last executing test programs: 58.06165886s ago: executing program 1 (id=645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_emit_ethernet(0x12, &(0x7f0000007080)=ANY=[@ANYBLOB="aa0000008906"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251e0000000c000600010000000100000010002f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r10, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="8000308014000400915a4e309955ea11f5ac72db9b80347e24000300fba9d0566e20c08ce370deeec71c9077390d7a31695b01cacfba297179d5c6af0500020000000000140004001a7e9606c508e0580bad8c4d5b692f4d14000400762e57b68425fca0421f1275d8bcbc4e140001800800040055dd000008000100010000000c00060002000000020000006000308024000300ad79bad23bc7957347e43c853e95109cd0c6e00524000300c320bfc9b4b6b0c83e34ca996653eb09676b1987d9de8a1aa6dfb6828fbf67aa14000400dde2d76c46d9e84c78ed5b70ece2a48f0c000600030000000000000008000300"/252, @ANYRES32=r10, @ANYBLOB], 0x264}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 57.169066186s ago: executing program 1 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280) 57.10475133s ago: executing program 1 (id=656): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000271) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$smackfs_relabel_self(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x5685, 0x10000000000000}) syz_open_procfs$pagemap(r2, &(0x7f00000007c0)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) clock_gettime(0x0, &(0x7f0000002240)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000002100)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f0000001ac0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000640)=""/217, 0xd9}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/105, 0x69}], 0x2, &(0x7f0000001900)}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000000800)=[{&(0x7f00000019c0)=""/13, 0xd}, {&(0x7f0000001a00)=""/51, 0x33}, {&(0x7f0000001a40)=""/105, 0x69}], 0x3, &(0x7f0000001cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001c40)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000022c0)=""/203, 0xcb}, {&(0x7f0000001d80)=""/150, 0x96}, {&(0x7f0000001e40)=""/67, 0x43}, {&(0x7f00000023c0)=""/230, 0xe6}], 0x4, &(0x7f0000002000)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x5, 0x40000140, &(0x7f0000002280)={r5, r6+60000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400000008000000ffff000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) 56.227146784s ago: executing program 1 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a45004, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 56.185485112s ago: executing program 1 (id=663): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000340)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x42101) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) statfs(0x0, &(0x7f0000000040)=""/128) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@deltaction={0x24, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000854) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 55.393006215s ago: executing program 3 (id=664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387c6e950975fa4e1f9", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 55.387182765s ago: executing program 3 (id=665): r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 55.329957539s ago: executing program 3 (id=666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_emit_ethernet(0x12, &(0x7f0000007080)=ANY=[@ANYBLOB="aa0000008906"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251e0000000c000600010000000100000010002f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r10, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="8000308014000400915a4e309955ea11f5ac72db9b80347e24000300fba9d0566e20c08ce370deeec71c9077390d7a31695b01cacfba297179d5c6af0500020000000000140004001a7e9606c508e0580bad8c4d5b692f4d14000400762e57b68425fca0421f1275d8bcbc4e140001800800040055dd000008000100010000000c00060002000000020000006000308024000300ad79bad23bc7957347e43c853e95109cd0c6e00524000300c320bfc9b4b6b0c83e34ca996653eb09676b1987d9de8a1aa6dfb6828fbf67aa14000400dde2d76c46d9e84c78ed5b70ece2a48f0c000600030000000000000008000300"/252, @ANYRES32=r10, @ANYBLOB], 0x264}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 54.82425148s ago: executing program 1 (id=670): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 54.753537202s ago: executing program 32 (id=670): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 54.20229268s ago: executing program 3 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a45004, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 54.042131812s ago: executing program 3 (id=674): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$eJzs3EtvG0UcAPD/bpK+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRqiIBoXJE/QTAEYlPwAkuCDiBuMIdIVWoF1oOaNHaa9c4dmrHTp3Gv5+02ZndtWf+3h17dsZOAH1rNP+TROyKiN8iYjgiBuoPGC2vbly/PHPz+uWZJLLszb+S/GHx9/XLM5VDk2K9s8iMpRHpJ0kcaFDuwsVLZ6fn5mYvFPmJxXPvTSxcvPTcmXPTp2dPz56fOnbs6JHJF1+Yer4rce7O67r/w/mD+46/ffX1mRNX3/nx67y+u4r9tXGUjXRc5miMVl+Tek92/Owby+5i3SxeNqa8rQ9GxFCp/Q/HQClXNhyvfdzTygHrKsuybOuKrdUewHIGbGJJ9LoGQG9UPujz+9/Kcge7Hz137eXyDVAe941iKe8ZjLQ4Zqjm/rbbRiPixPI/n+dLNByHAADorm/z/s+zjfp/aTxQc9w9xdzQSETcGxF7IuK+iNgbEfdHlI59MCIearP80br8yv7PL9vXFFiL8v7fS8Xc1v/7f5XeX4wMFLndpfiHklNn5mYPF6/JWAxtzfOTq5Tx3au/ftZsX23/L1/y8it9waIefw7WDdCdnF6c7iTmWtc+Ko0BLq2MP6nOBCQRsS8i9q/h+bdFxJmnvzrYbP/t41/F4BoqVCf7MuKp8vlfjrr4K5LV5ycntsXc7OGJylWx0k8/X3mjWfkdxd8F+fnf0fD6r8Y/ktTO1y60X8aV3z9tek+z1ut/S/JWKb2l2PbB9OLihcmILcnyyu1Ttx5byVeOz+MfO9Qg/ptZ/h737xfF4w5ERH4RPxwRj0TEo0XdH4uIxyPiUIPYsqXy+odXnnh37fGvrzz+k22d//YTA2e//6ZZ+a2d/6Ol1FixpZX3v1Yr2MlrBwAAAHeLtPQd+CQdr6bTdHy8/B3+vbEjnZtfWHzm1Pz750+Wvys/EkNpZaRruGY8dLIYG67kp+ryR0rjxlmWZdtL+fGZ+bn1mlMHWrOzSfvP/THQ69oB666teTS/8IJNpQvz6MBdSvuH/qX9Q//S/qF/NWr/SxE3elAV4A67zef/rf8SAGw6+v/Qv7R/6F/aP/SlTn7Xv1piz/H1eubNlhjYGNVoOxHphqhGS4mh4mqvbkk3SMVKia0R0erBS3GnKtbjNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//28vuNQ==") prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r4 = gettid() r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000100)="06ae5540a32ffc5db8e8") waitid(0x0, r4, &(0x7f0000000280), 0x8, &(0x7f0000000900)) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x8980903, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 53.336045168s ago: executing program 3 (id=679): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 53.279864239s ago: executing program 33 (id=679): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 6.581225801s ago: executing program 5 (id=1006): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x8001}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x20) write(r6, &(0x7f0000000800)='1', 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x4000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000024c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x64, 0x36, 0x30, 0x30, 0x32, 0x0, 0x37], 0x2d, [0x38, 0x39, 0x30, 0x62], 0x2d, [0x31, 0x38, 0x30, 0x63], 0x2d, [0x64, 0x33, 0x64], 0x2d, [0x3, 0x0, 0x35, 0x0, 0x34, 0x36, 0x65, 0x32]}}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_eq}, {@obj_role={'obj_role', 0x3d, '/sys/kernel/debug/binder/transactions\x00'}}], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff) 6.570788539s ago: executing program 0 (id=1008): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 6.35134744s ago: executing program 2 (id=1011): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)={r1}) 6.326053358s ago: executing program 2 (id=1012): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d39, &(0x7f00000004c0)={0x0, 0x8f8d, 0x0, 0x3, 0x8b}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="bc7eddd6"], 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000440)={0x2, 0x2, 0x1, 0x5, 0x1, 0x0, [{0x26817ab2, 0xfcd, 0x22, '\x00', 0x100}]}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMWRITEOOB64(r5, 0xc0184d15, &(0x7f0000000140)={0x19, 0x0, 0x0, 0x0}) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x39, 0x63, 0x35, 0x62, 0x61, 0x33, 0x37], 0x2d, [0x63, 0x30, 0x36, 0x38], 0x2d, [0x2, 0x61, 0x39, 0x32], 0x2d, [0x62, 0x33, 0x6a, 0x62], 0x2d, [0x39, 0x36, 0x38, 0x32, 0x66, 0x32, 0x39, 0x38]}}}]}) 5.45916469s ago: executing program 4 (id=1013): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25020851ff", @ANYRES32=r1, @ANYBLOB="080002007f"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='transport=tcp,traddr=%27trsvcid=8009,nqn=t', 0x2a) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 5.418150874s ago: executing program 0 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400002813000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a800600000002"], 0x54}}, 0x0) 5.215479431s ago: executing program 5 (id=1016): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x480) 5.192890661s ago: executing program 4 (id=1017): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) ioctl$I2C_SLAVE(r0, 0x703, 0xd1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711821000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.174015383s ago: executing program 0 (id=1018): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffc, @local, 0xb}, 0xfffffffffffffce0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x7, &(0x7f0000000200)=0x7) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000200)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x95, 0x4) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0xb}, 0x50) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/232, 0xe8}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000800)=""/184, 0xb8}, {&(0x7f00000008c0)=""/126, 0x7e}, {&(0x7f0000000940)=""/42, 0x2a}], 0x8, &(0x7f0000000a00)=""/101, 0x65}, 0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) r5 = mq_open(&(0x7f0000000100)='\x01\x00', 0x40, 0x100, 0x0) mq_notify(r5, &(0x7f0000000000)={0x110c230000, 0x3, 0x0, @thr={0x0, 0x0}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=0x10, 0x800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000180)={'ip6erspan0\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.864613027s ago: executing program 4 (id=1019): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r4 = gettid() r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000100)="06ae5540a32ffc5db8e8") waitid(0x0, r4, &(0x7f0000000280), 0x8, &(0x7f0000000900)) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x8980903, 0x7}) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000e00)={0x17c04, r7, 0x299f25fd, 0x4000003, 0x10001, 0xfd}) 4.816927099s ago: executing program 5 (id=1020): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) 4.730857789s ago: executing program 2 (id=1021): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000090000000094a18f3add0900020073790000000000000500010007000000340007801806000000000000008000000000000000000000000000bb0600070088026700060005404e2200000000000002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r1, &(0x7f0000000140)=""/87, 0x57) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.357057734s ago: executing program 6 (id=1022): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)={r1}) 4.3565329s ago: executing program 6 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140024001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001004e465155455545"], 0xd0}}, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.292662517s ago: executing program 6 (id=1024): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000400205db600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab000000000200000032000000086a3d135249d70001006000000008000300", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004895}, 0x40010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0xffffffffffffff62, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x1fffffd, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x42005}}, 0x20}, 0x1, 0x0, 0x0, 0x854}, 0x0) r10 = dup(r1) r11 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r11, &(0x7f0000000700)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f00000006c0)={&(0x7f0000000640)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x1b, 0x2, 0x0, 0x0, "bd46efed496d972e2ad9d052377a11bb61df40eb4105882d0bc6ef85fb843153f0c2b6c7db9fd85b8889152292b6920087217ee27dee2bf39f61432e57ec2b38"}, 0x48}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x20, 0x8, 0x10000, 0x2, {{0x23, 0x4, 0x3, 0x3, 0x8c, 0x67, 0x0, 0x48, 0x4, 0x0, @local, @empty, {[@noop, @timestamp_addr={0x44, 0x44, 0x91, 0x1, 0xe, [{@rand_addr=0x64010100, 0x5}, {@remote, 0x6}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5}, {@multicast1, 0x7}, {@empty, 0x1}, {@multicast2, 0x7fff}, {@private=0xa010100}]}, @generic={0x82, 0xb, "5298364b52226f76df"}, @generic={0x7, 0x4, "57dc"}, @rr={0x7, 0xf, 0xff, [@remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x74, [@rand_addr=0x64010106, @local]}, @timestamp={0x44, 0x8, 0xbb, 0x0, 0xc, [0x40000005]}]}}}}}) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000380)=0x72) sendmsg$nl_route(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@newneigh={0x2c, 0x1c, 0x8, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r12, 0x2, 0x40, 0xa}, [@NDA_PROBES={0x8, 0x4, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0xc1c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 4.111215252s ago: executing program 6 (id=1025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x58, r1, 0x405, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004c00}, 0x4040084) (fail_nth: 10) 4.09218647s ago: executing program 6 (id=1026): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 4.012827062s ago: executing program 0 (id=1027): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d39, &(0x7f00000004c0)={0x0, 0x8f8d, 0x0, 0x3, 0x8b}, &(0x7f0000000540), &(0x7f0000000580), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="bc7eddd62a"], 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000440)={0x2, 0x2, 0x1, 0x5, 0x1, 0x0, [{0x26817ab2, 0xfcd, 0x22, '\x00', 0x100}]}) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$MEMWRITEOOB64(0xffffffffffffffff, 0xc0184d15, &(0x7f0000000140)={0x19, 0x0, 0x0, 0x0}) 3.188560367s ago: executing program 5 (id=1028): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25020851ff", @ANYRES32=r0, @ANYBLOB="080002007f"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='transport=tcp,traddr=%27trsvcid=8009,nqn=t', 0x2a) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3.187645735s ago: executing program 4 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) fallocate(r1, 0x30, 0x47, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x844) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x9010}, 0x4081) 3.149507122s ago: executing program 2 (id=1030): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000180)={0x0, 0x7071, 0x0, 0x2, 0x23e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000580)={0x0, 0x5da0, 0x80, 0x2, 0x22d, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad67, 0x200, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x250f, 0x800, 0x3, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2b, 0x10, 0xfffffffc, 0x88}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1708, 0x1, 0x1, 0x21}}], 0x4, &(0x7f0000002080)={0x2e, 0x10, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x94}, 0x0, 0x0, '\x00', {0x2, 0x44, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x2c020400) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x800) kexec_load(0x0, 0x0, 0x0, 0xb70000) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100000001}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x258}, 0xc) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, 0x0, 0x0, 0x48000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x3, 0xfc00, 0x8208, 0x8000, 0x20004000, 0x800, 0x5, 0x80000000}, 0x20) ioctl$UI_SET_MSCBIT(r9, 0x40045568, 0x5) r11 = msgget$private(0x0, 0x120) msgrcv(r11, 0x0, 0x0, 0x1, 0x0) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 3.139391901s ago: executing program 6 (id=1031): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="621d02000000000014000300697036746e6c3000000000000000000008008c791b1e0400d4000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20084084) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) prlimit64(0x0, 0x8, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0xfffffffffffffd87) (async) r5 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsmount(r5, 0x0, 0x0) (async) r6 = socket(0xa, 0x3, 0x3a) (async) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x5) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) (async) socket(0x18, 0x80000, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x1, 'batadv_slave_1\x00', {}, 0xff}) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) 2.83719296s ago: executing program 5 (id=1032): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x7}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='*:', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) 1.830612135s ago: executing program 0 (id=1033): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x220180, 0x0) ioctl$COMEDI_SETWSUBD(r1, 0x6411) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) fsync(r1) write(r0, 0x0, 0x0) 1.525371378s ago: executing program 4 (id=1034): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)={r1}) 1.436682493s ago: executing program 5 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) unshare(0x22060600) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setxattr$incfs_metadata(&(0x7f0000000100)='./sys/class/rnbd-client/ctl/map_device\x00', &(0x7f0000000180), &(0x7f00000002c0)="7fc92110a1b4d7e311c782fb72960daae30ceb6bbe2e5d4921ce9e83160ab5ba55cbbb96f2", 0x25, 0x1) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000006800010027bd7000fdffff7f00000000000000000c000200010000001500000024000c8008000200030000000600010000800000eaff0000dc0000000800030004000000060003000065"], 0x50}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000500)={&(0x7f0000000280)}) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x0, 0x34}, 0x28) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x6c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0x5, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x9c}}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x80, 0x10, 0x5, 0x4, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x6, 0x2}, @generic={0x83, 0xf, "2032a60783bd3ca3fe1fe1d892"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@delqdisc={0x44, 0x25, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xffe0, 0xd}, {0x3, 0x11abd81f08baee2a}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x444}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}, @TCA_STAB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) cachestat(r2, &(0x7f00000001c0)={0x800, 0x100}, 0x0, 0xee) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x4, 0x7, 0x1}) 1.263657638s ago: executing program 0 (id=1036): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, 0xffffffffffffffff, 0x4}, 0x38) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc49c2, 0x1d4) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000280)) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000340)=ANY=[@ANYBLOB='rodir,uni_xlate=1,nonumtail=0,utf8=1,shortname=lower,utf8=1,shortname=winmt,utf8=0,check=normal,codepage=862,check=strict,iocharset=cp863,utf8=1,nonumtail=0,utf8=0,iocharset=koi8-ru,\x00'], 0x3, 0x27b, &(0x7f0000000640)="$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") 1.190466845s ago: executing program 2 (id=1037): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x12, &(0x7f0000007080)=ANY=[@ANYBLOB="aa0000008906"], 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf251e0000000c000600010000000100000010002f"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 1.066115073s ago: executing program 4 (id=1038): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000006c0)={{r0}, 0x5, 0x0, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x7f) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000004a00040025bd7000ffdbdf250a004000", @ANYRES32=0x0, @ANYBLOB="09060000a9f9e5ed5309000000000068000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) migrate_pages(0x0, 0x81, 0x0, &(0x7f0000000080)=0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=1039): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) kernel console output (not intermixed with test programs): kets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.123645][ T5696] batman_adv: batadv0: Interface activated: veth0 [ 60.177642][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.177674][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.187720][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.189509][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.191825][ T5699] batman_adv: batadv0: Interface deactivated: veth0 [ 60.193453][ T5699] batman_adv: batadv0: Removing interface: veth0 [ 60.640050][ T5715] loop0: detected capacity change from 0 to 512 [ 60.640760][ T5715] EXT4-fs: inline encryption not supported [ 60.648730][ T5715] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 60.648837][ T5715] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.201: invalid indirect mapped block 2683928664 (level 1) [ 60.648853][ T5715] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.650172][ T5715] EXT4-fs (loop0): 1 truncate cleaned up [ 61.610879][ T5556] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 61.629016][ T5556] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 61.909580][ T5713] Bluetooth: MGMT ver 1.23 [ 62.087155][ T9] IPVS: starting estimator thread 0... [ 62.094240][ T4720] Bluetooth: hci2: command 0x2016 tx timeout [ 62.112198][ T30] audit: type=1326 audit(62.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112245][ T30] audit: type=1326 audit(62.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112279][ T30] audit: type=1326 audit(62.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112299][ T30] audit: type=1326 audit(62.080:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112318][ T30] audit: type=1326 audit(62.080:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112336][ T30] audit: type=1326 audit(62.080:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112354][ T30] audit: type=1326 audit(62.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112372][ T30] audit: type=1326 audit(62.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.112392][ T30] audit: type=1326 audit(62.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.117783][ T5736] loop0: detected capacity change from 0 to 2048 [ 62.138790][ T30] audit: type=1326 audit(62.110:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5722 comm="syz.1.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb792a8 code=0x7ffc0000 [ 62.156702][ T5724] loop1: detected capacity change from 0 to 512 [ 62.173650][ T5724] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 62.183377][ T5736] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 62.183416][ T5736] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 62.186187][ T5733] IPVS: using max 60 ests per chain, 144000 per kthread [ 62.190706][ T5743] __nla_validate_parse: 3 callbacks suppressed [ 62.190741][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 62.191222][ T5736] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 62.193729][ T5724] input: syz0 as /devices/virtual/input/input5 [ 62.277959][ T5757] IPv6: addrconf: prefix option has invalid lifetime [ 62.280829][ T5757] x_tables: duplicate underflow at hook 2 [ 62.366166][ T5759] binder: Binderfs stats mode cannot be changed during a remount [ 62.417067][ T5765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 63.158687][ T5776] ip6erspan0: entered allmulticast mode [ 63.208343][ T5778] loop2: detected capacity change from 0 to 256 [ 63.401412][ T5783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.216'. [ 63.403920][ T5783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.216'. [ 63.512732][ T5794] loop3: detected capacity change from 0 to 2048 [ 63.530764][ T5799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.221'. [ 63.541526][ T5794] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 63.541559][ T5794] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 63.543060][ T5794] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 63.583504][ T5807] loop1: detected capacity change from 0 to 512 [ 63.586639][ T5807] EXT4-fs: quotafile must be on filesystem root [ 63.692702][ T5814] loop1: detected capacity change from 0 to 1024 [ 63.693074][ T5814] EXT4-fs: Ignoring removed bh option [ 63.707148][ T5814] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 63.736893][ T5814] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.227: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 63.741764][ T5814] EXT4-fs (loop1): Remounting filesystem read-only [ 63.809443][ T5820] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.176181][ T4725] Bluetooth: hci2: command 0x2016 tx timeout [ 64.210977][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.229'. [ 64.295081][ T5837] loop2: detected capacity change from 0 to 512 [ 64.296687][ T5837] EXT4-fs: inline encryption not supported [ 64.301546][ T5837] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 64.308965][ T5837] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.230: invalid indirect mapped block 2683928664 (level 1) [ 64.309005][ T5837] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.309472][ T5837] EXT4-fs (loop2): 1 truncate cleaned up [ 64.681598][ T867] cfg80211: failed to load regulatory.db [ 64.682173][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.682204][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.724006][ T5845] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 64.767726][ T5851] loop3: detected capacity change from 0 to 2048 [ 64.787113][ T5852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 64.787151][ T5852] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 64.791585][ T5851] EXT4-fs mount: 13 callbacks suppressed [ 64.791616][ T5851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.802605][ T5851] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 64.805340][ T5851] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 64.807509][ T5851] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 64.928279][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.966820][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.237'. [ 65.294837][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.638235][ T5884] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.013287][ T5889] overlayfs: failed to resolve './file2': -2 [ 66.212905][ T5874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.213009][ T5874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.217903][ T5874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.218748][ T5874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.218795][ T5874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.219190][ T5874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.219558][ T5874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.220205][ T5874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.220234][ T5874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.220817][ T5874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.221490][ T5874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.221518][ T5874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.221879][ T5874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.222577][ T5874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 66.222603][ T5874] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 66.222979][ T5874] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 66.725725][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.249'. [ 66.843174][ T5911] Bluetooth: hci0: unsupported parameter 5135 [ 66.843200][ T5911] Bluetooth: hci0: unsupported parameter 8192 [ 66.843656][ T5911] Bluetooth: hci0: unsupported parameter 5135 [ 66.843671][ T5911] Bluetooth: hci0: unsupported parameter 8192 [ 66.870017][ T5913] loop1: detected capacity change from 0 to 128 [ 66.877109][ T5913] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.893968][ T4722] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.157933][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 67.320793][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 67.544154][ T4725] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.714947][ T5955] FAULT_INJECTION: forcing a failure. [ 67.714947][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 67.714991][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.2.262 Not tainted syzkaller #0 PREEMPT [ 67.715005][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 67.715012][ T5955] Call trace: [ 67.715015][ T5955] show_stack+0x2c/0x3c (C) [ 67.715036][ T5955] __dump_stack+0x30/0x40 [ 67.715047][ T5955] dump_stack_lvl+0xd8/0x12c [ 67.715057][ T5955] dump_stack+0x1c/0x28 [ 67.715066][ T5955] should_fail_ex+0x41c/0x590 [ 67.715075][ T5955] should_failslab+0xc4/0x120 [ 67.715083][ T5955] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 67.715092][ T5955] __alloc_skb+0x1f0/0x610 [ 67.715102][ T5955] ethnl_default_notify+0x460/0x8d8 [ 67.715113][ T5955] ethnl_notify+0x1d0/0x324 [ 67.715122][ T5955] ethnl_default_set_doit+0x704/0xb60 [ 67.715132][ T5955] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 67.715142][ T5955] genl_rcv_msg+0x43c/0x620 [ 67.715152][ T5955] netlink_rcv_skb+0x238/0x414 [ 67.715160][ T5955] genl_rcv+0x38/0x50 [ 67.715169][ T5955] netlink_unicast+0x600/0x7f8 [ 67.715178][ T5955] netlink_sendmsg+0x648/0x948 [ 67.715186][ T5955] __sock_sendmsg+0xc8/0x17c [ 67.715195][ T5955] ____sys_sendmsg+0x3d0/0x6c8 [ 67.715204][ T5955] ___sys_sendmsg+0x198/0x224 [ 67.715213][ T5955] __sys_sendmsg+0x158/0x204 [ 67.715222][ T5955] __arm64_sys_sendmsg+0x88/0x9c [ 67.715232][ T5955] invoke_syscall+0x98/0x244 [ 67.715242][ T5955] el0_svc_common+0xec/0x23c [ 67.715251][ T5955] do_el0_svc+0x4c/0x5c [ 67.715260][ T5955] el0_svc+0x64/0x260 [ 67.715270][ T5955] el0t_64_sync_handler+0x44/0x104 [ 67.715278][ T5955] el0t_64_sync+0x198/0x19c [ 67.849234][ T5965] FAULT_INJECTION: forcing a failure. [ 67.849234][ T5965] name failslab, interval 1, probability 0, space 0, times 0 [ 67.849274][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.2.265 Not tainted syzkaller #0 PREEMPT [ 67.849288][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 67.849294][ T5965] Call trace: [ 67.849298][ T5965] show_stack+0x2c/0x3c (C) [ 67.849319][ T5965] __dump_stack+0x30/0x40 [ 67.849332][ T5965] dump_stack_lvl+0xd8/0x12c [ 67.849344][ T5965] dump_stack+0x1c/0x28 [ 67.849355][ T5965] should_fail_ex+0x41c/0x590 [ 67.849367][ T5965] should_failslab+0xc4/0x120 [ 67.849384][ T5965] kmem_cache_alloc_noprof+0x94/0x5d8 [ 67.849407][ T5965] copy_fs_struct+0x58/0x218 [ 67.849422][ T5965] ksys_unshare+0x358/0x6d8 [ 67.849432][ T5965] __arm64_sys_unshare+0x40/0x54 [ 67.849441][ T5965] invoke_syscall+0x98/0x244 [ 67.849453][ T5965] el0_svc_common+0xec/0x23c [ 67.849465][ T5965] do_el0_svc+0x4c/0x5c [ 67.849476][ T5965] el0_svc+0x64/0x260 [ 67.849487][ T5965] el0t_64_sync_handler+0x44/0x104 [ 67.849497][ T5965] el0t_64_sync+0x198/0x19c [ 68.143216][ T5974] netlink: 52 bytes leftover after parsing attributes in process `syz.2.269'. [ 68.146352][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.146662][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.150938][ T5974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.269'. [ 68.151040][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.151080][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.151212][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.151239][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.182494][ T5974] netlink: 52 bytes leftover after parsing attributes in process `syz.2.269'. [ 68.182801][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.182867][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.233835][ T5977] netlink: 1668 bytes leftover after parsing attributes in process `syz.4.270'. [ 68.288468][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.272'. [ 68.344747][ T4725] Bluetooth: hci4: command 0x0c1a tx timeout [ 68.348191][ T4720] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.348231][ T4720] Bluetooth: hci2: command 0x2016 tx timeout [ 68.348260][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.354967][ T5984] netlink: 60 bytes leftover after parsing attributes in process `syz.1.271'. [ 68.357493][ T5984] netlink: 60 bytes leftover after parsing attributes in process `syz.1.271'. [ 68.431627][ T5990] loop1: detected capacity change from 0 to 2048 [ 68.446811][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.454208][ T5990] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 68.458676][ T5990] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 68.462149][ T5990] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.462149][ T5990] [ 68.463925][ T5990] EXT4-fs (loop1): Total free blocks count 0 [ 68.463939][ T5990] EXT4-fs (loop1): Free/Dirty block details [ 68.463958][ T5990] EXT4-fs (loop1): free_blocks=2415919504 [ 68.463971][ T5990] EXT4-fs (loop1): dirty_blocks=16 [ 68.463979][ T5990] EXT4-fs (loop1): Block reservation details [ 68.463986][ T5990] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 68.481510][ T4722] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.482236][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.503471][ T5997] loop4: detected capacity change from 0 to 2048 [ 68.522350][ T5997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.530954][ T6000] FAULT_INJECTION: forcing a failure. [ 68.530954][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 68.530986][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.1.277 Not tainted syzkaller #0 PREEMPT [ 68.530999][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 68.531006][ T6000] Call trace: [ 68.531009][ T6000] show_stack+0x2c/0x3c (C) [ 68.531028][ T6000] __dump_stack+0x30/0x40 [ 68.531039][ T6000] dump_stack_lvl+0xd8/0x12c [ 68.531049][ T6000] dump_stack+0x1c/0x28 [ 68.531059][ T6000] should_fail_ex+0x41c/0x590 [ 68.531067][ T6000] should_failslab+0xc4/0x120 [ 68.531075][ T6000] __kmalloc_cache_noprof+0x94/0x5ec [ 68.531084][ T6000] ipcomp_init_state+0x108/0x25c [ 68.531095][ T6000] ipcomp4_init_state+0xb0/0x8cc [ 68.531104][ T6000] __xfrm_init_state+0x730/0xed0 [ 68.531112][ T6000] xfrm_add_sa+0x1ffc/0x3004 [ 68.531121][ T6000] xfrm_user_rcv_msg+0x4e0/0x950 [ 68.531131][ T6000] netlink_rcv_skb+0x238/0x414 [ 68.531140][ T6000] xfrm_netlink_rcv+0x80/0x9c [ 68.531149][ T6000] netlink_unicast+0x600/0x7f8 [ 68.531157][ T6000] netlink_sendmsg+0x648/0x948 [ 68.531166][ T6000] __sock_sendmsg+0xc8/0x17c [ 68.531175][ T6000] ____sys_sendmsg+0x3d0/0x6c8 [ 68.531184][ T6000] ___sys_sendmsg+0x198/0x224 [ 68.531193][ T6000] __sys_sendmsg+0x158/0x204 [ 68.531202][ T6000] __arm64_sys_sendmsg+0x88/0x9c [ 68.531212][ T6000] invoke_syscall+0x98/0x244 [ 68.531222][ T6000] el0_svc_common+0xec/0x23c [ 68.531231][ T6000] do_el0_svc+0x4c/0x5c [ 68.531241][ T6000] el0_svc+0x64/0x260 [ 68.531250][ T6000] el0t_64_sync_handler+0x44/0x104 [ 68.531258][ T6000] el0t_64_sync+0x198/0x19c [ 68.597011][ T5997] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 68.598701][ T5997] overlayfs: failed to verify index dir 'upper' xattr [ 68.600162][ T5997] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 68.659705][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.712384][ T6013] netlink: 140 bytes leftover after parsing attributes in process `syz.4.281'. [ 68.712424][ T6013] netlink: 58 bytes leftover after parsing attributes in process `syz.4.281'. [ 69.173980][ T6034] loop2: detected capacity change from 0 to 512 [ 69.185616][ T6034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 69.185671][ T6034] System zones: 0-2, 18-18, 34-34 [ 69.188727][ T6034] EXT4-fs (loop2): 1 orphan inode deleted [ 69.190700][ T6034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.206950][ T6034] mmap: syz.2.286 (6034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.280686][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.511295][ T6043] loop2: detected capacity change from 0 to 512 [ 69.513143][ T6043] ext4: Unknown parameter 'GPL' [ 69.614864][ T4725] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.658844][ T6052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.680669][ T6047] loop2: detected capacity change from 0 to 2048 [ 69.707067][ T6047] loop2: detected capacity change from 0 to 128 [ 69.818306][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 69.818341][ T30] audit: type=1400 audit(69.790:140): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4704 comm="udevd" path="/run/udev/data/b7:2" dev="tmpfs" ino=3159 [ 69.818368][ T30] audit: type=1400 audit(69.790:141): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4704 comm="udevd" path="/run/udev/data/b7:2" dev="tmpfs" ino=3159 [ 69.819879][ T30] audit: type=1400 audit(69.790:142): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 69.819986][ T30] audit: type=1400 audit(69.790:143): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="/" dev="tmpfs" ino=1 [ 69.820052][ T30] audit: type=1400 audit(69.790:144): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 69.820121][ T30] audit: type=1400 audit(69.790:145): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="watch" dev="tmpfs" ino=78 [ 69.820177][ T30] audit: type=1400 audit(69.790:146): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=4704 comm="udevd" name="watch" dev="tmpfs" ino=78 [ 69.820231][ T30] audit: type=1400 audit(69.790:147): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=4704 comm="udevd" name="517" dev="tmpfs" ino=3158 [ 69.824858][ T30] audit: type=1400 audit(69.790:148): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=4704 comm="udevd" name="watch" dev="tmpfs" ino=78 [ 69.824877][ T30] audit: type=1400 audit(69.790:149): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 70.302875][ T6069] loop3: detected capacity change from 0 to 512 [ 70.415149][ T4725] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.415197][ T4725] Bluetooth: hci4: command 0x0c1a tx timeout [ 70.415218][ T4725] Bluetooth: hci2: command 0x2016 tx timeout [ 70.415235][ T4725] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.992528][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.992965][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.182726][ T6102] sl0: header compression turned on [ 71.310657][ T6109] syzkaller0: entered promiscuous mode [ 71.310690][ T6109] syzkaller0: entered allmulticast mode [ 71.321321][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.322046][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.393341][ T6115] syzkaller0: entered promiscuous mode [ 71.393381][ T6115] syzkaller0: entered allmulticast mode [ 71.503026][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.505336][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.694654][ T4723] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.051836][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.056214][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.213534][ T6148] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.224578][ T5751] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.224656][ T4938] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.224676][ T4938] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.224695][ T4938] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.480609][ T6178] __nla_validate_parse: 10 callbacks suppressed [ 72.480652][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 72.480665][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 72.494139][ T4723] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.494180][ T4723] Bluetooth: hci2: command 0x2016 tx timeout [ 72.494196][ T4723] Bluetooth: hci4: command 0x0c1a tx timeout [ 72.494210][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.942823][ T6195] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 72.950540][ T6195] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 72.959319][ T6195] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 73.002088][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.002307][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.018319][ T6199] loop0: detected capacity change from 0 to 1024 [ 73.023197][ T6199] EXT4-fs: Ignoring removed bh option [ 73.023249][ T6199] EXT4-fs: Ignoring removed bh option [ 73.024451][ T6199] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.046715][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.277955][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.278154][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.318595][ T4712] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /56/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 73.324486][ T4712] EXT4-fs (loop0): Remounting filesystem read-only [ 73.337122][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.411323][ T4725] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 74.011368][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.011589][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.021295][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.023558][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.545491][ T6263] fuse: Bad value for 'fd' [ 74.599011][ T4725] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.839138][ T30] kauditd_printk_skb: 65996 callbacks suppressed [ 74.840576][ T30] audit: type=1400 audit(74.810:37157): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.004932][ T4799] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.079165][ T30] audit: type=1400 audit(75.050:37158): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.082865][ T30] audit: type=1400 audit(75.050:37159): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.094707][ T30] audit: type=1400 audit(75.070:37160): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.165495][ T30] audit: type=1400 audit(75.140:37161): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.245099][ T30] audit: type=1400 audit(75.220:37162): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6254 comm="syz.0.363" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 75.250995][ T4799] usb 1-1: Using ep0 maxpacket: 16 [ 75.253592][ T30] audit: type=1400 audit(75.220:37163): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.258701][ T30] audit: type=1400 audit(75.230:37164): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.263090][ T4799] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.269774][ T30] audit: type=1400 audit(75.240:37165): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.273328][ T30] audit: type=1400 audit(75.240:37166): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6254 comm="syz.0.363" path="/dev/raw-gadget" dev="devtmpfs" ino=705 [ 75.345288][ T4799] usb 1-1: config 1 interface 0 altsetting 80 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 75.349423][ T4799] usb 1-1: config 1 interface 0 has no altsetting 0 [ 75.384332][ T4799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.394177][ T4799] usb 1-1: Product: syz [ 75.394192][ T4799] usb 1-1: Manufacturer: syz [ 75.394203][ T4799] usb 1-1: SerialNumber: syz [ 75.415019][ T6263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.620734][ T6282] loop1: detected capacity change from 0 to 4096 [ 75.628658][ T6282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.664601][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.757492][ T6290] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 75.786909][ T6290] bond1: (slave veth0_to_bond): making interface the new active one [ 75.789564][ T6290] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 75.797533][ T6290] macvlan2: entered promiscuous mode [ 75.797560][ T6290] macvlan2: entered allmulticast mode [ 75.798195][ T6290] bond1: entered promiscuous mode [ 75.799121][ T6290] veth0_to_bond: entered promiscuous mode [ 75.800512][ T6290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.835807][ T6290] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 75.874371][ T6290] bond1: left promiscuous mode [ 75.874405][ T6290] veth0_to_bond: left promiscuous mode [ 77.123348][ T6328] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.159982][ T6329] can0: slcan on ttynull. [ 77.165944][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.166809][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.225318][ T6327] can0 (unregistered): slcan off ttynull. [ 77.397167][ T4799] cdc_ether 1-1:1.0: Descriptor too short [ 77.412950][ T4799] usb 1-1: USB disconnect, device number 2 [ 77.802312][ T6343] loop0: detected capacity change from 0 to 512 [ 77.819320][ T6343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.416616][ T6362] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 78.516103][ T6368] Need at least one configuration in g_uac2. [ 78.516230][ T6368] udc usbip-vudc.0: failed to start g_uac2: -22 [ 78.516245][ T6368] configfs-gadget.g_uac2 gadget.1: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 78.518093][ T6368] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 78.577674][ T6372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 78.646779][ T6376] binder: 6375:6376 ioctl 4002f516 0 returned -22 [ 78.648661][ T6376] binder: 6375:6376 ioctl c0046209 0 returned -22 [ 78.757649][ T6384] netlink: 'syz.3.405': attribute type 11 has an invalid length. [ 78.757681][ T6384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.405'. [ 78.758465][ T6384] netlink: 'syz.3.405': attribute type 11 has an invalid length. [ 78.758477][ T6384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.405'. [ 78.758551][ T6384] netlink: 'syz.3.405': attribute type 11 has an invalid length. [ 78.758561][ T6384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.405'. [ 78.973851][ T6397] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 79.056947][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.057137][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.844229][ T30] kauditd_printk_skb: 51546 callbacks suppressed [ 79.845660][ T30] audit: type=1400 audit(79.820:62910): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="sysfs" ino=1 [ 79.849074][ T30] audit: type=1400 audit(79.820:62911): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="devices" dev="sysfs" ino=18 [ 79.849452][ T4345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.849463][ T4345] audit: audit_lost=18265 audit_rate_limit=0 audit_backlog_limit=64 [ 79.849471][ T4345] audit: backlog limit exceeded [ 79.849484][ T4345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.849490][ T4345] audit: audit_lost=18266 audit_rate_limit=0 audit_backlog_limit=64 [ 79.849496][ T4345] audit: backlog limit exceeded [ 79.849506][ T4345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.849511][ T4345] audit: audit_lost=18267 audit_rate_limit=0 audit_backlog_limit=64 [ 80.030198][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.322481][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 80.325104][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 80.801142][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 80.807046][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 80.874405][ T4800] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.024121][ T4800] usb 1-1: Using ep0 maxpacket: 8 [ 81.024668][ T4800] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.025660][ T4800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.025678][ T4800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.029331][ T4800] usb 1-1: config 0 descriptor?? [ 81.290431][ T4800] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 81.307173][ T6462] file system registered [ 81.520909][ T6466] fuse: Bad value for 'fd' [ 81.558457][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.559975][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.438084][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.438295][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.632009][ T6483] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 82.633771][ T6483] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 82.633836][ T6483] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 82.747545][ T867] usb 1-1: USB disconnect, device number 3 [ 83.323706][ T6505] loop0: detected capacity change from 0 to 512 [ 83.332939][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.333134][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.341871][ T6505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.359065][ T6505] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.395971][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.174192][ T4800] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.289612][ T6528] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 84.302722][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.317257][ T6528] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 84.326455][ T4800] usb 1-1: Using ep0 maxpacket: 32 [ 84.328578][ T4800] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.332283][ T4800] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.332313][ T4800] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.332330][ T4800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.332351][ T4800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.332367][ T4800] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.332382][ T4800] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.332406][ T4800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.348735][ T4800] usb 1-1: config 0 descriptor?? [ 84.396067][ T6533] loop4: detected capacity change from 0 to 2048 [ 84.427276][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.475095][ T6533] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 84.475128][ T6533] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 84.475156][ T6533] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 84.487712][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.487902][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.596862][ T4800] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.608758][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.804476][ T10] usb 1-1: USB disconnect, device number 4 [ 84.806812][ T10] usblp0: removed [ 84.854847][ T30] kauditd_printk_skb: 42939 callbacks suppressed [ 84.854884][ T30] audit: type=1400 audit(84.830:89062): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 84.859518][ T30] audit: type=1400 audit(84.830:89063): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5142 comm="kworker/u8:27" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 84.859541][ T30] audit: type=1400 audit(84.830:89064): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6551 comm="syz.3.470" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 84.859556][ T30] audit: type=1400 audit(84.830:89065): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6551 comm="syz.3.470" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 84.859571][ T30] audit: type=1400 audit(84.830:89066): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 84.859585][ T30] audit: type=1400 audit(84.830:89067): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 84.859599][ T30] audit: type=1400 audit(84.830:89068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 84.859612][ T30] audit: type=1400 audit(84.830:89069): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4713 comm="syz-executor" name="115" dev="tmpfs" ino=649 [ 84.859625][ T30] audit: type=1400 audit(84.830:89070): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4713 comm="syz-executor" path="/115" dev="tmpfs" ino=649 [ 84.859638][ T30] audit: type=1400 audit(84.830:89071): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4713 comm="syz-executor" path="/115" dev="tmpfs" ino=649 [ 84.907112][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.907655][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.995651][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.009221][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.009339][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.009545][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.521089][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 85.824232][ T4934] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.824276][ T4934] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.824306][ T4934] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.824321][ T4934] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.879968][ T6582] input: syz1 as /devices/virtual/input/input6 [ 86.040749][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.042853][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.269289][ T6603] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 86.606216][ T6616] binder: 6615:6616 tried to acquire reference to desc 0, got 1 instead [ 86.607156][ T6616] binder: tried to use weak ref as strong ref [ 86.607166][ T6616] binder: 6615:6616 got transaction with invalid handle, 0 [ 86.607213][ T6616] binder: 6616:6615 translate handle failed [ 86.607271][ T6616] binder: 6615:6616 transaction call to 6615:0 failed 5/29201/-22, code 0 size 72-24 line 3571 [ 86.608956][ T867] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.777917][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 86.782213][ T6627] netlink: 88 bytes leftover after parsing attributes in process `syz.3.497'. [ 86.799177][ T6626] hsr_slave_1 (unregistering): left promiscuous mode [ 87.131561][ T4725] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 87.229394][ T4722] ffs_data_put(): freeing [ 87.505691][ T6665] netlink: 'syz.1.516': attribute type 2 has an invalid length. [ 87.505725][ T6665] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.516'. [ 87.506602][ T6665] nbd: must specify at least one socket [ 87.555121][ T6667] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 87.555157][ T6667] netlink: 167748 bytes leftover after parsing attributes in process `syz.0.517'. [ 87.654610][ T6670] netlink: 'syz.0.518': attribute type 29 has an invalid length. [ 87.866074][ T6681] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.523'. [ 88.167353][ T6696] Illegal XDP return value 4294967294 on prog (id 53) dev N/A, expect packet loss! [ 88.424812][ T6703] netlink: 60 bytes leftover after parsing attributes in process `syz.4.532'. [ 89.299486][ T6743] loop2: detected capacity change from 0 to 512 [ 89.300382][ T6743] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.315968][ T6743] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.549: inode has both inline data and extents flags [ 89.316005][ T6743] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.317299][ T6743] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.549: couldn't read orphan inode 15 (err -117) [ 89.317354][ T6743] loop2: lost filesystem error report for type 5 error -117 [ 89.317931][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.568432][ T6754] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.883955][ T6753] overlayfs: missing 'lowerdir' [ 89.891572][ T6753] overlay: Unknown parameter 'fsuuid' [ 89.905310][ T30] kauditd_printk_skb: 52661 callbacks suppressed [ 89.906832][ T30] audit: type=1400 audit(89.850:122979): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6741 comm="syz.2.549" name="/" dev="loop2" ino=2 [ 89.906862][ T30] audit: type=1400 audit(89.850:122980): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6741 comm="syz.2.549" name="/" dev="loop2" ino=2 [ 89.906888][ T30] audit: type=1400 audit(89.860:122981): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6741 comm="syz.2.549" name="newroot" dev="tmpfs" ino=2 [ 89.906908][ T30] audit: type=1400 audit(89.860:122982): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6741 comm="syz.2.549" name="/" dev="devtmpfs" ino=1 [ 89.932502][ T30] audit: type=1400 audit(89.860:122983): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=6741 comm="syz.2.549" name="mtd0" dev="devtmpfs" ino=682 [ 89.932650][ T30] audit: type=1400 audit(89.860:122984): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6741 comm="syz.2.549" path="/dev/mtd0" dev="devtmpfs" ino=682 [ 89.932717][ T30] audit: type=1400 audit(89.860:122985): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=6741 comm="syz.2.549" path="/dev/mtd0" dev="devtmpfs" ino=682 [ 89.932784][ T30] audit: type=1400 audit(89.860:122986): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6741 comm="syz.2.549" path="/dev/mtd0" dev="devtmpfs" ino=682 [ 89.932851][ T30] audit: type=1400 audit(89.860:122987): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6741 comm="syz.2.549" name="/" dev="loop2" ino=2 [ 89.932916][ T30] audit: type=1400 audit(89.860:122988): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6741 comm="syz.2.549" name="/" dev="loop2" ino=2 [ 90.344579][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 90.380465][ T6770] loop0: detected capacity change from 0 to 2048 [ 90.486519][ T6770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.832763][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.846280][ T6779] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 90.859042][ T6779] overlayfs: failed to verify index dir 'upper' xattr [ 90.859074][ T6779] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 90.861780][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 91.043872][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.282672][ T6795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 91.284337][ T6795] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 91.284392][ T6795] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 91.755797][ T6814] loop0: detected capacity change from 0 to 512 [ 91.756205][ T6814] EXT4-fs: inline encryption not supported [ 91.758729][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'. [ 91.830901][ T6814] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 91.832750][ T6814] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.563: invalid indirect mapped block 2683928664 (level 1) [ 91.836986][ T6814] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 91.837402][ T6814] EXT4-fs (loop0): 1 truncate cleaned up [ 91.845116][ T6814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.038048][ T6817] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.479470][ T6830] loop3: detected capacity change from 0 to 2048 [ 92.500068][ T6830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.535462][ T6830] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 92.535497][ T6830] overlayfs: failed to verify index dir 'upper' xattr [ 92.535725][ T6830] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 92.652724][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.652758][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 93.038152][ T6850] overlayfs: missing 'lowerdir' [ 93.042829][ T6850] overlay: Unknown parameter 'fsuuid' [ 93.704002][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 93.821374][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.866375][ T6870] loop3: detected capacity change from 0 to 2048 [ 93.931660][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.942197][ T6870] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 93.942236][ T6870] overlayfs: failed to verify index dir 'upper' xattr [ 93.942241][ T6870] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 94.169805][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.225849][ T6883] loop3: detected capacity change from 0 to 512 [ 94.232669][ T6883] EXT4-fs: inline encryption not supported [ 94.240972][ T6883] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 94.241113][ T6883] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.580: invalid indirect mapped block 2683928664 (level 1) [ 94.241133][ T6883] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 94.242078][ T6883] EXT4-fs (loop3): 1 truncate cleaned up [ 94.242543][ T6883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.686882][ T6890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.583'. [ 94.690820][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.690927][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.697170][ T6890] netlink: 76 bytes leftover after parsing attributes in process `syz.1.583'. [ 94.699163][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.699190][ T6890] FAULT_INJECTION: forcing a failure. [ 94.699190][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 94.699216][ T6890] CPU: 0 UID: 0 PID: 6890 Comm: syz.1.583 Not tainted syzkaller #0 PREEMPT [ 94.699233][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.699238][ T6890] Call trace: [ 94.699241][ T6890] show_stack+0x2c/0x3c (C) [ 94.699259][ T6890] __dump_stack+0x30/0x40 [ 94.699269][ T6890] dump_stack_lvl+0xd8/0x12c [ 94.699279][ T6890] dump_stack+0x1c/0x28 [ 94.699288][ T6890] should_fail_ex+0x41c/0x590 [ 94.699296][ T6890] should_failslab+0xc4/0x120 [ 94.699305][ T6890] __kmalloc_noprof+0x108/0x6b8 [ 94.699313][ T6890] switchdev_deferred_enqueue+0x3c/0x230 [ 94.699322][ T6890] switchdev_port_attr_set+0xac/0x110 [ 94.699332][ T6890] __set_ageing_time+0xb8/0x148 [ 94.699341][ T6890] br_init_port+0x10c/0x1d8 [ 94.699348][ T6890] br_stp_enable_port+0x20/0x64 [ 94.699356][ T6890] br_stp_enable_bridge+0x1b4/0x24c [ 94.699363][ T6890] br_dev_open+0x98/0x140 [ 94.699372][ T6890] __dev_open+0x370/0x76c [ 94.699380][ T6890] __dev_change_flags+0x294/0x698 [ 94.699394][ T6890] netif_change_flags+0x80/0x15c [ 94.699404][ T6890] do_setlink+0xc28/0x31e8 [ 94.699413][ T6890] rtnl_newlink+0xd24/0x1144 [ 94.699421][ T6890] rtnetlink_rcv_msg+0x66c/0x9bc [ 94.699430][ T6890] netlink_rcv_skb+0x238/0x414 [ 94.699439][ T6890] rtnetlink_rcv+0x28/0x38 [ 94.699447][ T6890] netlink_unicast+0x600/0x7f8 [ 94.699455][ T6890] netlink_sendmsg+0x648/0x948 [ 94.699464][ T6890] __sock_sendmsg+0xc8/0x17c [ 94.699472][ T6890] ____sys_sendmsg+0x3d0/0x6c8 [ 94.699481][ T6890] ___sys_sendmsg+0x198/0x224 [ 94.699490][ T6890] __sys_sendmsg+0x158/0x204 [ 94.699499][ T6890] __arm64_sys_sendmsg+0x88/0x9c [ 94.699509][ T6890] invoke_syscall+0x98/0x244 [ 94.699519][ T6890] el0_svc_common+0xec/0x23c [ 94.699528][ T6890] do_el0_svc+0x4c/0x5c [ 94.699537][ T6890] el0_svc+0x64/0x260 [ 94.699546][ T6890] el0t_64_sync_handler+0x44/0x104 [ 94.699554][ T6890] el0t_64_sync+0x198/0x19c [ 94.699567][ T6890] bridge_slave_1: failed to offload ageing time [ 94.699587][ T6890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.699679][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.699704][ T6890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.762242][ T6890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.583'. [ 94.762576][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.762650][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.820816][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 94.903500][ T6902] overlayfs: missing 'workdir' [ 95.011976][ T30] kauditd_printk_skb: 42652 callbacks suppressed [ 95.012009][ T30] audit: type=1400 audit(94.800:141414): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=6899 comm="syz.1.586" opid=6899 ocomm="syz.1.586" [ 95.012041][ T30] audit: type=1400 audit(94.800:141415): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6899 comm="syz.1.586" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 95.012072][ T30] audit: type=1400 audit(94.800:141416): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6899 comm="syz.1.586" name="newroot" dev="tmpfs" ino=2 [ 95.012100][ T30] audit: type=1400 audit(94.800:141417): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6899 comm="syz.1.586" name="/" dev="devtmpfs" ino=1 [ 95.012123][ T30] audit: type=1400 audit(94.800:141418): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=6899 comm="syz.1.586" name="nvme-fabrics" dev="devtmpfs" ino=680 [ 95.012143][ T30] audit: type=1400 audit(94.800:141419): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6899 comm="syz.1.586" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 95.012163][ T30] audit: type=1400 audit(94.800:141420): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6899 comm="syz.1.586" path="/dev/nvme-fabrics" dev="devtmpfs" ino=680 [ 95.012182][ T30] audit: type=1400 audit(94.800:141421): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6899 comm="syz.1.586" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 95.012200][ T30] audit: type=1400 audit(94.800:141422): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6891 comm="syz.0.581" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 95.012218][ T30] audit: type=1400 audit(94.800:141423): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=6899 comm="syz.1.586" opid=6899 ocomm="syz.1.586" [ 95.115788][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.375205][ T6912] overlayfs: failed to clone upperpath [ 96.159454][ T6921] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 96.162499][ T6921] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 96.166069][ T6921] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 96.271068][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 96.820208][ T6949] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.050762][ T6953] loop3: detected capacity change from 0 to 512 [ 97.053542][ T6953] EXT4-fs: inline encryption not supported [ 97.070636][ T6953] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 97.073772][ T6953] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.599: invalid indirect mapped block 2683928664 (level 1) [ 97.073812][ T6953] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 97.076693][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 97.076706][ C1] EXT4-fs (loop3): initial error at time 97: ext4_free_branches:1023: inode 13 [ 97.076722][ C1] EXT4-fs (loop3): last error at time 97: ext4_free_branches:1023: inode 13 [ 97.081505][ T6953] EXT4-fs (loop3): 1 truncate cleaned up [ 97.081965][ T6953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.217965][ T6960] FAULT_INJECTION: forcing a failure. [ 97.217965][ T6960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.217999][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.2.600 Not tainted syzkaller #0 PREEMPT [ 97.218013][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 97.218019][ T6960] Call trace: [ 97.218023][ T6960] show_stack+0x2c/0x3c (C) [ 97.218047][ T6960] __dump_stack+0x30/0x40 [ 97.218058][ T6960] dump_stack_lvl+0xd8/0x12c [ 97.218068][ T6960] dump_stack+0x1c/0x28 [ 97.218078][ T6960] should_fail_ex+0x41c/0x590 [ 97.218086][ T6960] should_fail+0x14/0x24 [ 97.218093][ T6960] should_fail_usercopy+0x20/0x30 [ 97.218100][ T6960] _copy_from_iter+0x188/0x1064 [ 97.218108][ T6960] netlink_sendmsg+0x570/0x948 [ 97.218118][ T6960] __sock_sendmsg+0xc8/0x17c [ 97.218128][ T6960] ____sys_sendmsg+0x3d0/0x6c8 [ 97.218137][ T6960] ___sys_sendmsg+0x198/0x224 [ 97.218146][ T6960] __sys_sendmsg+0x158/0x204 [ 97.218155][ T6960] __arm64_sys_sendmsg+0x88/0x9c [ 97.218164][ T6960] invoke_syscall+0x98/0x244 [ 97.218174][ T6960] el0_svc_common+0xec/0x23c [ 97.218184][ T6960] do_el0_svc+0x4c/0x5c [ 97.218193][ T6960] el0_svc+0x64/0x260 [ 97.218202][ T6960] el0t_64_sync_handler+0x44/0x104 [ 97.218211][ T6960] el0t_64_sync+0x198/0x19c [ 97.224445][ T6961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.601'. [ 97.331315][ T6962] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1803188595: comm syz.3.599: invalid block [ 97.332350][ T6962] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.599: invalid indirect mapped block 2054779762 (level 0) [ 97.733056][ T6972] overlayfs: failed to clone upperpath [ 97.954165][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.036925][ T6978] loop3: detected capacity change from 0 to 512 [ 98.041575][ T6978] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.044282][ T6978] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.605: inode has both inline data and extents flags [ 98.044316][ T6978] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.044448][ T6978] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.605: couldn't read orphan inode 15 (err -117) [ 98.044463][ T6978] loop3: lost filesystem error report for type 5 error -117 [ 98.045038][ T6978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.924850][ T6991] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 98.928649][ T6991] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 98.932585][ T6991] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 99.172275][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.317205][ T7008] overlayfs: missing 'lowerdir' [ 99.538340][ T7012] loop2: detected capacity change from 0 to 512 [ 99.540340][ T7012] EXT4-fs: inline encryption not supported [ 99.545927][ T7012] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 99.547839][ T7012] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.617: invalid indirect mapped block 2683928664 (level 1) [ 99.550870][ T7012] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 99.552409][ T7012] EXT4-fs (loop2): 1 truncate cleaned up [ 99.554377][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 99.554391][ C1] EXT4-fs (loop2): initial error at time 99: ext4_free_branches:1023: inode 13 [ 99.554415][ C1] EXT4-fs (loop2): last error at time 99: ext4_free_branches:1023: inode 13 [ 99.565743][ T7012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.057169][ T7024] audit_log_start: 25069 callbacks suppressed [ 100.057211][ T7024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.057225][ T7024] audit: audit_lost=42774 audit_rate_limit=0 audit_backlog_limit=64 [ 100.057240][ T7024] audit: backlog limit exceeded [ 100.057274][ T7024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.057286][ T7024] audit: audit_lost=42775 audit_rate_limit=0 audit_backlog_limit=64 [ 100.057297][ T7024] audit: backlog limit exceeded [ 100.057350][ T7024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.057363][ T7024] audit: audit_lost=42776 audit_rate_limit=0 audit_backlog_limit=64 [ 100.057374][ T7024] audit: backlog limit exceeded [ 100.057395][ T7024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.243382][ T7027] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1803188595: comm syz.2.617: invalid block [ 100.244716][ T7027] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.617: invalid indirect mapped block 2054779762 (level 0) [ 100.417212][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.600660][ T7044] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 100.601109][ T7044] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 100.601153][ T7044] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 100.768089][ T7049] loop2: detected capacity change from 0 to 512 [ 100.769765][ T7049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.775839][ T7049] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.625: inode has both inline data and extents flags [ 100.775881][ T7049] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.776844][ T7049] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.625: couldn't read orphan inode 15 (err -117) [ 100.776866][ T7049] loop2: lost filesystem error report for type 5 error -117 [ 100.778533][ T7049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.808870][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 101.052101][ T7060] overlayfs: failed to resolve './file0': -2 [ 101.806372][ T7067] loop3: detected capacity change from 0 to 2048 [ 101.849529][ T7067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.854069][ T7067] overlayfs: failed to resolve './bus': -2 [ 101.941130][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.946769][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.045956][ T7079] overlayfs: missing 'lowerdir' [ 102.230567][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 102.735481][ T7093] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 102.739061][ T7093] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 102.741855][ T7093] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 104.006949][ T7116] overlayfs: failed to resolve './file0': -2 [ 104.483432][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 104.583316][ T7125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.646'. [ 104.897498][ T7134] loop0: detected capacity change from 0 to 512 [ 104.900324][ T7134] EXT4-fs: inline encryption not supported [ 104.911422][ T7134] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 104.914361][ T7134] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.652: invalid indirect mapped block 2683928664 (level 1) [ 104.914401][ T7134] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 104.917696][ T7134] EXT4-fs (loop0): 1 truncate cleaned up [ 104.921796][ T7134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.949816][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 105.157226][ T7145] audit_log_start: 25385 callbacks suppressed [ 105.157261][ T7145] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.157277][ T7145] audit: audit_lost=47398 audit_rate_limit=0 audit_backlog_limit=64 [ 105.157292][ T7145] audit: backlog limit exceeded [ 105.157317][ T7145] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.157329][ T7145] audit: audit_lost=47399 audit_rate_limit=0 audit_backlog_limit=64 [ 105.157342][ T7145] audit: backlog limit exceeded [ 105.157364][ T7145] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.157376][ T7145] audit: audit_lost=47400 audit_rate_limit=0 audit_backlog_limit=64 [ 105.157390][ T7145] audit: backlog limit exceeded [ 105.157418][ T7145] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.206565][ T7147] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1803188595: comm syz.0.652: invalid block [ 105.211758][ T7147] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.652: invalid indirect mapped block 2054779762 (level 0) [ 105.761931][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.074080][ T4374] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.196865][ T7168] overlayfs: failed to clone upperpath [ 106.255234][ T4374] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 106.257541][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.257870][ T4374] usb 1-1: Product: syz [ 106.258044][ T4374] usb 1-1: Manufacturer: syz [ 106.258199][ T4374] usb 1-1: SerialNumber: syz [ 106.259876][ T4374] usb 1-1: config 0 descriptor?? [ 106.267223][ T4374] hub 1-1:0.0: bad descriptor, ignoring hub [ 106.267250][ T4374] hub 1-1:0.0: probe with driver hub failed with error -5 [ 106.531201][ T7174] overlayfs: failed to resolve './file0': -2 [ 107.287983][ T4374] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 107.290532][ T4374] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.290970][ T4374] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 107.290997][ T4374] usb 1-1: media controller created [ 107.293476][ T4374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.310991][ T4374] DVB: Unable to find symbol dib7000p_attach() [ 107.311015][ T4374] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 107.311204][ T4374] Registered IR keymap rc-dib0700-rc5 [ 107.329724][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.770423][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.784723][ T7163] dib0700: could not acquire lock [ 107.787014][ T4374] dib0700: ir protocol setup failed [ 107.787087][ T4374] dvb-usb: could not initialize remote control. [ 107.787093][ T4374] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 107.793135][ T4374] usb 1-1: USB disconnect, device number 5 [ 107.947296][ T7195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.947436][ T7195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.959580][ T7195] overlay: Unknown parameter 'fsuuid' [ 108.349413][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.452236][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.454916][ T4723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.456895][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.459002][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.460681][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.754865][ T4374] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 108.898573][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.056125][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.289709][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.291853][ T4723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.293535][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.296103][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.297795][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.315474][ T40] bridge_slave_1: left allmulticast mode [ 109.315522][ T40] bridge_slave_1: left promiscuous mode [ 109.316218][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.322733][ T40] bridge_slave_0: left allmulticast mode [ 109.322759][ T40] bridge_slave_0: left promiscuous mode [ 109.322837][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.754892][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.793997][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.819264][ T40] bond0 (unregistering): Released all slaves [ 109.841496][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.843207][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.843327][ T7201] bridge_slave_0: entered allmulticast mode [ 109.843795][ T7201] bridge_slave_0: entered promiscuous mode [ 109.846421][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.846444][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.846504][ T7201] bridge_slave_1: entered allmulticast mode [ 109.846920][ T7201] bridge_slave_1: entered promiscuous mode [ 109.905346][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.911651][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.197350][ T30] kauditd_printk_skb: 26272 callbacks suppressed [ 110.197404][ T30] audit: type=1400 audit(110.170:176980): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 110.197528][ T30] audit: type=1400 audit(110.170:176981): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 110.197599][ T30] audit: type=1400 audit(110.170:176982): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 110.197669][ T30] audit: type=1400 audit(110.170:176983): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4713 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 110.198526][ T30] audit: type=1400 audit(110.170:176984): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4713 comm="syz-executor" name="146" dev="tmpfs" ino=830 [ 110.233146][ T30] audit: type=1400 audit(110.200:176985): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4713 comm="syz-executor" path="/146" dev="tmpfs" ino=830 [ 110.236504][ T30] audit: type=1400 audit(110.210:176986): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=7254 comm="sed" path="/usr/lib/libselinux.so.1" dev="nvme0n1p2" ino=1758 [ 110.237272][ T30] audit: type=1400 audit(110.210:176987): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7246 comm="syz.0.682" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 110.238969][ T30] audit: type=1400 audit(110.210:176988): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=4718 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 110.238992][ T30] audit: type=1400 audit(110.210:176989): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=4718 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 110.261087][ T7201] team0: Port device team_slave_0 added [ 110.270173][ T7201] team0: Port device team_slave_1 added [ 110.315052][ T7264] loop2: detected capacity change from 0 to 512 [ 110.319964][ T7264] EXT4-fs: inline encryption not supported [ 110.335149][ T7264] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 110.336959][ T7264] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.684: invalid indirect mapped block 2683928664 (level 1) [ 110.340407][ T7264] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 110.340873][ T7264] EXT4-fs (loop2): 1 truncate cleaned up [ 110.348987][ T7264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.382917][ T7270] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.685'. [ 110.452892][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.452918][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.452947][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.453552][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.453565][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.453584][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.461167][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 110.486817][ T7201] hsr_slave_0: entered promiscuous mode [ 110.487146][ T7201] hsr_slave_1: entered promiscuous mode [ 110.487365][ T7201] debugfs: 'hsr0' already exists in 'hsr' [ 110.597224][ T7201] Cannot create hsr debugfs directory [ 110.614435][ T4725] Bluetooth: hci4: command tx timeout [ 110.760322][ T7278] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.760435][ T7278] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 111.024978][ T7280] overlay: Unknown parameter 'fsuuid' [ 111.029281][ T7276] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1803188595: comm syz.2.684: invalid block [ 111.031374][ T7276] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.684: invalid indirect mapped block 2054779762 (level 0) [ 111.345117][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.362803][ T7282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 111.372498][ T7282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 111.376849][ T4723] Bluetooth: hci0: command tx timeout [ 111.507632][ T40] hsr_slave_0: left promiscuous mode [ 111.510044][ T40] hsr_slave_1: left promiscuous mode [ 111.512547][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.514270][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.517882][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.519449][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.542842][ T40] veth1_macvtap: left promiscuous mode [ 111.542898][ T40] veth0_macvtap: left promiscuous mode [ 111.542957][ T40] veth1_vlan: left promiscuous mode [ 111.543053][ T40] veth0_vlan: left promiscuous mode [ 111.697383][ T40] team0 (unregistering): Port device team_slave_1 removed [ 111.703470][ T40] team0 (unregistering): Port device team_slave_0 removed [ 111.906637][ T7297] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 111.906756][ T7297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 112.186583][ T7201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.198353][ T7201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.206283][ T7201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.210512][ T7201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.211068][ T7201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.215351][ T7201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.220157][ T7201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.224241][ T7201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.288086][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.296348][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.299601][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.299655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.312045][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.312101][ T5749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.402962][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.406043][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.407830][ T7230] bridge_slave_0: entered allmulticast mode [ 112.410356][ T7230] bridge_slave_0: entered promiscuous mode [ 112.412978][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.414672][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.416397][ T7230] bridge_slave_1: entered allmulticast mode [ 112.418245][ T7230] bridge_slave_1: entered promiscuous mode [ 112.427624][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.430568][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.440335][ T7230] team0: Port device team_slave_0 added [ 112.442387][ T7230] team0: Port device team_slave_1 added [ 112.450541][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.452081][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.460021][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.462844][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.464499][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.470144][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.513062][ T7230] hsr_slave_0: entered promiscuous mode [ 112.515823][ T7230] hsr_slave_1: entered promiscuous mode [ 112.517423][ T7230] debugfs: 'hsr0' already exists in 'hsr' [ 112.519632][ T7230] Cannot create hsr debugfs directory [ 112.667809][ T4723] Bluetooth: hci4: command tx timeout [ 112.820919][ T7230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.824911][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.828039][ T7230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.829986][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.831179][ T7230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.835644][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.836081][ T7230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.840196][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.172289][ T7230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.178034][ T7230] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.183730][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.183786][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.184413][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.184436][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.190067][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.202046][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 113.270763][ T7230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.454354][ T4723] Bluetooth: hci0: command tx timeout [ 113.577854][ T7362] loop2: detected capacity change from 0 to 512 [ 113.582034][ T7362] EXT4-fs: inline encryption not supported [ 113.596992][ T7362] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 113.599167][ T7362] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.697: invalid indirect mapped block 2683928664 (level 1) [ 113.599213][ T7362] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 113.603143][ T7362] EXT4-fs (loop2): 1 truncate cleaned up [ 113.605043][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 113.605063][ C1] EXT4-fs (loop2): initial error at time 113: ext4_free_branches:1023: inode 13 [ 113.605102][ C1] EXT4-fs (loop2): last error at time 113: ext4_free_branches:1023: inode 13 [ 113.615680][ T7362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.762786][ T7201] veth0_vlan: entered promiscuous mode [ 113.771501][ T7201] veth1_vlan: entered promiscuous mode [ 114.022607][ T7201] veth0_macvtap: entered promiscuous mode [ 114.029113][ T7382] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1803188595: comm syz.2.697: invalid block [ 114.037805][ T7382] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.697: invalid indirect mapped block 2054779762 (level 0) [ 114.053191][ T7201] veth1_macvtap: entered promiscuous mode [ 114.062953][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.063970][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.132706][ T5749] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.154139][ T4938] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.154188][ T4938] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.154205][ T4938] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.211815][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.228927][ T7230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.232995][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.233030][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.244558][ T7395] loop0: detected capacity change from 0 to 512 [ 114.252146][ T7395] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.262293][ T7401] loop2: detected capacity change from 0 to 512 [ 114.272706][ T7395] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.700: inode has both inline data and extents flags [ 114.272746][ T7395] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.274059][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 114.274072][ C1] EXT4-fs (loop0): initial error at time 114: ext4_orphan_get:1399: inode 15 [ 114.274092][ C1] EXT4-fs (loop0): last error at time 114: ext4_orphan_get:1399: inode 15 [ 114.274947][ T7395] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.700: couldn't read orphan inode 15 (err -117) [ 114.274971][ T7395] loop0: lost filesystem error report for type 5 error -117 [ 114.276692][ T7395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.339089][ T7401] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.339859][ T5749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.339870][ T5749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.354799][ T7401] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.701: inode has both inline data and extents flags [ 114.357325][ T7401] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.357483][ T7401] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.701: couldn't read orphan inode 15 (err -117) [ 114.361697][ T7401] loop2: lost filesystem error report for type 5 error -117 [ 114.362327][ T7401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.369808][ T7408] overlayfs: failed to clone upperpath [ 114.557737][ T7412] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.557844][ T7412] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.632830][ T7413] overlay: Unknown parameter 'fsuuid' [ 114.734237][ T4723] Bluetooth: hci4: command tx timeout [ 115.252248][ T30] kauditd_printk_skb: 31961 callbacks suppressed [ 115.252289][ T30] audit: type=1400 audit(115.160:190717): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7407 comm="syz.4.702" opid=7407 ocomm="syz.4.702" [ 115.261404][ T30] audit: type=1400 audit(115.230:190718): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7397 comm="syz.2.701" opid=7397 ocomm="syz.2.701" [ 115.267445][ T30] audit: type=1400 audit(115.240:190719): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7397 comm="syz.2.701" opid=7397 ocomm="syz.2.701" [ 115.374525][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.374555][ T4704] audit: audit_lost=57999 audit_rate_limit=0 audit_backlog_limit=64 [ 115.374570][ T4704] audit: backlog limit exceeded [ 115.374606][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.374620][ T4704] audit: audit_lost=58000 audit_rate_limit=0 audit_backlog_limit=64 [ 115.374635][ T4704] audit: backlog limit exceeded [ 115.374656][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 115.575551][ T4723] Bluetooth: hci0: command tx timeout [ 115.783858][ T7419] overlayfs: missing 'lowerdir' [ 115.805641][ T7419] overlay: Unknown parameter 'fsuuid' [ 116.120381][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.499597][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 116.506991][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.911650][ T7444] overlayfs: failed to resolve './file1': -2 [ 116.913228][ T4723] Bluetooth: hci4: command tx timeout [ 117.591200][ T7449] netlink: 'syz.5.709': attribute type 2 has an invalid length. [ 117.614210][ T4723] Bluetooth: hci0: command tx timeout [ 117.617903][ T7230] veth0_vlan: entered promiscuous mode [ 117.637121][ T7449] |2ö;!: entered promiscuous mode [ 117.648053][ T7230] veth1_vlan: entered promiscuous mode [ 117.680200][ T7230] veth0_macvtap: entered promiscuous mode [ 117.688636][ T7230] veth1_macvtap: entered promiscuous mode [ 117.726484][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.741772][ T7458] loop5: detected capacity change from 0 to 512 [ 117.748599][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.825547][ T4938] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.825595][ T4938] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.825628][ T4938] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.825648][ T4938] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.874422][ T7462] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 117.874795][ T7462] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 117.874854][ T7462] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 117.921606][ T4938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.923228][ T4938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.945004][ T4938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.945032][ T4938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.345245][ T7478] loop2: detected capacity change from 0 to 512 [ 118.356629][ T7478] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.381906][ T7483] loop5: detected capacity change from 0 to 512 [ 118.383894][ T7483] EXT4-fs: inline encryption not supported [ 118.393211][ T7478] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.713: inode has both inline data and extents flags [ 118.396181][ T7478] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.396495][ T7478] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.713: couldn't read orphan inode 15 (err -117) [ 118.402229][ T7478] loop2: lost filesystem error report for type 5 error -117 [ 118.402918][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.410464][ T7483] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 118.412934][ T7483] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.714: invalid indirect mapped block 2683928664 (level 1) [ 118.412968][ T7483] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 118.415905][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 118.415919][ C1] EXT4-fs (loop5): initial error at time 118: ext4_free_branches:1023: inode 13 [ 118.415940][ C1] EXT4-fs (loop5): last error at time 118: ext4_free_branches:1023: inode 13 [ 118.423328][ T7483] EXT4-fs (loop5): 1 truncate cleaned up [ 118.442398][ T7483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.654443][ T7494] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.086662][ T7500] overlayfs: failed to resolve './file0': -2 [ 119.100025][ T7500] overlay: Unknown parameter 'fsuuid' [ 119.128028][ T7493] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1803188595: comm syz.5.714: invalid block [ 119.145610][ T7493] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.714: invalid indirect mapped block 2054779762 (level 0) [ 119.309002][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.456371][ T7512] overlayfs: failed to clone upperpath [ 119.944981][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.023049][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 120.815601][ T4704] audit_log_start: 30918 callbacks suppressed [ 120.817942][ T4718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.817965][ T4718] audit: audit_lost=65062 audit_rate_limit=0 audit_backlog_limit=64 [ 120.817980][ T4718] audit: backlog limit exceeded [ 120.817996][ T4718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.818008][ T4718] audit: audit_lost=65063 audit_rate_limit=0 audit_backlog_limit=64 [ 120.818019][ T4718] audit: backlog limit exceeded [ 120.818079][ T4718] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.818090][ T4718] audit: audit_lost=65064 audit_rate_limit=0 audit_backlog_limit=64 [ 120.818102][ T4718] audit: backlog limit exceeded [ 120.838227][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.901021][ T7535] warning: `syz.4.724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.246525][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.6.732'. [ 121.310545][ T7563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 121.315413][ T7563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 121.416030][ T7571] netlink: 96 bytes leftover after parsing attributes in process `syz.6.734'. [ 121.431513][ T7575] netlink: 96 bytes leftover after parsing attributes in process `syz.6.734'. [ 121.590675][ T7592] loop6: detected capacity change from 0 to 512 [ 121.598844][ T7592] EXT4-fs (loop6): Test dummy encryption mode enabled [ 121.608018][ T7592] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.740: inode has both inline data and extents flags [ 121.608052][ T7592] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.613957][ T7592] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.740: couldn't read orphan inode 15 (err -117) [ 121.613992][ T7592] loop6: lost filesystem error report for type 5 error -117 [ 121.614101][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 121.614117][ C1] EXT4-fs (loop6): initial error at time 121: ext4_orphan_get:1399: inode 15 [ 121.614151][ C1] EXT4-fs (loop6): last error at time 121: ext4_orphan_get:1404 [ 121.630161][ T7592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.550296][ T7603] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.742'. [ 122.605717][ T7605] netlink: 68 bytes leftover after parsing attributes in process `syz.2.743'. [ 122.711545][ T7230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.734541][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.6.745'. [ 123.073014][ T7628] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.397788][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'. [ 123.413502][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'. [ 123.529136][ T7650] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 123.532802][ T7648] loop5: detected capacity change from 0 to 512 [ 123.541107][ T7648] EXT4-fs (loop5): Test dummy encryption mode enabled [ 123.584255][ T7654] overlayfs: failed to clone upperpath [ 123.679796][ T7648] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.755: inode has both inline data and extents flags [ 123.679831][ T7648] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.682669][ T7648] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.755: couldn't read orphan inode 15 (err -117) [ 123.682698][ T7648] loop5: lost filesystem error report for type 5 error -117 [ 123.684518][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 123.684533][ C0] EXT4-fs (loop5): initial error at time 123: ext4_orphan_get:1399: inode 15 [ 123.684549][ C0] EXT4-fs (loop5): last error at time 123: ext4_orphan_get:1404 [ 123.695314][ T7648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.021735][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.332385][ T7704] overlayfs: failed to clone upperpath [ 125.478628][ T7708] trusted_key: encrypted_key: insufficient parameters specified [ 125.864104][ T30] kauditd_printk_skb: 35916 callbacks suppressed [ 125.864141][ T30] audit: type=1400 audit(125.820:213012): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7710 comm="syz.2.771" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 125.864171][ T30] audit: type=1400 audit(125.820:213013): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7710 comm="syz.2.771" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 125.864193][ T30] audit: type=1400 audit(125.820:213014): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7710 comm="syz.2.771" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 125.878318][ T30] audit: type=1400 audit(125.840:213015): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4718 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 125.878337][ T30] audit: type=1400 audit(125.840:213016): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4718 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 125.878352][ T30] audit: type=1400 audit(125.840:213017): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4718 comm="syz-executor" name="155" dev="tmpfs" ino=885 [ 125.878367][ T30] audit: type=1400 audit(125.840:213018): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4718 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 125.878381][ T30] audit: type=1400 audit(125.840:213019): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4718 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 125.878402][ T30] audit: type=1400 audit(125.840:213020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4718 comm="syz-executor" name="155" dev="tmpfs" ino=885 [ 125.878417][ T30] audit: type=1400 audit(125.840:213021): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4718 comm="syz-executor" path="/155/cgroup.cpu" dev="tmpfs" ino=887 [ 125.972451][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.972495][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.247215][ T7726] loop5: detected capacity change from 0 to 512 [ 126.252868][ T7726] EXT4-fs (loop5): Test dummy encryption mode enabled [ 126.267832][ T7726] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.778: inode has both inline data and extents flags [ 126.267876][ T7726] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.271071][ T7726] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.778: couldn't read orphan inode 15 (err -117) [ 126.271110][ T7726] loop5: lost filesystem error report for type 5 error -117 [ 126.271743][ T7726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.663085][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.036753][ T7777] scsi_nl_rcv_msg: discarding partial skb [ 130.546855][ T7812] __nla_validate_parse: 2 callbacks suppressed [ 130.551427][ T7812] netlink: 64 bytes leftover after parsing attributes in process `syz.4.796'. [ 130.657871][ T7814] overlayfs: failed to clone upperpath [ 130.885261][ T30] kauditd_printk_skb: 10580 callbacks suppressed [ 130.885275][ T30] audit: type=1400 audit(130.620:218442): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=7808 comm="syz.0.795" opid=7808 ocomm="syz.0.795" [ 130.885294][ T30] audit: type=1400 audit(130.620:218443): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885311][ T30] audit: type=1400 audit(130.620:218444): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885326][ T30] audit: type=1400 audit(130.620:218445): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885341][ T30] audit: type=1400 audit(130.620:218446): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885355][ T30] audit: type=1400 audit(130.620:218447): lsm=SMACK fn=smack_inode_set_acl action=granted subject="_" object="_" requested=w pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885369][ T30] audit: type=1400 audit(130.620:218448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885383][ T30] audit: type=1400 audit(130.620:218449): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885397][ T30] audit: type=1400 audit(130.620:218450): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.885418][ T30] audit: type=1400 audit(130.620:218451): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7808 comm="syz.0.795" name="151" dev="tmpfs" ino=876 [ 130.983423][ T7819] loop5: detected capacity change from 0 to 1024 [ 130.989107][ T7819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.001326][ T7819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.049157][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.106230][ T7827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.799'. [ 131.399342][ T7839] netlink: 15231 bytes leftover after parsing attributes in process `syz.5.803'. [ 131.528445][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.807'. [ 131.542282][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.807'. [ 132.581418][ T7884] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.817'. [ 132.615204][ T7885] overlayfs: failed to clone upperpath [ 132.638632][ T7886] overlayfs: failed to clone upperpath [ 132.791863][ T7888] loop5: detected capacity change from 0 to 512 [ 132.794666][ T7888] EXT4-fs: inline encryption not supported [ 132.800243][ T7888] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 132.802085][ T7888] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.818: invalid indirect mapped block 2683928664 (level 1) [ 132.807242][ T7888] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 132.811813][ T7888] EXT4-fs (loop5): 1 truncate cleaned up [ 132.814065][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 132.814082][ C1] EXT4-fs (loop5): initial error at time 132: ext4_free_branches:1023: inode 13 [ 132.814100][ C1] EXT4-fs (loop5): last error at time 132: ext4_free_branches:1023: inode 13 [ 132.825046][ T7888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.172854][ T7897] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1803188595: comm syz.5.818: invalid block [ 133.174992][ T7897] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.818: invalid indirect mapped block 2054779762 (level 0) [ 133.697093][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.896429][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 134.067510][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.831'. [ 135.918576][ T8041] macvlan0: entered promiscuous mode [ 135.931317][ T4799] IPVS: starting estimator thread 0... [ 135.935805][ T30] kauditd_printk_skb: 28479 callbacks suppressed [ 135.935838][ T30] audit: type=1400 audit(135.910:233905): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4712 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 135.940466][ T30] audit: type=1400 audit(135.910:233906): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4712 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 135.943464][ T30] audit: type=1400 audit(135.910:233907): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7230 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 135.943529][ T30] audit: type=1400 audit(135.910:233908): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7230 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 135.943601][ T30] audit: type=1400 audit(135.910:233909): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7230 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 135.943648][ T30] audit: type=1400 audit(135.910:233910): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7230 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 135.943704][ T30] audit: type=1400 audit(135.910:233911): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=7230 comm="syz-executor" name="28" dev="tmpfs" ino=169 [ 135.943802][ T30] audit: type=1400 audit(135.910:233912): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7230 comm="syz-executor" path="/28" dev="tmpfs" ino=169 [ 135.943883][ T30] audit: type=1400 audit(135.910:233913): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=7230 comm="syz-executor" path="/28" dev="tmpfs" ino=169 [ 135.943987][ T30] audit: type=1400 audit(135.910:233914): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7230 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 136.014242][ T8042] IPVS: using max 60 ests per chain, 144000 per kthread [ 136.039450][ T8052] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.923560][ T8066] overlayfs: failed to clone upperpath [ 137.450473][ T8084] loop5: detected capacity change from 0 to 2048 [ 137.613429][ T8097] : renamed from bond_slave_0 (while UP) [ 137.629094][ T8084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.687108][ T8097] fuse: Bad value for 'fd' [ 137.733182][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.342933][ T8123] netlink: 'syz.4.870': attribute type 4 has an invalid length. [ 138.342966][ T8123] netlink: 152 bytes leftover after parsing attributes in process `syz.4.870'. [ 138.346314][ T8123] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 138.407275][ T8128] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 138.868377][ T8141] overlayfs: failed to clone upperpath [ 139.218994][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 139.384977][ T8160] bond1: entered allmulticast mode [ 139.392550][ T8160] wireguard0: entered promiscuous mode [ 139.392857][ T8160] wireguard0: entered allmulticast mode [ 139.393177][ T8160] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 139.394638][ T8160] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 139.680828][ T8174] 9p: Bad value for 'rfdno' [ 140.145470][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 140.319585][ T8190] overlayfs: failed to clone upperpath [ 140.556146][ T8197] overlayfs: failed to clone upperpath [ 140.654818][ T8204] overlayfs: failed to clone upperpath [ 141.118340][ T30] kauditd_printk_skb: 16490 callbacks suppressed [ 141.118390][ T30] audit: type=1400 audit(141.090:243643): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7201 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 141.118417][ T30] audit: type=1400 audit(141.090:243644): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7201 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 141.118436][ T30] audit: type=1400 audit(141.090:243646): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7201 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 141.118453][ T30] audit: type=1400 audit(141.090:243645): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8184 comm="syz.4.891" saddr=10.128.0.169 src=30028 daddr=10.128.1.7 dest=60844 netif=enp0s0 [ 141.118468][ T30] audit: type=1400 audit(141.090:243647): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7201 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 141.118483][ T30] audit: type=1400 audit(141.090:243648): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=7201 comm="syz-executor" name="37" dev="tmpfs" ino=250 [ 141.118497][ T30] audit: type=1400 audit(141.090:243649): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7201 comm="syz-executor" path="/37" dev="tmpfs" ino=250 [ 141.118511][ T30] audit: type=1400 audit(141.090:243650): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=7201 comm="syz-executor" path="/37" dev="tmpfs" ino=250 [ 141.118525][ T30] audit: type=1400 audit(141.090:243651): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7201 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 141.118538][ T30] audit: type=1400 audit(141.090:243652): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7201 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 141.282044][ T8212] loop5: detected capacity change from 0 to 512 [ 141.285404][ T8212] EXT4-fs: inline encryption not supported [ 141.305254][ T8212] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 141.305698][ T8212] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.900: invalid indirect mapped block 2683928664 (level 1) [ 141.305715][ T8212] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 141.306026][ T8212] EXT4-fs (loop5): 1 truncate cleaned up [ 141.306484][ T8212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.926601][ T8235] netlink: 116 bytes leftover after parsing attributes in process `syz.4.907'. [ 141.929722][ T8235] bridge_slave_0: left allmulticast mode [ 141.931226][ T8235] bridge_slave_0: left promiscuous mode [ 141.932661][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.961604][ T8239] overlayfs: failed to clone upperpath [ 142.518346][ T8246] overlayfs: failed to clone upperpath [ 142.526115][ T8246] overlay: Unknown parameter 'fsuuid' [ 142.870004][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.838307][ T8283] loop5: detected capacity change from 0 to 512 [ 143.843376][ T8283] EXT4-fs (loop5): Test dummy encryption mode enabled [ 143.851674][ T8283] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.922: inode has both inline data and extents flags [ 143.851723][ T8283] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.854889][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 143.854902][ C0] EXT4-fs (loop5): initial error at time 143: ext4_orphan_get:1399: inode 15 [ 143.854921][ C0] EXT4-fs (loop5): last error at time 143: ext4_orphan_get:1399: inode 15 [ 143.862642][ T8283] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.922: couldn't read orphan inode 15 (err -117) [ 143.862679][ T8283] loop5: lost filesystem error report for type 5 error -117 [ 143.866193][ T8283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.511957][ T8291] overlayfs: missing 'lowerdir' [ 144.699824][ T8295] overlayfs: failed to clone upperpath [ 144.882877][ T8306] netlink: 'syz.2.929': attribute type 15 has an invalid length. [ 144.882913][ T8306] netlink: 11706 bytes leftover after parsing attributes in process `syz.2.929'. [ 144.883151][ T8306] netlink: 'syz.2.929': attribute type 4 has an invalid length. [ 144.883166][ T8306] netlink: 'syz.2.929': attribute type 5 has an invalid length. [ 144.883180][ T8306] netlink: 'syz.2.929': attribute type 6 has an invalid length. [ 144.883195][ T8306] netlink: 'syz.2.929': attribute type 7 has an invalid length. [ 144.883207][ T8306] netlink: 'syz.2.929': attribute type 11 has an invalid length. [ 144.883219][ T8306] netlink: 'syz.2.929': attribute type 15 has an invalid length. [ 144.883230][ T8306] netlink: 'syz.2.929': attribute type 16 has an invalid length. [ 144.883241][ T8306] netlink: 'syz.2.929': attribute type 21 has an invalid length. [ 144.883251][ T8306] netlink: 'syz.2.929': attribute type 25 has an invalid length. [ 145.002531][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.932'. [ 145.121283][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.192327][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.934'. [ 145.199939][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.934'. [ 145.345742][ T8328] overlayfs: failed to clone upperpath [ 146.126671][ T8348] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 146.159109][ T4704] audit_log_start: 15974 callbacks suppressed [ 146.159121][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.159129][ T4704] audit: audit_lost=83170 audit_rate_limit=0 audit_backlog_limit=64 [ 146.159138][ T4704] audit: backlog limit exceeded [ 146.159147][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.159153][ T4704] audit: audit_lost=83171 audit_rate_limit=0 audit_backlog_limit=64 [ 146.159159][ T4704] audit: backlog limit exceeded [ 146.159168][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.159173][ T4704] audit: audit_lost=83172 audit_rate_limit=0 audit_backlog_limit=64 [ 146.159179][ T4704] audit: backlog limit exceeded [ 146.159233][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.461348][ T8368] overlayfs: missing 'lowerdir' [ 147.223725][ T8373] overlayfs: failed to clone upperpath [ 147.359221][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 147.361261][ T8381] bridge_slave_1: left allmulticast mode [ 147.362678][ T8381] bridge_slave_1: left promiscuous mode [ 147.364161][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.414771][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 148.034871][ T8397] overlayfs: failed to clone upperpath [ 148.433366][ T8429] overlayfs: failed to clone upperpath [ 148.629502][ T8432] overlayfs: missing 'lowerdir' [ 148.854319][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.202694][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.253229][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 149.505910][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 149.520214][ T8446] overlayfs: failed to clone upperpath [ 149.537664][ T8449] overlayfs: failed to clone upperpath [ 150.586320][ T8472] overlayfs: failed to clone upperpath [ 151.083735][ T8480] loop5: detected capacity change from 0 to 128 [ 151.256926][ T30] kauditd_printk_skb: 10255 callbacks suppressed [ 151.258328][ T30] audit: type=1400 audit(151.210:259734): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=8473 comm="syz.6.980" path="anon_inode:[pidfd]" dev="pidfs" ino=9160 [ 151.685883][ T8483] overlayfs: failed to clone upperpath [ 151.688876][ T30] audit: type=1400 audit(151.520:259735): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8473 comm="syz.6.980" name="newroot" dev="tmpfs" ino=2 [ 151.692471][ T30] audit: type=1400 audit(151.520:259736): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8473 comm="syz.6.980" name="dev" dev="tmpfs" ino=3 [ 151.698118][ T30] audit: type=1400 audit(151.630:259737): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8473 comm="syz.6.980" name="61" dev="tmpfs" ino=369 [ 151.701481][ T30] audit: type=1400 audit(151.630:259738): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8473 comm="syz.6.980" name="61" dev="tmpfs" ino=369 [ 151.706015][ T30] audit: type=1400 audit(151.630:259739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8473 comm="syz.6.980" name="61" dev="tmpfs" ino=369 [ 151.706083][ T30] audit: type=1400 audit(151.640:259740): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8473 comm="syz.6.980" name="61" dev="tmpfs" ino=369 [ 151.706159][ T30] audit: type=1400 audit(151.640:259741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8473 comm="syz.6.980" name="61" dev="tmpfs" ino=369 [ 151.706224][ T30] audit: type=1400 audit(151.640:259742): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=8473 comm="syz.6.980" name="61" dev="tmpfs" ino=369 [ 151.706289][ T30] audit: type=1400 audit(151.650:259743): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8473 comm="syz.6.980" name="61" dev="tmpfs" ino=369 [ 151.760598][ T8485] overlay: Unknown parameter 'fsuuid' [ 152.095904][ T8480] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.115184][ T7201] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.667071][ T8501] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 152.667468][ T8501] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 152.667531][ T8501] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 153.473100][ T8530] overlayfs: failed to clone upperpath [ 156.037165][ T8576] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1008'. [ 156.130776][ T8578] loop5: detected capacity change from 0 to 512 [ 156.133931][ T8578] EXT4-fs: Ignoring removed nobh option [ 156.141839][ T8578] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 156.144330][ T8578] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 156.147021][ T8578] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.1006: inode has both inline data and extents flags [ 156.149923][ T8578] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 156.150244][ T8578] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1006: couldn't read orphan inode 13 (err -117) [ 156.154682][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 156.154694][ C1] EXT4-fs (loop5): initial error at time 156: ext4_orphan_get:1399: inode 13 [ 156.154710][ C1] EXT4-fs (loop5): last error at time 156: ext4_orphan_get:1399: inode 13 [ 156.162571][ T8578] loop5: lost filesystem error report for type 5 error -117 [ 156.163990][ T8578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.264611][ T30] kauditd_printk_skb: 11299 callbacks suppressed [ 156.264652][ T30] audit: type=1400 audit(156.230:266390): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4345 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=4937 [ 156.264681][ T30] audit: type=1400 audit(156.230:266391): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" name="queue" dev="tmpfs" ino=4937 [ 156.264705][ T30] audit: type=1400 audit(156.230:266392): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 156.264728][ T30] audit: type=1400 audit(156.230:266393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="tmpfs" ino=1 [ 156.264747][ T30] audit: type=1400 audit(156.230:266394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 156.264765][ T30] audit: type=1400 audit(156.230:266395): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="watch" dev="tmpfs" ino=78 [ 156.264782][ T30] audit: type=1400 audit(156.230:266396): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 156.265170][ T30] audit: type=1400 audit(156.230:266397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="tmpfs" ino=1 [ 156.265194][ T30] audit: type=1400 audit(156.230:266398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 156.265209][ T30] audit: type=1400 audit(156.230:266399): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" name="queue" dev="tmpfs" ino=4937 [ 156.699298][ T8593] overlayfs: failed to clone upperpath [ 157.181957][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1013'. [ 157.300430][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.170240][ T8626] syz.6.1023 (8626): attempted to duplicate a private mapping with mremap. This is not supported. [ 158.191911][ T8628] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1024'. [ 158.253777][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1024'. [ 158.498058][ T8638] netlink: 15231 bytes leftover after parsing attributes in process `syz.6.1026'. [ 158.986527][ T8640] overlayfs: missing 'lowerdir' [ 159.545587][ T8650] overlayfs: failed to clone upperpath [ 159.659314][ T8652] ip6tnl0: entered promiscuous mode [ 159.860216][ T8660] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 159.860246][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 161.283927][ T30] kauditd_printk_skb: 11132 callbacks suppressed [ 161.283997][ T30] audit: type=1400 audit(161.250:270482): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="60" dev="tmpfs" ino=407 [ 161.284154][ T30] audit: type=1400 audit(161.250:270483): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="60" dev="tmpfs" ino=407 [ 161.284212][ T30] audit: type=1400 audit(161.250:270484): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="/" dev="sysfs" ino=1 [ 161.305033][ T30] audit: type=1400 audit(161.260:270485): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="class" dev="sysfs" ino=24 [ 161.305120][ T30] audit: type=1400 audit(161.260:270486): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="rnbd-client" dev="sysfs" ino=19800 [ 161.305190][ T30] audit: type=1400 audit(161.260:270487): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="rnbd-client" dev="sysfs" ino=19800 [ 161.305242][ T30] audit: type=1400 audit(161.260:270488): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="class" dev="sysfs" ino=24 [ 161.305293][ T30] audit: type=1400 audit(161.260:270489): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="/" dev="sysfs" ino=1 [ 161.305344][ T30] audit: type=1400 audit(161.260:270490): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="devices" dev="sysfs" ino=18 [ 161.305399][ T30] audit: type=1400 audit(161.260:270491): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8668 comm="syz.5.1035" name="virtual" dev="sysfs" ino=1344 [ 161.793744][ T8675] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 161.806152][ T8675] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 162.528407][ T8675] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 162.528484][ T8675] ================================================================== [ 162.528496][ T8675] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 162.528517][ T8675] Read of size 255 at addr 0000000000000000 by task syz.5.1035/8675 [ 162.528526][ T8675] [ 162.528532][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.5.1035 Not tainted syzkaller #0 PREEMPT [ 162.528544][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 162.528551][ T8675] Call trace: [ 162.528555][ T8675] show_stack+0x2c/0x3c (C) [ 162.528574][ T8675] __dump_stack+0x30/0x40 [ 162.528590][ T8675] dump_stack_lvl+0xd8/0x12c [ 162.528606][ T8675] print_report+0x58/0x84 [ 162.528619][ T8675] kasan_report+0x8c/0xc4 [ 162.528635][ T8675] kasan_check_range+0x17c/0x1ac [ 162.528650][ T8675] __asan_memcpy+0x3c/0x84 [ 162.528666][ T8675] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 162.528681][ T8675] __traceiter_rtrs_clt_close_conns+0x74/0xc8 [ 162.528694][ T8675] rtrs_clt_close_conns+0x2f0/0x40c [ 162.528710][ T8675] rtrs_clt_open+0xa6c/0xd54 [ 162.528725][ T8675] rnbd_clt_map_device+0xcb8/0x1f64 [ 162.528742][ T8675] rnbd_clt_map_device_store+0x900/0xad8 [ 162.528758][ T8675] dev_attr_store+0x6c/0x90 [ 162.528773][ T8675] sysfs_kf_write+0xe0/0x108 [ 162.528789][ T8675] kernfs_fop_write_iter+0x260/0x3b8 [ 162.528803][ T8675] vfs_write+0x51c/0xa0c [ 162.528816][ T8675] ksys_write+0x12c/0x228 [ 162.528828][ T8675] __arm64_sys_write+0x84/0x98 [ 162.528840][ T8675] invoke_syscall+0x98/0x244 [ 162.528856][ T8675] el0_svc_common+0x19c/0x23c [ 162.528873][ T8675] do_el0_svc+0x4c/0x5c [ 162.528889][ T8675] el0_svc+0x64/0x260 [ 162.528904][ T8675] el0t_64_sync_handler+0x44/0x104 [ 162.528918][ T8675] el0t_64_sync+0x198/0x19c [ 162.528931][ T8675] ================================================================== [ 162.528950][ T8675] Disabling lock debugging due to kernel taint [ 162.603553][ T8679] overlayfs: failed to clone upperpath [ 166.943847][ T30] kauditd_printk_skb: 2540 callbacks suppressed [ 166.943904][ T30] audit: type=1400 audit(166.910:272309): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=4704 ocomm="udevd" [ 166.955249][ T30] audit: type=1400 audit(166.930:272310): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=7206 ocomm="udevd" [ 166.955357][ T30] audit: type=1400 audit(166.930:272311): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=4702 ocomm="udevd" [ 166.955398][ T30] audit: type=1400 audit(166.930:272312): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=4913 ocomm="udevd" [ 166.955435][ T30] audit: type=1400 audit(166.930:272313): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=4914 ocomm="udevd" [ 166.955471][ T30] audit: type=1400 audit(166.930:272314): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=4705 ocomm="udevd" [ 166.955506][ T30] audit: type=1400 audit(166.930:272315): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=7207 ocomm="udevd" [ 166.955541][ T30] audit: type=1400 audit(166.930:272316): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" opid=5796 ocomm="udevd" [ 166.966230][ T30] audit: type=1400 audit(166.940:272317): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 166.966279][ T30] audit: type=1400 audit(166.940:272318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="etc" dev="nvme0n1p2" ino=96