T14507] syzkaller0: tun_net_xmit 1 [ 929.642457][ T28] audit: type=1326 audit(1782908057.506:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 929.701844][ T28] audit: type=1326 audit(1782908057.506:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 929.777681][ T28] audit: type=1326 audit(1782908057.506:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 929.853781][ T28] audit: type=1326 audit(1782908057.506:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 929.907825][ T28] audit: type=1326 audit(1782908057.506:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 929.957250][ T28] audit: type=1326 audit(1782908057.562:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5295b9ce59 code=0x7ffc0000 [ 929.995753][ T28] audit: type=1326 audit(1782908057.562:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5295b5d68e code=0x7ffc0000 [ 930.069549][ T28] audit: type=1326 audit(1782908057.562:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5295b5d68e code=0x7ffc0000 [ 930.118134][ T28] audit: type=1326 audit(1782908057.571:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5295b5d68e code=0x7ffc0000 [ 930.147470][ T28] audit: type=1326 audit(1782908057.571:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14510 comm="syz.3.2497" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5295b5d68e code=0x7ffc0000 [ 936.718096][T14588] loop4: detected capacity change from 0 to 128 [ 936.768016][T14588] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 936.843711][T14588] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 936.920538][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 936.920555][ T28] audit: type=1800 audit(1782908064.223:718): pid=14588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2520" name="file1" dev="loop4" ino=1048663 res=0 errno=0 [ 937.317242][ T1088] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 942.764285][ T28] audit: type=1326 audit(1782908069.529:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 943.000619][ T28] audit: type=1326 audit(1782908069.529:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 943.238037][ T28] audit: type=1326 audit(1782908069.538:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 943.379014][ T28] audit: type=1326 audit(1782908069.547:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 943.403993][ T28] audit: type=1326 audit(1782908069.547:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 944.003618][ T28] audit: type=1326 audit(1782908069.547:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 944.127204][ T28] audit: type=1326 audit(1782908069.547:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 944.151973][ T28] audit: type=1326 audit(1782908069.566:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 944.185337][ T28] audit: type=1326 audit(1782908069.649:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.2.2538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 945.046494][ T5850] kworker/dying (5850) used greatest stack depth: 15080 bytes left [ 947.674408][T14709] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2551'. [ 950.370604][T14733] netlink: 'syz.0.2560': attribute type 10 has an invalid length. [ 950.477007][T14733] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 952.498220][T14754] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2563'. [ 955.128100][T14772] tipc: Enabling of bearer rejected, failed to enable media [ 956.472908][T10874] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 956.707082][T10874] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 956.725667][T10874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.737436][T10874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.748020][T10874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 956.768088][T10874] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 956.777808][T10874] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 956.786270][T10874] usb 5-1: Manufacturer: syz [ 956.794408][T10874] usb 5-1: config 0 descriptor?? [ 957.177862][T14822] syz_tun: entered allmulticast mode [ 957.184297][T14821] syz_tun: left allmulticast mode [ 957.267098][T10874] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 957.278982][T10874] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 957.296405][T10874] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 959.997099][T10862] usb 5-1: USB disconnect, device number 18 [ 960.324851][T14858] ubi0: attaching mtd0 [ 960.352567][T14858] ubi0: scanning is finished [ 960.357310][T14858] ubi0: empty MTD device detected [ 960.947489][T14858] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 961.284035][T14864] ref_ctr increment failed for inode: 0x5b9 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807e515580 [ 961.829891][T14879] NILFS (nullb0): couldn't find nilfs on the device [ 962.553119][T14881] overlayfs: failed to resolve './bus': -2 [ 962.892983][ T9264] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 964.177565][T14891] loop4: detected capacity change from 0 to 32768 [ 964.199076][T14891] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 964.532691][T14767] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 967.119216][T14948] netlink: 'syz.2.2617': attribute type 10 has an invalid length. [ 967.140201][T14941] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 967.166569][T14948] bond0: (slave ªªªªª»): Enslaving as an active interface with an up link [ 967.185207][T14947] tipc: Enabling of bearer rejected, failed to enable media [ 969.677887][T14962] syzkaller0: entered promiscuous mode [ 969.683765][T14962] syzkaller0: entered allmulticast mode [ 969.700980][T14962] 0: reclassify loop, rule prio 0, protocol 800 [ 974.739448][T14978] netlink: 'syz.2.2623': attribute type 1 has an invalid length. [ 978.089250][ T28] audit: type=1326 audit(1782908102.211:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.169125][ T28] audit: type=1326 audit(1782908102.211:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.244444][ T28] audit: type=1326 audit(1782908102.220:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.298406][ T28] audit: type=1326 audit(1782908102.230:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.328851][ T28] audit: type=1326 audit(1782908102.230:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.404681][ T28] audit: type=1326 audit(1782908102.239:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.459144][ T28] audit: type=1326 audit(1782908102.340:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.536738][ T28] audit: type=1326 audit(1782908102.340:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.594622][ T28] audit: type=1326 audit(1782908102.349:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 978.656017][ T28] audit: type=1326 audit(1782908102.349:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 980.705535][T15037] NILFS (nullb0): couldn't find nilfs on the device [ 983.478710][T15062] overlayfs: failed to resolve './bus': -2 [ 983.590109][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 983.590126][ T28] audit: type=1326 audit(1782908107.286:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.2.2646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 983.749399][ T28] audit: type=1326 audit(1782908107.323:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.2.2646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff47099ce59 code=0x7ffc0000 [ 983.887294][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 983.893992][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.222070][T15113] netlink: 'syz.0.2664': attribute type 12 has an invalid length. [ 988.572930][T15127] syzkaller0: entered promiscuous mode [ 988.583522][T15127] syzkaller0: entered allmulticast mode [ 988.602994][T15123] 0: reclassify loop, rule prio 0, protocol 800 [ 990.222299][T15141] overlayfs: failed to clone lowerpath [ 990.970742][T15143] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 995.845378][T15183] 0: reclassify loop, rule prio 0, protocol 700 [ 1005.143734][ T9264] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1018.593327][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.286252][T15400] tipc: Enabling of bearer rejected, failed to enable media [ 1031.490173][T15430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1033.242462][T15439] siw: device registration error -23 [ 1035.695046][T15457] overlayfs: failed to clone upperpath [ 1036.749223][T15467] loop4: detected capacity change from 0 to 1024 [ 1037.779724][T15467] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1037.799792][T15468] netlink: 'syz.0.2749': attribute type 11 has an invalid length. [ 1037.994277][T15467] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1038.020018][T15467] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2745: Failed to acquire dquot type 0 [ 1038.033945][T15468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1038.103729][T15467] EXT4-fs (loop4): 1 truncate cleaned up [ 1038.118806][T15467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.215562][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2751'. [ 1039.727626][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.182695][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2758'. [ 1043.525751][T15519] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 [ 1047.805104][T15553] sctp: [Deprecated]: syz.4.2771 (pid 15553) Use of int in maxseg socket option. [ 1047.805104][T15553] Use struct sctp_assoc_value instead [ 1048.823648][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2774'. [ 1050.935941][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.942318][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.713310][T15599] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2778'. [ 1058.311803][T15600] netlink: 'syz.3.2778': attribute type 4 has an invalid length. [ 1059.196321][T15617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2788'. [ 1059.472936][T15618] overlayfs: failed to clone lowerpath [ 1061.380192][T15620] bridge1: left promiscuous mode [ 1065.363938][T15654] loop4: detected capacity change from 0 to 256 [ 1065.371546][T15654] exfat: Deprecated parameter 'namecase' [ 1065.377314][T15654] exfat: Deprecated parameter 'namecase' [ 1065.383116][T15654] exfat: Deprecated parameter 'namecase' [ 1065.850261][T15654] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 1069.694646][T15670] xt_policy: too many policy elements [ 1069.960737][T15675] netlink: 'syz.2.2794': attribute type 1 has an invalid length. [ 1073.772016][T15698] loop4: detected capacity change from 0 to 1024 [ 1075.643519][T11355] hfsplus: b-tree write err: -5, ino 25 [ 1075.649378][T11355] hfsplus: b-tree write err: -5, ino 4 [ 1075.655846][T11355] hfsplus: b-tree write err: -5, ino 2 [ 1075.684027][T11355] hfsplus: b-tree write err: -5, ino 22 [ 1078.033877][T15717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2812'. [ 1080.207696][T15721] overlayfs: failed to clone upperpath [ 1081.010606][ T28] audit: type=1326 audit(1782908197.175:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.068442][ T28] audit: type=1326 audit(1782908197.203:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.104737][ T28] audit: type=1326 audit(1782908197.203:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.140357][ T28] audit: type=1326 audit(1782908197.203:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.165434][ T28] audit: type=1326 audit(1782908197.212:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.190102][ T28] audit: type=1326 audit(1782908197.212:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.421985][ T28] audit: type=1326 audit(1782908197.212:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.446930][ T28] audit: type=1326 audit(1782908197.212:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1081.773307][ T28] audit: type=1326 audit(1782908197.212:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1082.021760][ T28] audit: type=1326 audit(1782908197.212:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.2816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08e159ce59 code=0x7ffc0000 [ 1084.394578][T15747] (syz.3.2821,15747,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1094.844080][T15812] fuse: Unknown parameter '0x0000000000000006' [ 1097.731698][T15819] loop4: detected capacity change from 0 to 1024 [ 1097.802435][T15819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.558686][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 1098.558703][ T28] audit: type=1800 audit(1783432501.364:945): pid=15834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2838" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1098.813289][ T9261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.880713][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'. [ 1100.312948][T15847] syz_tun: entered allmulticast mode [ 1100.763386][T15849] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15852] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15849] [ 1102.173524][T15857] netlink: 'syz.2.2848': attribute type 10 has an invalid length. [ 1102.186064][T15857] team0: Device veth1_vlan failed to register rx_handler [ 1102.264454][T15860] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2847'. [ 1105.538091][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 1108.463819][T15883] loop4: detected capacity change from 0 to 1024 [ 1108.475624][T15883] EXT4-fs: Ignoring removed mblk_io_submit option [ 1108.482189][T15883] EXT4-fs: inline encryption not supported [ 1108.498223][T15883] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1109.903574][ T9264] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1112.009550][T15906] overlayfs: missing 'lowerdir' [ 1114.315808][T10862] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1114.910989][T10862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1114.934373][T10862] usb 5-1: not running at top speed; connect to a high speed hub [ 1116.364454][T15919] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2865'. [ 1116.374613][T15919] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2865'. [ 1116.492071][T10862] usb 5-1: string descriptor 0 read error: -22 [ 1116.498523][T10862] usb 5-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 1116.543497][T10862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.582546][T10862] usb 5-1: can't set config #1, error -71 [ 1116.610644][T10862] usb 5-1: USB disconnect, device number 19 [ 1117.029959][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.036518][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.736598][ T28] audit: type=1804 audit(1783432519.189:946): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2869" name="bus" dev="ramfs" ino=37677 res=1 errno=0 [ 1118.794786][ T28] audit: type=1804 audit(1783432519.189:947): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2869" name="bus" dev="ramfs" ino=37677 res=1 errno=0 [ 1128.140853][T15978] overlayfs: failed to clone upperpath [ 1138.439053][T16056] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1138.573253][ T28] audit: type=1326 audit(1783432538.526:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1138.625139][T16059] loop4: detected capacity change from 0 to 256 [ 1138.700438][ T28] audit: type=1326 audit(1783432538.544:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1138.986182][ T28] audit: type=1326 audit(1783432538.572:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1139.011742][ T28] audit: type=1326 audit(1783432538.572:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1139.254728][T16059] FAT-fs (loop4): Directory bread(block 64) failed [ 1139.261370][T16059] FAT-fs (loop4): Directory bread(block 65) failed [ 1139.268280][T16059] FAT-fs (loop4): Directory bread(block 66) failed [ 1139.274930][T16059] FAT-fs (loop4): Directory bread(block 67) failed [ 1139.281625][T16059] FAT-fs (loop4): Directory bread(block 68) failed [ 1139.288280][T16059] FAT-fs (loop4): Directory bread(block 69) failed [ 1139.295107][T16059] FAT-fs (loop4): Directory bread(block 70) failed [ 1139.301677][T16059] FAT-fs (loop4): Directory bread(block 71) failed [ 1139.308372][T16059] FAT-fs (loop4): Directory bread(block 72) failed [ 1139.315001][T16059] FAT-fs (loop4): Directory bread(block 73) failed [ 1142.494733][ T28] audit: type=1326 audit(1783432538.572:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1142.521717][ T28] audit: type=1326 audit(1783432538.572:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1142.713936][ T28] audit: type=1326 audit(1783432538.572:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1142.762968][ T28] audit: type=1326 audit(1783432538.572:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1142.787713][ T28] audit: type=1326 audit(1783432538.572:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1142.908673][ T28] audit: type=1326 audit(1783432538.572:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.4.2900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079a39ce59 code=0x7ffc0000 [ 1143.191573][T16073] tunl0: entered allmulticast mode [ 1143.196932][T16073] gre0: entered allmulticast mode [ 1143.202536][T16073] gretap0: entered allmulticast mode [ 1143.208022][T16073] erspan0: entered allmulticast mode [ 1143.217291][T16073] ip_vti0: entered allmulticast mode [ 1143.224587][T16073] ip6_vti0: entered allmulticast mode [ 1143.230975][T16073] sit0: entered allmulticast mode [ 1144.268512][T16073] ip6tnl0: entered allmulticast mode [ 1144.274082][T16073] ip6gre0: entered allmulticast mode [ 1144.309887][T16073] ip6gretap0: entered allmulticast mode [ 1144.330970][T16073] bridge0: entered allmulticast mode [ 1144.363457][T16073] vcan0: entered allmulticast mode [ 1144.374537][T16073] bond0: entered allmulticast mode [ 1144.408479][T16073] bond_slave_0: entered allmulticast mode [ 1144.450189][T16073] bond_slave_1: entered allmulticast mode [ 1144.470921][T16073] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1144.525841][T16073] team0: entered allmulticast mode [ 1144.629044][T16073] team_slave_0: entered allmulticast mode [ 1144.634978][T16073] team_slave_1: entered allmulticast mode [ 1144.788719][T16073] dummy0: entered allmulticast mode [ 1144.807723][T16073] nlmon0: entered allmulticast mode [ 1145.486867][T16073] caif0: entered allmulticast mode [ 1145.493954][T16073] batadv0: entered allmulticast mode [ 1145.585468][T16073] vxcan0: entered allmulticast mode [ 1145.590928][T16073] vxcan1: entered allmulticast mode [ 1145.599721][T16073] veth0: entered allmulticast mode [ 1145.605066][T16073] veth1: entered allmulticast mode [ 1145.611264][T16073] wg0: entered allmulticast mode [ 1145.620101][T16073] wg1: entered allmulticast mode [ 1145.625284][T16073] wg2: entered allmulticast mode [ 1145.631368][T16073] veth0_to_bridge: entered allmulticast mode [ 1145.637643][T16073] veth1_to_bridge: entered allmulticast mode [ 1145.645327][T16073] veth1_to_bond: entered allmulticast mode [ 1145.652167][T16073] veth0_to_team: entered allmulticast mode [ 1145.658356][T16073] veth1_to_team: entered allmulticast mode [ 1145.664793][T16073] veth0_to_batadv: entered allmulticast mode [ 1145.671739][T16073] batadv_slave_0: entered allmulticast mode [ 1145.677783][T16073] veth1_to_batadv: entered allmulticast mode [ 1145.684275][T16073] batadv_slave_1: entered allmulticast mode [ 1145.690341][T16073] xfrm0: entered allmulticast mode [ 1145.696061][T16073] veth0_to_hsr: entered allmulticast mode [ 1145.701932][T16073] hsr_slave_0: entered allmulticast mode [ 1145.708009][T16073] veth1_to_hsr: entered allmulticast mode [ 1145.714181][T16073] hsr_slave_1: entered allmulticast mode [ 1145.720198][T16073] hsr0: entered allmulticast mode [ 1145.725647][T16073] veth1_virt_wifi: entered allmulticast mode [ 1145.731933][T16073] veth0_virt_wifi: entered allmulticast mode [ 1145.741432][T16073] virt_wifi0: entered allmulticast mode [ 1145.747429][T16073] veth1_vlan: entered allmulticast mode [ 1145.753194][T16073] veth0_vlan: entered allmulticast mode [ 1145.759775][T16073] vlan0: entered allmulticast mode [ 1145.765051][T16073] vlan1: entered allmulticast mode [ 1145.770444][T16073] macvlan0: entered allmulticast mode [ 1145.776071][T16073] macvlan1: entered allmulticast mode [ 1145.781747][T16073] ipvlan0: entered allmulticast mode [ 1145.787244][T16073] ipvlan1: entered allmulticast mode [ 1145.792921][T16073] veth0_macvtap: entered allmulticast mode [ 1145.798934][T16073] macvtap0: entered allmulticast mode [ 1145.804727][T16073] macsec0: entered allmulticast mode [ 1145.810279][T16073] geneve0: entered allmulticast mode [ 1145.816039][T16073] geneve1: left promiscuous mode [ 1145.821028][T16073] geneve1: entered allmulticast mode [ 1145.826593][T16073] netdevsim netdevsim3 ªªªªª»: left promiscuous mode [ 1145.833370][T16073] netdevsim netdevsim3 ªªªªª»: entered allmulticast mode [ 1145.840591][T16073] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1145.848708][T16073] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1145.856800][T16073] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1145.864416][T16073] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 1145.871966][T16073] bond1: entered allmulticast mode [ 1145.877364][T16073] veth2: entered allmulticast mode [ 1145.882652][T16073] veth3: entered allmulticast mode [ 1145.888064][T16073] vlan2: entered allmulticast mode [ 1145.893393][T16073] bond2: entered allmulticast mode [ 1145.898876][T16073] bond3: entered allmulticast mode [ 1145.904040][T16073] gretap1: entered allmulticast mode [ 1145.909980][T16073] vxlan0: entered allmulticast mode [ 1145.915387][T16073] ip6gre1: entered allmulticast mode [ 1145.921088][T16073] ip6tnl1: entered allmulticast mode [ 1145.926528][T16073] syztnl2: entered allmulticast mode [ 1145.932065][T16073] gre1: entered allmulticast mode [ 1145.937357][T16073] ip6gre2: entered allmulticast mode [ 1145.942888][T16073] sit1: entered allmulticast mode [ 1145.948076][T16073] gre2: entered allmulticast mode [ 1145.953393][T16073] bridge1: entered allmulticast mode [ 1145.960948][T16073] bond4: entered allmulticast mode [ 1145.966476][T16073] geneve2: entered allmulticast mode [ 1145.985613][T16073] netdevsim netdevsim3 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.994629][T16073] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.003553][T16073] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.013001][T16073] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.030735][T16073] sit2: entered allmulticast mode [ 1156.833720][T16175] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1159.180543][T16189] tipc: Enabling of bearer rejected, failed to enable media [ 1160.809336][T16204] tipc: Enabling of bearer rejected, failed to enable media [ 1165.658929][T16249] tipc: Enabling of bearer rejected, failed to enable media [ 1165.719690][T16251] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1166.954141][T16264] netlink: 'syz.0.2946': attribute type 4 has an invalid length. [ 1168.820560][T16276] tipc: Enabling of bearer rejected, failed to enable media [ 1170.220104][T16288] tipc: Enabling of bearer rejected, failed to enable media [ 1171.502502][T16301] tipc: Enabling of bearer rejected, failed to enable media [ 1172.180506][T16317] tipc: Enabling of bearer rejected, failed to enable media [ 1174.110995][T16347] tipc: Enabling of bearer rejected, failed to enable media [ 1174.394035][T16358] tipc: Enabling of bearer rejected, failed to enable media [ 1174.735719][T16365] tipc: Enabling of bearer rejected, failed to enable media [ 1174.873717][T16368] tipc: Enabling of bearer rejected, failed to enable media [ 1183.234363][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.242326][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1203.582457][T16592] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1205.113997][T16605] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1215.307583][T16687] syzkaller0: entered promiscuous mode [ 1215.327656][T16687] syzkaller0: entered allmulticast mode [ 1215.486720][T16687] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1225.505025][T16785] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1226.762856][T16800] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1234.146596][T16885] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1235.950325][T16904] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1235.966843][T16905] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1237.507598][T16926] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1239.119101][T16938] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1240.892590][T16950] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1241.615254][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1242.477823][T16961] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1242.959827][T16963] syzkaller0: entered promiscuous mode [ 1242.966923][T16963] syzkaller0: entered allmulticast mode [ 1244.576858][T16983] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1248.844744][T17017] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1249.722437][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.728771][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.004519][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1250.090760][T17027] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1252.282970][T17042] tipc: Enabling of bearer rejected, failed to enable media [ 1252.333196][T17044] tipc: Enabling of bearer rejected, failed to enable media [ 1252.354829][T17046] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1253.047742][T17059] overlayfs: missing 'lowerdir' [ 1254.212141][T17071] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3136'. [ 1254.228452][T17071] overlayfs: failed to clone upperpath [ 1254.991374][T17076] trusted_key: encrypted_key: insufficient parameters specified [ 1255.433620][T17081] tipc: Enabling of bearer rejected, failed to enable media [ 1258.004712][T17113] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1261.879164][T17124] trusted_key: encrypted_key: insufficient parameters specified [ 1262.175486][T17126] tipc: Enabled bearer , priority 0 [ 1262.207461][T17126] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1262.304256][T17125] tipc: Disabling bearer [ 1263.508996][T17131] tipc: Enabling of bearer rejected, failed to enable media [ 1271.308542][T17162] trusted_key: encrypted_key: insufficient parameters specified [ 1273.586026][T17185] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1274.032531][T17192] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1287.317306][T17263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3188'. [ 1289.239881][T17288] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1292.596118][T17320] trusted_key: encrypted_key: insufficient parameters specified [ 1292.605692][T17320] trusted_key: encrypted_key: insufficient parameters specified [ 1293.337932][T17321] siw: device registration error -23 [ 1295.397142][T17338] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1295.956838][T17343] trusted_key: encrypted_key: insufficient parameters specified Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.