last executing test programs: 8m8.379733755s ago: executing program 1 (id=782): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2000801c, &(0x7f0000000000)=ANY=[], 0x8, 0x1559, &(0x7f0000001500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101400, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x18) 8m7.830540154s ago: executing program 1 (id=783): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x14, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 8m7.254530473s ago: executing program 1 (id=784): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x38, 0x1000}}}}}}}, 0x0) 8m5.150568527s ago: executing program 1 (id=791): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)={[{@fat=@showexec}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@utf8}, {@uni_xlateno}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@shortname_winnt}, {@shortname_win95}]}, 0x0, 0x2b2, &(0x7f0000002f40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 8m4.224958601s ago: executing program 1 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000000)) ioprio_get$pid(0x2, r0) sched_getscheduler(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x38, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048d0}, 0x40000) 8m3.114573019s ago: executing program 1 (id=795): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 8m2.585555777s ago: executing program 32 (id=795): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 37.157086518s ago: executing program 2 (id=2459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000440)={0x79, 0x0, 0x800000020c}) 37.04273232s ago: executing program 2 (id=2461): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x2, 0x190, &(0x7f0000000580)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) 36.946629502s ago: executing program 2 (id=2462): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = getpid() kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 12.910317704s ago: executing program 0 (id=2505): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000004fc0)=ANY=[@ANYBLOB="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"], 0x6bf) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x1}, 0x1}, 0x18) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) umount2(0x0, 0x2) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) syz_usb_connect$uac2(0x3, 0x136, &(0x7f0000000fc0)=ANY=[@ANYBLOB], &(0x7f0000000900)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x6, 0x99, 0x3, 0x8, 0x2e}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x240a}}, {0xc1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2001}}]}) 10.804066908s ago: executing program 4 (id=2510): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noquota}, {@nombcache}]}, 0x1, 0x448, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0xfffffffd, 0xffff7fff, 0x10, 0xf35b}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7c4c, 0x800) ioctl$EVIOCGKEY(r1, 0x80404518, 0xffffffffffffffff) fsopen(0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ppoll(&(0x7f00000000c0)=[{r2, 0xc040}], 0x1, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) 9.453845809s ago: executing program 0 (id=2512): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040960501000001000000010902190001010080320904000001000000000705810340000a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)={0x40, 0xa, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xa9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c", @ANYRES32=r2, @ANYBLOB="06001c004e21000008000100"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) ptrace$peek(0x1, r1, &(0x7f0000000180)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 9.453360939s ago: executing program 4 (id=2513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) poll(&(0x7f0000000500)=[{r1, 0x412}], 0x1, 0x81) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d00000000000100000000000000014100"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) timer_create(0x7, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) write(r0, &(0x7f0000000080)="040000000000", 0x6) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, 0x0, 0x20) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) 8.837805519s ago: executing program 4 (id=2514): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(0x3) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1}, 0x40012040) 8.574458963s ago: executing program 4 (id=2515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 7.995247562s ago: executing program 0 (id=2516): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000007996b9ac61108e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7.905566124s ago: executing program 4 (id=2518): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = open(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x80242, 0x0) sendfile(r5, r5, 0x0, 0x800000009) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x2e0, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0xc, 0x5, 0x12}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x1, [0x27, 0x2, 0x6, 0x9b95, 0x2, 0x1, 0x1, 0x0, 0xbac3, 0xfffb, 0x3, 0x4, 0x5, 0x60, 0x4, 0x7fff], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff0000ff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_macvtap\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3b, 0x40, 0x1, 0x21}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 7.642582328s ago: executing program 0 (id=2519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000007996b9ac61108e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7.499676s ago: executing program 0 (id=2520): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040960501000001000000010902190001010080320904000001000000000705810340000a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)={0x40, 0xa, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xa9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) ptrace$peek(0x1, r1, &(0x7f0000000180)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 7.450871761s ago: executing program 3 (id=2521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 6.842405581s ago: executing program 3 (id=2522): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) recvmsg(0xffffffffffffffff, 0x0, 0x3e62) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) prlimit64(r0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) splice(r3, &(0x7f0000000180)=0x9, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x8a, 0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) unshare(0x60000600) 6.613423444s ago: executing program 2 (id=2464): msgget(0x0, 0x6dd) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 5.419242054s ago: executing program 2 (id=2523): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r7, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r7, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLL', 0x12}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40c0}, 0x44004) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d8eb80c, 0xa, 0x6, 0x2, 0x40, 0x663, 0x0, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x1d0c20, 0x8, 0x0, 0x107, 0x9, 0x5, 0x0, 0x1, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) socket$inet_tcp(0x2, 0x1, 0x6) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0xc}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r9, 0x0) 4.142696734s ago: executing program 3 (id=2524): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.475725811s ago: executing program 2 (id=2525): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.47544798s ago: executing program 3 (id=2526): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 1.364518308s ago: executing program 4 (id=2527): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6d}}]}]}, 0x50}}, 0x8000) 1.294134319s ago: executing program 3 (id=2528): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1004a, &(0x7f0000000a80)={[{@test_dummy_encryption}, {@jqfmt_vfsold}, {@nogrpid}, {@debug}, {@discard}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '\'!'}}, {@measure}, {@hash}]}, 0xf7, 0x44f, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$sndctrl(0x0, 0x1, 0x242) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000a40)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xffffff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xffffff], 'xfrm0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x6, 0x5, 0x8}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @local, [0xff0000ff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'ipvlan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3a, 0x6, 0x1, 0x20}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b0635965491f6531877000001e75fb667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3eb) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, 0x0, 0x0) 867.688546ms ago: executing program 0 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=2530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@dax_always}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@nombcache}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x489, &(0x7f0000001f80)="$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") mlockall(0x7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) socket$inet(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): [ T8280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.330949][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.445562][ T8280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.494389][ T8280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.541875][ T8280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.575545][ T8280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.923505][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.942556][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.032523][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.064520][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.253965][ T28] audit: type=1326 audit(1790254303.663:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.322119][ T28] audit: type=1326 audit(1790254303.663:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.359827][ T28] audit: type=1326 audit(1790254303.705:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f825835e98e code=0x7ffc0000 [ 372.393317][ T28] audit: type=1326 audit(1790254303.705:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.430458][ T28] audit: type=1326 audit(1790254303.705:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.493353][ T28] audit: type=1326 audit(1790254303.716:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.604234][ T28] audit: type=1326 audit(1790254303.716:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.651461][ T28] audit: type=1326 audit(1790254303.716:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.676471][ T28] audit: type=1326 audit(1790254303.716:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 372.701087][ T28] audit: type=1326 audit(1790254303.716:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.4.834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 377.386158][ T8446] loop4: detected capacity change from 0 to 512 [ 378.517120][ T8446] EXT4-fs (loop4): Test dummy encryption mode enabled [ 378.647340][ T8446] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #11: comm syz.4.845: casefold flag without casefold feature [ 378.712410][ T8446] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.845: couldn't read orphan inode 11 (err -117) [ 378.819317][ T8446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.520847][ T8460] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 381.957657][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 382.125128][ T8280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.240864][ T8486] syz.4.849 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 384.567298][ T8497] netlink: 52 bytes leftover after parsing attributes in process `syz.4.853'. [ 384.585036][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.592526][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.925125][ T8501] loop4: detected capacity change from 0 to 512 [ 384.984881][ T8501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 385.067958][ T8501] System zones: 1-12 [ 385.140486][ T8501] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.854: missing EA_INODE flag [ 385.215247][ T8501] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.854: error while reading EA inode 12 err=-117 [ 385.275433][ T8501] EXT4-fs (loop4): 1 orphan inode deleted [ 385.300101][ T8501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.737305][ T8280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.386382][ T8540] loop4: detected capacity change from 0 to 2048 [ 390.701320][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.863'. [ 391.219833][ T8540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.273174][ T8550] syz.2.863 (8550) used greatest stack depth: 17160 bytes left [ 391.640063][ T8552] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 391.937261][ T8280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.019937][ T8569] syz_tun: entered allmulticast mode [ 392.079170][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 392.390868][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 392.390900][ T28] audit: type=1326 audit(1790254324.777:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 393.168326][ T28] audit: type=1326 audit(1790254324.777:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 393.193826][ T28] audit: type=1326 audit(1790254324.777:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 393.314814][ T28] audit: type=1326 audit(1790254324.777:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 393.412204][ T28] audit: type=1326 audit(1790254324.777:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 393.591463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 394.541096][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.547646][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.602482][ T28] audit: type=1326 audit(1790254324.798:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 394.639455][ T28] audit: type=1326 audit(1790254324.798:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 394.697727][ T28] audit: type=1326 audit(1790254324.850:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 394.771597][ T28] audit: type=1326 audit(1790254325.176:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.0.874" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 394.863680][ T28] audit: type=1326 audit(1790254325.921:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.3.879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 395.057364][ T8610] loop4: detected capacity change from 0 to 512 [ 395.108064][ T8613] syz_tun: entered allmulticast mode [ 395.125543][ T8610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 395.133644][ T8610] System zones: 1-12 [ 395.178655][ T8610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.882: missing EA_INODE flag [ 395.227459][ T8613] syz_tun: left allmulticast mode [ 395.244030][ T8610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.882: error while reading EA inode 12 err=-117 [ 395.309187][ T8610] EXT4-fs (loop4): 1 orphan inode deleted [ 395.335948][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.503273][ T8280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.579317][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.884'. [ 395.623873][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.884'. [ 395.746830][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.3.884'. [ 396.090052][ T8637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.887'. [ 396.153225][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 396.189253][ T8637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.887'. [ 396.221382][ T8641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.887'. [ 396.381624][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 396.405118][ T8362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.445877][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.495490][ T8362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.516350][ T23] usb 5-1: config index 0 descriptor too short (expected 65129, got 105) [ 396.553115][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.613651][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 396.684595][ T23] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 396.963387][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.553721][ T8647] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 397.602870][ T23] usb 5-1: Product: syz [ 397.614478][ T23] usb 5-1: Manufacturer: syz [ 397.619279][ T23] usb 5-1: SerialNumber: syz [ 398.109752][ T8362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.153137][ T8362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.281076][ T8649] syz.3.892: attempt to access beyond end of device [ 398.281076][ T8649] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 398.352280][ T8649] EXT4-fs (loop7): unable to read superblock [ 398.409081][ T8362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.447697][ T8362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.474021][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.893'. [ 398.493903][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.893'. [ 398.602269][ T8362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.620675][ T23] usb 5-1: cannot find UAC_HEADER [ 398.646810][ T8362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.692801][ T23] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 398.741658][ T8420] udevd[8420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.919658][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.896'. [ 399.028009][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.896'. [ 401.083750][ T5899] usb 5-1: USB disconnect, device number 2 [ 401.329549][ T8686] __nla_validate_parse: 4 callbacks suppressed [ 401.329565][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.902'. [ 401.345725][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 401.345738][ T28] audit: type=1326 audit(1790254334.216:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 401.428559][ T28] audit: type=1326 audit(1790254334.247:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 401.491089][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.902'. [ 401.510058][ T8693] syz.3.904: attempt to access beyond end of device [ 401.510058][ T8693] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 401.545341][ T28] audit: type=1326 audit(1790254334.247:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 401.553978][ T8693] EXT4-fs (loop7): unable to read superblock [ 401.644832][ T5785] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 401.653329][ T28] audit: type=1326 audit(1790254334.247:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm=85B1CC427079C173F95C98CEA467D2 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 401.723861][ T28] audit: type=1326 audit(1790254334.247:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm=85B1CC427079C173F95C98CEA467D2 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 401.756047][ T28] audit: type=1326 audit(1790254334.247:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm=85B1CC427079C173F95C98CEA467D2 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3c2f5e98e code=0x7ffc0000 [ 401.797214][ T28] audit: type=1326 audit(1790254334.247:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm=85B1CC427079C173F95C98CEA467D2 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3c2f5e98e code=0x7ffc0000 [ 401.856662][ T28] audit: type=1326 audit(1790254334.247:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm=85B1CC427079C173F95C98CEA467D2 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 401.963438][ T28] audit: type=1326 audit(1790254334.247:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm=85B1CC427079C173F95C98CEA467D2 exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 402.164358][ T8709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.907'. [ 402.211470][ T8709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.907'. [ 402.223917][ T8711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.909'. [ 402.237580][ T8705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.907'. [ 402.277622][ T8711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.909'. [ 402.366015][ T8713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.909'. [ 402.692796][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'. [ 402.722107][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'. [ 403.426959][ T8737] loop4: detected capacity change from 0 to 256 [ 403.532290][ T8362] hsr_slave_0: left promiscuous mode [ 403.552840][ T8362] hsr_slave_1: left promiscuous mode [ 403.579844][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.599524][ T8362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.640116][ T8362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.677456][ T8362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.720600][ T8362] bridge_slave_1: left allmulticast mode [ 403.742161][ T8362] bridge_slave_1: left promiscuous mode [ 403.769616][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.873011][ T8362] bridge_slave_0: left allmulticast mode [ 403.895836][ T8362] bridge_slave_0: left promiscuous mode [ 403.922283][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.054331][ T8362] veth1_macvtap: left promiscuous mode [ 404.060575][ T8362] veth0_macvtap: left promiscuous mode [ 404.066273][ T8362] veth1_vlan: left promiscuous mode [ 404.080720][ T8362] veth0_vlan: left promiscuous mode [ 404.860407][ T8362] team0 (unregistering): Port device team_slave_1 removed [ 404.904863][ T8362] team0 (unregistering): Port device team_slave_0 removed [ 404.970851][ T8362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.028885][ T8362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.157679][ T8362] bond0 (unregistering): Released all slaves [ 407.408934][ T8742] __nla_validate_parse: 2 callbacks suppressed [ 407.408952][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.3.919'. [ 407.448021][ T8750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.922'. [ 407.962001][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 407.963116][ T8362] IPVS: stop unused estimator thread 0... [ 407.992411][ T8804] veth0_to_bridge: entered promiscuous mode [ 408.309927][ T8820] loop4: detected capacity change from 0 to 512 [ 409.383661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 409.888731][ T5785] Bluetooth: hci2: command tx timeout [ 411.370176][ T8842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 411.384158][ T8842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 411.405522][ T8842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 411.775738][ T8849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.942'. [ 411.802304][ T8849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.942'. [ 411.838722][ T8846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.942'. [ 412.248416][ T28] audit: type=1326 audit(1790254357.652:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 412.324729][ T28] audit: type=1326 audit(1790254357.652:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 412.389793][ T28] audit: type=1326 audit(1790254357.652:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 412.465394][ T28] audit: type=1326 audit(1790254357.652:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 412.530826][ T28] audit: type=1326 audit(1790254357.652:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 412.606594][ T28] audit: type=1326 audit(1790254357.652:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 412.752530][ T28] audit: type=1326 audit(1790254357.652:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 413.097863][ T28] audit: type=1326 audit(1790254357.683:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 413.274698][ T28] audit: type=1326 audit(1790254357.683:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.3.944" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 413.991898][ T8889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.952'. [ 414.054380][ T8889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.952'. [ 414.113672][ T8887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.952'. [ 416.055227][ T8926] loop4: detected capacity change from 0 to 1024 [ 416.068615][ T8926] EXT4-fs: Ignoring removed oldalloc option [ 416.074679][ T8926] EXT4-fs: Ignoring removed oldalloc option [ 416.256539][ T8926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.271805][ T8926] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 416.406349][ T8926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.825034][ T8926] FAULT_INJECTION: forcing a failure. [ 416.825034][ T8926] name failslab, interval 1, probability 0, space 0, times 0 [ 416.838310][ T8926] CPU: 1 PID: 8926 Comm: syz.4.959 Not tainted syzkaller #0 [ 416.845651][ T8926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 416.855762][ T8926] Call Trace: [ 416.859079][ T8926] [ 416.862040][ T8926] dump_stack_lvl+0x18c/0x250 [ 416.866771][ T8926] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 416.872443][ T8926] ? show_regs_print_info+0x20/0x20 [ 416.877728][ T8926] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 416.883423][ T8926] should_fail_ex+0x394/0x4c0 [ 416.888170][ T8926] should_failslab+0x9/0x20 [ 416.892718][ T8926] slab_pre_alloc_hook+0x59/0x300 [ 416.897799][ T8926] ? ops_init+0x8b/0x640 [ 416.902079][ T8926] ? ops_init+0x8b/0x640 [ 416.906360][ T8926] __kmem_cache_alloc_node+0x53/0x250 [ 416.911794][ T8926] ? ops_init+0x8b/0x640 [ 416.916075][ T8926] __kmalloc+0xa7/0x240 [ 416.920280][ T8926] ? vlan_init_net+0x15a/0x190 [ 416.925079][ T8926] ops_init+0x8b/0x640 [ 416.929183][ T8926] ? setup_net+0x3c1/0xa20 [ 416.933650][ T8926] setup_net+0x3b6/0xa20 [ 416.937929][ T8926] ? copy_net_ns+0x530/0x530 [ 416.942557][ T8926] ? copy_net_ns+0x347/0x530 [ 416.947188][ T8926] ? down_read_killable+0x1d0/0x340 [ 416.952425][ T8926] copy_net_ns+0x361/0x530 [ 416.956888][ T8926] create_new_namespaces+0x3ce/0x700 [ 416.962228][ T8926] unshare_nsproxy_namespaces+0x11a/0x160 [ 416.968048][ T8926] ksys_unshare+0x4fa/0x8f0 [ 416.972612][ T8926] ? sighand_ctor+0x50/0x50 [ 416.977157][ T8926] ? lock_chain_count+0x20/0x20 [ 416.982055][ T8926] ? syscall_enter_from_user_mode+0x25/0x80 [ 416.987992][ T8926] __x64_sys_unshare+0x38/0x40 [ 416.992802][ T8926] do_syscall_64+0x55/0xb0 [ 416.997264][ T8926] ? clear_bhb_loop+0x40/0x90 [ 417.001987][ T8926] ? clear_bhb_loop+0x40/0x90 [ 417.006715][ T8926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.012691][ T8926] RIP: 0033:0x7f825839e159 [ 417.017146][ T8926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.036794][ T8926] RSP: 002b:00007f82591b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 417.045249][ T8926] RAX: ffffffffffffffda RBX: 00007f8258626180 RCX: 00007f825839e159 [ 417.053275][ T8926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 417.061281][ T8926] RBP: 00007f825843506b R08: 0000000000000000 R09: 0000000000000000 [ 417.069286][ T8926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.077286][ T8926] R13: 00007f8258626218 R14: 00007f8258626180 R15: 00007ffff8027398 [ 417.085497][ T8926] [ 418.119503][ T8944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.964'. [ 418.157163][ T8944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.964'. [ 418.191267][ T8942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.964'. [ 418.396738][ T8280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.028993][ T971] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 420.021396][ T971] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.268844][ T971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 420.399007][ T971] usb 5-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 420.442711][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.463052][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.973'. [ 420.480543][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.973'. [ 420.494500][ T971] usb 5-1: config 0 descriptor?? [ 420.505088][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.973'. [ 420.621338][ T8985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.974'. [ 420.642906][ T8985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.974'. [ 420.661170][ T8983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.974'. [ 422.022286][ T8997] raw_sendmsg: syz.3.977 forgot to set AF_INET. Fix it! [ 423.319410][ T971] usbhid 5-1:0.0: can't add hid device: -71 [ 423.325486][ T971] usbhid: probe of 5-1:0.0 failed with error -71 [ 423.449304][ T971] usb 5-1: USB disconnect, device number 3 [ 423.485224][ T9005] netlink: 'syz.3.979': attribute type 13 has an invalid length. [ 423.602409][ T9009] loop4: detected capacity change from 0 to 1024 [ 423.609638][ T9005] gretap0: refused to change device tx_queue_len [ 423.625182][ T9005] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 423.795358][ T9016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.983'. [ 423.804453][ T9016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.983'. [ 423.917503][ T9016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.983'. [ 424.737434][ T5785] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 424.752307][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 428.520063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 429.364221][ T5785] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 430.958641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 431.931177][ T5827] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 432.796126][ T5827] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 432.821852][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.851745][ T5827] usb 5-1: Product: syz [ 432.870608][ T5827] usb 5-1: Manufacturer: syz [ 432.885367][ T5827] usb 5-1: SerialNumber: syz [ 433.425593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 433.492261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 433.720877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 434.797426][ T5827] rtl8150 5-1:1.0: couldn't reset the device [ 434.803735][ T5827] rtl8150: probe of 5-1:1.0 failed with error -5 [ 434.861899][ T5827] usb 5-1: USB disconnect, device number 4 [ 436.855144][ T5767] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 437.041548][ T5767] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 437.065873][ T5767] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 437.095460][ T5767] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 437.131476][ T5767] usb 5-1: config 220 has no interface number 2 [ 437.145335][ T5767] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 438.436612][ T5767] usb 5-1: config 220 interface 0 has no altsetting 0 [ 438.450686][ T5767] usb 5-1: config 220 interface 76 has no altsetting 0 [ 438.527996][ T5767] usb 5-1: config 220 interface 1 has no altsetting 0 [ 438.538944][ T5767] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 438.560474][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.575845][ T5767] usb 5-1: Product: syz [ 438.580440][ T5767] usb 5-1: Manufacturer: syz [ 438.585106][ T5767] usb 5-1: SerialNumber: syz [ 438.807862][ T5767] usb 5-1: selecting invalid altsetting 0 [ 438.831182][ T5767] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 438.856984][ T5767] usb 5-1: No valid video chain found. [ 438.889214][ T5767] usb 5-1: selecting invalid altsetting 0 [ 438.906268][ T5767] usbtest: probe of 5-1:220.1 failed with error -22 [ 438.919798][ T5767] usb 5-1: USB disconnect, device number 5 [ 441.325313][ T9203] overlayfs: failed to clone upperpath [ 441.367173][ T9205] bridge0: port 3(wlan1) entered blocking state [ 441.449972][ T9205] bridge0: port 3(wlan1) entered disabled state [ 441.499981][ T9205] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 441.572959][ T9205] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 441.865140][ T9207] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 441.907982][ T9207] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 441.951916][ T9207] bridge0: port 3(wlan1) entered disabled state [ 442.237444][ T9218] loop4: detected capacity change from 0 to 256 [ 442.264247][ T9218] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.289907][ T9218] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 442.329290][ T9218] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xde11e5da, utbl_chksum : 0xe619d30d) [ 442.357240][ T9218] exFAT-fs (loop4): failed to load alloc-bitmap [ 442.384682][ T9218] exFAT-fs (loop4): failed to recognize exfat type [ 442.541364][ T9218] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 442.680746][ T9228] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9228] [ 443.930376][ T9244] __nla_validate_parse: 1 callbacks suppressed [ 443.930392][ T9244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 444.567305][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 444.673175][ T9251] overlayfs: failed to clone upperpath [ 444.767894][ T9090] udevd[9090]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 444.889762][ T9082] udevd[9082]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 446.174444][ T9259] fuse: Bad value for 'fd' [ 451.322680][ T9265] syz.3.1038 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 451.332561][ T9265] CPU: 1 PID: 9265 Comm: syz.3.1038 Not tainted syzkaller #0 [ 451.339935][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 451.350015][ T9265] Call Trace: [ 451.353316][ T9265] [ 451.356282][ T9265] dump_stack_lvl+0x18c/0x250 [ 451.360976][ T9265] ? show_regs_print_info+0x20/0x20 [ 451.366183][ T9265] ? load_image+0x420/0x420 [ 451.370693][ T9265] ? ___ratelimit+0x478/0x610 [ 451.375399][ T9265] ? radix_tree_cpu_dead+0x160/0x160 [ 451.380699][ T9265] dump_header+0xd8/0x820 [ 451.385047][ T9265] oom_kill_process+0x390/0x580 [ 451.389909][ T9265] out_of_memory+0xe0e/0x1200 [ 451.394601][ T9265] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 451.400255][ T9265] ? mutex_lock_nested+0x20/0x20 [ 451.405195][ T9265] ? unregister_oom_notifier+0x20/0x20 [ 451.410681][ T9265] mem_cgroup_out_of_memory+0x2c2/0x390 [ 451.416233][ T9265] ? try_charge_memcg+0xc91/0x17c0 [ 451.421368][ T9265] ? drain_local_stock+0x630/0x630 [ 451.426512][ T9265] ? do_raw_spin_unlock+0x121/0x230 [ 451.431725][ T9265] try_charge_memcg+0xca1/0x17c0 [ 451.436672][ T9265] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 451.442498][ T9265] ? folio_flags+0x120/0x120 [ 451.447102][ T9265] ? shmem_alloc_folio+0x1f4/0x2a0 [ 451.452226][ T9265] ? percpu_ref_tryget+0x15/0x180 [ 451.457355][ T9265] ? get_mem_cgroup_from_mm+0x38/0x290 [ 451.462821][ T9265] charge_memcg+0x11b/0x3b0 [ 451.467334][ T9265] ? __mem_cgroup_charge+0x80/0x80 [ 451.472452][ T9265] ? get_mem_cgroup_from_mm+0x38/0x290 [ 451.477912][ T9265] ? get_mem_cgroup_from_mm+0x38/0x290 [ 451.483376][ T9265] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 451.488932][ T9265] __mem_cgroup_charge+0x25/0x80 [ 451.493891][ T9265] shmem_add_to_page_cache+0x8d3/0x1b80 [ 451.499469][ T9265] ? xas_load+0x12b/0x140 [ 451.503816][ T9265] ? shmem_alloc_folio+0x2a0/0x2a0 [ 451.508985][ T9265] shmem_get_folio_gfp+0x1037/0x2b40 [ 451.514298][ T9265] shmem_fault+0x1b8/0x820 [ 451.518727][ T9265] ? zero_pipe_buf_get+0x10/0x10 [ 451.523673][ T9265] ? handle_mm_fault+0xe6/0x4a50 [ 451.528619][ T9265] ? __lock_acquire+0x7d80/0x7d80 [ 451.533659][ T9265] __do_fault+0x13b/0x4d0 [ 451.537993][ T9265] ? handle_mm_fault+0x3929/0x4a50 [ 451.543111][ T9265] ? handle_mm_fault+0xe6/0x4a50 [ 451.548074][ T9265] handle_mm_fault+0x3945/0x4a50 [ 451.553021][ T9265] ? handle_mm_fault+0xe6/0x4a50 [ 451.557977][ T9265] ? numa_migrate_prep+0x350/0x350 [ 451.563096][ T9265] ? follow_page_pte+0x6d0/0x1ae0 [ 451.568136][ T9265] ? pmd_lock+0x60/0x60 [ 451.572325][ T9265] __get_user_pages+0x604/0x1580 [ 451.577318][ T9265] ? file_update_time+0x98/0x1a0 [ 451.582265][ T9265] ? populate_vma_page_range+0x380/0x380 [ 451.587909][ T9265] ? get_dump_page+0xb6/0x200 [ 451.592591][ T9265] ? down_read_killable+0x1d0/0x340 [ 451.597800][ T9265] get_dump_page+0x10c/0x200 [ 451.602424][ T9265] ? fault_in_readable+0x150/0x150 [ 451.607566][ T9265] ? __asan_memset+0x22/0x40 [ 451.612181][ T9265] ? iov_iter_bvec+0xd4/0x1b0 [ 451.616867][ T9265] dump_user_range+0x127/0x840 [ 451.621646][ T9265] ? dump_skip+0x40/0x40 [ 451.625897][ T9265] ? dump_emit+0x78/0xe0 [ 451.630182][ T9265] ? dump_emit+0xa6/0xe0 [ 451.634429][ T9265] ? elf_core_dump+0x2dbb/0x37c0 [ 451.639384][ T9265] elf_core_dump+0x320e/0x37c0 [ 451.644178][ T9265] ? load_elf_binary+0x2850/0x2850 [ 451.649306][ T9265] ? verify_lock_unused+0x140/0x140 [ 451.654512][ T9265] ? __lock_acquire+0x7d80/0x7d80 [ 451.659557][ T9265] ? mas_next_slot+0x94c/0x980 [ 451.664366][ T9265] ? rcu_read_lock_any_held+0xb4/0x140 [ 451.669836][ T9265] ? 0xffffffffff600000 [ 451.674000][ T9265] do_coredump+0x1791/0x24a0 [ 451.678610][ T9265] ? nfs_stat_to_errno+0x170/0x170 [ 451.683744][ T9265] ? lock_chain_count+0x20/0x20 [ 451.688602][ T9265] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.693820][ T9265] ? lockdep_hardirqs_on+0x98/0x150 [ 451.699026][ T9265] get_signal+0x10da/0x1390 [ 451.703589][ T9265] arch_do_signal_or_restart+0xc2/0x7b0 [ 451.709145][ T9265] ? get_sigframe_size+0x20/0x20 [ 451.714091][ T9265] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 451.720101][ T9265] ? exit_to_user_mode_loop+0x3b/0x110 [ 451.725595][ T9265] exit_to_user_mode_loop+0x70/0x110 [ 451.730893][ T9265] exit_to_user_mode_prepare+0xee/0x180 [ 451.736462][ T9265] irqentry_exit_to_user_mode+0x9/0x30 [ 451.741942][ T9265] exc_page_fault+0x8c/0x100 [ 451.746553][ T9265] asm_exc_page_fault+0x26/0x30 [ 451.751411][ T9265] RIP: 0033:0x7f14d4f9e161 [ 451.755831][ T9265] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 451.775465][ T9265] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 451.781543][ T9265] RAX: 0000000000000000 RBX: 00007f14d5226090 RCX: 00007f14d4f9e159 [ 451.789519][ T9265] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 451.797495][ T9265] RBP: 00007f14d503506b R08: 0000000000000000 R09: 0000000000000000 [ 451.805477][ T9265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 451.813455][ T9265] R13: 00007f14d5226128 R14: 00007f14d5226090 R15: 00007ffd76e839a8 [ 451.821439][ T9265] [ 451.825268][ T9265] memory: usage 307200kB, limit 307200kB, failcnt 33819 [ 451.832566][ T9265] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 451.840484][ T9265] kmem: usage 2520kB, limit 9007199254740988kB, failcnt 0 [ 451.847589][ T9265] Memory cgroup stats for /syz3: [ 451.848013][ T9265] cache 308224000 [ 451.856610][ T9265] rss 3735552 [ 451.860002][ T9265] rss_huge 0 [ 451.863202][ T9265] shmem 228978688 [ 451.866833][ T9265] mapped_file 133234688 [ 451.871091][ T9265] dirty 212992 [ 451.874475][ T9265] writeback 0 [ 451.877800][ T9265] workingset_refault_anon 20 [ 451.882415][ T9265] workingset_refault_file 0 [ 451.886937][ T9265] swap 127868928 [ 451.890480][ T9265] pgpgin 650222 [ 451.893940][ T9265] pgpgout 574060 [ 451.897502][ T9265] pgfault 287774 [ 451.901048][ T9265] pgmajfault 10 [ 451.904502][ T9265] inactive_anon 164675584 [ 451.909052][ T9265] active_anon 68038656 [ 451.913129][ T9265] inactive_file 212992 [ 451.917222][ T9265] active_file 0 [ 451.920697][ T9265] unevictable 79032320 [ 451.924834][ T9265] hierarchical_memory_limit 314572800 [ 451.930434][ T9265] hierarchical_memsw_limit 9223372036854771712 [ 451.936619][ T9265] total_cache 308224000 [ 451.940783][ T9265] total_rss 3735552 [ 451.944609][ T9265] total_rss_huge 0 [ 451.948325][ T9265] total_shmem 228978688 [ 451.952470][ T9265] total_mapped_file 133234688 [ 451.957188][ T9265] total_dirty 212992 [ 451.961076][ T9265] total_writeback 0 [ 451.964924][ T9265] total_workingset_refault_anon 20 [ 451.970062][ T9265] total_workingset_refault_file 0 [ 451.975118][ T9265] total_swap 127868928 [ 451.979204][ T9265] total_pgpgin 650222 [ 451.983232][ T9265] total_pgpgout 574060 [ 451.987313][ T9265] total_pgfault 287774 [ 451.991419][ T9265] total_pgmajfault 10 [ 451.995443][ T9265] total_inactive_anon 164675584 [ 452.000289][ T9265] total_active_anon 68038656 [ 452.004906][ T9265] total_inactive_file 212992 [ 452.009496][ T9265] total_active_file 0 [ 452.013506][ T9265] total_unevictable 79032320 [ 452.018117][ T9265] anon_cost 0 [ 452.021424][ T9265] file_cost 0 [ 452.024722][ T9265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1038,pid=9265,uid=0 [ 452.040425][ T9265] Memory cgroup out of memory: Killed process 9265 (syz.3.1038) total-vm:202732kB, anon-rss:1400kB, file-rss:20480kB, shmem-rss:129792kB, UID:0 pgtables:372kB oom_score_adj:0 [ 453.924230][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.930686][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.010987][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 454.127729][ T9291] overlayfs: failed to clone upperpath [ 454.857319][ T28] audit: type=1326 audit(1790254414.377:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 454.913697][ T28] audit: type=1326 audit(1790254414.408:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 454.993743][ T28] audit: type=1326 audit(1790254414.408:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 455.058063][ T28] audit: type=1326 audit(1790254414.408:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 455.119180][ T28] audit: type=1326 audit(1790254414.408:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 455.182185][ T28] audit: type=1326 audit(1790254414.419:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 455.255177][ T28] audit: type=1326 audit(1790254414.419:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 455.306702][ T28] audit: type=1326 audit(1790254414.419:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 455.330942][ T28] audit: type=1326 audit(1790254414.419:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.0.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 458.390618][ T9344] overlayfs: missing 'workdir' [ 459.792931][ T28] audit: type=1326 audit(1790254419.552:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 459.837473][ T28] audit: type=1326 audit(1790254419.552:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 459.907192][ T28] audit: type=1326 audit(1790254419.552:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 459.951793][ T28] audit: type=1326 audit(1790254419.563:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 460.149794][ T28] audit: type=1326 audit(1790254419.563:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 460.235328][ T28] audit: type=1326 audit(1790254419.563:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 460.284591][ T28] audit: type=1326 audit(1790254419.563:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 461.040905][ T28] audit: type=1326 audit(1790254419.563:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 461.802969][ T28] audit: type=1326 audit(1790254419.563:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.2.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 462.073287][ T28] audit: type=1326 audit(1790254420.833:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 462.384876][ T9385] overlayfs: missing 'workdir' [ 464.711600][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 465.428914][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 465.428931][ T28] audit: type=1326 audit(1790254425.483:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.1090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53c839e159 code=0x0 [ 465.521289][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 467.265289][ T9456] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 468.008976][ T9472] overlayfs: missing 'lowerdir' [ 470.537186][ T9507] overlayfs: missing 'lowerdir' [ 471.062577][ T28] audit: type=1326 audit(1790254437.251:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 471.260796][ T28] audit: type=1326 audit(1790254437.241:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 471.399732][ T28] audit: type=1326 audit(1790254437.251:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 471.553592][ T28] audit: type=1326 audit(1790254437.251:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 472.121199][ T9529] overlayfs: missing 'lowerdir' [ 472.145829][ T28] audit: type=1326 audit(1790254437.262:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 472.571795][ T28] audit: type=1326 audit(1790254437.262:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 473.604949][ T28] audit: type=1326 audit(1790254437.262:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 475.072205][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 475.150111][ T28] audit: type=1326 audit(1790254437.262:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 475.422221][ T28] audit: type=1326 audit(1790254437.262:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 475.481414][ T28] audit: type=1326 audit(1790254437.262:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.2.1115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 478.978965][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 478.978979][ T28] audit: type=1326 audit(1790254457.708:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 479.011252][ T28] audit: type=1326 audit(1790254457.708:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 479.066487][ T28] audit: type=1326 audit(1790254457.771:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 479.086475][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1140'. [ 479.405890][ T28] audit: type=1326 audit(1790254457.771:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 479.473972][ T28] audit: type=1326 audit(1790254457.771:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 479.503420][ T28] audit: type=1326 audit(1790254457.802:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 480.131994][ T28] audit: type=1326 audit(1790254457.802:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 480.487782][ T28] audit: type=1326 audit(1790254457.802:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 480.654473][ T28] audit: type=1326 audit(1790254457.823:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 480.673740][ T9619] mmap: syz.3.1142 (9619) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 480.683252][ T28] audit: type=1326 audit(1790254457.823:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d4f9e159 code=0x7ffc0000 [ 483.076993][ T9650] netlink: 'syz.3.1148': attribute type 11 has an invalid length. [ 487.174063][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 487.174077][ T28] audit: type=1326 audit(1790254478.306:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 487.294840][ T9707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 487.315877][ T28] audit: type=1326 audit(1790254478.380:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 487.360650][ T9707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 487.424748][ T28] audit: type=1326 audit(1790254478.380:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 487.646100][ T28] audit: type=1326 audit(1790254478.380:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 487.792519][ T28] audit: type=1326 audit(1790254478.380:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 488.051237][ T9723] 9pnet_virtio: no channels available for device 127.0.0.1 [ 488.703335][ T28] audit: type=1326 audit(1790254478.380:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 488.806046][ T28] audit: type=1326 audit(1790254478.401:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 488.887712][ T28] audit: type=1326 audit(1790254478.401:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 491.337214][ T28] audit: type=1326 audit(1790254478.401:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.2.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 492.530646][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1175'. [ 492.581970][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1175'. [ 495.096410][ T9798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1186'. [ 495.140433][ T9798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1186'. [ 496.473895][ T9831] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1193'. [ 497.483972][ T9843] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1197'. [ 497.667064][ T9843] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1197'. [ 502.368177][ T9876] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 503.003229][ T9889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1210'. [ 503.040430][ T9889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1210'. [ 503.067822][ T28] audit: type=1326 audit(1790254512.984:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.201391][ T28] audit: type=1326 audit(1790254512.984:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.286995][ T28] audit: type=1326 audit(1790254512.984:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.375084][ T28] audit: type=1326 audit(1790254512.984:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.467850][ T28] audit: type=1326 audit(1790254512.984:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.678360][ T28] audit: type=1326 audit(1790254512.984:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.706149][ T28] audit: type=1326 audit(1790254512.984:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.775460][ T28] audit: type=1326 audit(1790254512.984:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.846099][ T28] audit: type=1326 audit(1790254512.984:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 503.900946][ T28] audit: type=1326 audit(1790254512.984:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd3c2f9e159 code=0x7ffc0000 [ 504.304857][ T9917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1209'. [ 504.317804][ T9917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1209'. [ 505.138853][ T9920] syz.2.1218: attempt to access beyond end of device [ 505.138853][ T9920] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 505.142951][ T9924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1220'. [ 505.153588][ T9920] EXT4-fs (loop5): unable to read superblock [ 505.177475][ T9924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1220'. [ 505.707151][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 505.718028][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 505.759560][ T9946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1229'. [ 505.771731][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 505.940946][ T9954] syz.2.1232: attempt to access beyond end of device [ 505.940946][ T9954] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 505.954419][ T9954] EXT4-fs (loop5): unable to read superblock [ 508.272262][ T9979] syz.0.1242: attempt to access beyond end of device [ 508.272262][ T9979] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 508.325770][ T9979] EXT4-fs (loop1): unable to read superblock [ 508.790821][ T9991] __nla_validate_parse: 8 callbacks suppressed [ 508.790838][ T9991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1247'. [ 508.827675][ T9991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1247'. [ 508.991643][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 509.039562][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 509.075958][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 509.129230][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 509.143906][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 509.143919][ T28] audit: type=1326 audit(1790254519.367:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.240638][ T28] audit: type=1326 audit(1790254519.367:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.306870][ T28] audit: type=1326 audit(1790254519.367:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.387633][ T28] audit: type=1326 audit(1790254519.367:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.468801][ T28] audit: type=1326 audit(1790254519.367:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.537632][ T28] audit: type=1326 audit(1790254519.367:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.597633][ T28] audit: type=1326 audit(1790254519.367:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.693483][ T28] audit: type=1326 audit(1790254519.388:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 509.801560][ T28] audit: type=1326 audit(1790254519.388:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10000 comm="syz.0.1250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 510.044523][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1257'. [ 510.108635][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1257'. [ 510.175240][ T5087] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 510.241367][T10025] overlayfs: failed to clone upperpath [ 511.355674][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.362178][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.829323][T10049] overlayfs: failed to clone upperpath [ 512.079389][T10054] 9pnet_fd: Insufficient options for proto=fd [ 513.503831][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 513.542229][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 513.580410][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 513.604497][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 517.580606][ T28] audit: type=1326 audit(1790254528.227:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 517.680181][ T28] audit: type=1326 audit(1790254528.269:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 517.776548][ T28] audit: type=1326 audit(1790254528.269:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 517.848348][ T28] audit: type=1326 audit(1790254528.269:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 517.943733][ T28] audit: type=1326 audit(1790254528.269:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53c835e98e code=0x7ffc0000 [ 518.071796][ T28] audit: type=1326 audit(1790254528.269:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53c839dec2 code=0x7ffc0000 [ 518.146645][ T28] audit: type=1326 audit(1790254528.269:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f53c839df87 code=0x7ffc0000 [ 518.242352][ T28] audit: type=1326 audit(1790254528.269:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f53c839df87 code=0x7ffc0000 [ 518.327983][ T28] audit: type=1326 audit(1790254528.269:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f53c839df57 code=0x7ffc0000 [ 518.384173][ T28] audit: type=1326 audit(1790254528.269:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.0.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 518.558396][ T5087] Bluetooth: hci2: unexpected event for opcode 0x042e [ 518.826809][T10111] xt_hashlimit: max too large, truncated to 1048576 [ 519.311924][T10118] xt_CONNSECMARK: invalid mode: 66 [ 519.343689][T10124] netlink: 'syz.4.1297': attribute type 4 has an invalid length. [ 522.439370][ T5087] Bluetooth: hci1: adv larger than maximum supported [ 522.439472][ T5087] Bluetooth: hci1: Malformed LE Event: 0x0d [ 525.228128][ T5087] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 528.116939][T10196] syz.0.1321: attempt to access beyond end of device [ 528.116939][T10196] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 528.296228][T10196] EXT4-fs (loop1): unable to read superblock [ 528.357793][T10198] fuse: Unknown parameter '00000000000000000000' [ 530.003189][T10224] syz.2.1333: attempt to access beyond end of device [ 530.003189][T10224] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 530.021442][T10224] EXT4-fs (loop5): unable to read superblock [ 531.360137][T10266] netlink: 'syz.3.1350': attribute type 4 has an invalid length. [ 532.920778][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 532.920795][ T28] audit: type=1326 audit(1790254544.331:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 532.995027][ T28] audit: type=1326 audit(1790254544.331:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.024638][ T28] audit: type=1326 audit(1790254544.331:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.055023][ T28] audit: type=1326 audit(1790254544.331:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.089493][ T28] audit: type=1326 audit(1790254544.331:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.118307][ T28] audit: type=1326 audit(1790254544.331:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.147900][ T28] audit: type=1326 audit(1790254544.331:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.177550][ T28] audit: type=1326 audit(1790254544.331:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.212778][ T28] audit: type=1326 audit(1790254544.331:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.246455][ T28] audit: type=1326 audit(1790254544.331:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.4.1362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 533.356599][T10297] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 534.109001][T10312] syz.4.1370: attempt to access beyond end of device [ 534.109001][T10312] loop9: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 534.150215][T10312] EXT4-fs (loop9): unable to read superblock [ 534.225653][T10326] netlink: 'syz.3.1374': attribute type 4 has an invalid length. [ 536.189067][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 536.537780][T10356] syz.0.1387: attempt to access beyond end of device [ 536.537780][T10356] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 536.551245][T10356] EXT4-fs (loop1): unable to read superblock [ 538.713114][T10377] ip_tables: iptables: counters copy to user failed while replacing table [ 539.056124][ T28] kauditd_printk_skb: 286 callbacks suppressed [ 539.056141][ T28] audit: type=1326 audit(1790254550.777:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.096564][T10387] syz.3.1398: attempt to access beyond end of device [ 539.096564][T10387] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 539.112698][T10387] EXT4-fs (loop7): unable to read superblock [ 539.122686][ T28] audit: type=1326 audit(1790254550.777:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.341544][ T28] audit: type=1326 audit(1790254550.777:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.390554][ T28] audit: type=1326 audit(1790254550.777:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.416316][ T28] audit: type=1326 audit(1790254550.777:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.461079][ T28] audit: type=1326 audit(1790254550.777:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.500622][ T28] audit: type=1326 audit(1790254550.777:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.529266][ T28] audit: type=1326 audit(1790254550.777:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 539.573319][ T28] audit: type=1326 audit(1790254550.777:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.0.1399" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53c839e159 code=0x7ffc0000 [ 543.503832][T10424] syz.2.1410: attempt to access beyond end of device [ 543.503832][T10424] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 543.521542][T10424] EXT4-fs (loop5): unable to read superblock [ 543.615774][T10431] syz_tun: entered allmulticast mode [ 545.017379][T10444] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 545.119051][T10447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.412272][T10457] syz.2.1424: attempt to access beyond end of device [ 546.412272][T10457] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 546.425807][T10457] EXT4-fs (loop5): unable to read superblock [ 548.433979][ T28] audit: type=1326 audit(1790254560.624:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.475610][ T28] audit: type=1326 audit(1790254560.656:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.512502][ T28] audit: type=1326 audit(1790254560.656:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.544591][ T28] audit: type=1326 audit(1790254560.656:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.576242][ T28] audit: type=1326 audit(1790254560.656:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.610271][ T28] audit: type=1326 audit(1790254560.656:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.639766][ T28] audit: type=1326 audit(1790254560.656:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.690870][ T28] audit: type=1326 audit(1790254560.656:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.722226][ T28] audit: type=1326 audit(1790254560.656:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.751157][ T28] audit: type=1326 audit(1790254560.656:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.4.1430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825839e159 code=0x7ffc0000 [ 548.914276][T10483] syz.3.1433: attempt to access beyond end of device [ 548.914276][T10483] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 548.933479][T10483] EXT4-fs (loop7): unable to read superblock [ 549.335216][T10497] netlink: 'syz.4.1439': attribute type 4 has an invalid length. [ 549.979159][T10512] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8280] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10512] [ 552.286388][T10558] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 554.427079][T10577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.488818][T10596] netlink: 'syz.2.1476': attribute type 4 has an invalid length. [ 556.387897][T10628] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1491'. [ 556.409588][T10628] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1491'. [ 557.900767][T10661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1504'. [ 557.922420][T10661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1504'. [ 558.750602][T10679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1510'. [ 558.796907][T10679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1510'. [ 562.016409][T10691] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1513'. [ 562.083316][T10691] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1513'. [ 562.150624][T10689] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 562.860028][T10704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1519'. [ 562.900548][T10704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1519'. [ 566.060649][T10727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1529'. [ 566.071887][T10727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1529'. [ 569.077121][T10757] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 569.800282][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.811773][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.858883][T10751] futex_wake_op: syz.3.1535 tries to shift op by 144; fix this program [ 569.881127][T10751] futex_wake_op: syz.3.1535 tries to shift op by 144; fix this program [ 569.907908][T10771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1540'. [ 569.933447][T10771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1540'. [ 571.974316][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 576.526500][T10847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1570'. [ 576.540940][T10847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1570'. [ 579.354044][T10877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1579'. [ 579.383908][T10877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1579'. [ 584.618221][T10923] fuse: Bad value for 'fd' [ 587.809702][T10971] netlink: 'syz.0.1617': attribute type 4 has an invalid length. [ 588.941922][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 588.975677][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 589.016891][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 589.036519][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 590.106879][T11000] netlink: 'syz.4.1628': attribute type 4 has an invalid length. [ 590.991376][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 591.008904][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 591.033923][T11011] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.042785][T11011] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.051763][T11011] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.060591][T11011] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.086109][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 591.095161][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 591.347265][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 592.634398][T11033] netlink: 'syz.2.1639': attribute type 4 has an invalid length. [ 592.929869][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 592.967342][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 595.171342][T11064] netlink: 'syz.2.1652': attribute type 4 has an invalid length. [ 595.496383][T11070] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1653'. [ 598.862786][T11096] netlink: 'syz.4.1662': attribute type 4 has an invalid length. [ 600.563427][T11125] netlink: 'syz.2.1673': attribute type 4 has an invalid length. [ 601.765697][T11147] batadv_slave_1: entered promiscuous mode [ 601.810501][T11147] batadv_slave_1: left promiscuous mode [ 601.949150][T11150] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1681'. [ 606.708693][T11224] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1712'. [ 607.555555][T11228] netlink: 'syz.2.1714': attribute type 4 has an invalid length. [ 607.947706][T11237] futex_wake_op: syz.0.1717 tries to shift op by 144; fix this program [ 607.958461][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1717'. [ 608.946836][T11253] netlink: 'syz.0.1724': attribute type 4 has an invalid length. [ 609.449222][T11260] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1726'. [ 610.720111][T11279] netlink: 'syz.3.1734': attribute type 4 has an invalid length. [ 612.846852][T11316] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1744'. [ 614.185234][T11334] 9pnet_fd: Insufficient options for proto=fd [ 617.107587][T11360] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1765'. [ 617.745365][T11378] ip6t_REJECT: ECHOREPLY is not supported [ 619.880081][T11401] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1780'. [ 622.444280][T11439] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1795'. [ 623.668136][T11461] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1803'. [ 624.532560][T11476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1810'. [ 624.541802][T11476] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1810'. [ 624.798598][T11484] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [1] [ 624.833554][T11484] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 624.862034][T11484] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 624.881626][T11484] One or more global auth toks could not properly register; rc = [-22] [ 624.890143][T11484] Error parsing options; rc = [-22] [ 625.973964][T11504] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1821'. [ 626.872901][T11517] block device autoloading is deprecated and will be removed. [ 628.330278][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.336766][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.200183][T11554] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1837'. [ 633.398336][T11593] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1849'. [ 633.568826][T11594] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [1] [ 633.651149][T11594] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 633.800770][T11594] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 633.957747][T11594] One or more global auth toks could not properly register; rc = [-22] [ 634.064927][T11594] Error parsing options; rc = [-22] [ 636.344681][T11637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1868'. [ 636.681195][T11644] netlink: 'syz.3.1869': attribute type 4 has an invalid length. [ 636.690440][T11644] netlink: 'syz.3.1869': attribute type 4 has an invalid length. [ 640.953879][T11698] ip6t_REJECT: ECHOREPLY is not supported [ 642.932054][T11731] ip6t_REJECT: ECHOREPLY is not supported [ 643.746384][T11737] netlink: 'syz.0.1904': attribute type 4 has an invalid length. [ 643.771960][T11737] netlink: 'syz.0.1904': attribute type 4 has an invalid length. [ 649.344639][T11823] ip6t_REJECT: ECHOREPLY is not supported [ 651.906435][T11860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.612973][T11974] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1993'. [ 661.409060][T12020] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2008'. [ 663.287113][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'. [ 666.421014][T12088] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2036'. [ 667.426094][T12104] ip6t_REJECT: ECHOREPLY is not supported [ 668.500116][T12119] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2048'. [ 670.272722][T12146] ip6t_REJECT: ECHOREPLY is not supported [ 672.306343][T12165] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2062'. [ 674.581335][T12191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2074'. [ 674.650521][T12176] ip6t_REJECT: ECHOREPLY is not supported [ 676.341348][T12208] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2079'. [ 679.997077][T12239] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2092'. [ 685.234553][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2125'. [ 685.469712][T12322] bridge_slave_1 (unregistering): left allmulticast mode [ 685.477111][T12322] bridge_slave_1 (unregistering): left promiscuous mode [ 685.484291][T12322] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.850420][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.869643][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.450314][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 691.469156][T12401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2154'. [ 691.938463][T12406] ip6t_REJECT: ECHOREPLY is not supported [ 696.192917][T12452] ip6t_REJECT: ECHOREPLY is not supported [ 696.347119][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 696.357453][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 696.367430][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 696.376533][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 696.384721][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 696.574838][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 697.132464][ T745] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.164587][ T745] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.320314][ T745] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.349064][ T745] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.971647][ T5087] Bluetooth: hci1: command tx timeout [ 699.851724][ T745] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.886279][ T745] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.991272][ T745] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.018116][ T745] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.479298][T12453] chnl_net:caif_netlink_parms(): no params data found [ 700.944371][ T5087] Bluetooth: hci1: command tx timeout [ 700.967364][T12498] ip6t_REJECT: ECHOREPLY is not supported [ 701.559639][T12453] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.598365][T12453] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.622298][T12453] bridge_slave_0: entered allmulticast mode [ 701.736130][T12453] bridge_slave_0: entered promiscuous mode [ 701.982546][T12453] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.989753][T12453] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.034718][T12453] bridge_slave_1: entered allmulticast mode [ 702.059797][T12453] bridge_slave_1: entered promiscuous mode [ 702.488488][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 702.935744][ T5087] Bluetooth: hci1: command tx timeout [ 703.236254][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.391799][T12522] bridge_slave_1 (unregistering): left allmulticast mode [ 703.399078][T12522] bridge_slave_1 (unregistering): left promiscuous mode [ 703.406437][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.440246][T12453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.472049][T12453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.915127][ T5087] Bluetooth: hci1: command tx timeout [ 705.093722][T12453] team0: Port device team_slave_0 added [ 705.116416][T12453] team0: Port device team_slave_1 added [ 705.189968][T12539] ip6t_REJECT: ECHOREPLY is not supported [ 706.595205][T12453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.649788][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.759054][T12453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.960694][T12453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.999075][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.073929][T12453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.568730][T12453] hsr_slave_0: entered promiscuous mode [ 707.575795][T12453] hsr_slave_1: entered promiscuous mode [ 707.929612][T12573] xt_TCPMSS: Only works on TCP SYN packets [ 708.799867][ T745] hsr_slave_0: left promiscuous mode [ 708.827782][ T745] hsr_slave_1: left promiscuous mode [ 708.854517][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.892609][ T745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.916184][ T745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.923666][ T745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.963738][ T745] bridge_slave_1: left allmulticast mode [ 708.976647][ T745] bridge_slave_1: left promiscuous mode [ 708.994937][ T745] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.016167][ T745] bridge_slave_0: left allmulticast mode [ 709.032501][ T745] bridge_slave_0: left promiscuous mode [ 709.038326][ T745] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.084566][ T745] veth1_macvtap: left promiscuous mode [ 709.090502][ T745] veth0_macvtap: left promiscuous mode [ 709.096291][ T745] veth1_vlan: left promiscuous mode [ 709.103430][ T745] veth0_vlan: left promiscuous mode [ 709.924570][ T745] team0 (unregistering): Port device team_slave_1 removed [ 709.993716][ T745] team0 (unregistering): Port device team_slave_0 removed [ 710.061146][ T745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.143156][ T745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.266707][ T745] bond0 (unregistering): Released all slaves [ 711.385401][T12609] xt_TCPMSS: Only works on TCP SYN packets [ 714.085939][T12453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 714.138381][T12453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 714.184972][T12453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 714.354104][T12453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 715.573346][T12453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.743176][T12453] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.858082][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.865441][ T8812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.947172][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.954392][ T8812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.750871][T12692] pimreg: entered allmulticast mode [ 717.620826][T12453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.814814][T12453] veth0_vlan: entered promiscuous mode [ 717.869211][T12453] veth1_vlan: entered promiscuous mode [ 718.000586][T12453] veth0_macvtap: entered promiscuous mode [ 718.065869][T12453] veth1_macvtap: entered promiscuous mode [ 718.106915][T12712] bond_slave_0: entered promiscuous mode [ 718.134243][T12712] bond_slave_0: entered allmulticast mode [ 718.201009][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.212054][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.221963][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.232685][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.242648][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.253142][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.264728][T12453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.282705][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.307540][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.321183][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.332674][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.348589][T12453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.365487][T12453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.377052][T12453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.431721][T12453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.478777][T12453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.500677][T12453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.509470][T12453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.256239][T12733] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2245'. [ 719.553346][ T8810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.599197][ T8810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.825675][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.861103][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.670422][T12759] loop3: detected capacity change from 0 to 1024 [ 723.694852][T12759] EXT4-fs: Ignoring removed oldalloc option [ 723.742268][T12759] EXT4-fs: Ignoring removed oldalloc option [ 723.814216][T12759] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 723.977480][T12759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.204953][T12453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.506398][T12774] loop3: detected capacity change from 0 to 512 [ 724.557129][T12774] ext4: Unknown parameter 'smackfstransmute' [ 724.777038][ T5087] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 724.784056][T12762] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 725.119460][T12774] ip6t_REJECT: ECHOREPLY is not supported [ 725.603114][T12788] FAULT_INJECTION: forcing a failure. [ 725.603114][T12788] name failslab, interval 1, probability 0, space 0, times 0 [ 725.662559][T12788] CPU: 1 PID: 12788 Comm: syz.3.2255 Not tainted syzkaller #0 [ 725.670100][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 725.680199][T12788] Call Trace: [ 725.683518][T12788] [ 725.686493][T12788] dump_stack_lvl+0x18c/0x250 [ 725.691238][T12788] ? show_regs_print_info+0x20/0x20 [ 725.696502][T12788] ? load_image+0x420/0x420 [ 725.701070][T12788] ? __might_sleep+0xe0/0xe0 [ 725.705722][T12788] ? __lock_acquire+0x7d80/0x7d80 [ 725.710804][T12788] should_fail_ex+0x394/0x4c0 [ 725.715549][T12788] should_failslab+0x9/0x20 [ 725.720154][T12788] slab_pre_alloc_hook+0x59/0x300 [ 725.725232][T12788] kmem_cache_alloc+0x5a/0x2c0 [ 725.730044][T12788] ? security_inode_alloc+0x34/0x110 [ 725.735380][T12788] security_inode_alloc+0x34/0x110 [ 725.740553][T12788] inode_init_always+0x914/0xc90 [ 725.745558][T12788] new_inode_pseudo+0x95/0x1d0 [ 725.750391][T12788] new_inode+0x22/0x1d0 [ 725.754622][T12788] shmem_get_inode+0x34d/0xcd0 [ 725.759478][T12788] __shmem_file_setup+0x167/0x2c0 [ 725.764575][T12788] __se_sys_memfd_create+0x357/0x660 [ 725.769929][T12788] do_syscall_64+0x55/0xb0 [ 725.774404][T12788] ? clear_bhb_loop+0x40/0x90 [ 725.779244][T12788] ? clear_bhb_loop+0x40/0x90 [ 725.783991][T12788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.789951][T12788] RIP: 0033:0x7f9e6319e159 [ 725.794422][T12788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.814091][T12788] RSP: 002b:00007f9e6414fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 725.822576][T12788] RAX: ffffffffffffffda RBX: 0000000000000c11 RCX: 00007f9e6319e159 [ 725.830593][T12788] RDX: 00007f9e6414fee0 RSI: 0000000000000000 RDI: 00007f9e6323524b [ 725.838614][T12788] RBP: 0000200000000d00 R08: 00000000ffffffff R09: 0000000000000000 [ 725.846644][T12788] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0 [ 725.854672][T12788] R13: 00007f9e6414fee0 R14: 00007f9e6414fea0 R15: 00002000000003c0 [ 725.862718][T12788] [ 726.023133][T12791] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2256'. [ 726.832812][T12794] netlink: 'syz.2.2258': attribute type 4 has an invalid length. [ 729.493959][T12823] ip6t_REJECT: ECHOREPLY is not supported [ 729.635430][T12824] loop3: detected capacity change from 0 to 512 [ 730.020014][T12824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.052624][T12824] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.790306][T12453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.054124][T12843] Bluetooth: MGMT ver 1.22 [ 731.234546][T12847] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2269'. [ 731.935646][T12851] loop3: detected capacity change from 0 to 512 [ 731.975339][T12851] ext4: Unknown parameter 'smackfstransmute' [ 732.235454][T12851] ip6t_REJECT: ECHOREPLY is not supported [ 732.422393][T12858] loop3: detected capacity change from 0 to 512 [ 732.442938][T12858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 732.475683][T12858] EXT4-fs (loop3): 1 truncate cleaned up [ 732.492442][T12858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.751457][T12453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.989647][T12869] loop3: detected capacity change from 0 to 512 [ 733.405670][T12869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.504666][T12869] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.100242][T12453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.382393][T12886] loop3: detected capacity change from 0 to 512 [ 734.399612][T12886] ext4: Unknown parameter 'smackfstransmute' [ 734.415027][T12886] ip6t_REJECT: ECHOREPLY is not supported [ 737.478302][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 739.770698][ T23] usb 4-1: device not accepting address 2, error -71 [ 739.786971][T12916] loop3: detected capacity change from 0 to 1024 [ 739.846337][T12916] hfsplus: invalid attributes max_key_len 0 [ 739.872240][T12916] hfsplus: failed to load attributes file [ 739.951192][T12920] ip6t_REJECT: ECHOREPLY is not supported [ 740.862214][T12944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2304'. [ 741.751257][T12951] ip6t_REJECT: ECHOREPLY is not supported [ 742.400941][T12775] udevd[12775]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 742.469635][T12762] udevd[12762]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 744.456346][T12988] ip6t_REJECT: ECHOREPLY is not supported [ 746.356772][T13007] fuse: Bad value for 'fd' [ 746.771659][T13020] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2329'. [ 747.528010][T13026] ip6t_REJECT: ECHOREPLY is not supported [ 750.090226][T13055] ip6t_REJECT: ECHOREPLY is not supported [ 750.575032][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.584589][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.765049][ T5778] syz_tun (unregistering): left allmulticast mode [ 750.791792][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.812974][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.824627][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.836722][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.848070][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 750.869668][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.250360][T13072] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2343'. [ 751.373590][ T8830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.445325][ T8830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.665063][ T8830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.677517][ T8830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.868692][ T8830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.910809][ T8830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.729199][ T8830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.784077][ T8830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.836064][T13059] chnl_net:caif_netlink_parms(): no params data found [ 753.114190][ T5087] Bluetooth: hci0: command tx timeout [ 753.289111][T13059] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.303744][T13059] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.311162][T13059] bridge_slave_0: entered allmulticast mode [ 753.319158][T13059] bridge_slave_0: entered promiscuous mode [ 753.329120][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.336463][T13059] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.343713][T13059] bridge_slave_1: entered allmulticast mode [ 753.351225][T13059] bridge_slave_1: entered promiscuous mode [ 753.526665][ T8830] tipc: Disabling bearer [ 753.548547][ T8830] tipc: Left network mode [ 753.566414][T13059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.616583][T13059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.122501][T13059] team0: Port device team_slave_0 added [ 754.961676][T13059] team0: Port device team_slave_1 added [ 755.362743][ T5087] Bluetooth: hci0: command tx timeout [ 755.536773][T13059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.576881][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.711691][T13059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.996576][T13059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.021992][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.095453][T13059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.397870][T13059] hsr_slave_0: entered promiscuous mode [ 756.413151][T13059] hsr_slave_1: entered promiscuous mode [ 756.421917][T13059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.432404][T13059] Cannot create hsr debugfs directory [ 756.922166][T13127] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2354'. [ 757.153196][ T8830] hsr_slave_0: left promiscuous mode [ 757.171497][ T8830] hsr_slave_1: left promiscuous mode [ 757.183367][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.192895][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.214536][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.221980][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.240931][ T8830] bridge_slave_1: left allmulticast mode [ 757.255154][ T8830] bridge_slave_1: left promiscuous mode [ 757.262135][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.273939][ T8830] bridge_slave_0: left allmulticast mode [ 757.289793][ T8830] bridge_slave_0: left promiscuous mode [ 757.296860][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.366932][ T8830] veth1_macvtap: left promiscuous mode [ 757.381026][ T8830] veth0_macvtap: left promiscuous mode [ 757.397720][ T8830] veth1_vlan: left promiscuous mode [ 757.419450][ T8830] veth0_vlan: left promiscuous mode [ 757.622844][ T5087] Bluetooth: hci0: command tx timeout [ 758.540863][ T8830] team0 (unregistering): Port device team_slave_1 removed [ 758.626870][ T8830] team0 (unregistering): Port device team_slave_0 removed [ 758.998016][ T8830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.347034][ T8830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.832906][ T8830] bond0 (unregistering): Released all slaves [ 759.867890][ T5087] Bluetooth: hci0: command tx timeout [ 760.768832][T13059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 760.808948][T13059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 760.847544][T13059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 760.893930][T13059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 761.718692][T13059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.744650][T13059] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.793582][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.800826][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.815887][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.823106][ T8815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.235625][T13059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.718295][T13209] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2368'. [ 763.894985][T13059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.199955][T13059] veth0_vlan: entered promiscuous mode [ 764.233820][T13059] veth1_vlan: entered promiscuous mode [ 764.292652][T13059] veth0_macvtap: entered promiscuous mode [ 764.304097][T13059] veth1_macvtap: entered promiscuous mode [ 764.370234][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.410498][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.437803][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.488524][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.516017][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.537187][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.553590][T13059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.579045][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.613082][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.703551][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.887670][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.101294][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.325999][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.371793][T13059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.388038][T13059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.396996][T13059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.408021][T13059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.417705][T13059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.549952][ T8812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.608024][ T8812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.647639][ T8812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.725865][ T8812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.054540][T13247] loop0: detected capacity change from 0 to 2048 [ 768.061032][T13250] fuse: Bad value for 'fd' [ 769.127556][T13247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.319837][T13247] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.098639][T13261] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2378'. [ 770.423429][T13059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.078706][T13299] Bluetooth: MGMT ver 1.22 [ 773.169456][T13309] loop0: detected capacity change from 0 to 512 [ 773.208484][T13309] ext4: Unknown parameter 'smackfstransmute' [ 774.232471][T13317] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2391'. [ 775.290922][T13337] loop0: detected capacity change from 0 to 1024 [ 775.310040][T13337] EXT4-fs: Ignoring removed bh option [ 775.331711][T13337] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 775.408392][T13337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.677798][T13059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.726281][T13380] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2405'. [ 778.454243][T13397] ALSA: seq fatal error: cannot create timer (-19) [ 778.900673][T13405] loop0: detected capacity change from 0 to 512 [ 779.001036][T13405] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 779.042276][T13407] overlayfs: failed to clone upperpath [ 779.159475][T13405] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.2411: corrupted in-inode xattr: invalid ea_ino [ 779.241124][T13405] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2411: couldn't read orphan inode 15 (err -117) [ 779.947867][T13405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.061190][T13405] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.2411: corrupted in-inode xattr: invalid ea_ino [ 780.085971][T13416] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2415'. [ 780.692546][T13059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.370969][T13461] loop0: detected capacity change from 0 to 512 [ 785.390628][T13461] ext4: Unknown parameter 'smackfstransmute' [ 786.735663][T13469] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2427'. [ 787.312652][T13474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2429'. [ 787.931843][T13222] udevd[13222]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 787.961402][T13331] udevd[13331]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 788.171773][T13480] overlayfs: missing 'workdir' [ 788.323000][ C1] hrtimer: interrupt took 40577 ns [ 789.369850][T13488] ip6t_REJECT: ECHOREPLY is not supported [ 791.691365][T13505] overlayfs: missing 'workdir' [ 792.238259][T13511] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2443'. [ 795.687613][T13540] overlayfs: missing 'workdir' [ 796.013558][T13547] ip6t_REJECT: ECHOREPLY is not supported [ 797.796092][T13568] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2457'. [ 798.071243][T13574] overlayfs: missing 'lowerdir' [ 801.936753][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.967402][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.977228][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.985978][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.993776][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 802.001871][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.326003][T13601] ip6t_REJECT: ECHOREPLY is not supported [ 802.797322][T13596] chnl_net:caif_netlink_parms(): no params data found [ 802.925070][T11324] tipc: Resetting bearer [ 802.993910][T11324] tipc: Disabling bearer [ 803.301536][T13596] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.320054][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.339718][T13596] bridge_slave_0: entered allmulticast mode [ 803.358958][T13596] bridge_slave_0: entered promiscuous mode [ 803.415797][ T8830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.444377][ T8830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.474440][T13596] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.496533][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.518530][T13596] bridge_slave_1: entered allmulticast mode [ 803.545167][T13596] bridge_slave_1: entered promiscuous mode [ 803.631472][ T8830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.653684][ T8830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.778188][ T8830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.807122][ T8830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.868103][T13617] overlayfs: missing 'lowerdir' [ 803.988520][T13596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.152826][ T8830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.219840][ T8830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.326536][T13596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.341839][ T5785] Bluetooth: hci4: command tx timeout [ 805.887277][T13596] team0: Port device team_slave_0 added [ 805.901674][T13596] team0: Port device team_slave_1 added [ 805.948644][T13596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.955642][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.027562][T13596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.075520][T13596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.082978][T13596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.134442][T13596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.361189][T13596] hsr_slave_0: entered promiscuous mode [ 806.383925][T13596] hsr_slave_1: entered promiscuous mode [ 806.400773][T13596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.623546][ T5785] Bluetooth: hci4: command tx timeout [ 806.641593][T13596] Cannot create hsr debugfs directory [ 807.063677][ T8830] tipc: Left network mode [ 808.020973][T13643] overlayfs: missing 'lowerdir' [ 809.169110][ T5785] Bluetooth: hci4: command tx timeout [ 811.917080][ T5785] Bluetooth: hci4: command tx timeout [ 813.932975][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2487'. [ 814.015278][T13689] syz_tun (unregistering): left allmulticast mode [ 814.718512][ T8830] hsr_slave_0: left promiscuous mode [ 814.731572][ T8830] hsr_slave_1: left promiscuous mode [ 814.744090][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.762118][T13697] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 814.772647][T13697] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 814.839995][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.869898][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.909643][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.956382][ T8830] bridge_slave_0: left allmulticast mode [ 814.986393][ T8830] bridge_slave_0: left promiscuous mode [ 815.013179][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.714747][ T8830] veth1_macvtap: left promiscuous mode [ 816.720343][ T8830] veth0_macvtap: left promiscuous mode [ 817.065830][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.077548][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.306200][T13723] ip6t_REJECT: ECHOREPLY is not supported [ 818.040733][ T8830] team0 (unregistering): Port device team_slave_1 removed [ 818.122857][ T8830] team0 (unregistering): Port device team_slave_0 removed [ 818.199952][ T8830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.388582][T13734] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2496'. [ 818.732401][T13738] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 818.741281][T13738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 821.369860][ T8830] bond0 (unregistering): Released all slaves [ 821.523263][T13755] ip6t_REJECT: ECHOREPLY is not supported [ 822.120068][T13596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 822.163185][T13596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 822.204261][T13596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 822.287464][T13596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 823.224172][ T8830] IPVS: stop unused estimator thread 0... [ 823.286351][T13774] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 823.295232][T13774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 823.545979][T13596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.690576][T13596] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.777973][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.785206][ T8830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.908687][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.915978][ T8830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.992116][T13803] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2512'. [ 826.063799][T13596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.178110][T13596] veth0_vlan: entered promiscuous mode [ 826.220579][T13596] veth1_vlan: entered promiscuous mode [ 826.378099][T13596] veth0_macvtap: entered promiscuous mode [ 826.417237][T13596] veth1_macvtap: entered promiscuous mode [ 826.457808][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.468518][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.478430][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.488930][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.498820][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.509765][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.521253][T13596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.535816][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.546385][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.557493][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.043005][T13810] overlayfs: failed to clone upperpath [ 827.075779][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.087445][T13596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.110044][T13596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.195961][T13596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.246227][T13596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.312344][T13596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.354141][T13596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.409304][T13596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.116979][ T8812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.176900][ T8812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.214277][T13828] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2520'. [ 828.320787][ T8830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.372762][ T8830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.609895][T13832] loop2: detected capacity change from 0 to 512 [ 828.714065][T13832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.733531][T13832] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.809981][T13839] ip6t_REJECT: ECHOREPLY is not supported [ 829.810396][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.404988][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 835.540796][T13868] [ 835.543578][T13868] ============================= [ 835.548500][T13868] WARNING: suspicious RCU usage [ 835.553634][T13868] syzkaller #0 Not tainted [ 835.558097][T13868] ----------------------------- [ 835.563171][T13868] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 835.571727][T13868] [ 835.571727][T13868] other info that might help us debug this: [ 835.571727][T13868] [ 835.581994][T13868] [ 835.581994][T13868] rcu_scheduler_active = 2, debug_locks = 1 [ 835.590169][T13868] 1 lock held by syz.2.2525/13868: [ 835.595589][T13868] #0: ffffffff8d1322c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 835.606125][T13868] [ 835.606125][T13868] stack backtrace: [ 835.612053][T13868] CPU: 1 PID: 13868 Comm: syz.2.2525 Not tainted syzkaller #0 [ 835.619556][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 835.629654][T13868] Call Trace: [ 835.632972][T13868] [ 835.635931][T13868] dump_stack_lvl+0x18c/0x250 [ 835.640668][T13868] ? show_regs_print_info+0x20/0x20 [ 835.645912][T13868] ? load_image+0x420/0x420 [ 835.650471][T13868] lockdep_rcu_suspicious+0x1e1/0x300 [ 835.655895][T13868] get_callchain_entry+0x2a9/0x3c0 [ 835.661055][T13868] get_perf_callchain+0xc6/0x510 [ 835.666038][T13868] ? put_callchain_entry+0xb0/0xb0 [ 835.671221][T13868] __bpf_get_stack+0x2e4/0x540 [ 835.676058][T13868] ? stack_map_get_build_id_offset+0x720/0x720 [ 835.682265][T13868] ? __cant_sleep+0x220/0x220 [ 835.686972][T13868] ? bpf_prog_14d9fb3786f83342+0x45/0x49 [ 835.692641][T13868] bpf_get_stack_raw_tp+0x1a4/0x210 [ 835.697880][T13868] bpf_prog_14d9fb3786f83342+0x45/0x49 [ 835.703373][T13868] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 835.708812][T13868] bpf_prog_test_run_syscall+0x320/0x4b0 [ 835.714500][T13868] ? sock_gen_cookie+0x60/0x60 [ 835.719337][T13868] ? sock_gen_cookie+0x60/0x60 [ 835.724252][T13868] bpf_prog_test_run+0x31f/0x390 [ 835.729254][T13868] __sys_bpf+0x49d/0x890 [ 835.733550][T13868] ? bpf_link_show_fdinfo+0x560/0x560 [ 835.739017][T13868] ? lock_chain_count+0x20/0x20 [ 835.743928][T13868] __x64_sys_bpf+0x7c/0x90 [ 835.748384][T13868] do_syscall_64+0x55/0xb0 [ 835.752828][T13868] ? clear_bhb_loop+0x40/0x90 [ 835.757534][T13868] ? clear_bhb_loop+0x40/0x90 [ 835.762249][T13868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.768167][T13868] RIP: 0033:0x7fb85279e159 [ 835.772616][T13868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.792255][T13868] RSP: 002b:00007fb8536e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 835.800695][T13868] RAX: ffffffffffffffda RBX: 00007fb852a25fa0 RCX: 00007fb85279e159 [ 835.808690][T13868] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 835.816697][T13868] RBP: 00007fb85283506b R08: 0000000000000000 R09: 0000000000000000 [ 835.824691][T13868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.832678][T13868] R13: 00007fb852a26038 R14: 00007fb852a25fa0 R15: 00007ffdc6d0ca58 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 835.840680][T13868] [ 837.191025][ T8830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.203946][ T8830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.321375][ T8830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.335234][ T8830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.462114][ T8830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.472487][ T8830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.560667][ T8830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.571159][ T8830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.728404][ T8830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.832552][ T8830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.910668][ T8830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.008458][ T8830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.589042][ T8830] hsr_slave_0: left promiscuous mode [ 839.598595][ T8830] hsr_slave_1: left promiscuous mode [ 839.615153][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.622615][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.636832][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.644286][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.669576][ T8830] bridge_slave_0: left allmulticast mode [ 839.675266][ T8830] bridge_slave_0: left promiscuous mode [ 839.683243][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.707666][ T8830] hsr_slave_0: left promiscuous mode [ 839.717308][ T8830] hsr_slave_1: left promiscuous mode [ 839.728126][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.739313][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.750572][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.762392][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.771668][ T8830] bridge_slave_1: left allmulticast mode [ 839.780597][ T8830] bridge_slave_1: left promiscuous mode [ 839.787740][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.801836][ T8830] bridge_slave_0: left allmulticast mode [ 839.809102][ T8830] bridge_slave_0: left promiscuous mode [ 839.814840][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.874427][ T8830] veth1_macvtap: left promiscuous mode [ 839.880022][ T8830] veth0_macvtap: left promiscuous mode [ 839.886617][ T8830] veth1_vlan: left promiscuous mode [ 839.892046][ T8830] veth0_vlan: left promiscuous mode [ 839.903902][ T8830] veth1_macvtap: left promiscuous mode [ 839.909698][ T8830] veth0_macvtap: left promiscuous mode [ 839.920141][ T8830] veth1_vlan: left promiscuous mode [ 839.925545][ T8830] veth0_vlan: left promiscuous mode [ 840.265332][ T8830] pimreg (unregistering): left allmulticast mode [ 840.828308][ T8830] team0 (unregistering): Port device team_slave_1 removed [ 840.873751][ T8830] team0 (unregistering): Port device team_slave_0 removed [ 840.922089][ T8830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.971174][ T8830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.263000][ T8830] bond0 (unregistering): Released all slaves [ 841.795201][ T8830] team0 (unregistering): Port device team_slave_1 removed [ 841.846989][ T8830] team0 (unregistering): Port device team_slave_0 removed [ 841.886447][ T8830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.931374][ T8830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.262439][ T8830] bond0 (unregistering): Released all slaves [ 843.161269][ T8830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.262012][ T8830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.363501][ T8830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.436776][ T8830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.634650][ T8830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.717803][ T8830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.780720][ T8830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.893904][ T8830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.517360][ T8830] hsr_slave_0: left promiscuous mode [ 845.524443][ T8830] hsr_slave_1: left promiscuous mode [ 845.534357][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.544865][ T8830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.553334][ T8830] batman_adv: batadv0: Interface deactivated: batadv_slave_1