last executing test programs: 19m5.997906082s ago: executing program 2 (id=228): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x800, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 19m0.179408517s ago: executing program 2 (id=249): r0 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388db5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d2710360679141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c014e66b136000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318"], &(0x7f0000000140)='GPL\x00', 0x92f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_delrule={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x2}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044004}, 0x20044884) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x540}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="b4", 0x1}], 0x1}}], 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r8, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendto$inet6(r12, &(0x7f0000000180)='L', 0x1, 0x40008895, 0x0, 0x0) recvmsg$can_j1939(r12, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 18m59.064559924s ago: executing program 2 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, 0x0, 0x0) 18m56.742184521s ago: executing program 2 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 18m55.957359161s ago: executing program 2 (id=261): r0 = fanotify_init(0x40, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f00000005c0)=""/244, 0xf4) 18m55.258397178s ago: executing program 2 (id=262): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 18m54.249806973s ago: executing program 32 (id=262): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 16m40.998183669s ago: executing program 0 (id=582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 16m34.640875486s ago: executing program 0 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x40006) read(0xffffffffffffffff, 0x0, 0x0) 16m33.418289877s ago: executing program 0 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x1) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='0', 0x1) 16m33.121765764s ago: executing program 0 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x49) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) timerfd_create(0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 16m31.747155398s ago: executing program 0 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) 16m29.874501144s ago: executing program 0 (id=601): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x800, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x5, 0x20, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x4, 0x3, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x2, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x5, 0x56f}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x24004050) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 16m14.813716887s ago: executing program 33 (id=601): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x800, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x5, 0x20, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x4, 0x3, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x2, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x5, 0x56f}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x24004050) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 10m24.35880971s ago: executing program 3 (id=1704): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0', 0x1) r1 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0', 0x1) openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)="05", 0xfffffffffffffdbf) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRESHEX=r5, @ANYBLOB="323b86a2b9fcf7b4f6c1b35e4f20e84c3caf9802d2ce42e3e6130e618437ac92d33cdcf4c3000b88fe3fefbc5d31b7815ea9a8a793e0816d4cb7fe41a71943b3786f6dba76fe1ad880ea4b071c285cb341fe575f02245b4205ccd446b1e865ae3d886cc292b6dddb97f43fd2e0f37cee1dca07b52cf1ef8f96649f46f0e0158b32c9b764a5043bfa7e04909523b7186049aa78dda55b714ea55617d9ce68beec3fda226b0e3e0467954c5dd669f800c64e2634e19e05324c832b7b77d5ad27ca47c3a1b35ca346274dcc77b7db62a8898ac0978c0f1ec0bdcdbf622bf79ec5116ac9275d3f59e0", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x140) write(r6, &(0x7f0000001100)='dummy_udc.0\n', 0xc) 10m18.770281434s ago: executing program 3 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) getpgid(r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0xc6, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @tipc={{0x28, 0x4, 0x0, 0x2a, 0xb8, 0x67, 0x0, 0x69, 0x6, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@remote, 0x7fffffff}, {@remote, 0x5}]}, @timestamp={0x44, 0xc, 0x84, 0x0, 0x1, [0x10000, 0x3]}, @timestamp_addr={0x44, 0x4, 0x52}, @timestamp={0x44, 0x24, 0x1e, 0x0, 0x7, [0x4, 0x7, 0x7, 0x18, 0x3ff, 0x8, 0x6, 0x401]}, @timestamp_prespec={0x44, 0x14, 0xea, 0x3, 0x0, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x24, 0xc8, 0x0, 0x2, [0x3, 0x7, 0x0, 0x8, 0x17, 0x9, 0x0, 0x8000]}, @lsrr={0x83, 0xb, 0x16, [@private=0xa010100, @rand_addr=0x64010101]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0x5, 0x4, 0x4, 0x4e23, 0x4e20}}}}}}}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000400)={0x0, 0xea60}, 0x10) setns(0xc9, 0x0) r4 = socket(0x8, 0x3, 0x7f) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10m18.745215624s ago: executing program 6 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = fanotify_init(0x8, 0x80000) fanotify_mark(r0, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) truncate(0x0, 0x7f0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) 10m17.719358729s ago: executing program 6 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) 10m17.26008798s ago: executing program 3 (id=1721): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10001000, 0x7ff, 0xffffffff, 0x3d, 0xe, 0x0, 0xffe00002}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000002000000c3110000100100219500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 10m16.360630362s ago: executing program 6 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000003c0)={0x2f, 0x1, 0x0, "a6892d080000003a6a7cfb56ff2e7f37c17a5ac1f393f65946a68dd1f8822c88", 0x30314742}) 10m15.822326454s ago: executing program 3 (id=1726): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_win95}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f1, &(0x7f0000001140)="$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") syz_clone(0xa080400, 0x0, 0x82c86ec5, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 10m15.459844483s ago: executing program 3 (id=1728): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) 10m15.338246966s ago: executing program 6 (id=1729): socket$inet6(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) 10m14.859255608s ago: executing program 3 (id=1732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) 10m13.810868102s ago: executing program 34 (id=1732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) 10m13.798197063s ago: executing program 6 (id=1734): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0', 0x1) r1 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0', 0x1) openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)="05", 0xfffffffffffffdbf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRESHEX=r5, @ANYBLOB="323b86a2b9fcf7b4f6c1b35e4f20e84c3caf9802d2ce42e3e6130e618437ac92d33cdcf4c3000b88fe3fefbc5d31b7815ea9a8a793e0816d4cb7fe41a71943b3786f6dba76fe1ad880ea4b071c285cb341fe575f02245b4205ccd446b1e865ae3d886cc292b6dddb97f43fd2e0f37cee1dca07b52cf1ef8f96649f46f0e0158b32c9b764a5043bfa7e04909523b7186049aa78dda55b714ea55617d9ce68beec3fda226b0e3e0467954c5dd669f800c64e2634e19e05324c832b7b77d5ad27ca47c3a1b35ca346274dcc77b7db62a8898ac0978c0f1ec0bdcdbf622bf79ec5116ac9275d3f59e0", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x140) write(r6, &(0x7f0000001100)='dummy_udc.0\n', 0xc) 10m13.439392132s ago: executing program 6 (id=1740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 10m12.842811906s ago: executing program 35 (id=1740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 8m26.647755659s ago: executing program 4 (id=2119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100"/101], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 8m25.557891755s ago: executing program 4 (id=2126): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000300)={[{@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xab}}, {@noblock_validity}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@dax_always}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbf3, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x40000100, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 8m24.154354988s ago: executing program 4 (id=2134): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f00000004c0)={[{@utf8no}, {@shortname_win95}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@utf8}, {@fat=@nocase}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@debug}, {@utf8no}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) 8m21.520829451s ago: executing program 4 (id=2146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "94c492eb2665203d36bec70800890100000000e1100a0000005900", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 8m20.546303145s ago: executing program 4 (id=2149): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c845, 0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x0, 0x10, 0x1c7cb33e}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x7f, 0x151d, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) truncate(0x0, 0x401) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') pread64(r2, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) 8m18.994008632s ago: executing program 4 (id=2155): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 8m2.855121138s ago: executing program 36 (id=2155): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 6.788517698s ago: executing program 9 (id=3923): sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3fffffc, 0x0, 0x0, 0x0, 0x200000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x14}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x42020054, 0x0, 0x0) 5.904662119s ago: executing program 7 (id=3927): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 5.594535286s ago: executing program 1 (id=3929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221400, 0x76) unshare(0x400) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) landlock_restrict_self(r0, 0x2) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) write(r4, 0x0, 0x0) 5.593914516s ago: executing program 7 (id=3930): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000000000000000d000000850000003900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.592954056s ago: executing program 9 (id=3931): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8) 5.202420735s ago: executing program 7 (id=3934): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x7) 5.124368687s ago: executing program 5 (id=3935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 4.523081512s ago: executing program 1 (id=3936): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x2) write(r1, &(0x7f0000000280)="01000000070538abb5", 0x9) 4.139887751s ago: executing program 1 (id=3938): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 4.139641091s ago: executing program 7 (id=3939): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) 3.945608666s ago: executing program 5 (id=3940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000cd40009800800014000000006c80002"], 0x140}}, 0x0) 2.647716927s ago: executing program 8 (id=3942): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12, 0xff}, 0x8, 0xd2, 0x8, 0x0, 0x0, 0x0, 0x0}) 2.647465327s ago: executing program 8 (id=3943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}}, 0x24}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x26}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x4) 2.429527362s ago: executing program 5 (id=3944): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb) r2 = fanotify_init(0xf00, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r2, 0x5, 0x4800003e, r3, 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.428469052s ago: executing program 9 (id=3945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.371661694s ago: executing program 1 (id=3946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221400, 0x76) unshare(0x400) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) getresuid(&(0x7f0000002900), &(0x7f0000002940), &(0x7f0000002980)) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) write(r4, 0x0, 0x0) 2.309360045s ago: executing program 8 (id=3947): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x3, 0x4, 0x1000000000001}) 2.210505087s ago: executing program 7 (id=3948): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001180)={[{@fat=@gid}, {@utf8}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@uni_xlate}, {@rodir}, {@utf8}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 2.1014575s ago: executing program 9 (id=3949): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x2) write(r1, &(0x7f0000000280)="01000000070538abb5", 0x9) 2.034386881s ago: executing program 5 (id=3950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x4000080) 1.324512268s ago: executing program 1 (id=3951): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x26, 0x2, 0x3, "a677c17a067fd75f4600000069aece62bd255776000000000000004000", 0x31324d59}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000400)={0x8000000000000002, 0x1f83, 0x1, 0x7}) 1.308249409s ago: executing program 8 (id=3952): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.advise\x00', 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101442, 0x0) 1.214365981s ago: executing program 5 (id=3953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 1.212517401s ago: executing program 9 (id=3954): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x2, 0xbb9, &(0x7f0000000c00)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 1.058990594s ago: executing program 7 (id=3955): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) 281.542304ms ago: executing program 8 (id=3956): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="6b766d2d636c6f636b0ac86464404d48d94b0ce5ea6a63cd71da894c40d7", 0x1e) 197.858806ms ago: executing program 1 (id=3957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x26}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x4) 146.438667ms ago: executing program 8 (id=3958): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) 29.661869ms ago: executing program 9 (id=3959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 5 (id=3960): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb) r2 = fanotify_init(0xf00, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r2, 0x5, 0x4800003e, r3, 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): max 0 [ 935.517565][T14581] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 935.562578][T14581] UDC core: g1: couldn't find an available UDC or it's busy [ 935.579771][T14593] loop7: detected capacity change from 0 to 512 [ 935.643524][T14593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 935.722244][T14593] System zones: 1-12 [ 935.752771][T14593] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.2490: missing EA_INODE flag [ 935.811819][T14593] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.2490: error while reading EA inode 12 err=-117 [ 935.830722][T14593] EXT4-fs (loop7): 1 orphan inode deleted [ 935.837604][T14593] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 936.011594][T11538] EXT4-fs (loop7): unmounting filesystem. [ 936.661853][T14630] binder: 14629:14630 ioctl 4018620d 0 returned -22 [ 936.708156][T14630] binder: 14629:14630 ioctl c0306201 200000000080 returned -14 [ 936.748104][T14630] binder: 14629:14630 ioctl c0306201 2000000003c0 returned -14 [ 936.790939][T14637] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 936.888340][T14639] device syzkaller0 entered promiscuous mode [ 936.914818][T14639] Config c/1 of g1 needs at least one function. [ 936.967671][T14639] udc dummy_udc.0: failed to start g1: -22 [ 937.000106][T14639] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 937.030109][T14639] UDC core: g1: couldn't find an available UDC or it's busy [ 937.062228][T14645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 937.378415][T14656] trusted_key: encrypted_key: insufficient parameters specified [ 937.665743][T12651] Bluetooth: hci1: command 0x2021 tx timeout [ 938.115377][T14658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 938.662929][T12651] Bluetooth: hci4: command 0x2021 tx timeout [ 938.812797][T14690] device syzkaller0 entered promiscuous mode [ 938.832078][T14690] Config c/1 of g1 needs at least one function. [ 938.915824][T14693] loop7: detected capacity change from 0 to 256 [ 938.925519][T14693] exfat: Deprecated parameter 'utf8' [ 938.931023][T14693] exfat: Deprecated parameter 'utf8' [ 938.953132][T14693] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 939.080223][T14690] udc dummy_udc.0: failed to start g1: -22 [ 939.255411][T14690] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 939.499343][T14690] UDC core: g1: couldn't find an available UDC or it's busy [ 939.575013][T14696] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 940.389176][T14701] trusted_key: encrypted_key: insufficient parameters specified [ 940.582987][T12651] Bluetooth: hci2: command 0x2021 tx timeout [ 940.743077][T12651] Bluetooth: hci4: command 0x2021 tx timeout [ 941.424914][T14708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.432295][T14708] IPv6: NLM_F_CREATE should be set when creating new route [ 942.791979][T14742] loop9: detected capacity change from 0 to 8 [ 942.851460][T14742] unable to read id index table [ 942.995478][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2535'. [ 943.020742][T14745] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2535'. [ 943.176849][T14751] loop8: detected capacity change from 0 to 256 [ 943.186184][T14751] exfat: Deprecated parameter 'utf8' [ 943.191698][T14751] exfat: Deprecated parameter 'utf8' [ 943.231748][T14751] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 946.008753][T14759] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2540'. [ 946.254233][T14766] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.181.0), cmd(0) [ 946.706990][T14774] overlayfs: failed to clone upperpath [ 947.503166][T14784] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2548'. [ 947.582310][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2549'. [ 947.596906][T14788] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2549'. [ 948.085206][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.094565][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.104637][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.113862][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.123082][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.132219][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.141566][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.150784][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.160045][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.169262][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2551'. [ 948.727727][T12651] Bluetooth: hci2: command 0x2021 tx timeout [ 949.103717][T12651] Bluetooth: hci4: command 0x0409 tx timeout [ 949.529350][T14816] loop9: detected capacity change from 0 to 256 [ 949.539174][T14816] exfat: Deprecated parameter 'utf8' [ 949.544887][T14816] exfat: Deprecated parameter 'utf8' [ 949.569663][T14816] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 950.142708][T14821] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 953.342437][T14847] __nla_validate_parse: 45 callbacks suppressed [ 953.342455][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 953.358183][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 953.367486][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 953.517333][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 953.730534][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 953.914337][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 953.981713][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 954.049367][T12651] Bluetooth: hci2: command 0x0406 tx timeout [ 954.061550][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 954.106259][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 954.115984][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 954.822928][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 960.586784][T14913] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 960.597751][T14913] 9pnet_fd: Insufficient options for proto=fd [ 960.818545][T14922] overlayfs: missing 'lowerdir' [ 960.948921][T14927] loop7: detected capacity change from 0 to 8 [ 961.001243][T14929] __nla_validate_parse: 42 callbacks suppressed [ 961.001261][T14929] netlink: 4608 bytes leftover after parsing attributes in process `syz.5.2592'. [ 961.083412][T14927] SQUASHFS error: Unable to read inode 0xa7 [ 964.470228][T14972] loop8: detected capacity change from 0 to 512 [ 964.563721][T14972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 964.584907][T14972] System zones: 1-12 [ 964.598114][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2603'. [ 964.607437][T14977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2603'. [ 964.627394][T14972] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2602: missing EA_INODE flag [ 964.686278][T14972] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2602: error while reading EA inode 12 err=-117 [ 964.707887][T14972] EXT4-fs (loop8): 1 orphan inode deleted [ 964.714012][T14972] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 964.734694][T14972] overlayfs: missing 'workdir' [ 964.766954][T14980] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 964.778764][T14980] 9pnet_fd: Insufficient options for proto=fd [ 964.886365][T14983] sock: sock_timestamping_bind_phc: sock not bind to device [ 964.901776][T11554] EXT4-fs (loop8): unmounting filesystem. [ 966.813901][T15007] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 967.528917][T15024] loop9: detected capacity change from 0 to 512 [ 967.539654][T15024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 967.548055][T15024] System zones: 1-12 [ 967.553813][T15024] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.2618: missing EA_INODE flag [ 967.570493][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2617'. [ 967.583435][T15024] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2618: error while reading EA inode 12 err=-117 [ 967.633069][T15024] EXT4-fs (loop9): 1 orphan inode deleted [ 967.639751][T15024] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 967.700662][T15024] overlayfs: missing 'workdir' [ 967.742334][T15033] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 967.752756][T15033] 9pnet_fd: Insufficient options for proto=fd [ 967.790950][ T4285] Bluetooth: to_multiplier 0 < 10 [ 967.868336][T13500] EXT4-fs (loop9): unmounting filesystem. [ 968.169809][T15045] fuse: Bad value for 'group_id' [ 969.863506][ T4285] Bluetooth: hci1: command 0x2021 tx timeout [ 970.168108][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2630'. [ 970.225253][T15080] loop9: detected capacity change from 0 to 512 [ 970.240337][T15079] binder: BINDER_SET_CONTEXT_MGR already set [ 970.248893][T15079] binder: 15076:15079 ioctl 4018620d 200000004a80 returned -16 [ 970.295469][T15080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 970.314271][T15080] System zones: 1-12 [ 970.320083][T15080] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.2633: missing EA_INODE flag [ 970.333990][T15080] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2633: error while reading EA inode 12 err=-117 [ 970.346999][T15080] EXT4-fs (loop9): 1 orphan inode deleted [ 970.360069][T15080] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 970.371706][T15084] 9pnet_fd: Insufficient options for proto=fd [ 970.420148][T15080] overlayfs: missing 'workdir' [ 970.581631][T13500] EXT4-fs (loop9): unmounting filesystem. [ 970.672703][T15096] fuse: Bad value for 'group_id' [ 970.754038][T15099] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 970.784225][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2639'. [ 970.807728][T15098] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.816880][T15098] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.825704][T15098] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.834552][T15098] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.357264][T15128] binder: 15124:15128 ioctl c0306201 0 returned -14 [ 973.349460][T15136] 9pnet_fd: Insufficient options for proto=fd [ 973.439159][T15141] loop9: detected capacity change from 0 to 512 [ 973.532259][T15141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 973.554036][T15141] System zones: 1-12 [ 973.634122][T15141] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.2649: missing EA_INODE flag [ 973.649777][T15141] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2649: error while reading EA inode 12 err=-117 [ 973.716336][T15148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2650'. [ 974.288565][T15141] EXT4-fs (loop9): 1 orphan inode deleted [ 974.407803][T15141] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 974.472963][T15141] overlayfs: missing 'lowerdir' [ 974.664928][T13500] EXT4-fs (loop9): unmounting filesystem. [ 974.705728][T15161] overlayfs: failed to clone upperpath [ 975.307304][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.317341][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.326701][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.335857][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.344942][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.354036][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.363319][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.372457][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 975.381622][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 976.339540][T15190] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 978.332182][T15197] 9pnet_fd: Insufficient options for proto=fd [ 978.490044][ T27] audit: type=1326 audit(1785597302.164:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.8.2663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145a59e019 code=0x0 [ 978.622202][T15210] loop9: detected capacity change from 0 to 512 [ 978.673301][T15210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 978.726647][T15210] System zones: 1-12 [ 978.789911][T15210] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.2665: missing EA_INODE flag [ 978.817017][T15210] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2665: error while reading EA inode 12 err=-117 [ 978.845199][T15218] __nla_validate_parse: 43 callbacks suppressed [ 978.845219][T15218] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2667'. [ 978.867164][T15210] EXT4-fs (loop9): 1 orphan inode deleted [ 978.874450][T15210] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 978.887936][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2667'. [ 978.932406][T15210] overlayfs: missing 'lowerdir' [ 979.080396][T13500] EXT4-fs (loop9): unmounting filesystem. [ 979.483323][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 979.492486][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 979.501885][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 979.511611][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 979.520932][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 979.530057][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 979.539353][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 979.548573][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 980.273669][T15242] loop8: detected capacity change from 0 to 2048 [ 980.431209][T15242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 980.440064][T15242] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 980.489437][T15242] fs-verity: sha256 using implementation "sha256-avx2" [ 980.596939][T15252] binder: 15250:15252 ioctl c0306201 0 returned -14 [ 980.694505][T15242] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 980.733230][T15242] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 980.759820][T15259] 9pnet_fd: Insufficient options for proto=fd [ 980.778521][T15242] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 981.071245][T11554] EXT4-fs (loop8): unmounting filesystem. [ 981.263598][ T4285] Bluetooth: to_multiplier 0 < 10 [ 981.767959][ T27] audit: type=1326 audit(1785597305.444:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.7.2682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa7059e019 code=0x0 [ 982.463541][T15316] 9pnet_fd: Insufficient options for proto=fd [ 983.212306][ T4360] kworker/dying (4360) used greatest stack depth: 19456 bytes left [ 983.313389][ T4285] Bluetooth: hci0: command 0x2021 tx timeout [ 985.391426][T15363] 9pnet_fd: Insufficient options for proto=fd [ 985.928635][T15375] __nla_validate_parse: 97 callbacks suppressed [ 985.928653][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 985.944184][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 985.953215][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 985.962983][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 985.971936][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 985.980974][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 985.989959][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 985.998917][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 986.007877][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 986.016878][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 986.887746][T15384] device syzkaller0 entered promiscuous mode [ 987.119492][T15387] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 989.150460][T15404] binder: 15402:15404 ioctl c0306201 0 returned -14 [ 990.809901][T15432] infiniband syz1: set active [ 990.870904][T15436] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 991.842574][T15447] infiniband syz2: set active [ 991.847516][T15447] infiniband syz2: added bond_slave_0 [ 992.348353][T15447] infiniband syz2: Couldn't open port 1 [ 992.402902][T15447] RDS/IB: syz2: added [ 992.407069][T15447] smc: adding ib device syz2 with port count 1 [ 992.414171][T15447] smc: ib device syz2 port 1 has pnetid [ 992.942565][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.000678][T15446] binder: 15444:15446 ioctl c0306201 0 returned -14 [ 993.932421][T15454] loop8: detected capacity change from 0 to 4096 [ 994.100687][T15454] EXT4-fs (loop8): Test dummy encryption mode enabled [ 994.152933][T15454] EXT4-fs (loop8): DAX unsupported by block device. [ 996.351380][T15498] device syzkaller0 entered promiscuous mode [ 996.514110][T15501] __nla_validate_parse: 96 callbacks suppressed [ 996.514129][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.529735][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.538905][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.547891][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.556949][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.565928][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.574995][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.584092][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.593115][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 996.602046][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2731'. [ 997.698657][T15522] rdma_rxe: rxe_register_device failed with error -23 [ 997.706288][T15522] rdma_rxe: failed to add bond_slave_0 [ 999.149904][T15527] loop9: detected capacity change from 0 to 256 [ 999.159858][T15527] exfat: Deprecated parameter 'utf8' [ 999.165728][T15527] exfat: Deprecated parameter 'utf8' [ 999.714079][T15527] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 1001.917354][T15540] fuse: Unknown parameter 'grou00000000000000000000' [ 1002.230418][ T27] audit: type=1326 audit(1785597325.904:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15548 comm="syz.1.2745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f474ab9e019 code=0x0 [ 1002.531124][T15558] __nla_validate_parse: 43 callbacks suppressed [ 1002.531143][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.546549][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.556022][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.565043][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.574033][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.583215][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.592257][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.601498][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.610804][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.619903][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 1002.885700][T15564] rdma_rxe: rxe_register_device failed with error -23 [ 1002.892971][T15564] rdma_rxe: failed to add bond_slave_0 [ 1006.144237][T15589] loop9: detected capacity change from 0 to 256 [ 1006.156313][T15589] exfat: Deprecated parameter 'utf8' [ 1006.162069][T15589] exfat: Deprecated parameter 'utf8' [ 1006.194846][T15589] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 1009.076380][ T27] audit: type=1326 audit(1785597332.754:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.2760" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f474ab9e019 code=0x0 [ 1011.002763][T15634] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1011.887696][T15641] loop7: detected capacity change from 0 to 256 [ 1011.899645][T15641] exfat: Deprecated parameter 'utf8' [ 1011.905356][T15641] exfat: Deprecated parameter 'utf8' [ 1011.928457][T15641] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 1012.290927][T15642] __nla_validate_parse: 42 callbacks suppressed [ 1012.291051][T15642] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2769'. [ 1015.044714][T15658] binder: 15657:15658 ioctl c0306201 200000000080 returned -14 [ 1015.423760][T15669] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2782'. [ 1015.434797][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1015.444421][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1015.454336][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1015.463695][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1015.472856][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1015.482008][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1015.496810][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1015.506088][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 1017.543627][T15691] loop8: detected capacity change from 0 to 256 [ 1017.553758][T15691] exfat: Deprecated parameter 'utf8' [ 1017.559282][T15691] exfat: Deprecated parameter 'utf8' [ 1018.018890][T15691] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 1020.714147][T15707] binder: 15705:15707 ioctl c0306201 200000000080 returned -14 [ 1020.889142][T15710] __nla_validate_parse: 44 callbacks suppressed [ 1020.889160][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.904723][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.913728][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.922648][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.931656][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.940816][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.949823][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.958820][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.967817][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1020.976826][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1021.134447][T15717] loop9: detected capacity change from 0 to 256 [ 1021.144161][T15717] exfat: Deprecated parameter 'utf8' [ 1021.149672][T15717] exfat: Deprecated parameter 'utf8' [ 1021.196891][T15717] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 1025.127574][T15752] binder: 15751:15752 ioctl c0306201 200000000080 returned -14 [ 1026.608755][T15772] __nla_validate_parse: 42 callbacks suppressed [ 1026.608776][T15772] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2813'. [ 1027.080275][T15789] binder: 15788:15789 ioctl c0306201 200000000080 returned -14 [ 1027.139536][T15793] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2820'. [ 1027.250792][T15795] loop9: detected capacity change from 0 to 4096 [ 1027.319392][T15795] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1027.339384][T15795] EXT4-fs (loop9): DAX unsupported by block device. [ 1027.422638][T15803] tipc: Enabling of bearer rejected, failed to enable media [ 1028.787756][T15822] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1028.842522][T15818] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2828'. [ 1029.048739][T15829] binder: 15828:15829 ioctl 4018620d 0 returned -22 [ 1029.087583][T15830] fuse: Unknown parameter 'group_id00000000000000000000' [ 1029.219286][T15835] binder: 15834:15835 ioctl c0306201 200000000080 returned -14 [ 1030.013500][T15846] rdma_rxe: rxe_register_device failed with error -23 [ 1030.020686][T15846] rdma_rxe: failed to add bond_slave_0 [ 1030.823008][T12651] Bluetooth: hci4: command 0x0406 tx timeout [ 1032.011736][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.022282][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.031680][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.041142][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.050141][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.059191][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.068503][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.077569][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.086641][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.095696][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1032.248384][T15876] binder: 15873:15876 ioctl 4018620d 0 returned -22 [ 1033.084363][T15882] binder: 15880:15882 ioctl c0306201 200000000080 returned -14 [ 1033.111570][T15883] fuse: Bad value for 'user_id' [ 1033.258456][T15887] infiniband syz1: set active [ 1033.320754][T15891] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1033.880605][T15913] loop7: detected capacity change from 0 to 512 [ 1033.932984][T15913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1034.012206][T15913] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1034.037581][T15913] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.117074][T15913] EXT4-fs (loop7): shut down requested (1) [ 1034.348017][T11538] EXT4-fs (loop7): unmounting filesystem. [ 1035.269992][T15936] binder: 15933:15936 ioctl c0306201 200000000080 returned -14 [ 1035.288280][T15936] binder: 15933:15936 ioctl c0306201 2000000003c0 returned -14 [ 1035.320596][T15936] binder: 15933:15936 ioctl c0306201 0 returned -14 [ 1035.514494][T15942] loop9: detected capacity change from 0 to 4096 [ 1035.581141][T15951] loop7: detected capacity change from 0 to 256 [ 1035.609197][T15942] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1035.617535][T15942] EXT4-fs (loop9): DAX unsupported by block device. [ 1035.700811][T15957] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1036.250698][T15968] binder: 15966:15968 ioctl c0306201 0 returned -14 [ 1038.596956][T15996] __nla_validate_parse: 151 callbacks suppressed [ 1038.596978][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2881'. [ 1038.773763][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2881'. [ 1040.188573][T16014] overlayfs: failed to resolve './file2': -2 [ 1040.935683][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1040.944827][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1040.954694][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1040.963676][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1040.972595][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1040.981585][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1040.990562][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1041.002514][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1041.163331][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1041.179167][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.188779][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.205206][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.213383][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1041.220951][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.385704][T10536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.436079][T10536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.457571][T16031] loop8: detected capacity change from 0 to 4096 [ 1041.479363][T16031] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1041.490703][T16031] EXT4-fs (loop8): DAX unsupported by block device. [ 1041.507284][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.515052][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.595434][T16032] device bridge_slave_1 left promiscuous mode [ 1041.602143][T16032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.685377][T16032] device bridge_slave_0 left promiscuous mode [ 1041.697836][T16032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.968721][T10536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.038015][T10536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.229780][T10536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.267960][T10536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.430550][T10536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.441342][T10536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.847833][T16058] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1043.305659][T12651] Bluetooth: hci0: command 0x0409 tx timeout [ 1043.776556][T16068] overlayfs: failed to resolve './file2': -2 [ 1043.808425][T10536] tipc: Left network mode [ 1044.841760][T16026] chnl_net:caif_netlink_parms(): no params data found [ 1045.442451][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 1046.252968][T12651] Bluetooth: hci2: command 0x0409 tx timeout [ 1046.721064][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.758579][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.795732][T16026] device bridge_slave_0 entered promiscuous mode [ 1046.964764][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.971945][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.032984][T16026] device bridge_slave_1 entered promiscuous mode [ 1047.257272][ T4285] Bluetooth: min 0 < 6 [ 1047.267596][T16127] overlayfs: failed to resolve './file2': -2 [ 1047.293978][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.362027][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.462876][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 1047.524008][T16134] __nla_validate_parse: 43 callbacks suppressed [ 1047.524026][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2915'. [ 1047.559345][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2915'. [ 1047.645131][T16135] loop7: detected capacity change from 0 to 4096 [ 1047.724949][T16135] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1047.731805][T16135] EXT4-fs (loop7): DAX unsupported by block device. [ 1048.308631][T16026] team0: Port device team_slave_0 added [ 1048.419096][T16026] team0: Port device team_slave_1 added [ 1048.906781][T16164] fuse: Bad value for 'fd' [ 1049.471295][T16169] fuse: Bad value for 'user_id' [ 1049.522167][ T4285] Bluetooth: hci1: command 0x2021 tx timeout [ 1049.542897][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 1049.807611][T16026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.840815][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.023213][T16026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.058810][T16026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.087865][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.265683][T16187] rdma_rxe: rxe_register_device failed with error -23 [ 1050.273195][T16187] rdma_rxe: failed to add bond_slave_0 [ 1052.096683][T16178] loop8: detected capacity change from 0 to 8192 [ 1053.086695][T16026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.220937][T16189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2925'. [ 1054.348048][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.573771][T10536] device hsr_slave_0 left promiscuous mode [ 1054.646100][T10536] device hsr_slave_1 left promiscuous mode [ 1054.676354][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.706398][T10536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.735931][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.746394][T10536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.817179][T16211] loop9: detected capacity change from 0 to 4096 [ 1054.921608][T16211] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1054.982106][T16211] EXT4-fs (loop9): DAX unsupported by block device. [ 1055.083424][T10536] device veth1_macvtap left promiscuous mode [ 1055.090191][T10536] device veth0_macvtap left promiscuous mode [ 1055.098476][T10536] device veth1_vlan left promiscuous mode [ 1055.105338][T10536] device veth0_vlan left promiscuous mode [ 1055.863770][T10536] infiniband syz2: set down [ 1058.341942][T10536] bond6 (unregistering): Released all slaves [ 1058.612297][T10536] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1058.628367][T10536] device veth0_to_bond left promiscuous mode [ 1058.649613][T10536] bond5 (unregistering): Released all slaves [ 1058.843870][T16251] rdma_rxe: rxe_register_device failed with error -23 [ 1058.851360][T16251] rdma_rxe: failed to add bond_slave_0 [ 1060.241835][T10536] bond4 (unregistering): Released all slaves [ 1060.487800][T10536] bond3 (unregistering): Released all slaves [ 1060.657336][T10536] bond2 (unregistering): Released all slaves [ 1060.811337][T10536] bond1 (unregistering): Released all slaves [ 1061.361680][T10536] team0 (unregistering): Port device team_slave_1 removed [ 1061.412579][T10536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.468906][T10536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.486467][ T4335] smc: removing ib device syz2 [ 1061.863611][T10536] bond0 (unregistering): Released all slaves [ 1061.911548][T16026] device hsr_slave_0 entered promiscuous mode [ 1061.918500][T16026] device hsr_slave_1 entered promiscuous mode [ 1061.925816][T16026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.934060][T16026] Cannot create hsr debugfs directory [ 1061.940914][T16231] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2936'. [ 1062.039365][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2937'. [ 1062.110571][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2937'. [ 1063.478409][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2945'. [ 1063.511354][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2945'. [ 1063.701194][T16274] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.710134][T16274] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.718949][T16274] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.727673][T16274] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.953380][T16294] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2948'. [ 1065.105095][T16295] loop7: detected capacity change from 0 to 4096 [ 1065.156972][T16295] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1065.199323][T16295] EXT4-fs (loop7): DAX unsupported by block device. [ 1065.611970][T16308] rdma_rxe: rxe_register_device failed with error -23 [ 1065.619550][T16308] rdma_rxe: failed to add bond_slave_0 [ 1066.521192][T16311] netlink: 316 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1066.821609][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2952'. [ 1066.881290][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2952'. [ 1068.705484][T16335] rdma_rxe: rxe_register_device failed with error -23 [ 1068.712650][T16335] rdma_rxe: failed to add bond_slave_0 [ 1070.525149][T16350] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1070.560780][T16347] loop9: detected capacity change from 0 to 4096 [ 1070.612474][T16347] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1070.652013][T16347] EXT4-fs (loop9): DAX unsupported by block device. [ 1071.096519][T16348] infiniband syz1: set active [ 1071.698031][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2963'. [ 1072.027813][T12651] Bluetooth: hci4: command 0x2021 tx timeout [ 1073.139627][T16026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1073.223165][T16026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1074.016647][T16026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1074.046999][T16409] infiniband syz1: set active [ 1074.064890][T16026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1074.159961][T16418] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1074.191028][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1074.230912][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1074.320008][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1074.343104][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1076.447660][T16423] infiniband syz2: set active [ 1076.452439][T16423] infiniband syz2: added bond_slave_0 [ 1076.459991][T16423] rdma_rxe: unable to create cq [ 1076.464984][T16423] infiniband syz2: Couldn't create ib_mad CQ [ 1076.472874][T16423] infiniband syz2: Couldn't open port 1 [ 1076.565159][T16423] RDS/IB: syz2: added [ 1076.569286][T16423] smc: adding ib device syz2 with port count 1 [ 1076.575637][T16423] smc: ib device syz2 port 1 has pnetid [ 1076.914631][T16443] device syzkaller0 entered promiscuous mode [ 1077.422958][T16026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.538250][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1077.548299][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1077.561498][T16026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.576845][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1077.587938][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1077.599989][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.607218][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.630374][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1077.642056][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1077.771593][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1077.800197][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.807442][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.832935][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1077.866027][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1078.059224][T16026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1078.260012][T16026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1078.272484][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1078.309560][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1078.453456][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1078.509486][T16469] 9pnet_fd: Insufficient options for proto=fd [ 1078.516899][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1079.210900][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1079.270995][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1079.282549][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1079.351414][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1079.413709][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1079.543887][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1080.647123][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2987'. [ 1080.676568][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2987'. [ 1080.752957][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2987'. [ 1080.775889][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2987'. [ 1083.008090][T16520] 9pnet_fd: Insufficient options for proto=fd [ 1085.500941][T10692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1085.550411][T10692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1085.688059][T16026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.920187][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1085.962066][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1088.249624][T16593] 9pnet_fd: Insufficient options for proto=fd [ 1091.953791][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1091.962758][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1091.971887][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1091.980960][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1091.991655][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1092.010848][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1092.020181][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1092.034298][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1092.049610][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1092.059252][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1092.073809][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1092.092674][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1092.119461][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1092.135983][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1092.173615][T16026] device veth0_vlan entered promiscuous mode [ 1092.326993][T16614] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1092.377585][T16026] device veth1_vlan entered promiscuous mode [ 1093.179898][T10692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1093.324213][T10692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1093.388084][T16026] device veth0_macvtap entered promiscuous mode [ 1093.411537][T16026] device veth1_macvtap entered promiscuous mode [ 1094.804118][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1094.922531][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1094.999464][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.083217][T16652] 9pnet_fd: Insufficient options for proto=fd [ 1095.090104][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.181413][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.296873][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.383144][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.423101][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.502465][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.611404][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.635782][T16026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.757431][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.821737][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.866658][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.915349][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.963705][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.984419][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.022353][T16026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1096.099415][T16026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.125640][T16026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.151137][T16026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.161565][T16026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.173132][T16026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.182647][T16026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.356314][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.477539][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.492051][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1096.512056][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1096.729054][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1096.759427][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1097.473289][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1097.481592][T16664] __nla_validate_parse: 46 callbacks suppressed [ 1097.481607][T16664] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3020'. [ 1097.587221][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.629797][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.698956][T10692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1097.904082][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3021'. [ 1097.925515][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3021'. [ 1097.961937][T16687] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1098.722956][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3021'. [ 1098.732020][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3021'. [ 1099.205325][T16700] 9pnet_fd: Insufficient options for proto=fd [ 1100.159038][T16703] loop7: detected capacity change from 0 to 4096 [ 1100.209139][T12651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1100.221284][T12651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1100.232610][T12651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1100.248176][T12651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1100.256027][T12651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1100.263676][T12651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1100.331693][T16703] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1100.396158][T16703] EXT4-fs (loop7): DAX unsupported by block device. [ 1101.439230][T16722] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3032'. [ 1101.531536][T16724] loop8: detected capacity change from 0 to 2048 [ 1101.705234][T16724] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1101.714025][T16724] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.757935][ T4301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.931444][T11554] EXT4-fs (loop8): unmounting filesystem. [ 1101.985313][ T4301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.164924][T16737] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1102.344704][T12651] Bluetooth: hci5: command 0x0409 tx timeout [ 1102.875467][ T4301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.082054][ T4301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.345208][T16750] 9pnet_fd: Insufficient options for proto=fd [ 1104.422915][T12651] Bluetooth: hci5: command 0x041b tx timeout [ 1105.459391][T16706] chnl_net:caif_netlink_parms(): no params data found [ 1105.732591][T16777] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3044'. [ 1105.984723][T16706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.995400][T16706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.018331][T16706] device bridge_slave_0 entered promiscuous mode [ 1106.105381][T16706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.116048][T16706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.143121][T16706] device bridge_slave_1 entered promiscuous mode [ 1106.349448][T16706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.401002][T16706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.503040][T12651] Bluetooth: hci5: command 0x040f tx timeout [ 1107.535454][T16706] team0: Port device team_slave_0 added [ 1107.581668][T16706] team0: Port device team_slave_1 added [ 1107.620845][T16706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.629658][T16706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.656284][T16706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.811958][T16706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.822881][T16706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.889904][T16706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.583131][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 1108.806976][T16826] fuse: Unknown parameter '0x0000000000000004' [ 1108.823026][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 1109.151046][T16825] loop9: detected capacity change from 0 to 8192 [ 1109.229375][T16706] device hsr_slave_0 entered promiscuous mode [ 1109.320943][T16706] device hsr_slave_1 entered promiscuous mode [ 1109.367389][T16706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.419964][T16706] Cannot create hsr debugfs directory [ 1111.050918][ T4301] device hsr_slave_0 left promiscuous mode [ 1111.061645][ T4301] device hsr_slave_1 left promiscuous mode [ 1111.100085][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.121480][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.155852][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.182957][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.211346][ T4301] device bridge_slave_1 left promiscuous mode [ 1111.241289][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.264664][ T4301] device bridge_slave_0 left promiscuous mode [ 1111.270993][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.391814][ T4301] device veth1_macvtap left promiscuous mode [ 1111.406373][ T4301] device veth0_macvtap left promiscuous mode [ 1111.443428][ T4301] device veth1_vlan left promiscuous mode [ 1111.463086][ T4301] device veth0_vlan left promiscuous mode [ 1113.061151][T16876] fuse: Unknown parameter '0x0000000000000004' [ 1113.988660][ T4301] team0 (unregistering): Port device team_slave_1 removed [ 1114.047215][ T4301] team0 (unregistering): Port device team_slave_0 removed [ 1114.101891][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.179473][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.793539][ T4301] bond0 (unregistering): Released all slaves [ 1114.908781][T16857] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3064'. [ 1114.948935][T16898] tipc: Enabling of bearer rejected, failed to enable media [ 1115.087224][T16915] device syzkaller0 entered promiscuous mode [ 1115.257820][T16926] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1115.277247][T16926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1115.731610][T16940] fuse: Unknown parameter '0x0000000000000004' [ 1115.788165][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.159308][ T27] audit: type=1800 audit(1785597439.834:74): pid=16930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3074" name="/" dev="fuse" ino=6 res=0 errno=0 [ 1116.713633][T16947] loop7: detected capacity change from 0 to 8192 [ 1119.054950][T16974] fuse: Unknown parameter '0x0000000000000004' [ 1120.878756][T16951] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1120.962530][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1120.971682][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1120.980718][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1120.989787][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1120.998797][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1121.007775][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1121.016774][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1121.026494][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1121.035573][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1121.361058][T16706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1121.382175][T16706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1121.517844][T16706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1121.629100][T16706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1122.318038][T17007] binder: 17006:17007 ioctl c0306201 0 returned -14 [ 1123.403292][T17014] loop9: detected capacity change from 0 to 2048 [ 1123.426428][T16706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.548357][T17014] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1123.612717][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1123.628591][T10528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1123.647419][T17014] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.750956][T16706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.849879][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1123.911750][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1124.028179][T10534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.035461][T10534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.183510][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1124.249499][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1124.294222][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1124.321975][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.329255][T10534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.386431][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1124.420942][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1124.468417][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1124.491919][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1124.505163][T13500] EXT4-fs (loop9): unmounting filesystem. [ 1124.557825][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1124.597577][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1124.684354][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1124.701556][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1124.714820][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1124.730575][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1124.741662][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1124.759148][T16706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1124.781916][T17056] device syzkaller0 entered promiscuous mode [ 1126.567919][T17083] binder: 17082:17083 ioctl c0306201 0 returned -14 [ 1129.368607][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1129.386807][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1129.401777][T17096] __nla_validate_parse: 96 callbacks suppressed [ 1129.401793][T17096] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3111'. [ 1129.487332][T16706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.596985][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1129.614110][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1129.707536][T16706] device veth0_vlan entered promiscuous mode [ 1129.757531][T16706] device veth1_vlan entered promiscuous mode [ 1129.856753][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1129.872608][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1129.948400][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1130.071885][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1130.206978][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1130.237449][T17115] binder: 17112:17115 ioctl c0306201 0 returned -14 [ 1130.321185][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1130.668441][T16706] device veth0_macvtap entered promiscuous mode [ 1130.685956][T16706] device veth1_macvtap entered promiscuous mode [ 1130.694033][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1130.731422][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1130.768608][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1130.807699][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1130.894959][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.952870][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.012980][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.024371][T17132] overlayfs: missing 'workdir' [ 1131.050477][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.088370][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.112538][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.133708][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.160099][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.201363][T17127] loop8: detected capacity change from 0 to 8192 [ 1131.241419][T16706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.281037][T17135] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3123'. [ 1131.323206][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1131.372920][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1131.383879][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.435775][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.496842][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.573056][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.623636][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.703706][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.760451][T16706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1131.810236][T16706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.872467][T16706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.924429][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1131.959623][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1131.997708][T16706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.052845][T16706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.102860][T16706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.152228][T16706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.286391][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1133.349723][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3129'. [ 1133.393607][ T9633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.412120][ T9633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.451295][T10541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1133.515113][T17175] binder: BINDER_SET_CONTEXT_MGR already set [ 1133.521604][T17175] binder: 17174:17175 ioctl 4018620d 200000004a80 returned -16 [ 1133.550470][ T4579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.569711][ T4579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.582622][T10541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1133.789075][T17185] device syzkaller0 entered promiscuous mode [ 1133.816847][T17187] binder: 17186:17187 ioctl c0306201 200000000080 returned -14 [ 1133.848299][T17187] binder: 17186:17187 ioctl c0306201 2000000003c0 returned -14 [ 1133.876961][T17187] binder: 17186:17187 ioctl c0306201 0 returned -14 [ 1134.167682][T17195] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3134'. [ 1134.344965][T17201] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1134.784580][T17209] fuse: Bad value for 'fd' [ 1135.895801][T17225] binder: 17224:17225 ioctl c0306201 200000000080 returned -14 [ 1135.906158][T12651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1135.918356][T12651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1135.962266][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1135.980364][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1135.993673][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1136.001348][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.021516][T17232] binder: 17224:17232 ioctl c0306201 2000000003c0 returned -14 [ 1136.073181][T17233] binder: 17224:17233 ioctl c0306201 0 returned -14 [ 1138.105887][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 1138.878787][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3146'. [ 1138.897200][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3146'. [ 1138.913356][T17244] device syzkaller0 entered promiscuous mode [ 1139.229937][T10989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.246527][T10989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.317133][T17261] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1139.468656][T10989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.518700][T10989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.607605][T10989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.635666][T10989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.720967][T17280] loop9: detected capacity change from 0 to 8192 [ 1139.768512][T10989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.808639][T10989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.183004][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 1140.698253][T17223] chnl_net:caif_netlink_parms(): no params data found [ 1141.273475][T17223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.280669][T17223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.329318][T17223] device bridge_slave_0 entered promiscuous mode [ 1141.433149][T17223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.461153][T17223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.511432][T17223] device bridge_slave_1 entered promiscuous mode [ 1141.699970][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.710908][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.720030][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.729030][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.738061][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.747203][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.756195][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.765200][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3157'. [ 1141.775817][T17320] device syzkaller0 entered promiscuous mode [ 1142.016972][T17223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.120230][T17223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.263098][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 1142.283958][T17338] loop9: detected capacity change from 0 to 2048 [ 1142.407039][T17338] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1142.430788][T17338] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.473230][T17335] device syzkaller0 entered promiscuous mode [ 1142.554047][T17338] overlayfs: missing 'lowerdir' [ 1142.663608][T17223] team0: Port device team_slave_0 added [ 1142.674939][T13500] EXT4-fs (loop9): unmounting filesystem. [ 1144.342966][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 1146.652557][T17223] team0: Port device team_slave_1 added [ 1149.660362][T17404] __nla_validate_parse: 45 callbacks suppressed [ 1149.660380][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3178'. [ 1149.688566][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3178'. [ 1149.702071][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3178'. [ 1149.733225][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3178'. [ 1149.743708][T17223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.750708][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.800229][T17223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.034330][T17416] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1150.041599][T17416] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1150.052543][T17415] gadgetfs: bound to dummy_udc driver [ 1150.137764][T17223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.153214][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.263593][T17223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.316688][T17418] device syzkaller0 entered promiscuous mode [ 1150.342620][T17422] device syzkaller0 entered promiscuous mode [ 1150.722670][T17223] device hsr_slave_0 entered promiscuous mode [ 1150.743857][T17223] device hsr_slave_1 entered promiscuous mode [ 1150.763118][T17223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1150.770754][T17223] Cannot create hsr debugfs directory [ 1151.163689][T17455] device syzkaller0 entered promiscuous mode [ 1153.849011][T17462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3192'. [ 1153.862670][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3192'. [ 1153.913682][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3192'. [ 1153.922631][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3192'. [ 1154.009711][T10989] device hsr_slave_0 left promiscuous mode [ 1154.038460][T10989] device hsr_slave_1 left promiscuous mode [ 1154.067662][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.079450][T10989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.086957][T17474] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.3193'. [ 1154.101763][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.140064][T10989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.223116][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1154.249086][T10989] device veth1_macvtap left promiscuous mode [ 1154.255403][T10989] device veth0_macvtap left promiscuous mode [ 1154.261662][T10989] device veth1_vlan left promiscuous mode [ 1154.268819][T10989] device veth0_vlan left promiscuous mode [ 1155.655218][T17502] loop7: detected capacity change from 0 to 4096 [ 1155.698557][T17502] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1155.741655][T17502] EXT4-fs (loop7): DAX unsupported by block device. [ 1155.979119][T10989] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1155.998274][T10989] device veth0_to_bond left promiscuous mode [ 1156.020166][T10989] bond9 (unregistering): Released all slaves [ 1156.388092][T10989] bond8 (unregistering): Released all slaves [ 1156.724612][T10989] bond7 (unregistering): Released all slaves [ 1156.894726][T10989] bond6 (unregistering): Released all slaves [ 1157.108756][T10989] bond5 (unregistering): Released all slaves [ 1157.292166][T10989] bond4 (unregistering): Released all slaves [ 1157.554908][T10989] bond3 (unregistering): Released all slaves [ 1157.705442][T10989] bond2 (unregistering): Released all slaves [ 1157.849960][T10989] bond1 (unregistering): Released all slaves [ 1158.383970][T10989] team0 (unregistering): Port device team_slave_1 removed [ 1158.440930][T10989] team0 (unregistering): Port device team_slave_0 removed [ 1158.491647][T10989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.548980][T10989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.923927][T10989] bond0 (unregistering): Released all slaves [ 1159.087154][T17512] tipc: Started in network mode [ 1159.092299][T17512] tipc: Node identity 16b814ccaaa6, cluster identity 4711 [ 1159.136059][T17512] tipc: Enabled bearer , priority 0 [ 1159.221874][T17516] tipc: Resetting bearer [ 1159.264495][T17530] loop9: detected capacity change from 0 to 256 [ 1159.306253][T17506] tipc: Disabling bearer [ 1159.819115][T17544] loop7: detected capacity change from 0 to 1024 [ 1159.896300][T17544] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1159.912236][T17544] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.733532][T17558] rdma_rxe: rxe_register_device failed with error -23 [ 1160.740529][T17558] rdma_rxe: failed to add bond_slave_0 [ 1161.054619][T17562] loop9: detected capacity change from 0 to 4096 [ 1161.073535][T17562] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1161.080511][T17562] EXT4-fs (loop9): DAX unsupported by block device. [ 1162.423173][T17549] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1164.494189][T11538] EXT4-fs (loop7): unmounting filesystem. [ 1164.568258][T17591] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1164.681423][T17585] device syzkaller0 entered promiscuous mode [ 1167.779274][T17223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1167.789143][T17630] gadgetfs: bound to dummy_udc driver [ 1167.829824][T17223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1167.869911][T17223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1167.890758][T17223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1168.870435][T17644] device syzkaller0 left promiscuous mode [ 1168.951098][T17649] loop9: detected capacity change from 0 to 1024 [ 1168.960657][T17223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.108775][T17649] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1169.127609][T17649] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.138879][T10989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1169.181205][T10989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1169.235965][T17660] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3225'. [ 1169.292270][T17223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.394601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1169.430467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1170.163577][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.170764][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.196364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1170.213593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1170.237327][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.244597][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.262982][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1170.274032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1170.412965][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1170.421584][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1170.432548][T13500] EXT4-fs (loop9): unmounting filesystem. [ 1170.440621][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1170.471115][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1170.565717][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1170.599490][T17679] gadgetfs: bound to dummy_udc driver [ 1170.624320][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1170.664183][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1170.703924][T17686] device syzkaller0 entered promiscuous mode [ 1170.740605][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1170.783532][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1170.871623][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1170.891829][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1170.933165][T17223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1171.957197][T17709] device syzkaller0 entered promiscuous mode [ 1172.031849][T17709] tipc: Started in network mode [ 1172.057380][T17709] tipc: Node identity 2ade4446d221, cluster identity 4711 [ 1172.093884][T17709] tipc: Enabled bearer , priority 0 [ 1172.174687][T17709] tipc: Resetting bearer [ 1172.203143][T17708] tipc: Resetting bearer [ 1172.277982][T17708] tipc: Disabling bearer [ 1172.617769][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1172.650431][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1172.699684][T17223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.812491][T17740] device syzkaller0 entered promiscuous mode [ 1174.088852][T17747] device syzkaller0 entered promiscuous mode [ 1175.268479][T17775] loop9: detected capacity change from 0 to 1024 [ 1175.401641][T17775] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1175.449663][T10541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1175.489818][T10541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1175.613996][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1175.634628][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1175.645803][T13500] EXT4-fs (loop9): unmounting filesystem. [ 1175.681796][T17223] device veth0_vlan entered promiscuous mode [ 1175.708660][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1175.723723][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1175.767654][T17223] device veth1_vlan entered promiscuous mode [ 1175.840399][T17788] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1175.862316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1175.882258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1175.898278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1175.909378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1175.941342][T17223] device veth0_macvtap entered promiscuous mode [ 1175.998559][T17790] device syzkaller0 entered promiscuous mode [ 1176.028494][T17790] tipc: Started in network mode [ 1176.042360][T17790] tipc: Node identity b23bb05162ac, cluster identity 4711 [ 1176.055147][T17790] tipc: Enabled bearer , priority 0 [ 1176.068140][T17223] device veth1_macvtap entered promiscuous mode [ 1176.161590][T17790] tipc: Resetting bearer [ 1176.189985][T17789] tipc: Resetting bearer [ 1176.247078][T17789] tipc: Disabling bearer [ 1176.284188][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.325371][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.402868][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.445418][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.476213][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.491401][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.502707][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.525958][T17807] loop9: detected capacity change from 0 to 512 [ 1176.534253][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.564392][T17223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.613856][T17807] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1176.651967][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.706607][T17807] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.3262: bg 0: block 5: invalid block bitmap [ 1176.712953][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.733877][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.752071][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.979433][T17807] EXT4-fs (loop9): Remounting filesystem read-only [ 1177.020546][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.195506][T17807] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1177.229228][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.340182][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.386879][T17807] EXT4-fs (loop9): Remounting filesystem read-only [ 1177.406638][T17807] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3262: invalid indirect mapped block 3 (level 2) [ 1177.420516][T17223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.522809][T17223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.533982][T17807] EXT4-fs (loop9): Remounting filesystem read-only [ 1177.540735][T17807] EXT4-fs (loop9): 2 truncates cleaned up [ 1177.561666][T17807] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1177.596582][T17223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.664356][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1177.700959][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1177.763987][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1177.816810][T13500] EXT4-fs (loop9): unmounting filesystem. [ 1177.845345][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1177.865854][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1177.897675][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1177.967911][T17818] device syzkaller0 entered promiscuous mode [ 1177.991521][T17223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.015400][T17223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.044749][T17223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.070134][T17223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.116831][T17831] infiniband syz1: set active [ 1178.148892][T17831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1178.202143][T17831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1178.295647][T17843] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.3267'. [ 1178.616682][ T9633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.640019][ T9633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.720811][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1178.760449][T17860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1178.797144][T17860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1178.832300][T17860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1178.928467][T17863] loop8: detected capacity change from 0 to 4096 [ 1178.952206][T17861] device syzkaller0 entered promiscuous mode [ 1178.979417][T17863] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1179.013570][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.042661][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.044467][T17863] EXT4-fs (loop8): DAX unsupported by block device. [ 1179.244557][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1180.691685][T17903] loop9: detected capacity change from 0 to 256 [ 1181.158651][T17917] loop8: detected capacity change from 0 to 4096 [ 1181.236043][T17917] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1181.274119][T17917] EXT4-fs (loop8): DAX unsupported by block device. [ 1182.154144][T17937] device syzkaller0 entered promiscuous mode [ 1182.276528][ T4568] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.310310][ T4568] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.582455][ T4568] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.627909][ T4568] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.980651][T17949] loop7: detected capacity change from 0 to 128 [ 1183.007006][ T4568] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.109314][ T4568] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.126760][T17949] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1183.204370][T17949] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.295455][T17953] loop8: detected capacity change from 0 to 128 [ 1183.356370][T17949] EXT4-fs warning (device loop7): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 1183.454683][ T4568] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.516187][ T4568] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.555388][T11538] EXT4-fs (loop7): unmounting filesystem. [ 1184.172993][T17979] loop5: detected capacity change from 0 to 512 [ 1184.240167][T17975] device syzkaller0 entered promiscuous mode [ 1184.260814][T17979] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1184.380461][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1184.400202][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1184.422143][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1184.449214][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1184.467933][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1184.493934][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1184.616812][T17979] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.3294: bad orphan inode 131083 [ 1184.637805][T17979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1185.614108][ T4568] tipc: Left network mode [ 1186.237731][T17223] EXT4-fs (loop5): unmounting filesystem. [ 1186.550990][T17996] loop5: detected capacity change from 0 to 4096 [ 1186.583092][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 1186.593621][T17996] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1186.600655][T17996] EXT4-fs (loop5): DAX unsupported by block device. [ 1186.873079][T17998] device syzkaller0 entered promiscuous mode [ 1188.670843][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 1189.148510][T17977] chnl_net:caif_netlink_parms(): no params data found [ 1189.575253][T18048] rdma_rxe: rxe_register_device failed with error -23 [ 1189.582228][T18048] rdma_rxe: failed to add bond_slave_0 [ 1189.858966][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.866626][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.875610][T17977] device bridge_slave_0 entered promiscuous mode [ 1189.975045][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.983413][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.070049][T17977] device bridge_slave_1 entered promiscuous mode [ 1190.744507][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 1190.855802][T17977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.973227][T18062] loop5: detected capacity change from 0 to 4096 [ 1190.981830][T17977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.084205][T18062] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1191.091078][T18062] EXT4-fs (loop5): DAX unsupported by block device. [ 1191.138188][T18068] device syzkaller0 entered promiscuous mode [ 1191.160859][T17977] team0: Port device team_slave_0 added [ 1191.321722][T17977] team0: Port device team_slave_1 added [ 1192.055450][T17977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.062479][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.254704][T17977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.317022][ T4568] device hsr_slave_0 left promiscuous mode [ 1192.367702][ T4568] device hsr_slave_1 left promiscuous mode [ 1192.413150][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.420655][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.463772][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.471265][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.801341][ T4568] device veth1_macvtap left promiscuous mode [ 1192.811431][ T4568] device veth0_macvtap left promiscuous mode [ 1192.832991][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 1192.862923][ T4568] device veth1_vlan left promiscuous mode [ 1192.895120][ T4568] device veth0_vlan left promiscuous mode [ 1193.419654][T18116] rdma_rxe: rxe_register_device failed with error -23 [ 1193.427484][T18116] rdma_rxe: failed to add bond_slave_0 [ 1193.527417][ T4568] infiniband syz2: set down [ 1194.609383][ T4568] team0 (unregistering): Port device team_slave_1 removed [ 1194.658404][ T4568] team0 (unregistering): Port device team_slave_0 removed [ 1194.708605][ T4568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.768174][ T4568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.778995][T17961] smc: removing ib device syz2 [ 1195.162487][ T4568] bond0 (unregistering): Released all slaves [ 1195.212037][T17977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.225213][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.255979][T17977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.324332][T18096] device syzkaller0 entered promiscuous mode [ 1200.550130][T18161] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3338'. [ 1200.700248][T17977] device hsr_slave_0 entered promiscuous mode [ 1200.745936][T17977] device hsr_slave_1 entered promiscuous mode [ 1203.157805][T18206] device syzkaller0 entered promiscuous mode [ 1203.398895][T18212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3351'. [ 1205.898094][T13431] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1206.073092][T13431] usb 6-1: device descriptor read/64, error -71 [ 1206.352975][T13431] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1206.513051][T13431] usb 6-1: device descriptor read/64, error -71 [ 1206.654671][T13431] usb usb6-port1: attempt power cycle [ 1207.073001][T13431] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1207.113555][T13431] usb 6-1: device descriptor read/8, error -71 [ 1207.385626][T13431] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1207.428620][T13431] usb 6-1: device descriptor read/8, error -71 [ 1207.559440][T13431] usb usb6-port1: unable to enumerate USB device [ 1207.759665][T18265] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3367'. [ 1207.923654][T17977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1207.951576][T17977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1208.058945][T17977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1208.109720][T17977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1209.653619][T17977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.797956][T18270] infiniband syz2: set active [ 1209.802872][T18270] infiniband syz2: added bond_slave_0 [ 1209.837280][T18270] RDS/IB: syz2: added [ 1209.841390][T18270] smc: adding ib device syz2 with port count 1 [ 1209.847650][T18270] smc: ib device syz2 port 1 has pnetid [ 1212.835998][T17977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.844418][T17966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1212.852256][T17966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1212.870023][T18307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3378'. [ 1212.973781][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1213.013647][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1213.053588][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.060766][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.083820][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1213.100200][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1213.112362][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.119641][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.128908][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1213.282474][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1213.966893][T17977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1214.090029][T17977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1214.386789][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1214.397449][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1214.441569][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1214.450585][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1214.459907][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1214.481330][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1214.509736][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1214.541508][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1214.572266][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1214.618025][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1214.646458][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1215.091440][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1215.105055][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1215.123452][T17977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.383275][T18372] 9pnet_fd: Insufficient options for proto=fd [ 1215.791645][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1215.816547][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1215.891228][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1215.953298][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1215.993114][T17977] device veth0_vlan entered promiscuous mode [ 1216.002493][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1216.028185][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1216.057032][T17977] device veth1_vlan entered promiscuous mode [ 1216.150724][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1216.164850][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1216.187420][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1216.258099][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1216.288345][T17977] device veth0_macvtap entered promiscuous mode [ 1216.325567][T17977] device veth1_macvtap entered promiscuous mode [ 1216.414316][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.474692][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.506804][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.519029][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.588019][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.726528][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.792072][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.852570][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.934910][T17977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.013820][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1217.049531][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1217.128347][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1217.213404][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.249789][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.274608][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.294135][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.305434][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.317412][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.329049][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.351823][T17977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.392793][T17977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.423116][T17977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.450900][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1217.462952][T17965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1217.533994][T17977] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.556632][T17977] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.571491][T18406] loop7: detected capacity change from 0 to 8192 [ 1217.588952][T17977] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.611284][T17977] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.686119][T18406] loop7: AHDI p1 p2 p3 [ 1217.703960][T18406] loop7: p1 size 16383 extends beyond EOD, truncated [ 1218.009156][T18328] udevd[18328]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1218.036239][T18424] loop7: detected capacity change from 0 to 2048 [ 1218.119547][T18424] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1218.129322][T18424] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.442325][T18424] fs-verity: sha512 using implementation "sha512-avx2" [ 1218.764325][T18424] fs-verity (loop7, inode 13): Error -4 building Merkle tree [ 1218.931282][T11538] EXT4-fs (loop7): unmounting filesystem. [ 1220.074444][ T4322] kernel write not supported for file /input/mice (pid: 4322 comm: kworker/0:6) [ 1220.539216][T18462] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1225.336450][T18469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 1225.359724][T18469] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1225.534393][ T4568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.542315][ T4568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.560949][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1225.626921][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.644991][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.672068][T17961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1225.694750][T18503] loop7: detected capacity change from 0 to 256 [ 1225.905606][T18509] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3436'. [ 1227.664310][T18533] loop9: detected capacity change from 0 to 2048 [ 1227.860306][T18533] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1228.626879][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 1228.653178][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1228.710972][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3448'. [ 1230.790296][ T27] audit: type=1326 audit(1785597554.464:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18565 comm="syz.5.3456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3fc79e019 code=0x0 [ 1234.661365][T18597] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.821729][T18611] xt_hashlimit: size too large, truncated to 1048576 [ 1234.868505][T18597] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.048367][T18597] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.250264][T18597] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.715054][T18597] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.780387][T18597] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.873383][T18597] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.916040][T18597] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.996565][T18627] Cannot find del_set index 2 as target [ 1237.392786][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 1238.083784][T18644] loop7: detected capacity change from 0 to 512 [ 1238.112389][T18644] EXT4-fs: Ignoring removed i_version option [ 1238.141921][T18644] ext2: Unknown parameter 'daxmin_batch_time' [ 1238.667733][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.897579][T18661] loop9: detected capacity change from 0 to 2048 [ 1241.929726][T18661] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1241.967016][T18661] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.108826][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1245.438487][T18716] Illegal XDP return value 4291367224 on prog (id 103) dev syz_tun, expect packet loss! [ 1245.910033][T18727] loop5: detected capacity change from 0 to 512 [ 1245.932239][T18727] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1246.261572][T18734] loop5: detected capacity change from 0 to 2048 [ 1246.327948][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3509'. [ 1246.353766][T18734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1246.380067][T18734] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.561527][T17223] EXT4-fs (loop5): unmounting filesystem. [ 1246.912205][T18759] tipc: Enabling of bearer rejected, failed to enable media [ 1248.287627][T18781] loop7: detected capacity change from 0 to 8192 [ 1248.355094][T18781] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1248.507420][T18773] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1249.251696][T18788] loop5: detected capacity change from 0 to 2048 [ 1249.453734][T18788] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1249.497546][T18788] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1249.840412][T17223] EXT4-fs (loop5): unmounting filesystem. [ 1250.374475][T18798] loop7: detected capacity change from 0 to 2048 [ 1250.487966][ T4288] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1250.505514][T18802] loop5: detected capacity change from 0 to 1024 [ 1250.538437][T18802] EXT4-fs: inline encryption not supported [ 1250.656981][T18798] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1250.676488][T18802] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1250.815995][T18798] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1250.840696][T18802] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.484533][T17223] EXT4-fs (loop5): unmounting filesystem. [ 1251.502938][T11538] EXT4-fs (loop7): unmounting filesystem. [ 1251.707586][ T4288] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 1253.410754][T18848] Bluetooth: MGMT ver 1.22 [ 1253.503382][T18855] loop9: detected capacity change from 0 to 256 [ 1253.519513][T18855] FAT-fs (loop9): Unrecognized mount option "nonumtar" or missing value [ 1253.569018][T18508] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1253.736075][ T4288] Bluetooth: hci1: link tx timeout [ 1253.741738][ T4288] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1253.753095][ T4288] Bluetooth: hci1: link tx timeout [ 1253.758262][ T4288] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1254.199755][T18863] loop9: detected capacity change from 0 to 512 [ 1254.216084][T18863] EXT4-fs: Ignoring removed mblk_io_submit option [ 1254.271114][T18863] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1254.293281][T18863] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.408258][T18863] EXT4-fs error (device loop9): ext4_get_first_dir_block:3583: inode #12: comm syz.9.3547: Attempting to read directory block (0) that is past i_size (3) [ 1254.532280][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1255.788829][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1256.104457][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 1256.425578][T18893] loop9: detected capacity change from 0 to 256 [ 1256.753075][T18898] input: syz1 as /devices/virtual/input/input27 [ 1256.801633][T18901] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1257.872818][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1258.846139][T18925] loop7: detected capacity change from 0 to 256 [ 1261.631527][T18970] netlink: 'syz.8.3582': attribute type 72 has an invalid length. [ 1266.969880][T19037] loop5: detected capacity change from 0 to 2048 [ 1267.253326][T19044] loop9: detected capacity change from 0 to 512 [ 1267.324874][T19037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1267.549333][T19037] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1267.666270][T17223] EXT4-fs (loop5): unmounting filesystem. [ 1267.999482][T19056] overlayfs: failed to clone upperpath [ 1269.905392][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3607'. [ 1269.927296][T19054] HTB: quantum of class 80080008 is big. Consider r2q change. [ 1269.947551][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1269.987696][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1271.560968][T19096] loop5: detected capacity change from 0 to 256 [ 1272.375912][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3621'. [ 1277.732476][T19152] loop9: detected capacity change from 0 to 512 [ 1278.866698][T19170] loop5: detected capacity change from 0 to 8 [ 1279.094876][T19170] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1279.387552][T19170] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1279.427220][T19170] SQUASHFS error: Unable to read directory block [6aa:26] [ 1280.104377][T19190] loop7: detected capacity change from 0 to 512 [ 1280.722580][T18496] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1281.468386][ T4285] Bluetooth: hci0: Malformed LE Event: 0x1b [ 1282.282373][T19227] loop7: detected capacity change from 0 to 512 [ 1282.901343][T18496] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1283.117302][T19232] loop9: detected capacity change from 0 to 1024 [ 1283.134944][T19232] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1283.361000][T19232] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1283.427149][T19232] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #11: comm syz.9.3665: missing EA_INODE flag [ 1283.800669][T19232] EXT4-fs (loop9): Remounting filesystem read-only [ 1283.836517][T19232] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.3665: error while reading EA inode 11 err=-117 [ 1284.172525][T19247] Can't find ip_set type hash:net,n [ 1284.193139][ T4285] Bluetooth: hci5: Malformed LE Event: 0x1b [ 1284.245068][T19232] EXT4-fs (loop9): Remounting filesystem read-only [ 1284.546343][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1284.591500][T19251] cgroup: fork rejected by pids controller in /syz7 [ 1284.933807][T19293] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3673'. [ 1285.357484][T19300] loop5: detected capacity change from 0 to 512 [ 1285.935304][T18496] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1286.561827][T19317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3680'. [ 1287.243649][T19320] device syzkaller1 entered promiscuous mode [ 1287.300996][T19320] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1288.748712][T19350] loop9: detected capacity change from 0 to 512 [ 1288.843208][T18508] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1289.542342][T19357] loop7: detected capacity change from 0 to 256 [ 1290.403283][T19366] loop7: detected capacity change from 0 to 256 [ 1290.415353][T19365] loop9: detected capacity change from 0 to 1024 [ 1290.471640][T19365] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1290.628659][T19365] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1291.564027][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1291.659691][ T4285] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1292.294677][T19396] loop9: detected capacity change from 0 to 512 [ 1292.652946][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1292.663283][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1294.186538][T19432] loop9: detected capacity change from 0 to 512 [ 1294.223545][T19432] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1294.256013][T19432] EXT4-fs (loop9): invalid journal inode [ 1294.261915][T19432] EXT4-fs (loop9): can't get journal size [ 1294.543034][T19429] loop5: detected capacity change from 0 to 4096 [ 1294.932172][T19429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1294.954062][T19432] EXT4-fs (loop9): 1 truncate cleaned up [ 1294.959774][T19432] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1295.121800][T19429] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.3723: corrupted inode contents [ 1295.190298][T19429] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.3723: mark_inode_dirty error [ 1295.235987][T19445] loop7: detected capacity change from 0 to 2048 [ 1295.253425][T19429] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.3723: corrupted inode contents [ 1295.283248][T19429] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.3723: mark_inode_dirty error [ 1295.307938][T19429] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.3723: corrupted inode contents [ 1295.347023][T19445] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1295.358193][T19429] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.3723: mark_inode_dirty error [ 1295.394580][T19445] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1295.411514][T19429] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.3723: corrupted inode contents [ 1295.430614][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1295.443065][T19429] EXT4-fs error (device loop5): ext4_truncate:4325: inode #15: comm syz.5.3723: mark_inode_dirty error [ 1295.504832][T19429] EXT4-fs error (device loop5) in ext4_setattr:5695: Corrupt filesystem [ 1295.600021][T11538] EXT4-fs (loop7): unmounting filesystem. [ 1295.673632][T17223] EXT4-fs (loop5): unmounting filesystem. [ 1296.933723][T19475] overlayfs: failed to resolve './file0': -2 [ 1297.148124][T19480] loop9: detected capacity change from 0 to 512 [ 1297.161559][T19479] loop7: detected capacity change from 0 to 512 [ 1297.179403][T19479] FAT-fs (loop7): Unrecognized mount option "shortnameJmixed" or missing value [ 1297.190028][T19480] EXT4-fs: Ignoring removed mblk_io_submit option [ 1297.200018][T19480] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1297.344829][T19480] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2918: inode #15: comm syz.9.3741: corrupted xattr block 252 [ 1297.392946][T19480] EXT4-fs (loop9): Remounting filesystem read-only [ 1297.420159][T19485] rdma_rxe: rxe_register_device failed with error -23 [ 1297.427101][T19485] rdma_rxe: failed to add bond_slave_0 [ 1297.464832][T19480] EXT4-fs warning (device loop9): ext4_evict_inode:301: xattr delete (err -117) [ 1297.530154][T19480] EXT4-fs (loop9): 1 orphan inode deleted [ 1297.536032][T19480] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1298.303169][T19504] loop7: detected capacity change from 0 to 8 [ 1298.359293][T19504] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1298.367377][T19504] SQUASHFS error: Failed to read block 0x9b: -5 [ 1298.373717][T19504] SQUASHFS error: Unable to read metadata cache entry [99] [ 1298.381525][T19504] SQUASHFS error: Unable to read inode 0x127 [ 1298.409634][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1299.132432][T19521] loop9: detected capacity change from 0 to 1024 [ 1299.225352][T19521] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1299.253098][T19521] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1299.319234][T19519] rdma_rxe: already configured on bond_slave_0 [ 1299.912001][T19544] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3765'. [ 1300.109782][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.996484][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1301.085149][T19552] rdma_rxe: rxe_register_device failed with error -23 [ 1301.092049][T19552] rdma_rxe: failed to add bond_slave_0 [ 1301.213076][T19559] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3771'. [ 1301.393815][T19565] loop7: detected capacity change from 0 to 256 [ 1301.623403][T18496] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1303.056452][T19590] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3784'. [ 1303.168526][T19588] rdma_rxe: rxe_register_device failed with error -23 [ 1303.175518][T19588] rdma_rxe: failed to add bond_slave_0 [ 1303.486413][T19605] loop9: detected capacity change from 0 to 2048 [ 1303.504024][T19605] EXT4-fs: Ignoring removed i_version option [ 1303.547295][T19605] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1303.556124][T19605] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.602525][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1303.916796][T19620] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3795'. [ 1304.340608][T19625] rdma_rxe: already configured on bond_slave_0 [ 1306.184140][T19657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3809'. [ 1306.518039][T19659] rdma_rxe: rxe_register_device failed with error -23 [ 1306.525228][T19659] rdma_rxe: failed to add bond_slave_0 [ 1306.792969][T19664] 9pnet_fd: Insufficient options for proto=fd [ 1306.953376][T19671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1307.494888][T19686] device syzkaller0 entered promiscuous mode [ 1307.516397][T19686] tipc: Enabled bearer , priority 0 [ 1307.557383][T19686] tipc: Resetting bearer [ 1307.575901][T19682] tipc: Resetting bearer [ 1307.755613][T19682] tipc: Disabling bearer [ 1307.764085][T19691] rdma_rxe: already configured on bond_slave_0 [ 1308.529342][T19720] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3831'. [ 1310.439823][T19733] rdma_rxe: rxe_register_device failed with error -23 [ 1310.446845][T19733] rdma_rxe: failed to add bond_slave_0 [ 1310.798711][T19740] device syzkaller0 entered promiscuous mode [ 1311.139114][T19755] ip_tables: iptables: counters copy to user failed while replacing table [ 1311.289305][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3850'. [ 1311.305601][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3850'. [ 1311.433354][T19758] rdma_rxe: rxe_register_device failed with error -23 [ 1311.440292][T19758] rdma_rxe: failed to add bond_slave_0 [ 1312.360635][T19773] device syzkaller0 entered promiscuous mode [ 1312.569245][T19783] loop9: detected capacity change from 0 to 2048 [ 1312.664920][T19783] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1312.683130][T19783] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1312.880822][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1318.283982][T19878] device syzkaller0 entered promiscuous mode [ 1323.139339][T19921] gadgetfs: bound to dummy_udc driver [ 1323.542376][T19931] loop5: detected capacity change from 0 to 512 [ 1323.628362][T19931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1323.637522][T19931] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1324.283615][T19931] device syzkaller0 entered promiscuous mode [ 1324.401397][T19945] overlayfs: failed to clone upperpath [ 1324.640063][T17223] EXT4-fs (loop5): unmounting filesystem. [ 1325.971401][ T27] audit: type=1326 audit(1785597648.854:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19956 comm="syz.8.3921" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145a59e019 code=0x0 [ 1327.358843][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1328.600190][T20002] gadgetfs: bound to dummy_udc driver [ 1328.976834][T20009] loop7: detected capacity change from 0 to 2048 [ 1330.166419][ T4285] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1330.179089][ T4285] Bluetooth: hci2: Injecting HCI hardware error event [ 1330.189550][ T4288] Bluetooth: hci2: hardware error 0x00 [ 1330.198206][T20009] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1330.235818][T20009] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1330.606911][T11538] EXT4-fs (loop7): unmounting filesystem. [ 1331.438956][T20044] gadgetfs: bound to dummy_udc driver [ 1331.510944][T20046] loop7: detected capacity change from 0 to 256 [ 1331.801478][T20059] loop7: detected capacity change from 0 to 512 [ 1331.863380][T20059] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1331.878576][T20055] overlayfs: failed to clone upperpath [ 1331.904555][T20059] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.306745][T20061] loop9: detected capacity change from 0 to 4096 [ 1332.574159][ T4288] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1332.631292][T20059] vhci_hcd vhci_hcd.0: remove, state 4 [ 1332.673602][T20061] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1332.718797][T20059] usb usb34: USB disconnect, device number 1 [ 1332.784408][T17977] EXT4-fs (loop9): unmounting filesystem. [ 1332.827036][T10692] vhci_hcd: stop threads [ 1332.827352][T20059] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 1332.831312][T10692] vhci_hcd: release socket [ 1332.883926][T10692] vhci_hcd: disconnect device [ 1332.909299][T10692] vhci_hcd: stop threads [ 1332.911379][T20059] vhci_hcd vhci_hcd.0: remove, state 4 [ 1332.935549][T10692] ================================================================== [ 1332.943653][T10692] BUG: KASAN: use-after-free in vhci_shutdown_connection+0x211/0x580 [ 1332.945975][T20059] usb usb33: USB disconnect, device number 1 [ 1332.951825][T10692] Read of size 8 at addr ffff888028e48758 by task kworker/u4:23/10692 [ 1332.951845][T10692] [ 1332.951859][T10692] CPU: 1 PID: 10692 Comm: kworker/u4:23 Not tainted syzkaller #0 [ 1332.976071][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1332.986155][T10692] Workqueue: usbip_event event_handler [ 1332.991663][T10692] Call Trace: [ 1332.994985][T10692] [ 1332.997939][T10692] dump_stack_lvl+0x188/0x24e [ 1333.002683][T10692] ? __lock_acquire+0x7c40/0x7c40 [ 1333.007773][T10692] ? show_regs_print_info+0x12/0x12 [ 1333.013014][T10692] ? load_image+0x410/0x410 [ 1333.017561][T10692] ? __virt_addr_valid+0x467/0x540 [ 1333.022716][T10692] ? vhci_shutdown_connection+0x211/0x580 [ 1333.028472][T10692] print_report+0xa8/0x210 [ 1333.032920][T10692] kasan_report+0x10b/0x140 [ 1333.037482][T10692] ? vhci_shutdown_connection+0x211/0x580 [ 1333.043212][T10692] vhci_shutdown_connection+0x211/0x580 [ 1333.048771][T10692] event_handler+0x299/0x460 [ 1333.053368][T10692] ? process_one_work+0x7b4/0x1160 [ 1333.058554][T10692] process_one_work+0x8ab/0x1160 [ 1333.063503][T10692] ? worker_detach_from_pool+0x240/0x240 [ 1333.069146][T10692] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1333.074245][T10692] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1333.079808][T10692] ? wq_worker_running+0x97/0x190 [ 1333.084899][T10692] worker_thread+0xaf5/0x12a0 [ 1333.089599][T10692] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1333.095515][T10692] kthread+0x29d/0x330 [ 1333.099602][T10692] ? worker_clr_flags+0x1a0/0x1a0 [ 1333.104641][T10692] ? kthread_blkcg+0xd0/0xd0 [ 1333.109257][T10692] ret_from_fork+0x1f/0x30 [ 1333.113713][T10692] [ 1333.116747][T10692] [ 1333.119087][T10692] Allocated by task 1: [ 1333.123162][T10692] kasan_set_track+0x4b/0x70 [ 1333.127768][T10692] __kasan_kmalloc+0x8e/0xa0 [ 1333.132365][T10692] __kmalloc+0xb3/0x240 [ 1333.136566][T10692] __usb_create_hcd+0x5f/0x830 [ 1333.141378][T10692] vhci_hcd_probe+0x1a5/0x370 [ 1333.146066][T10692] platform_probe+0x137/0x1c0 [ 1333.150846][T10692] really_probe+0x24a/0xb40 [ 1333.155365][T10692] __driver_probe_device+0x1f5/0x390 [ 1333.160659][T10692] driver_probe_device+0x4f/0x420 [ 1333.165695][T10692] __device_attach_driver+0x2c6/0x510 [ 1333.171089][T10692] bus_for_each_drv+0x184/0x210 [ 1333.175938][T10692] __device_attach+0x2a7/0x480 [ 1333.180713][T10692] bus_probe_device+0xba/0x1d0 [ 1333.185483][T10692] device_add+0xbcf/0x1050 [ 1333.189968][T10692] platform_device_add+0x4bf/0x830 [ 1333.195100][T10692] vhci_hcd_init+0x3c7/0x4f1 [ 1333.199775][T10692] do_one_initcall+0x257/0x800 [ 1333.204557][T10692] do_initcall_level+0x13d/0x1ed [ 1333.209568][T10692] do_initcalls+0x4b/0x8a [ 1333.213905][T10692] kernel_init_freeable+0x401/0x5ab [ 1333.219117][T10692] kernel_init+0x19/0x1b0 [ 1333.223447][T10692] ret_from_fork+0x1f/0x30 [ 1333.227878][T10692] [ 1333.230218][T10692] Freed by task 20059: [ 1333.234288][T10692] kasan_set_track+0x4b/0x70 [ 1333.238889][T10692] kasan_save_free_info+0x27/0x40 [ 1333.243944][T10692] ____kasan_slab_free+0x126/0x1f0 [ 1333.249071][T10692] slab_free_freelist_hook+0x133/0x1b0 [ 1333.254540][T10692] __kmem_cache_free+0xb6/0x200 [ 1333.259395][T10692] vhci_hcd_remove+0x9a/0x100 [ 1333.264083][T10692] platform_remove+0x92/0xe0 [ 1333.268706][T10692] device_release_driver_internal+0x47d/0x7c0 [ 1333.274787][T10692] unbind_store+0x2e2/0x300 [ 1333.279299][T10692] kernfs_fop_write_iter+0x3a0/0x520 [ 1333.284602][T10692] vfs_write+0x482/0x9a0 [ 1333.288906][T10692] ksys_write+0x14d/0x260 [ 1333.293272][T10692] do_syscall_64+0x4c/0xa0 [ 1333.297702][T10692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1333.303636][T10692] [ 1333.305970][T10692] The buggy address belongs to the object at ffff888028e48000 [ 1333.305970][T10692] which belongs to the cache kmalloc-8k of size 8192 [ 1333.320038][T10692] The buggy address is located 1880 bytes inside of [ 1333.320038][T10692] 8192-byte region [ffff888028e48000, ffff888028e4a000) [ 1333.333495][T10692] [ 1333.335821][T10692] The buggy address belongs to the physical page: [ 1333.342275][T10692] page:ffffea0000a39200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28e48 [ 1333.352445][T10692] head:ffffea0000a39200 order:3 compound_mapcount:0 compound_pincount:0 [ 1333.360792][T10692] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1333.368786][T10692] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442280 [ 1333.377377][T10692] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1333.385975][T10692] page dumped because: kasan: bad access detected [ 1333.392405][T10692] page_owner tracks the page as allocated [ 1333.398134][T10692] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15091505762, free_ts 0 [ 1333.417860][T10692] post_alloc_hook+0x173/0x1a0 [ 1333.422725][T10692] get_page_from_freelist+0x206b/0x2180 [ 1333.428296][T10692] __alloc_pages+0x1ec/0x4f0 [ 1333.432906][T10692] alloc_page_interleave+0x24/0x1e0 [ 1333.438159][T10692] alloc_slab_page+0x5d/0x180 [ 1333.442854][T10692] new_slab+0x87/0x2d0 [ 1333.446936][T10692] ___slab_alloc+0xbc5/0x1240 [ 1333.451626][T10692] __kmem_cache_alloc_node+0x126/0x270 [ 1333.457110][T10692] __kmalloc+0xa3/0x240 [ 1333.461290][T10692] __usb_create_hcd+0x5f/0x830 [ 1333.466074][T10692] vhci_hcd_probe+0x1a5/0x370 [ 1333.470764][T10692] platform_probe+0x137/0x1c0 [ 1333.475468][T10692] really_probe+0x24a/0xb40 [ 1333.479989][T10692] __driver_probe_device+0x1f5/0x390 [ 1333.485289][T10692] driver_probe_device+0x4f/0x420 [ 1333.490323][T10692] __device_attach_driver+0x2c6/0x510 [ 1333.495714][T10692] page_owner free stack trace missing [ 1333.501111][T10692] [ 1333.503448][T10692] Memory state around the buggy address: [ 1333.509080][T10692] ffff888028e48600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1333.517142][T10692] ffff888028e48680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1333.525211][T10692] >ffff888028e48700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1333.533277][T10692] ^ [ 1333.540215][T10692] ffff888028e48780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1333.548290][T10692] ffff888028e48800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1333.556355][T10692] ================================================================== [ 1333.683956][T20059] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 1333.828492][T10692] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1333.835745][T10692] CPU: 0 PID: 10692 Comm: kworker/u4:23 Not tainted syzkaller #0 [ 1333.843482][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1333.853559][T10692] Workqueue: usbip_event event_handler [ 1333.859042][T10692] Call Trace: [ 1333.862337][T10692] [ 1333.865293][T10692] dump_stack_lvl+0x188/0x24e [ 1333.870009][T10692] ? memcpy+0x3c/0x60 [ 1333.874021][T10692] ? show_regs_print_info+0x12/0x12 [ 1333.879259][T10692] ? load_image+0x410/0x410 [ 1333.883819][T10692] panic+0x2d3/0x710 [ 1333.887758][T10692] ? bpf_jit_dump+0xd0/0xd0 [ 1333.892295][T10692] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1333.898310][T10692] ? _raw_spin_unlock+0x40/0x40 [ 1333.903192][T10692] ? print_memory_metadata+0x314/0x400 [ 1333.908701][T10692] check_panic_on_warn+0x80/0xa0 [ 1333.913739][T10692] ? vhci_shutdown_connection+0x211/0x580 [ 1333.919482][T10692] end_report+0x66/0x110 [ 1333.923780][T10692] kasan_report+0x118/0x140 [ 1333.928324][T10692] ? vhci_shutdown_connection+0x211/0x580 [ 1333.934082][T10692] vhci_shutdown_connection+0x211/0x580 [ 1333.939665][T10692] event_handler+0x299/0x460 [ 1333.944278][T10692] ? process_one_work+0x7b4/0x1160 [ 1333.949416][T10692] process_one_work+0x8ab/0x1160 [ 1333.954392][T10692] ? worker_detach_from_pool+0x240/0x240 [ 1333.960061][T10692] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1333.965125][T10692] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1333.970704][T10692] ? wq_worker_running+0x97/0x190 [ 1333.975769][T10692] worker_thread+0xaf5/0x12a0 [ 1333.980481][T10692] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1333.986408][T10692] kthread+0x29d/0x330 [ 1333.990498][T10692] ? worker_clr_flags+0x1a0/0x1a0 [ 1333.995554][T10692] ? kthread_blkcg+0xd0/0xd0 [ 1334.000186][T10692] ret_from_fork+0x1f/0x30 [ 1334.004383][T11538] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1334.014817][T11538] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 1334.029816][T10692] [ 1334.033446][T10692] Kernel Offset: disabled [ 1334.037772][T10692] Rebooting in 86400 seconds..