last executing test programs: 13m12.992085717s ago: executing program 2 (id=857): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0xa8c01) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) r5 = semget(0x1, 0x4, 0x39c) semop(r5, &(0x7f0000000600)=[{0x2, 0x9, 0x800}], 0x1) semctl$GETNCNT(r5, 0x1, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x6}]}, 0x2c}}, 0x4004810) 13m11.859981071s ago: executing program 2 (id=859): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0xe, "5c76276f6c86622447099377e66e"}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x201, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x2, 0xffd, 0x0, 0x0, 0x1}, {0x1003, 0x3ffe, 0x0, 0x0, 0x1}, {0x8, 0xaf1, 0x0, 0x0, 0x1}]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000340)={0x4, [[0x5, 0x2, 0x5d29f1a1, 0xddd, 0x1, 0x10, 0x9ed, 0x3], [0x9, 0x42ec, 0x10000, 0x1000, 0x0, 0x5, 0xffffffff, 0x6], [0x7, 0xfff, 0xd, 0x8, 0x7f, 0x0, 0x7, 0x1]], '\x00', [{0x2c, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x1}, {0x8, 0x9, 0x0, 0x1, 0x1}, {0xb6c5, 0xf429, 0x1, 0x1}, {0x0, 0x800}, {0x200, 0x76c, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1}, {0x8000, 0x10000, 0x0, 0x0, 0x0, 0x1}, {0x6, 0xf, 0x1, 0x1, 0x1}, {0x6, 0x85d9, 0x1, 0x1, 0x1, 0x1}, {0xf, 0x21, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x7}], '\x00', 0x4}) 13m11.413905717s ago: executing program 2 (id=863): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001900), r1) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2505000000"], 0x24}, 0x1, 0x0, 0x0, 0xdd20e1676ce9cab4}, 0x80) 13m11.211429248s ago: executing program 2 (id=866): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x9, 0x201, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @multicast}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13m9.963552834s ago: executing program 2 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='127.0.0.1:/\x00', 0x1df) 13m8.71225296s ago: executing program 2 (id=877): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x61) writev(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)="994b7372433f40b7dc8743e65285b2f966dd667ba378d42a5d28e7755590ab29f26bc78bfdb6d6f80e94c469c6126d556a04e65a31f8a53e9313b0f7be0b4df0f29938b84f3ddb13a659a36c31bf50e780e3c414aa91f1d3bb7f633196aafc5d28d7196a0b7d9cc94134d9c8d36990d05a66c22efce3df34cbbb257201d8cb03f7488b2ba731a04910e873232c5e9b123fce3873fe20fa7e2afd0d24a7b9e22ec740ddd30fbc1ae5b9b1dfbe6895c3a81990058f09b4967ccc8b1de924e8114f43e4f77edefee8a5e6603003c2a02bbbb9fee5754a531bda8b57b3f6f73118e36674dc2cd985eae7a2ba8acd1fee9787c6ddc5fd2e480523c9ed591abea739dcd445c6d8e989b7546f3f536cba268c2e871327ed042184ba6ba6881af6b63e272f06e6ca5443753427a599651078bbb9ac978bb077d019c832", 0x139}], 0x1) 13m7.695327083s ago: executing program 32 (id=877): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x61) writev(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x139}], 0x1) 8.00808147s ago: executing program 4 (id=3909): lgetxattr(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x804) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/208, 0xd0}, 0xfffffff7}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000b80)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x2e9, 0x0) 7.942997916s ago: executing program 4 (id=3910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0xffffffff, 0x2, 0xff, 0xa, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.474320754s ago: executing program 4 (id=3913): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x188) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mkdirat(0xffffffffffffffff, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001080), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000010c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x402, &(0x7f0000001100)={&(0x7f0000001140)=""/108, 0x6c}) bind$rxrpc(r1, &(0x7f00000011c0)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r1, 0x1) sendmsg(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 7.470941344s ago: executing program 1 (id=3914): r0 = syz_open_dev$usbfs(&(0x7f0000000e00), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000ec0)={0x8, 0x1}) 6.607411142s ago: executing program 1 (id=3917): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, "c0"}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_4={0x3, 0x2, 0x2, "bcd27ca4"}, @main=@item_4={0x3, 0x0, 0x8, "223b54cc"}, @global=@item_012={0x1, 0x1, 0x5, '\a'}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "f50e16f8"}]}}, 0x0}, 0x0) 6.514876041s ago: executing program 0 (id=3918): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x2800091, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="0784dddcebe094ed47da922d40c8ba0e50d385dc7623889db5587b0e31ceade0f7b4dea0c04367815516b9d9ce6a48433f75", @ANYRESDEC, @ANYRES16], 0x55, 0x1bd, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file2\x00', 0x80000, 0x82) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000240)='./file2\x00', 0x2000000, &(0x7f00000002c0)=ANY=[], 0x1, 0x20f, &(0x7f0000000300)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x2000, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x2, 0x2, 0x701, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2208000, 0x0) 6.358877097s ago: executing program 0 (id=3920): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000080)=ANY=[], 0x1, 0x5577, &(0x7f0000000c80)="$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") socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='.\x00', &(0x7f0000000840)={0x474082, 0x5c, 0xa}, 0x18) 5.850809138s ago: executing program 1 (id=3922): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x0, 0x1}, 0x9, 0x40, 0x0, 0x0, 0x8, 0x3, 0x3, 0x4, 0x3, 0x0}) 5.147614959s ago: executing program 1 (id=3923): mkdir(&(0x7f0000000040)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='dir0/tracing_on\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002ec0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000002f00)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000002f40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000003040), 0x318, 0x0) recvmmsg(r2, &(0x7f0000003080), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000030c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000003140)='net/netlink\x00') preadv(r4, &(0x7f0000003180), 0x0, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003380)={0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003440)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f010100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, &(0x7f0000003480)='./sys\x00', 0x9e) mount(0x0, &(0x7f00000034c0)='./sys\x00', &(0x7f0000003500)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000003540)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r7 = openat(r6, 0x0, 0x1, 0x0) write(r7, &(0x7f00000035c0)='00:03', 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002840)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d0, 0xd0, 0x418, 0x348, 0x348, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x120, 0x18da, 'kmp\x00', "825610de5ad9fa1530d931009214a111797e8f1597fabe8a933ad4d823aac0e2beaec8435ecf7e5b5b884a22f56d00bc30ea50c6f9aa105e562b24147e26aebef1cb45766c7d27f3e6148d66f882d947dbdc34c4d24c84da3dfa80fe02f3d655860df9c93c088bca440b81139288125a49689b39a7fa6bd60a8737af8102c00b", 0x9, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffc, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) write$cgroup_pid(r0, &(0x7f0000000180)=0xffffffffffffffff, 0x12) 3.311889485s ago: executing program 1 (id=3925): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='!*:*', 0x4) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtaction={0x70, 0x30, 0x1, 0x70bd2a, 0x25dfdbde, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x94, 0xf1, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2004c840}, 0x4000814) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f00000018c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file1\x00', 0x42, 0x40) fallocate(r5, 0x0, 0x8e14, 0x8ffff) copy_file_range(r5, 0x0, r5, &(0x7f0000001cc0)=0xffff, 0x9, 0x0) 3.000554187s ago: executing program 0 (id=3928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000c80)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000cc0)=[&(0x7f0000000d00)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) clock_gettime(0x0, &(0x7f0000000d40)) io_getevents(r1, 0x3, 0x3, &(0x7f0000000d80)=[{}, {}, {}], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40020}, 0x4000050) 2.316175525s ago: executing program 3 (id=3929): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) capget(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x3e00, 0x4, 0x5, 0x9, 0x2, 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2.302024697s ago: executing program 4 (id=3930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d2000008000700"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x0) 2.048082903s ago: executing program 4 (id=3931): fsopen(&(0x7f0000000340)='cpuset\x00', 0x0) 1.945709953s ago: executing program 4 (id=3932): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000b80)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x117000, &(0x7f0000007580)=ANY=[], 0x1, 0x1535, &(0x7f0000000d00)="$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") gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000007400)={0x0, 0x0, 0x3ed4, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000007480)={0x8001, 0x3, 0x8, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8, 0x0, 0x3, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x1001ff, 0x3, 0x800000000000, 0x0, 0x2, 0x0, 0xffeffffffffffffe}) syz_mount_image$msdos(&(0x7f0000002240), &(0x7f0000002280)='./file0\x00', 0x180c8, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000002400)="$eJzs3cFqE0EYB/CvaZKNvdizeFjw4qmoJ69BKogBIZKDgmCgemlF2F6ipzyGT+DBR/IxeipeVppdmza2xYRs1ia/H4T9yD+7mWFgZw8zyfv7nw4PPh9/zH9+i04njWbEOM8jdqMR21HYKo+NSd2Oi8Yxv9YC5wAAy9PvD7t1t4HFff+Hz2RZd3j2zJX8lQx+VNIoAAAAAAAAAAAAKnfV+v84rXb9PwBQL+v/11+WdYc75fPbZdb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU5zfO7+Q2vutsHACyf+R8ANo/5HwA2j/kfADbP6zdvX3Z7vf1+mnYiTsajwWhQHIv8+Yve/qN0Ynd61sloNNg+zx8XeXo5b8VOmT+5Mm/HwwdFfpY9e9WbyZM4qL77AAAAAAAAAAAAAAAAAAAA8F/YS9PJzv+4Zn//XhLl7v3ZvKgu/D7AzP79ZtxrrqwbAAAAAAAAAAAAAAAAAAAAcKsdf/l6ODw6+pDNUdxZ6Kxril95YWkXXLBIYsVfuhXn77TKwVjSleNptY1/165vmG4oYtUjuN7FnztEo76bEwAAAAAAAAAAAAAAAAAAbJjppt+6WwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Zn+/38FRVIUETHOC3V3FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhjvwMAAP//cUGYlA==") read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020}, 0x2020) add_key(&(0x7f0000006c80)='asymmetric\x00', 0x0, &(0x7f0000006cc0)="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", 0x4ea, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000006840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000006880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa0000, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000069c0)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@snapshot={0x0, 0x2418, 0x0, 0x60, 'snapshot\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'n', 0x20, '8'}}]}) 1.853317573s ago: executing program 3 (id=3933): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x2, @mcast2, 0xa}, 0x1c) 1.602494158s ago: executing program 3 (id=3934): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10) 1.343336264s ago: executing program 3 (id=3935): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000b00)={r0, 0x7}, 0x0, &(0x7f0000000b40)="5153607f31f9a2", 0x0) 1.28807318s ago: executing program 0 (id=3936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x19, &(0x7f0000000640)={&(0x7f00000064c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) 1.118337117s ago: executing program 0 (id=3937): r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x1a1300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) listen(0xffffffffffffffff, 0x6) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x1c) creat(&(0x7f0000000700)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000740)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000780)=0x2eb4, 0x2000007ff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x200800, &(0x7f0000000880)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}}) fcntl$setstatus(r0, 0x4, 0x400) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000300)=[{0x15, 0x1, 0x0, 0x3}, {0x54, 0xfe}, {0x6, 0x0, 0x0, 0xfff}]}) 1.115732367s ago: executing program 3 (id=3938): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000a80)={0x2c, 0xa, r1, 0x18}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000ac0)="5a207a7e9f890c06f3f9708e3c0efae2d236a721d39d5da34a5dee6adc87c8146118301779533d3c41784634fd5b71bd47cf2bd98f603853816f0516d92c3160e7b3e0fa2b6bb34fc0890a143bb7c1d3845045f5f650a97f2001e426c7f19999e35beee7a9b31879fb8a1afbdf99b94bbc476510e8c990b55c48399e11bcc24e82a6089606504534eb8219cc17138e36", 0x90}, {&(0x7f0000000b80)="9a5787186bb50bc8d263752e461964452065c9655b3410dc827772111e3dfd5b57b62a4d519e01cfad667443d5a8db20f51bda59d546de0388b1ff1151cd6c2e11c00b4efc078869e4723322461bd46b0634b4bfc0979fd9f534890935180bfa653b9035031a3fe3c7dc4a87c0", 0x6d}, {&(0x7f0000000c80)="40b2b87f4f07c017be71e7b29b8a73be9b4201fb05502079a65f68dbead862e100796f39ec888b8be506c8f751cc6256df6f2da1f31847498ac1358a363802504d33929431382a484aa1a6c6f758385ea953dda3ec114db5f7b6ed885db3d17b6c31198e6afe96c840ace14a610a3d7f", 0x70}, {&(0x7f0000000d00)="7681c21b2e7e48bf69a051b156f8b8d77cff8dbb0534a18d5cdb2a552ae524d96b1da3f4132927c881afb6df8995ca98361fd4f19e62", 0x36}, {&(0x7f0000000e40)="3dd83c4564e8f015102305cfed489327417b8f966bf49315f8d52ff6f38c8865b6c0b41078a9387d664487e175c48990497face9ebdebe3c1e5ff6262caa51f9d59f2e63ead853ec2c7f7e75257c2c445519da59139f5148a98ffee1863012b8f42a49984147b02ba60877a73f6350da8194691c355ca6835403876ef509bba892f3abaa8904a3c2756f816fa9d94da962e942d20043be9ba87922b980ea04f2ff777f064a384925e94ac4677e03a3", 0xaf}, {0x0}, {&(0x7f0000000fc0)="452ab2a640eae45eb0a6911ff5036ec6bf016e051a5d06fb87ff47d882a209d0519ebb1fef0cf47a885aa8cb5062511ec0377d4d27c979102a3fb4c010c6dc512a491d8ae0aa6c01896cea63637dbdc65f314cd3e9102107470ceba41a7254a2411ec265d6572d0c618bc884e33401482bc6df09080987be3f78922aabb150", 0x7f}], 0x7, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@gettaction={0x14, 0x5a, 0x1, 0x2}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000a00)={0x1f, 0xffff, 0x3}, 0x6) setns(0xc9, 0x0) r3 = socket(0x1f, 0x3, 0x1) bind(r3, &(0x7f0000000500)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000580)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f", 0x16) 913.230938ms ago: executing program 3 (id=3939): openat$loop_ctrl(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0xa, 0x3, 0xff) r0 = io_uring_setup(0x4dec, &(0x7f0000000f40)={0x0, 0x54c4, 0x200, 0x0, 0x2ff}) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10010, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000011c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000013c0)) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000001440)={0xa, 0x4e24, 0x25a, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000001480)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 803.353618ms ago: executing program 1 (id=3940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x25, 0x55c9, &(0x7f0000001140)="$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") ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=3941): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a91000/0x3000)=nil, 0x3000, 0x2) kernel console output (not intermixed with test programs): ttributes in process `syz.4.1317'. [ 497.395240][T11138] fuse: Bad value for 'fd' [ 498.070496][T11141] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 499.599545][T11163] fuse: Bad value for 'fd' [ 499.976582][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 499.991062][T11174] fuse: Bad value for 'fd' [ 501.558021][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.572858][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.793979][T11207] 9pnet_fd: Insufficient options for proto=fd [ 502.996418][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 503.013695][T11214] fuse: Bad value for 'fd' [ 503.684266][T11189] Bluetooth: hci1: command 0x0406 tx timeout [ 504.310090][T11225] fuse: Bad value for 'fd' [ 506.048022][T11250] 9pnet_fd: Insufficient options for proto=fd [ 506.572212][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'. [ 506.585152][T11260] fuse: Bad value for 'fd' [ 507.700200][T11268] fuse: Bad value for 'fd' [ 508.177129][T11279] 9pnet_fd: Insufficient options for proto=fd [ 510.167450][T11298] fuse: Bad value for 'fd' [ 510.377714][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 510.400035][T11302] fuse: Bad value for 'fd' [ 510.557324][T11301] 9pnet_fd: Insufficient options for proto=fd [ 512.728677][T11330] fuse: Bad value for 'fd' [ 512.908672][T11336] 9pnet_fd: Insufficient options for proto=fd [ 515.780998][T11373] fuse: Bad value for 'fd' [ 516.005918][T11376] 9pnet_fd: Insufficient options for proto=fd [ 518.151125][T11398] fuse: Bad value for 'fd' [ 518.377421][T11400] netlink: 'syz.1.1403': attribute type 10 has an invalid length. [ 518.402557][T11400] syz_tun: entered promiscuous mode [ 518.474761][T11400] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 519.079188][T11409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.296239][T11420] fuse: Bad value for 'fd' [ 523.121752][T11474] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1431'. [ 523.174936][T11474] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1431'. [ 523.220452][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.227731][T11474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.235309][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.242462][T11474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.370604][T11474] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1431'. [ 524.594993][T11501] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1442'. [ 524.605323][T11501] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1442'. [ 524.614573][T11501] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.621732][T11501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.629325][T11501] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.636554][T11501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.652363][T11501] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1442'. [ 525.344051][T11519] netlink: 'syz.3.1450': attribute type 12 has an invalid length. [ 527.658734][T11532] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1452'. [ 527.702385][T11532] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1452'. [ 527.742100][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.749510][T11532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.757089][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.764285][T11532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.826236][T11532] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1452'. [ 529.679011][T11557] netlink: 'syz.1.1465': attribute type 10 has an invalid length. [ 531.218544][T11568] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.693633][T11600] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 536.892509][T11631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 539.395715][T11656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.159329][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1545'. [ 551.171524][T11800] fuse: Bad value for 'fd' [ 552.159914][T11823] autofs4:pid:11823:autofs_fill_super: called with bogus options [ 554.107539][T11851] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 554.115822][T11851] syz_tun: entered promiscuous mode [ 554.136603][T11851] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 554.574176][T11864] trusted_key: syz.1.1563 sent an empty control message without MSG_MORE. [ 560.814174][ T27] audit: type=1326 audit(2000000007.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11940 comm="syz.3.1585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f924359fb19 code=0x0 [ 562.979934][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.986474][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.130448][T12030] netlink: 'syz.1.1620': attribute type 10 has an invalid length. [ 565.234895][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 565.753836][T12048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.248123][T12054] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1630'. [ 566.271831][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.279225][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.306522][T12054] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1630'. [ 566.316279][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.323493][T12054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.331030][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.338232][T12054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.367316][T12054] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1630'. [ 566.380294][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.387614][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.447389][T12058] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 566.478493][T12058] syz_tun: entered promiscuous mode [ 566.545343][T12058] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 567.930699][T12092] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 569.125349][T12122] autofs4:pid:12122:autofs_fill_super: called with bogus options [ 575.274758][ T27] audit: type=1326 audit(1700000011.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12198 comm="syz.1.1679" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x0 [ 576.157657][T12216] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1684'. [ 576.182092][T12216] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.189552][T12216] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.247396][T12217] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1684'. [ 576.408751][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.416019][T12217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.423610][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.430756][T12217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.520632][T12217] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1684'. [ 576.559499][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.566871][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.039862][T12231] geneve2: entered promiscuous mode [ 577.244013][T12231] bond0: (slave syz_tun): Releasing backup interface [ 577.951893][T12231] bridge_slave_0: left allmulticast mode [ 577.962916][T12231] bridge_slave_0: left promiscuous mode [ 577.971422][T12231] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.003870][T12231] bridge_slave_1: left allmulticast mode [ 578.009833][T12231] bridge_slave_1: left promiscuous mode [ 578.020784][T12231] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.693274][T12231] bond0: (slave bond_slave_0): Releasing backup interface [ 578.735528][T12231] bond0: (slave bond_slave_1): Releasing backup interface [ 578.845712][T12231] team0: Port device team_slave_0 removed [ 578.893971][T12231] team0: Port device team_slave_1 removed [ 578.923770][T12231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.931254][T12231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.965023][T12231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.972512][T12231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.393488][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 579.623156][T12252] hsr_slave_1 (unregistering): left promiscuous mode [ 579.641384][T12254] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1699'. [ 579.665906][T12255] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1699'. [ 579.717599][T12255] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1699'. [ 583.402568][T12280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.093039][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1723'. [ 587.211409][T12340] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.465049][T12356] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.629853][T12374] netlink: 'syz.1.1744': attribute type 10 has an invalid length. [ 592.731271][T12404] netlink: 'syz.3.1754': attribute type 10 has an invalid length. [ 592.778382][T12404] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 594.113073][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 595.303645][T12435] netlink: 'syz.1.1765': attribute type 10 has an invalid length. [ 595.437646][T12442] tipc: Enabling of bearer rejected, failed to enable media [ 599.421333][T12497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 601.212569][T12524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 601.528340][T12530] netlink: 'syz.0.1803': attribute type 10 has an invalid length. [ 601.537155][T12530] syz_tun: entered promiscuous mode [ 601.571436][T12530] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 605.089122][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 608.179256][T12608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 609.706152][T12636] netlink: 'syz.3.1839': attribute type 10 has an invalid length. [ 610.464662][T12646] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 611.424989][T12661] netem: incorrect gi model size [ 611.437993][T12661] netem: change failed [ 612.712249][T12689] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.445787][ T27] audit: type=1326 audit(2000000009.420:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.512886][ T27] audit: type=1326 audit(2000000009.420:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.603795][ T27] audit: type=1326 audit(2000000009.420:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.681560][ T27] audit: type=1326 audit(2000000009.420:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.723744][ T27] audit: type=1326 audit(2000000009.420:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.768481][ T27] audit: type=1326 audit(2000000009.420:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.820905][ T27] audit: type=1326 audit(2000000009.420:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.921184][ T27] audit: type=1326 audit(2000000009.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.971692][ T27] audit: type=1326 audit(2000000009.420:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba2b9fb19 code=0x7ffc0000 [ 618.996697][ T27] audit: type=1326 audit(2000000009.420:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.1.1878" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ba2ba1387 code=0x7ffc0000 [ 619.531727][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 619.553461][T12791] fuse: Bad value for 'fd' [ 619.817512][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1886'. [ 623.644511][T12863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.154599][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1906'. [ 624.169840][T12870] fuse: Bad value for 'fd' [ 624.427636][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.436785][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.631588][T12908] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 628.205580][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1925'. [ 628.220359][T12944] fuse: Bad value for 'fd' [ 628.566060][T12949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 631.300380][T12985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 632.319692][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 632.319708][ T27] audit: type=1326 audit(2000000029.291:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 632.383026][ T27] audit: type=1326 audit(2000000029.291:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 632.443864][ T27] audit: type=1326 audit(2000000029.291:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 632.494648][ T27] audit: type=1326 audit(2000000029.311:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 632.719018][ T27] audit: type=1326 audit(2000000029.311:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 632.749006][ T27] audit: type=1326 audit(2000000029.311:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 632.947274][T13010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 633.802761][ T27] audit: type=1326 audit(2000000029.311:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 634.166737][ T27] audit: type=1326 audit(2000000029.311:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 634.303992][ T27] audit: type=1326 audit(2000000029.311:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 635.321140][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'. [ 635.364050][T13041] fuse: Bad value for 'fd' [ 636.434506][T13050] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 639.316778][T13087] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1972'. [ 639.568431][T13092] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.025006][T13123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.653311][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1979'. [ 642.671281][T13124] fuse: Bad value for 'fd' [ 645.735969][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1995'. [ 647.421897][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2001'. [ 647.436443][T13189] fuse: Bad value for 'fd' [ 649.191446][T13214] ip_tables: iptables: counters copy to user failed while replacing table [ 654.452169][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 654.464297][T13266] fuse: Bad value for 'fd' [ 654.712656][ C0] hrtimer: interrupt took 44359 ns [ 658.547108][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 658.559319][T13320] fuse: Bad value for 'fd' [ 663.254675][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 664.311629][T13370] fuse: Bad value for 'fd' [ 673.667200][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 673.848940][T13492] fuse: Bad value for 'fd' [ 680.614951][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2122'. [ 680.639207][T13577] fuse: Bad value for 'fd' [ 684.437945][T13621] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2142'. [ 685.923277][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.933238][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.709202][T13642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2149'. [ 692.018368][T13717] ip_tables: iptables: counters copy to user failed while replacing table [ 695.772708][T13794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.772891][T13866] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2228'. [ 699.811832][T13866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2228'. [ 701.135113][T13893] x_tables: ip_tables: multiport.1 match: invalid size 48 (kernel) != (user) 56 [ 701.802424][T13903] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2244'. [ 706.623862][T14004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.697572][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 706.830051][T14004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.013058][T14004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.205308][T14004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.541973][T14004] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.097411][T14004] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.142484][T14004] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.204393][T14004] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.412532][T14088] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2296'. [ 710.444753][T14088] x_tables: ip6_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 710.857111][T14104] bond0: (slave bond_slave_1): Releasing backup interface [ 711.315214][T14110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 713.424673][T14154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 715.377618][T14202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 716.053147][T14211] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2330'. [ 718.017654][ T5787] bond0: (slave syz_tun): Releasing backup interface [ 718.044611][ T27] audit: type=1326 audit(2000000033.594:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 718.049158][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.068915][ T27] audit: type=1326 audit(2000000033.634:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 718.070473][ T27] audit: type=1326 audit(2000000033.664:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 718.377919][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.390906][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.407232][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.437453][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 718.450603][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.711053][ T27] audit: type=1326 audit(2000000033.714:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 718.849455][ T27] audit: type=1326 audit(2000000033.714:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 718.872328][T14251] rxe_eth0 speed is unknown, defaulting to 1000 [ 718.882671][ T27] audit: type=1326 audit(2000000033.714:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 718.952653][ T27] audit: type=1326 audit(2000000033.724:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 719.055449][ T27] audit: type=1326 audit(2000000033.714:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 719.128655][ T27] audit: type=1326 audit(2000000033.824:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.2342" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 719.340811][ T2974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.752927][ T2974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.988639][ T2974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.153284][ T2974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.342674][T14300] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2350'. [ 720.601113][ T5783] Bluetooth: hci2: command tx timeout [ 721.076797][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2352'. [ 721.161626][T14307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.188998][T14251] chnl_net:caif_netlink_parms(): no params data found [ 721.245213][T14308] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.266039][T14308] bond1: (slave team0): Enslaving as an active interface with an up link [ 721.397298][ T2974] tipc: Disabling bearer [ 721.509190][ T2974] tipc: Disabling bearer [ 721.548849][ T2974] tipc: Left network mode [ 722.231790][T14251] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.247485][T14251] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.262902][T14251] bridge_slave_0: entered allmulticast mode [ 722.278552][T14251] bridge_slave_0: entered promiscuous mode [ 722.420629][T14251] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.456169][T14251] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.492473][T14251] bridge_slave_1: entered allmulticast mode [ 722.518998][T14251] bridge_slave_1: entered promiscuous mode [ 722.672545][ T5783] Bluetooth: hci2: command tx timeout [ 722.725545][T14251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.755214][T14251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.980043][T14251] team0: Port device team_slave_0 added [ 723.007138][T14251] team0: Port device team_slave_1 added [ 723.193118][T14251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.200141][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.282428][T14251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.338840][T14380] netlink: 'syz.0.2362': attribute type 6 has an invalid length. [ 723.401113][T14251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.427720][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.485312][T14251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.084718][T14251] hsr_slave_0: entered promiscuous mode [ 724.120119][T14251] hsr_slave_1: entered promiscuous mode [ 724.138332][T14251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.167861][T14251] Cannot create hsr debugfs directory [ 724.737884][ T5783] Bluetooth: hci2: command tx timeout [ 725.192684][ T2974] hsr_slave_0: left promiscuous mode [ 725.230932][ T2974] hsr_slave_1: left promiscuous mode [ 725.384800][ T2974] veth1_macvtap: left promiscuous mode [ 725.391086][ T2974] veth0_macvtap: left promiscuous mode [ 725.415298][ T2974] veth1_vlan: left promiscuous mode [ 725.420612][ T2974] veth0_vlan: left promiscuous mode [ 726.827226][ T5783] Bluetooth: hci2: command tx timeout [ 727.354897][ T2974] bond0 (unregistering): Released all slaves [ 727.710002][T14449] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 728.095962][T14461] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2374'. [ 728.397849][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2378'. [ 728.436253][T14472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2378'. [ 728.586712][T14251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 728.608937][T14251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 728.626234][T14251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 728.652272][T14251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 728.888961][T14251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.954287][T14251] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.985473][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.992706][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.060050][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.067255][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.679707][T14501] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.826489][T14251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.970202][T14251] veth0_vlan: entered promiscuous mode [ 730.005911][T14251] veth1_vlan: entered promiscuous mode [ 730.087157][T14251] veth0_macvtap: entered promiscuous mode [ 730.206792][T14251] veth1_macvtap: entered promiscuous mode [ 730.290464][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.324220][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.334569][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.364398][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.377734][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.391007][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.430458][T14251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.485764][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.522312][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.551717][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.582717][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.619312][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.662625][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.690271][T14251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.744535][T14251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.782651][T14251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.801714][T14251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.817212][T14251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.706648][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.771031][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.874577][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.902857][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.002036][T14558] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2394'. [ 733.240137][T14563] loop3: detected capacity change from 0 to 512 [ 733.319004][T14563] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 733.380107][T14563] EXT4-fs (loop3): 1 truncate cleaned up [ 733.416797][T14563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.547492][ T27] audit: type=1800 audit(2000000049.134:61): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2395" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 734.884392][ T1341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm kworker/u4:9: bg 0: block 465: padding at end of block bitmap is not set [ 735.027505][ T1341] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 735.115583][ T1341] EXT4-fs (loop3): This should not happen!! Data will be lost [ 735.115583][ T1341] [ 735.169449][ T1341] EXT4-fs (loop3): Total free blocks count 0 [ 735.201953][ T1341] EXT4-fs (loop3): Free/Dirty block details [ 735.234896][ T1341] EXT4-fs (loop3): free_blocks=0 [ 735.240008][ T1341] EXT4-fs (loop3): dirty_blocks=3060 [ 735.288041][ T1341] EXT4-fs (loop3): Block reservation details [ 735.323801][ T1341] EXT4-fs (loop3): i_reserved_data_blocks=3060 [ 735.677292][ T1341] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 1008 with error 28 [ 738.093583][T11189] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.114291][T11189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.122558][T11189] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.133630][ T5788] bond0: (slave syz_tun): Releasing backup interface [ 738.151474][T11189] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.161157][T11189] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 738.171399][T11189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.282276][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2408'. [ 738.330726][T14632] macvlan2: entered promiscuous mode [ 738.430530][T14632] macvlan2: entered allmulticast mode [ 738.861646][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.987027][T14629] rxe_eth0 speed is unknown, defaulting to 1000 [ 739.061420][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.227470][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.243523][T14651] FAULT_INJECTION: forcing a failure. [ 739.243523][T14651] name fail_futex, interval 1, probability 0, space 0, times 1 [ 739.279964][T14651] CPU: 0 PID: 14651 Comm: syz.3.2412 Not tainted syzkaller #0 [ 739.287490][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 739.297565][T14651] Call Trace: [ 739.300934][T14651] [ 739.303931][T14651] dump_stack_lvl+0x18c/0x250 [ 739.308872][T14651] ? show_regs_print_info+0x20/0x20 [ 739.314138][T14651] ? load_image+0x420/0x420 [ 739.318685][T14651] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 739.324898][T14651] should_fail_ex+0x394/0x4c0 [ 739.329634][T14651] get_futex_key+0x134/0xf40 [ 739.334258][T14651] ? futex_setup_timer+0xc0/0xc0 [ 739.339208][T14651] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 739.345210][T14651] ? __lock_acquire+0x7eb0/0x7eb0 [ 739.350256][T14651] ? preempt_schedule+0xc0/0xd0 [ 739.355241][T14651] futex_wait_setup+0xbc/0x270 [ 739.360040][T14651] ? futex_wait_multiple+0x970/0x970 [ 739.365339][T14651] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 739.371249][T14651] ? _raw_spin_unlock+0x40/0x40 [ 739.376123][T14651] futex_wait+0x1cf/0x640 [ 739.380485][T14651] ? futex_wait_setup+0x270/0x270 [ 739.385549][T14651] ? fd_install+0x60/0x4e0 [ 739.390030][T14651] do_futex+0x2ff/0x3e0 [ 739.394210][T14651] ? __ia32_sys_get_robust_list+0x110/0x110 [ 739.400119][T14651] ? __lock_acquire+0x7eb0/0x7eb0 [ 739.405165][T14651] __se_sys_futex+0x3a9/0x440 [ 739.409863][T14651] ? __x64_sys_futex+0xf0/0xf0 [ 739.414648][T14651] ? __x64_sys_futex+0x21/0xf0 [ 739.419425][T14651] do_syscall_64+0x55/0xb0 [ 739.423861][T14651] ? clear_bhb_loop+0x40/0x90 [ 739.428641][T14651] ? clear_bhb_loop+0x40/0x90 [ 739.433343][T14651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.439253][T14651] RIP: 0033:0x7f78b059fb19 [ 739.443747][T14651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.463431][T14651] RSP: 002b:00007f78b15460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 739.471875][T14651] RAX: ffffffffffffffda RBX: 00007f78b0825fa8 RCX: 00007f78b059fb19 [ 739.479863][T14651] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f78b0825fa8 [ 739.487849][T14651] RBP: 00007f78b0825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 739.495830][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.503816][T14651] R13: 00007f78b0826038 R14: 00007ffde1bcf300 R15: 00007ffde1bcf3e8 [ 739.511822][T14651] [ 739.574834][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.817053][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2415'. [ 739.852245][T14663] bridge0: port 3(vlan2) entered blocking state [ 739.872827][T14663] bridge0: port 3(vlan2) entered disabled state [ 739.890484][T14663] vlan2: entered allmulticast mode [ 739.909684][T14663] team0: entered allmulticast mode [ 739.939369][T14663] team_slave_0: entered allmulticast mode [ 739.962876][T14663] team_slave_1: entered allmulticast mode [ 739.993917][T14663] vlan2: entered promiscuous mode [ 740.008831][T14663] team0: entered promiscuous mode [ 740.017454][T14663] team_slave_0: entered promiscuous mode [ 740.029430][T14663] team_slave_1: entered promiscuous mode [ 740.253567][T11189] Bluetooth: hci3: command tx timeout [ 740.345297][T14629] chnl_net:caif_netlink_parms(): no params data found [ 742.332699][T11189] Bluetooth: hci3: command tx timeout [ 742.441881][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.449137][T14629] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.472884][T14629] bridge_slave_0: entered allmulticast mode [ 742.480228][T14629] bridge_slave_0: entered promiscuous mode [ 742.565224][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.580995][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.589866][T14629] bridge_slave_1: entered allmulticast mode [ 742.602170][T14629] bridge_slave_1: entered promiscuous mode [ 742.997250][T14629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.055268][T14629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.976211][T14629] team0: Port device team_slave_0 added [ 743.995813][T14629] team0: Port device team_slave_1 added [ 744.153113][T14629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.168480][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.307910][T14629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.434224][T11189] Bluetooth: hci3: command tx timeout [ 744.839652][T14629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.919273][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.028757][T14629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.292536][T14629] hsr_slave_0: entered promiscuous mode [ 745.323525][T14629] hsr_slave_1: entered promiscuous mode [ 745.343160][T14629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.365667][T14629] Cannot create hsr debugfs directory [ 746.272619][ T11] hsr_slave_0: left promiscuous mode [ 746.304521][ T11] hsr_slave_1: left promiscuous mode [ 746.350257][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.366264][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.381303][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.402833][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.410972][ T11] bridge_slave_1: left allmulticast mode [ 746.417397][ T11] bridge_slave_1: left promiscuous mode [ 746.425557][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.464345][ T11] bridge_slave_0: left allmulticast mode [ 746.470106][ T11] bridge_slave_0: left promiscuous mode [ 746.509144][T11189] Bluetooth: hci3: command tx timeout [ 746.561154][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.027657][ T11] veth1_macvtap: left promiscuous mode [ 747.054586][ T11] veth0_macvtap: left promiscuous mode [ 747.333162][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.339507][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.382771][ T11] veth1_vlan: left promiscuous mode [ 747.422914][ T11] veth0_vlan: left promiscuous mode [ 748.737668][T14801] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2449'. [ 749.775075][ T11] team0 (unregistering): Port device team_slave_1 removed [ 749.838297][ T11] team0 (unregistering): Port device team_slave_0 removed [ 749.944216][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.033829][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.069406][ T11] bond0 (unregistering): Released all slaves [ 753.250909][T14629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 753.425344][T14629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 753.450483][T14629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 753.498706][T14629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 753.752425][T14629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.790713][T14629] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.810876][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.818098][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.918586][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.925835][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.846126][T14881] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 756.999446][T14629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.256019][T14629] veth0_vlan: entered promiscuous mode [ 757.526161][T14629] veth1_vlan: entered promiscuous mode [ 757.607639][T14927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 758.227701][T14629] veth0_macvtap: entered promiscuous mode [ 758.309114][T14629] veth1_macvtap: entered promiscuous mode [ 758.456471][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.512970][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.553216][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.620899][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.695290][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.755409][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.804197][T14629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.844779][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.855955][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.876426][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.907405][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.948629][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.989221][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.019821][T14629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.090284][T14629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.118320][T14629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.146601][T14629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.172693][T14629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.501490][T14965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 761.094928][T14968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2491'. [ 761.121559][ T9309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.163717][ T9309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.268757][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.323397][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.063945][T15007] loop0: detected capacity change from 0 to 1024 [ 762.225408][T15007] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 762.505041][T15007] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.2497: lblock 2 mapped to illegal pblock 2 (length 1) [ 762.794040][T15007] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 762.962758][T15007] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.2497: lblock 0 mapped to illegal pblock 48 (length 1) [ 763.070168][T15007] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 763.105953][T15007] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.2497: Failed to acquire dquot type 0 [ 763.239161][T15007] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 763.345895][T15007] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2497: mark_inode_dirty error [ 763.423312][T15007] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 763.506352][T15007] EXT4-fs (loop0): 1 orphan inode deleted [ 763.554782][T15007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.685778][T15007] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm syz.0.2497: lblock 1 mapped to illegal pblock 1 (length 1) [ 763.791520][T15007] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 763.851403][T15007] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 60929 [ 764.800978][T15007] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.2497: Failed to acquire dquot type 0 [ 764.985856][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 765.001038][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 765.009429][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 765.017633][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 765.031843][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 765.040076][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 765.052406][T14629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.055682][ T5781] bond0: (slave syz_tun): Releasing backup interface [ 765.080666][ T1327] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 765.147942][ T1327] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 765.178043][ T1327] EXT4-fs error (device loop0): ext4_release_dquot:6994: comm kworker/u4:8: Failed to release dquot type 0 [ 765.208132][T15031] rxe_eth0 speed is unknown, defaulting to 1000 [ 765.228723][T14629] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 765.324439][T14629] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 765.353524][ T9309] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.378610][T14629] EXT4-fs error (device loop0): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error [ 765.546119][ T9309] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.604996][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.634579][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.697042][ T9309] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.973739][ T9309] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.678804][T15031] chnl_net:caif_netlink_parms(): no params data found [ 766.789961][T15073] loop3: detected capacity change from 0 to 1024 [ 766.870672][T15073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.132965][T11189] Bluetooth: hci0: command tx timeout [ 767.679816][T15083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.403733][T15031] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.418051][T15031] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.429127][T15031] bridge_slave_0: entered allmulticast mode [ 768.445021][T15031] bridge_slave_0: entered promiscuous mode [ 768.464381][T15031] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.471821][T15031] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.479856][T15031] bridge_slave_1: entered allmulticast mode [ 768.488297][T15031] bridge_slave_1: entered promiscuous mode [ 768.591266][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'. [ 768.612878][T15104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2513'. [ 768.673349][T15031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.706296][T15031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.909436][T15031] team0: Port device team_slave_0 added [ 768.945467][T15031] team0: Port device team_slave_1 added [ 769.214309][T11189] Bluetooth: hci0: command tx timeout [ 769.230817][ T27] audit: type=1326 audit(2000000064.094:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.4.2515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x0 [ 769.334817][T15031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.405997][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.905357][T15031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.085728][T15031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.121845][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.271335][T15031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.450027][T15121] tipc: Enabling of bearer rejected, failed to enable media [ 770.829896][T15136] loop0: detected capacity change from 0 to 1024 [ 770.977763][T15136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.131697][T15031] hsr_slave_0: entered promiscuous mode [ 771.178873][T15031] hsr_slave_1: entered promiscuous mode [ 771.882106][T15148] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.901980][T11189] Bluetooth: hci0: command tx timeout [ 772.042736][T15031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.063617][T15031] Cannot create hsr debugfs directory [ 772.880125][ T9309] hsr_slave_0: left promiscuous mode [ 772.930113][ T9309] hsr_slave_1: left promiscuous mode [ 772.937929][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.101907][ T9309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.238583][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.366740][ T9309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.506444][ T9309] bridge_slave_1: left allmulticast mode [ 773.585794][ T9309] bridge_slave_1: left promiscuous mode [ 773.688732][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.728513][ T9309] bridge_slave_0: left allmulticast mode [ 773.745486][ T9309] bridge_slave_0: left promiscuous mode [ 773.759731][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.864550][ T9309] veth1_macvtap: left promiscuous mode [ 773.871173][ T9309] veth0_macvtap: left promiscuous mode [ 773.887867][ T9309] veth1_vlan: left promiscuous mode [ 773.933573][T11189] Bluetooth: hci0: command tx timeout [ 774.693864][ T9309] bond1 (unregistering): (slave team0): Releasing backup interface [ 774.943677][ T9309] bond1 (unregistering): Released all slaves [ 776.592802][ T9309] team0 (unregistering): Port device team_slave_1 removed [ 776.745974][ T9309] team0 (unregistering): Port device team_slave_0 removed [ 777.404788][ T9309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.498216][ T9309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.073218][ T9309] bond0 (unregistering): Released all slaves [ 778.465512][T15279] sctp: [Deprecated]: syz.0.2563 (pid 15279) Use of int in max_burst socket option. [ 778.465512][T15279] Use struct sctp_assoc_value instead [ 778.750255][T15031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 778.783449][T15031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 778.809368][T15031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 778.837456][T15031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 779.146616][T15031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.202921][T15291] syz.0.2566 (15291) used greatest stack depth: 17832 bytes left [ 779.209098][T15031] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.254642][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.261840][ T9309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.325498][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.332695][ T9309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.498265][T15031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 780.198526][T15031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.438214][T15031] veth0_vlan: entered promiscuous mode [ 780.515758][T15031] veth1_vlan: entered promiscuous mode [ 780.587341][T15031] veth0_macvtap: entered promiscuous mode [ 780.598349][T15031] veth1_macvtap: entered promiscuous mode [ 780.630270][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.655727][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.673050][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.687200][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.697588][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.715794][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.734027][T15031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.949843][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.975009][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.988294][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.137976][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.262293][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.419757][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.630719][T15031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.744738][T15031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.758988][T15031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.769420][T15359] 9pnet_fd: Insufficient options for proto=fd [ 781.777997][T15031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.787145][T15031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.948007][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.968389][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.029766][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.049616][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.414156][T15390] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 784.105402][T15395] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 784.210017][T15395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 784.269513][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2595'. [ 784.362377][T15395] bond1: (slave dummy0): making interface the new active one [ 784.404188][T15395] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 784.453046][T15400] netlink: 'syz.4.2595': attribute type 10 has an invalid length. [ 784.484921][T15400] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2595'. [ 784.516588][T15400] dummy0: entered promiscuous mode [ 784.530897][T15400] bond1: (slave dummy0): Releasing active interface [ 785.840807][T15429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2607'. [ 786.031142][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'. [ 787.905570][T15465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2621'. [ 789.068682][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 789.434589][T15497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2633'. [ 791.077638][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2644'. [ 793.561827][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 794.957839][T15590] loop1: detected capacity change from 0 to 1024 [ 795.058527][T15590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.483294][T15601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.551945][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 799.695519][T15666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 802.123715][T15687] sctp: [Deprecated]: syz.4.2699 (pid 15687) Use of int in max_burst socket option. [ 802.123715][T15687] Use struct sctp_assoc_value instead [ 802.873264][T15692] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 802.940619][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2702'. [ 803.067452][T15703] sctp: [Deprecated]: syz.1.2703 (pid 15703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 803.067452][T15703] Use struct sctp_sack_info instead [ 804.990859][T15721] sctp: [Deprecated]: syz.3.2710 (pid 15721) Use of int in max_burst socket option. [ 804.990859][T15721] Use struct sctp_assoc_value instead [ 806.202449][T15727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2713'. [ 808.553125][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2723'. [ 808.697944][T15758] sctp: [Deprecated]: syz.3.2724 (pid 15758) Use of int in max_burst socket option. [ 808.697944][T15758] Use struct sctp_assoc_value instead [ 808.895607][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.913059][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.002346][ T27] audit: type=1326 audit(2000000009.520:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 810.037413][ T27] audit: type=1326 audit(2000000009.520:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 810.067855][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2734'. [ 810.105714][ T27] audit: type=1326 audit(2000000009.560:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 810.181440][ T27] audit: type=1326 audit(2000000009.560:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 810.285653][ T27] audit: type=1326 audit(2000000009.560:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 810.318171][ T27] audit: type=1326 audit(2000000009.560:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 810.345536][ T27] audit: type=1326 audit(2000000009.560:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 811.212718][ T27] audit: type=1326 audit(2000000009.560:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15783 comm="syz.4.2733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5cb2b9fb19 code=0x7ffc0000 [ 812.119741][T15815] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 812.587055][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'. [ 813.228587][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'. [ 814.261602][T15843] Can't find ip_set type hash:net,port,n [ 815.383891][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2766'. [ 816.469150][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2772'. [ 817.602831][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2777'. [ 818.251821][T15933] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2785'. [ 818.399055][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 821.563362][T16007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 823.024531][T16041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 823.053751][T16039] sctp: [Deprecated]: syz.4.2827 (pid 16039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.053751][T16039] Use struct sctp_sack_info instead [ 823.114023][T16039] sctp: [Deprecated]: syz.4.2827 (pid 16039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.114023][T16039] Use struct sctp_sack_info instead [ 824.316306][T16072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 825.900533][T16095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 826.251030][T16100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 827.882491][T16134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 827.909928][T16135] netlink: 'syz.3.2860': attribute type 4 has an invalid length. [ 827.977817][T16136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 829.680718][T16145] rxe_eth0 speed is unknown, defaulting to 1000 [ 830.173365][T16168] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 830.431593][T16172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 832.651828][T16201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 833.739522][T16216] bridge_slave_0: left allmulticast mode [ 833.801046][T16216] bridge_slave_0: left promiscuous mode [ 833.817342][T16216] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.845751][T16216] bridge_slave_1: left allmulticast mode [ 833.871331][T16216] bridge_slave_1: left promiscuous mode [ 833.889113][T16216] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.918797][T16216] bond0: (slave bond_slave_0): Releasing backup interface [ 833.958716][T16216] bond0: (slave bond_slave_1): Releasing backup interface [ 834.031462][T16216] team0: Port device team_slave_0 removed [ 834.045269][T16216] team0: Port device team_slave_1 removed [ 834.051687][T16216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.203256][T16216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.362239][T16216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.429090][T16216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.826451][T16231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 834.845787][T16233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 835.418876][T16259] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 835.752456][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 836.383080][T16276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 836.773006][T16286] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 837.435705][T16300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 837.911995][T16309] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 839.221144][T16337] rxe_eth0 speed is unknown, defaulting to 1000 [ 839.347249][T16341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 840.674820][T16364] xt_hashlimit: size too large, truncated to 1048576 [ 840.785614][T16367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 841.534091][T16344] Bluetooth: hci2: command 0x0406 tx timeout [ 843.285059][T16420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 843.674887][T16423] tipc: Enabling of bearer rejected, failed to enable media [ 843.742261][T16426] capability: warning: `syz.4.2955' uses 32-bit capabilities (legacy support in use) [ 845.945164][T16449] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 847.667328][T16478] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.173129][T16499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.283613][T16501] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2981'. [ 849.513983][T16514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.783149][T16525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.978371][T16533] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2997'. [ 850.679561][T16547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 851.451818][T16561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 852.158617][T16572] ip_tables: iptables: counters copy to user failed while replacing table [ 854.976276][T16626] raw_sendmsg: syz.1.3034 forgot to set AF_INET. Fix it! [ 855.008848][T16628] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3033'. [ 862.012722][T11189] Bluetooth: hci3: command 0x0406 tx timeout [ 871.038768][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.045526][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.603588][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 871.626658][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 875.490768][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3136'. [ 876.248486][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'. [ 876.663101][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'. [ 877.847685][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3153'. [ 878.057366][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 879.969127][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 879.979063][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'. [ 882.013685][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 882.267184][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3175'. [ 887.616729][T11189] Bluetooth: hci0: command 0x0406 tx timeout [ 891.762452][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 895.287944][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 896.357079][T17198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 900.084483][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3229'. [ 900.667588][T17238] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 900.866792][T17241] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 903.630850][T17271] tipc: Started in network mode [ 903.647131][T17271] tipc: Node identity 4, cluster identity 4711 [ 903.722817][T17271] tipc: Node number set to 4 [ 904.052965][ T27] audit: type=1326 audit(2000000253.561:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.384196][ T27] audit: type=1326 audit(2000000253.561:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.432472][ T27] audit: type=1326 audit(2000000253.561:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.495592][ T27] audit: type=1326 audit(2000000253.561:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.520468][ T27] audit: type=1326 audit(2000000253.561:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.793074][ T27] audit: type=1326 audit(2000000253.561:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.821934][ T27] audit: type=1326 audit(2000000253.561:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.847520][ T27] audit: type=1326 audit(2000000253.561:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.881671][ T27] audit: type=1326 audit(2000000253.561:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 904.912000][ T27] audit: type=1326 audit(2000000253.561:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17272 comm="syz.0.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 909.657252][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3262'. [ 909.671714][T17327] fuse: Bad value for 'fd' [ 912.711588][T17364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 912.730056][T17364] fuse: Bad value for 'fd' [ 917.916891][T17380] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.924726][T17380] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.406575][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3286'. [ 918.424885][T17398] fuse: Bad value for 'fd' [ 919.078357][T17380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.122464][T17380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.791792][T17380] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.821211][T17380] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.841748][T17380] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.880551][T17380] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.048068][T17381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.058392][T17381] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.070867][T17381] bridge0: port 3(vlan2) entered blocking state [ 920.077378][T17381] bridge0: port 3(vlan2) entered forwarding state [ 920.098987][T17381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.243842][ T60] bridge0: port 3(vlan2) entered disabled state [ 922.160138][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3295'. [ 922.171438][T17438] fuse: Bad value for 'fd' [ 922.624238][T17442] fuse: Bad value for 'fd' [ 924.224738][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3300'. [ 924.816161][T17468] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 925.166003][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 925.180503][T17475] fuse: Bad value for 'fd' [ 926.046542][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'. [ 927.523556][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 927.523572][ T27] audit: type=1326 audit(2000000283.041:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 927.752700][ T27] audit: type=1326 audit(2000000283.041:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 928.127138][ T27] audit: type=1326 audit(2000000283.041:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 928.308703][ T27] audit: type=1326 audit(2000000283.041:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 928.486327][ T27] audit: type=1326 audit(2000000283.041:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 928.622615][ T27] audit: type=1326 audit(2000000283.041:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 928.637630][T17501] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 928.712764][ T27] audit: type=1326 audit(2000000283.041:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 928.786242][ T27] audit: type=1326 audit(2000000283.041:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 929.032628][ T27] audit: type=1326 audit(2000000283.041:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 929.217460][ T27] audit: type=1326 audit(2000000283.041:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17478 comm="syz.0.3310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 929.575606][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 929.596898][T17516] fuse: Bad value for 'fd' [ 931.496418][T17529] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 931.616994][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.627994][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.745620][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3329'. [ 934.759842][T17551] fuse: Bad value for 'fd' [ 936.532791][T17567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 937.886354][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 937.905700][T17590] fuse: Bad value for 'fd' [ 938.460931][T17594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 942.075126][T17596] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:3 [ 943.223525][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 943.243197][T17629] fuse: Bad value for 'fd' [ 943.895082][T17631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 944.153166][T16843] bond0: (slave syz_tun): Releasing backup interface [ 947.044569][ T1139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.118027][T11189] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 947.420176][T11189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 947.430843][T11189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 947.445729][T11189] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 947.470424][T11189] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 947.481800][T11189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.104085][ T1139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.285933][ T1139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.316950][T17648] rxe_eth0 speed is unknown, defaulting to 1000 [ 948.414648][ T1139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.759936][ T1139] tipc: Disabling bearer [ 948.821534][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3364'. [ 948.841724][T17669] fuse: Bad value for 'fd' [ 949.359835][ T1139] tipc: Left network mode [ 949.393405][T17671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 949.622213][T17675] sch_fq: defrate 511 ignored. [ 949.627807][T11189] Bluetooth: hci1: command tx timeout [ 952.338988][T11189] Bluetooth: hci1: command tx timeout [ 953.203835][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3372'. [ 953.481113][T17708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 953.783034][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 953.803492][T17718] fuse: Bad value for 'fd' [ 954.965449][T16344] Bluetooth: hci1: command tx timeout [ 955.352886][T17717] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 955.410567][T17648] chnl_net:caif_netlink_parms(): no params data found [ 956.973108][T11189] Bluetooth: hci1: command tx timeout [ 957.033790][T17648] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.040975][T17648] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.066985][T17648] bridge_slave_0: entered allmulticast mode [ 957.079513][T17648] bridge_slave_0: entered promiscuous mode [ 957.089286][T17755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 957.157846][T17648] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.183624][T17648] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.201113][T17648] bridge_slave_1: entered allmulticast mode [ 957.235967][T17648] bridge_slave_1: entered promiscuous mode [ 957.432194][T17648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.513800][T17648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.638219][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 957.653442][T17763] fuse: Bad value for 'fd' [ 958.920984][T17648] team0: Port device team_slave_0 added [ 959.138816][T17648] team0: Port device team_slave_1 added [ 959.259930][T17648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.299123][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.416479][T17648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.887951][T17648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.009934][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.307252][T17648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.550602][ T1139] hsr_slave_0: left promiscuous mode [ 960.561798][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.601679][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.696841][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.778014][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.888422][ T1139] bridge_slave_1: left allmulticast mode [ 960.966665][ T1139] bridge_slave_1: left promiscuous mode [ 961.042886][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.168703][ T1139] bridge_slave_0: left allmulticast mode [ 961.243400][ T1139] bridge_slave_0: left promiscuous mode [ 961.317542][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.568140][ T1139] veth1_macvtap: left promiscuous mode [ 961.574642][ T1139] veth0_macvtap: left promiscuous mode [ 961.580405][ T1139] veth1_vlan: left promiscuous mode [ 961.580842][T17797] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 961.592668][ T1139] veth0_vlan: left promiscuous mode [ 961.946362][ T1139] bond2 (unregistering): Released all slaves [ 964.470874][ T1139] bond1 (unregistering): Released all slaves [ 965.477871][T17808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3393'. [ 965.490426][T17808] fuse: Bad value for 'fd' [ 968.665099][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 968.781872][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 968.995638][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.523907][ T1139] bond0 (unregistering): Released all slaves [ 969.624090][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 969.655303][T17833] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 969.843374][T17838] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 969.963043][T17648] hsr_slave_0: entered promiscuous mode [ 970.027442][T17648] hsr_slave_1: entered promiscuous mode [ 971.265551][T17862] fuse: Bad value for 'fd' [ 974.669465][T17648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 974.740438][T17648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 974.802389][T17648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 974.872199][T17648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 974.903583][T17893] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 975.335840][T17648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.196346][T17648] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.288187][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.295419][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.382267][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.389514][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.858915][T17909] fuse: Bad value for 'fd' [ 977.879579][T17928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 978.058497][T17648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.270238][T17939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3417'. [ 983.106171][T17964] fuse: Bad value for 'fd' [ 984.193975][T17973] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 984.277773][T17648] veth0_vlan: entered promiscuous mode [ 984.330946][T17648] veth1_vlan: entered promiscuous mode [ 984.475877][T17648] veth0_macvtap: entered promiscuous mode [ 984.545204][T17648] veth1_macvtap: entered promiscuous mode [ 985.991030][T17991] rxe_eth0 speed is unknown, defaulting to 1000 [ 988.852236][T17989] tipc: Started in network mode [ 988.857431][T17989] tipc: Node identity 4, cluster identity 4711 [ 988.864634][T17989] tipc: Node number set to 4 [ 988.908229][T17648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.980156][T17648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.991733][T17648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.028023][T17648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.089542][T17648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.157739][T17648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.269664][T17648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.325272][T17648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.066298][T17648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.082586][T17648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.178246][T18013] fuse: Bad value for 'fd' [ 991.202199][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.248865][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.259003][T18032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 991.443650][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.463168][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.073071][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.079458][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.849784][T18074] fuse: Bad value for 'fd' [ 996.868177][T18080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 998.414006][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3448'. [ 999.273026][T18127] fuse: Bad value for 'fd' [ 1000.380186][T18135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1000.608435][T18138] loop4: detected capacity change from 0 to 512 [ 1000.647086][T18138] journal_path: Lookup failure for './bus' [ 1000.690134][T18138] EXT4-fs: error: could not find journal device path [ 1000.696513][T18141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1000.786166][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 1000.885778][T18144] loop4: detected capacity change from 0 to 512 [ 1000.912604][T18144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1001.044112][T18144] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.3455: bad orphan inode 15 [ 1001.058376][T18138] bond0: (slave bond_slave_0): Releasing backup interface [ 1001.069581][T18144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.111220][T18144] EXT4-fs error (device loop4): __ext4_new_inode:1083: comm syz.4.3455: reserved inode found cleared - inode=17 [ 1001.516028][T17648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.617813][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3461'. [ 1001.635916][T18156] fuse: Bad value for 'fd' [ 1002.340713][T18158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1005.335930][T18174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1007.780466][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1007.796734][T18199] fuse: Bad value for 'fd' [ 1011.939426][T18223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1012.553243][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1012.568076][T18239] fuse: Bad value for 'fd' [ 1014.567641][T18251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1014.760860][T18257] loop4: detected capacity change from 0 to 512 [ 1014.771895][T18257] EXT4-fs: inline encryption not supported [ 1014.809937][T18257] EXT4-fs: Ignoring removed oldalloc option [ 1014.864523][T18257] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1014.921067][T18257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1015.003146][T18257] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.3494: bad orphan inode 131083 [ 1015.557983][T18257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.477568][T17648] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.351513][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 1017.368958][T18296] fuse: Bad value for 'fd' [ 1019.111799][T18306] loop4: detected capacity change from 0 to 16 [ 1019.175040][T18306] erofs: (device loop4): mounted with root inode @ nid 36. [ 1019.853317][T18314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1020.624584][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3507'. [ 1020.642536][T18336] fuse: Bad value for 'fd' [ 1021.408293][T18342] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1022.608364][T18349] loop4: detected capacity change from 0 to 40427 [ 1022.647946][T18349] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(53) root(3) [ 1022.664337][T18349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1022.690568][T18349] F2FS-fs (loop4): invalid crc value [ 1022.900599][T18349] F2FS-fs (loop4): access invalid blkaddr:0 [ 1022.921928][T18349] CPU: 1 PID: 18349 Comm: syz.4.3512 Not tainted syzkaller #0 [ 1022.929478][T18349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1022.939548][T18349] Call Trace: [ 1022.942843][T18349] [ 1022.945788][T18349] dump_stack_lvl+0x18c/0x250 [ 1022.950514][T18349] ? show_regs_print_info+0x20/0x20 [ 1022.955746][T18349] ? __up_read+0x2b8/0x6b0 [ 1022.960180][T18349] ? __lock_acquire+0x7eb0/0x7eb0 [ 1022.965228][T18349] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 1022.970688][T18349] sanity_check_extent_cache+0xfc/0x1f0 [ 1022.976289][T18349] f2fs_iget+0x336f/0x47d0 [ 1022.980758][T18349] f2fs_fill_super+0x48c0/0x6c00 [ 1022.985770][T18349] ? kill_f2fs_super+0x3f0/0x3f0 [ 1022.990735][T18349] ? down_write+0x16e/0x200 [ 1022.995261][T18349] ? down_read_killable+0x340/0x340 [ 1023.000488][T18349] ? setup_bdev_super+0x56b/0x660 [ 1023.005568][T18349] mount_bdev+0x21c/0x2c0 [ 1023.009917][T18349] ? kfree+0x31/0x1a0 [ 1023.013951][T18349] ? kill_f2fs_super+0x3f0/0x3f0 [ 1023.018908][T18349] ? get_tree_bdev+0x520/0x520 [ 1023.023691][T18349] ? vfs_parse_fs_param+0x420/0x420 [ 1023.028923][T18349] legacy_get_tree+0xea/0x180 [ 1023.033625][T18349] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 1023.039808][T18349] vfs_get_tree+0x8c/0x280 [ 1023.044255][T18349] do_new_mount+0x24a/0xa60 [ 1023.048788][T18349] __se_sys_mount+0x2e7/0x3d0 [ 1023.053495][T18349] ? __x64_sys_mount+0xc0/0xc0 [ 1023.058282][T18349] ? lockdep_hardirqs_on+0x98/0x150 [ 1023.063584][T18349] ? __x64_sys_mount+0x20/0xc0 [ 1023.068374][T18349] do_syscall_64+0x55/0xb0 [ 1023.072812][T18349] ? clear_bhb_loop+0x40/0x90 [ 1023.077527][T18349] ? clear_bhb_loop+0x40/0x90 [ 1023.082236][T18349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.088158][T18349] RIP: 0033:0x7fb6355a0d8a [ 1023.092594][T18349] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.112224][T18349] RSP: 002b:00007fb6363f2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1023.120669][T18349] RAX: ffffffffffffffda RBX: 00007fb6363f2ee0 RCX: 00007fb6355a0d8a [ 1023.128669][T18349] RDX: 0000200000005640 RSI: 0000200000000080 RDI: 00007fb6363f2ea0 [ 1023.136659][T18349] RBP: 0000200000005640 R08: 00007fb6363f2ee0 R09: 0000000001200001 [ 1023.144652][T18349] R10: 0000000001200001 R11: 0000000000000246 R12: 0000200000000080 [ 1023.152647][T18349] R13: 00007fb6363f2ea0 R14: 0000000000005576 R15: 00002000000077c0 [ 1023.160656][T18349] [ 1023.202539][T18349] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix [ 1023.256285][T18349] F2FS-fs (loop4): Failed to read root inode [ 1024.361451][T18373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1027.777973][T18406] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1030.231140][T18412] loop4: detected capacity change from 0 to 40427 [ 1030.269208][T18412] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 1030.312788][T18412] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1030.336750][T18412] F2FS-fs (loop4): Image doesn't support compression [ 1030.453041][T18412] F2FS-fs (loop4): Image doesn't support compression [ 1030.490735][T18412] F2FS-fs (loop4): invalid crc value [ 1031.000598][T18430] rxe_eth0 speed is unknown, defaulting to 1000 [ 1032.625864][T18412] F2FS-fs (loop4): Start checkpoint disabled! [ 1033.623640][T18440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1033.981713][T18448] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1035.561523][T18472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1041.374497][T18502] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1042.543823][T18507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1044.112867][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1044.362150][T18521] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1044.814795][T18537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1045.661914][T18521] netlink: 'syz.4.3563': attribute type 4 has an invalid length. [ 1045.673167][T18521] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1047.709149][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 1048.356798][T18570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1050.423589][T18583] loop4: detected capacity change from 0 to 4096 [ 1050.472834][T18583] EXT4-fs: Invalid want_extra_isize 9 [ 1052.426521][T18598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1054.534546][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.540955][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.927782][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1054.927799][ T27] audit: type=1326 audit(2000000009.380:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1055.014376][T18632] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1055.355674][ T27] audit: type=1326 audit(2000000009.380:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1055.541847][ T27] audit: type=1326 audit(2000000009.390:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1055.615405][ T27] audit: type=1326 audit(2000000009.390:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1055.787749][ T27] audit: type=1326 audit(2000000009.390:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1055.826049][ T27] audit: type=1326 audit(2000000009.390:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1056.039919][ T27] audit: type=1326 audit(2000000009.390:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1056.285117][ T27] audit: type=1326 audit(2000000009.390:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1056.422520][ T27] audit: type=1326 audit(2000000009.390:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1056.446805][ T27] audit: type=1326 audit(2000000009.390:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.1.3600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1058.024889][T18651] rxe_eth0 speed is unknown, defaulting to 1000 [ 1060.098461][T18670] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1061.648458][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1061.648535][ T27] audit: type=1326 audit(2000000016.110:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1061.750307][T18689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1061.812573][ T27] audit: type=1326 audit(2000000016.110:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1061.869722][ T27] audit: type=1326 audit(2000000016.110:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1061.938526][T18689] tc_dump_action: action bad kind [ 1062.084653][ T27] audit: type=1326 audit(2000000016.110:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1062.144882][ T27] audit: type=1326 audit(2000000016.160:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1062.297454][ T27] audit: type=1326 audit(2000000016.170:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f871ad9f882 code=0x7ffc0000 [ 1062.507174][ T27] audit: type=1326 audit(2000000016.210:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1062.532533][ T27] audit: type=1326 audit(2000000016.210:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1062.557294][ T27] audit: type=1326 audit(2000000016.210:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1062.786759][ T27] audit: type=1326 audit(2000000017.170:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f871ad9f917 code=0x7ffc0000 [ 1063.369669][T18707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1065.532706][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1065.738033][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1065.760979][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.786984][ T5873] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1065.820818][ T5873] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1065.835603][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.845055][ T5873] usb 5-1: Product: syz [ 1065.849333][ T5873] usb 5-1: Manufacturer: syz [ 1065.854059][ T5873] usb 5-1: SerialNumber: syz [ 1066.786461][ T27] kauditd_printk_skb: 284 callbacks suppressed [ 1066.786476][ T27] audit: type=1326 audit(2000000021.240:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1066.897170][ T27] audit: type=1326 audit(2000000021.250:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1066.983497][ T27] audit: type=1326 audit(2000000021.250:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1067.054357][ T27] audit: type=1326 audit(2000000021.250:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1067.404270][ T27] audit: type=1326 audit(2000000021.250:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1067.471477][T18786] overlayfs: failed to resolve './cgroup': -2 [ 1067.657839][ T27] audit: type=1326 audit(2000000021.250:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1068.095620][ T27] audit: type=1326 audit(2000000021.250:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1068.237140][ T27] audit: type=1326 audit(2000000021.250:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1068.346882][ T27] audit: type=1326 audit(2000000021.250:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1068.447481][ T27] audit: type=1326 audit(2000000021.250:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18777 comm="syz.0.3645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x7ffc0000 [ 1069.217354][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 1069.385577][T18807] loop4: detected capacity change from 0 to 256 [ 1069.408095][T18807] exfat: Deprecated parameter 'utf8' [ 1069.472720][T18807] exfat: Deprecated parameter 'utf8' [ 1069.478179][T18807] exfat: Deprecated parameter 'namecase' [ 1069.498654][T18807] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1069.553127][ T5873] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1069.589685][ T5873] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1072.012692][T16344] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.539716][ T5873] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 1072.582913][ T5873] usb 5-1: USB disconnect, device number 2 [ 1072.610207][T18799] udevd[18799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.910265][T18845] loop4: detected capacity change from 0 to 40427 [ 1074.051029][T18845] F2FS-fs (loop4): Image doesn't support compression [ 1074.079074][T18845] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1074.174103][T18845] xt_hashlimit: size too large, truncated to 1048576 [ 1080.067347][T17412] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1080.302811][T17412] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1080.326400][T17412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.349849][T17412] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.390223][T17412] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1080.404964][T17412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.418142][T17412] usb 5-1: Product: syz [ 1080.422345][T17412] usb 5-1: Manufacturer: syz [ 1080.430244][T17412] usb 5-1: SerialNumber: syz [ 1081.819708][T18921] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1081.876237][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1081.916778][T18921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1083.241809][T17412] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1083.272764][T17412] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1084.193857][T17412] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 1084.218758][T18942] fuse: Unknown parameter 'use00000000000000000000' [ 1084.222703][T17412] usb 5-1: USB disconnect, device number 3 [ 1084.290795][T18800] udevd[18800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.441933][T18963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3708'. [ 1085.485724][T18963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1086.370182][T18965] ip_tables: iptables: counters copy to user failed while replacing table [ 1088.021179][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 1088.021193][ T27] audit: type=1326 audit(2000000042.480:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1088.156815][ T27] audit: type=1326 audit(2000000042.520:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1088.239733][ T27] audit: type=1326 audit(2000000042.520:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1088.336761][ T27] audit: type=1326 audit(2000000042.520:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1088.431663][ T27] audit: type=1326 audit(2000000042.520:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1088.888102][ T27] audit: type=1326 audit(2000000042.520:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1088.956176][ T27] audit: type=1326 audit(2000000042.520:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1088.998660][ T27] audit: type=1326 audit(2000000042.520:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1089.051255][ T27] audit: type=1326 audit(2000000042.520:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1089.085340][ T27] audit: type=1326 audit(2000000042.520:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.1.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1090.112261][T19001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1092.573463][T19010] loop4: detected capacity change from 0 to 256 [ 1096.637564][T19030] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1096.983215][T19027] rxe_eth0 speed is unknown, defaulting to 1000 [ 1102.198771][T19070] overlayfs: missing 'lowerdir' [ 1102.399910][T19079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1103.411085][T19087] loop4: detected capacity change from 0 to 256 [ 1103.794943][T19097] fuse: Bad value for 'fd' [ 1104.091969][T19097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.110478][T19097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.129245][T19097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1104.330944][T19101] loop4: detected capacity change from 0 to 256 [ 1104.844519][T19113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1105.628700][T19121] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.678948][T19123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1106.046986][T19133] loop4: detected capacity change from 0 to 128 [ 1106.094105][T19135] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1106.133961][T19133] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1106.178725][T19133] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.327724][T17648] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1106.564604][T19149] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1108.147504][T19162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1109.054398][T19176] ip_tables: iptables: counters copy to user failed while replacing table [ 1109.056539][T19176] ip_tables: iptables: counters copy to user failed while replacing table [ 1110.450424][T19186] loop4: detected capacity change from 0 to 16 [ 1110.503115][T19186] erofs: (device loop4): mounted with root inode @ nid 36. [ 1111.045289][T19198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3788'. [ 1111.059227][T19198] fuse: Bad value for 'fd' [ 1113.382515][ T2137] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1113.593006][ T2137] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1113.627516][ T2137] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.660457][ T2137] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.724123][ T2137] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1113.762482][ T2137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.801516][ T2137] usb 5-1: Product: syz [ 1113.827194][ T2137] usb 5-1: Manufacturer: syz [ 1113.831837][ T2137] usb 5-1: SerialNumber: syz [ 1114.808756][T17412] kernel read not supported for file bpf-prog (pid: 17412 comm: kworker/1:13) [ 1114.834053][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 1114.834067][ T27] audit: type=1326 audit(2000000069.300:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1114.922627][ T27] audit: type=1326 audit(2000000069.330:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1114.986464][ T27] audit: type=1326 audit(2000000069.350:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.033281][ T27] audit: type=1326 audit(2000000069.350:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.088097][ T27] audit: type=1326 audit(2000000069.350:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.125138][ T27] audit: type=1326 audit(2000000069.350:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.156876][ T27] audit: type=1326 audit(2000000069.350:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.186975][ T27] audit: type=1326 audit(2000000069.350:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.251120][ T27] audit: type=1326 audit(2000000069.350:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.547585][ T27] audit: type=1326 audit(2000000069.350:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19222 comm="syz.1.3798" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1115.949152][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.044247][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.496847][ T2137] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1117.527168][ T2137] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1117.686753][ T2137] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 1117.701680][ T2137] usb 5-1: USB disconnect, device number 5 [ 1117.865580][T19268] udevd[19268]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1119.356891][T19305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3831'. [ 1119.494858][T19310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1119.523290][T19310] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1121.861903][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 1121.861921][ T27] audit: type=1326 audit(2000000076.320:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.031499][ T27] audit: type=1326 audit(2000000076.320:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.151978][ T27] audit: type=1326 audit(2000000076.320:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.221162][ T27] audit: type=1326 audit(2000000076.360:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.272732][ T27] audit: type=1326 audit(2000000076.360:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.300909][ T27] audit: type=1326 audit(2000000076.360:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.372506][ T27] audit: type=1326 audit(2000000076.360:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.446541][ T27] audit: type=1326 audit(2000000076.360:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.493397][ T27] audit: type=1326 audit(2000000076.360:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1122.791321][ T27] audit: type=1326 audit(2000000076.360:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.1.3838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f871ad9fb19 code=0x7ffc0000 [ 1124.657530][T19355] rxe_eth0 speed is unknown, defaulting to 1000 [ 1137.970858][T19420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1142.330116][T19454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3880'. [ 1142.352855][T19454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1143.086055][T19459] ip_tables: iptables: counters copy to user failed while replacing table [ 1143.126102][T19459] ip_tables: iptables: counters copy to user failed while replacing table [ 1143.233582][T19461] loop4: detected capacity change from 0 to 16 [ 1143.252461][T19461] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 1143.357002][T19466] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1144.679979][T19480] rxe_eth0 speed is unknown, defaulting to 1000 [ 1147.718068][T19492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1147.740084][T19492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1152.475634][T19530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3901'. [ 1152.534586][T19530] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1152.916194][T19535] 8021q: VLANs not supported on wg2 [ 1152.931925][T19534] rxe_eth0 speed is unknown, defaulting to 1000 [ 1153.801738][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1153.821940][T19557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1157.713946][T19588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3923'. [ 1159.195421][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3929'. [ 1159.217911][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1159.303528][T19603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.587588][T19609] loop4: detected capacity change from 0 to 256 [ 1160.549588][T19624] fuse: Bad value for 'fd' [ 1160.562080][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 1160.562124][ T27] audit: type=1326 audit(2000000115.030:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19620 comm="syz.0.3937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19fd19fb19 code=0x0 [ 1161.106533][T19609] loop4: detected capacity change from 0 to 512 [ 1161.427462][T19609] ================================================================== [ 1161.435570][T19609] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x5cc/0x1340 [ 1161.443267][T19609] Read of size 8 at addr ffff88805efab098 by task syz.4.3932/19609 [ 1161.451226][T19609] [ 1161.453629][T19609] CPU: 0 PID: 19609 Comm: syz.4.3932 Not tainted syzkaller #0 [ 1161.461095][T19609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1161.471160][T19609] Call Trace: [ 1161.474446][T19609] [ 1161.477382][T19609] dump_stack_lvl+0x18c/0x250 [ 1161.482085][T19609] ? __lock_acquire+0x7eb0/0x7eb0 [ 1161.487135][T19609] ? show_regs_print_info+0x20/0x20 [ 1161.492362][T19609] ? load_image+0x420/0x420 [ 1161.496880][T19609] ? __virt_addr_valid+0x10c/0x380 [ 1161.502114][T19609] ? __virt_addr_valid+0x10c/0x380 [ 1161.507251][T19609] ? __virt_addr_valid+0x10c/0x380 [ 1161.512381][T19609] print_report+0xa8/0x210 [ 1161.516813][T19609] ? snapshot_ctr+0x5cc/0x1340 [ 1161.521594][T19609] kasan_report+0x117/0x150 [ 1161.526125][T19609] ? snapshot_ctr+0x5cc/0x1340 [ 1161.530918][T19609] snapshot_ctr+0x5cc/0x1340 [ 1161.535539][T19609] ? dm_snap_cow+0x40/0x40 [ 1161.539984][T19609] ? skip_spaces+0x8a/0xa0 [ 1161.544452][T19609] ? dm_split_args+0x505/0x5b0 [ 1161.549278][T19609] dm_table_add_target+0x575/0xbc0 [ 1161.554436][T19609] table_load+0x2eb/0x7e0 [ 1161.558791][T19609] ? dev_wait+0x2f0/0x2f0 [ 1161.563138][T19609] ? __might_fault+0xaa/0x120 [ 1161.567828][T19609] ? __might_fault+0xc6/0x120 [ 1161.572516][T19609] ? __might_fault+0xaa/0x120 [ 1161.577209][T19609] ? dev_wait+0x2f0/0x2f0 [ 1161.581562][T19609] dm_ctl_ioctl+0x975/0xd00 [ 1161.586096][T19609] ? dev_wait+0x2f0/0x2f0 [ 1161.590447][T19609] ? dm_poll+0x120/0x120 [ 1161.594735][T19609] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1161.599721][T19609] ? security_file_ioctl+0x80/0xa0 [ 1161.604856][T19609] ? dm_poll+0x120/0x120 [ 1161.609125][T19609] __se_sys_ioctl+0xfd/0x170 [ 1161.613747][T19609] do_syscall_64+0x55/0xb0 [ 1161.618185][T19609] ? clear_bhb_loop+0x40/0x90 [ 1161.622885][T19609] ? clear_bhb_loop+0x40/0x90 [ 1161.627586][T19609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.633504][T19609] RIP: 0033:0x7fb63559fb19 [ 1161.637935][T19609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.657559][T19609] RSP: 002b:00007fb636414028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.665994][T19609] RAX: ffffffffffffffda RBX: 00007fb635825fa0 RCX: 00007fb63559fb19 [ 1161.674010][T19609] RDX: 00002000000069c0 RSI: 00000000c138fd09 RDI: 0000000000000006 [ 1161.682006][T19609] RBP: 00007fb635637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1161.689993][T19609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.697979][T19609] R13: 00007fb635826038 R14: 00007fb635825fa0 R15: 00007ffeab129588 [ 1161.705982][T19609] [ 1161.709020][T19609] [ 1161.711352][T19609] Allocated by task 19609: [ 1161.715850][T19609] kasan_set_track+0x4e/0x70 [ 1161.720459][T19609] __kasan_kmalloc+0x8f/0xa0 [ 1161.725069][T19609] dm_get_table_device+0x248/0x670 [ 1161.730201][T19609] dm_get_device+0x4b9/0x9e0 [ 1161.734810][T19609] snapshot_ctr+0x2b3/0x1340 [ 1161.739420][T19609] dm_table_add_target+0x575/0xbc0 [ 1161.744545][T19609] table_load+0x2eb/0x7e0 [ 1161.748891][T19609] dm_ctl_ioctl+0x975/0xd00 [ 1161.753406][T19609] __se_sys_ioctl+0xfd/0x170 [ 1161.758020][T19609] do_syscall_64+0x55/0xb0 [ 1161.762458][T19609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.768370][T19609] [ 1161.770696][T19609] Freed by task 19609: [ 1161.774837][T19609] kasan_set_track+0x4e/0x70 [ 1161.779445][T19609] kasan_save_free_info+0x28/0x40 [ 1161.784485][T19609] ____kasan_slab_free+0x126/0x1f0 [ 1161.789610][T19609] slab_free_freelist_hook+0x154/0x240 [ 1161.795084][T19609] __kmem_cache_free+0xba/0x1f0 [ 1161.799944][T19609] dm_put_table_device+0x20e/0x240 [ 1161.805080][T19609] dm_get_device+0x7ca/0x9e0 [ 1161.809684][T19609] snapshot_ctr+0x472/0x1340 [ 1161.814293][T19609] dm_table_add_target+0x575/0xbc0 [ 1161.819416][T19609] table_load+0x2eb/0x7e0 [ 1161.823763][T19609] dm_ctl_ioctl+0x975/0xd00 [ 1161.828281][T19609] __se_sys_ioctl+0xfd/0x170 [ 1161.832889][T19609] do_syscall_64+0x55/0xb0 [ 1161.837319][T19609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.843232][T19609] [ 1161.845560][T19609] The buggy address belongs to the object at ffff88805efab080 [ 1161.845560][T19609] which belongs to the cache kmalloc-64 of size 64 [ 1161.859454][T19609] The buggy address is located 24 bytes inside of [ 1161.859454][T19609] freed 64-byte region [ffff88805efab080, ffff88805efab0c0) [ 1161.873094][T19609] [ 1161.875425][T19609] The buggy address belongs to the physical page: [ 1161.881929][T19609] page:ffffea00017beac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5efab [ 1161.892111][T19609] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1161.900018][T19609] page_type: 0xffffffff() [ 1161.904369][T19609] raw: 00fff00000000800 ffff888018c41640 ffffea0000976b00 dead000000000003 [ 1161.912966][T19609] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 1161.921613][T19609] page dumped because: kasan: bad access detected [ 1161.928039][T19609] page_owner tracks the page as allocated [ 1161.933760][T19609] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5788, tgid 5788 (syz-executor), ts 64325671826, free_ts 64274947882 [ 1161.952099][T19609] post_alloc_hook+0x1c1/0x200 [ 1161.956879][T19609] get_page_from_freelist+0x2181/0x22a0 [ 1161.962438][T19609] __alloc_pages+0x1f0/0x460 [ 1161.967045][T19609] alloc_slab_page+0x5d/0x180 [ 1161.971740][T19609] new_slab+0x87/0x2d0 [ 1161.975820][T19609] ___slab_alloc+0xc5c/0x12f0 [ 1161.980513][T19609] __kmem_cache_alloc_node+0x122/0x260 [ 1161.985992][T19609] __kmalloc+0xa7/0x240 [ 1161.990168][T19609] xfrm_net_init+0x320/0xeb0 [ 1161.994868][T19609] ops_init+0x391/0x640 [ 1161.999074][T19609] setup_net+0x3b6/0xa20 [ 1162.003333][T19609] copy_net_ns+0x361/0x530 [ 1162.007761][T19609] create_new_namespaces+0x3ce/0x700 [ 1162.013093][T19609] unshare_nsproxy_namespaces+0x11a/0x160 [ 1162.018833][T19609] ksys_unshare+0x4fa/0x8f0 [ 1162.023356][T19609] __x64_sys_unshare+0x38/0x40 [ 1162.028134][T19609] page last free stack trace: [ 1162.032810][T19609] __free_pages_ok+0x994/0xad0 [ 1162.037588][T19609] free_large_kmalloc+0x101/0x1b0 [ 1162.042632][T19609] proc_sys_call_handler+0x503/0x6c0 [ 1162.047966][T19609] vfs_read+0x486/0x990 [ 1162.052146][T19609] ksys_read+0x151/0x260 [ 1162.056406][T19609] do_syscall_64+0x55/0xb0 [ 1162.060838][T19609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.066749][T19609] [ 1162.069080][T19609] Memory state around the buggy address: [ 1162.074720][T19609] ffff88805efaaf80: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1162.082793][T19609] ffff88805efab000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1162.090862][T19609] >ffff88805efab080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1162.098931][T19609] ^ [ 1162.103787][T19609] ffff88805efab100: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1162.111855][T19609] ffff88805efab180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1162.119923][T19609] ================================================================== [ 1162.182517][T19609] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1162.189754][T19609] CPU: 0 PID: 19609 Comm: syz.4.3932 Not tainted syzkaller #0 [ 1162.197229][T19609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1162.207297][T19609] Call Trace: [ 1162.210580][T19609] [ 1162.213515][T19609] dump_stack_lvl+0x18c/0x250 [ 1162.218218][T19609] ? show_regs_print_info+0x20/0x20 [ 1162.223436][T19609] ? load_image+0x420/0x420 [ 1162.227954][T19609] panic+0x2ca/0x720 [ 1162.231862][T19609] ? bpf_jit_dump+0xd0/0xd0 [ 1162.236380][T19609] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1162.242379][T19609] ? _raw_spin_unlock+0x40/0x40 [ 1162.247241][T19609] ? print_memory_metadata+0x314/0x400 [ 1162.252716][T19609] ? snapshot_ctr+0x5cc/0x1340 [ 1162.257508][T19609] check_panic_on_warn+0x84/0xa0 [ 1162.262473][T19609] ? snapshot_ctr+0x5cc/0x1340 [ 1162.267239][T19609] end_report+0x6f/0x130 [ 1162.271472][T19609] kasan_report+0x128/0x150 [ 1162.275967][T19609] ? snapshot_ctr+0x5cc/0x1340 [ 1162.280741][T19609] snapshot_ctr+0x5cc/0x1340 [ 1162.285329][T19609] ? dm_snap_cow+0x40/0x40 [ 1162.289734][T19609] ? skip_spaces+0x8a/0xa0 [ 1162.294141][T19609] ? dm_split_args+0x505/0x5b0 [ 1162.298894][T19609] dm_table_add_target+0x575/0xbc0 [ 1162.303997][T19609] table_load+0x2eb/0x7e0 [ 1162.308318][T19609] ? dev_wait+0x2f0/0x2f0 [ 1162.312642][T19609] ? __might_fault+0xaa/0x120 [ 1162.317311][T19609] ? __might_fault+0xc6/0x120 [ 1162.321972][T19609] ? __might_fault+0xaa/0x120 [ 1162.326637][T19609] ? dev_wait+0x2f0/0x2f0 [ 1162.330953][T19609] dm_ctl_ioctl+0x975/0xd00 [ 1162.335448][T19609] ? dev_wait+0x2f0/0x2f0 [ 1162.339764][T19609] ? dm_poll+0x120/0x120 [ 1162.344009][T19609] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1162.348938][T19609] ? security_file_ioctl+0x80/0xa0 [ 1162.354041][T19609] ? dm_poll+0x120/0x120 [ 1162.358272][T19609] __se_sys_ioctl+0xfd/0x170 [ 1162.362857][T19609] do_syscall_64+0x55/0xb0 [ 1162.367264][T19609] ? clear_bhb_loop+0x40/0x90 [ 1162.371932][T19609] ? clear_bhb_loop+0x40/0x90 [ 1162.376601][T19609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.382487][T19609] RIP: 0033:0x7fb63559fb19 [ 1162.386897][T19609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.406492][T19609] RSP: 002b:00007fb636414028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.414898][T19609] RAX: ffffffffffffffda RBX: 00007fb635825fa0 RCX: 00007fb63559fb19 [ 1162.422859][T19609] RDX: 00002000000069c0 RSI: 00000000c138fd09 RDI: 0000000000000006 [ 1162.430813][T19609] RBP: 00007fb635637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1162.438777][T19609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.446732][T19609] R13: 00007fb635826038 R14: 00007fb635825fa0 R15: 00007ffeab129588 [ 1162.454699][T19609] [ 1162.457951][T19609] Kernel Offset: disabled [ 1162.462259][T19609] Rebooting in 86400 seconds..