last executing test programs: 5m18.506440056s ago: executing program 0 (id=649): openat(0xffffffffffffff9c, 0x0, 0x1f7140, 0x1ff) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0) unshare(0x2c060000) getpid() openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) close(0x3) 5m18.406273528s ago: executing program 0 (id=650): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733ae4b168fc2cc3efea936cc7e8aa8b1e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001e80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m17.360089798s ago: executing program 0 (id=651): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003"], 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x70}}, 0x0) 5m16.7862807s ago: executing program 0 (id=653): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xfd, 0x2a9, &(0x7f0000000980)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 5m13.987310015s ago: executing program 0 (id=658): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 5m11.771960958s ago: executing program 0 (id=663): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 5m11.481635704s ago: executing program 32 (id=663): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 4m52.963399767s ago: executing program 3 (id=697): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@mcast2={0xff, 0x5}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) symlink(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m49.677184982s ago: executing program 3 (id=703): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000080)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x9900, {0x2, 0x0, 0xfb}}}}, 0x0) socket$inet6(0xa, 0x80000, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 4m48.403762767s ago: executing program 3 (id=706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind(r0, &(0x7f0000000040)=@rc={0x1f, @any, 0x7}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x108, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x4, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xd8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x4}}, @TCA_BASIC_EMATCHES={0xc0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x5, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}]}, 0x108}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m47.583963853s ago: executing program 3 (id=710): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r1, &(0x7f0000001d00)={'syz1\x00', {0x3, 0x6, 0x5}, 0x49, [0x3, 0x20000, 0x4, 0x1, 0x1, 0x5, 0xf3, 0x0, 0x8, 0x11, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x6, 0x3, 0xa, 0x1, 0x79, 0xfffffffe, 0x8, 0x100, 0x8000, 0xfff, 0x400, 0x0, 0x1ffff, 0x404, 0x9, 0x40003, 0x8, 0xffffffff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1192, 0x9, 0x5, 0x8, 0x5, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0xfbf, 0x1, 0x6, 0x4, 0xedbe, 0x2, 0x2, 0x8, 0xa1, 0xfffffff8, 0x6, 0x80, 0x2, 0x81], [0x1, 0x80000001, 0x563, 0x2, 0x0, 0x0, 0x4, 0x854f000, 0x2, 0x93, 0xfffffff6, 0x2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x5, 0x13, 0x100, 0x1, 0x6, 0x200, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x4, 0x8, 0x8000, 0x5, 0x4, 0x7ff, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x1, 0xfffffffe, 0x6, 0x0, 0x9, 0xfff, 0x2, 0x0, 0x5, 0x7ff, 0xffff7146, 0x5bda, 0x4, 0xde7e, 0xfff, 0x7, 0x5, 0x4000524, 0x7ffd, 0x1], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x5aa, 0x124, 0xc, 0x1, 0x2, 0x6, 0xfffffff8, 0x200009, 0x300000, 0x80000001, 0x4, 0x800a, 0x4, 0xd, 0x9, 0x8001, 0x9, 0x7, 0x4, 0x7, 0x1, 0x6, 0x2, 0x410, 0x20400, 0xff, 0x166, 0x7, 0x10001, 0x3, 0x8, 0x3, 0x8, 0x1000, 0x80, 0x9, 0x8, 0x1000, 0x2, 0x8000006, 0xfeb, 0x5, 0x100008, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0x0, 0x3, 0x4, 0x10, 0x4, 0x3, 0x3, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x3, 0x1007ff, 0x3ff, 0x800, 0x40, 0x6, 0x1, 0x5, 0x2, 0xfffffffe, 0x8a4, 0x5, 0xdd, 0x8b5, 0x800002, 0x6, 0x2, 0xcb32, 0x3, 0x4, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x7ff, 0x10001, 0x1, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0x6, 0x3, 0x0, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46da, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x9, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0x7, 0x8, 0x7d1, 0x1, 0x9]}, 0x45c) 4m46.475991535s ago: executing program 3 (id=716): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) 4m45.358715237s ago: executing program 3 (id=720): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m44.947755215s ago: executing program 33 (id=720): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m57.181823253s ago: executing program 4 (id=850): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff1b59ee5355b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0003311b51130000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3m56.140093523s ago: executing program 4 (id=854): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x2b, 0x8, 0x9, 0x5b59, 0x200}, @call={0x85, 0x0, 0x0, 0x61}], &(0x7f0000000540)='GPL\x00', 0x6ee, 0x84, &(0x7f0000000640)=""/132, 0x41100, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x2, 0xbe2a, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 3m55.907021428s ago: executing program 4 (id=855): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) socket$nl_route(0x10, 0x3, 0x0) close(0x3) 3m55.605791294s ago: executing program 4 (id=857): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@noinit_itable}, {@acl}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@jqfmt_vfsv0}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x45e, &(0x7f0000000480)="$eJzs20tvG0UcAPD/2nHfJaGUR0sBQ3lEPJImLdADlyKQekFCgkM5hjStSt0GNUGiVUUDh3JE/QTAEYlPwIleEHACcYU7QqpQLxQOaNHaa2Ps2DhOXLf17ydtPLM7653/7k48O2MHMLLK2Z8kYkdE/BwR4xFRbC1Qrr3cuH5x/s/rF+eTSNM3fk+y3eKP6xfn60WT/HV7npksNFa1WTp/4fRcpbJwLs9PL595d3rp/IXnTp2ZO7lwcuHs7OHDhw7OvPjC7PMbEufOrK57P1jct+foW1demz925e3vvswqtyPf3hxHzcS6j1mOcscT8MS63/3WsjN/7XjBuSVlbX0sIkrV9j8exWquZjxe/WiolQMGKk3TdHPb2kYPYCUF7mBJDLsGwHDUP+iz59/6chO7H0N37UjtASiL+0a+1LaMRSEvU2p6vt1o5Yg4tvLXp9kSq45DAABsrK+z/s+zq/X/CnFfU7m78rmhiYi4OyJ2RcQ9EbE7Iu6NqJa9PyIeWOPxyy359v7Pj1v7CqxH145E8lI+t/Xf/l+99xcTxTy3sxp/KTlxqrJwID8nk1HanOVnuhzj6is/fdJpW3P/L1uy49f7gnk9fhtrGaA7Prc8t56Ym137sDoGeKk9/qQxE5BExJ6I2NvH+2+JiFNPf7GvbUPTRFH3+LsY66NCLdLPI56qXf+VaIm/uapd5ient0Rl4cB0/a5o9/0Pl1/vdPz/v/6DlV3/bave/434J5Lm+dqltR/j8i8fd3ym6ff+35S8WU1vyte9P7e8fG4mYlOy0r5+9t996/l6+Sz+yf2rt/9dEX9/lu/3YERkN/FDEfFwRDyS1/3RiHgsIvZ3if/blx9/p//4ByuL//iarv/aE8XT33zV6fi9Xf9D1dRkvqaX/3+9VnA95w4AAABuF4Xqd+CTwlQjXShMTdW+w787thUqi0vLz5xYfO/s8dp35SeiVKiPdI03jYfO5GPD9fxsS/5gddw4TdN0azU/Nb9YGdScOtCb7R3af+bX4rBrBwzcmubR/MIL7igbMI8O3Ka0fxhd2j+MLu0fRtdq7f9SxI0hVAW4yXz+w+jS/mF0af8wurR/GEnr+V1/t8Suo4N659sxcTUiOpUpDrWGT27vd/coDPus9p4o5Xd7Y03hFqlYNbE5InotfCluVsWG/I8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7CF5k8=") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x0, &(0x7f0000004380)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x4, 0x5, 0xfffffff3, 0x0, 'syz0\x00', 0x1000000}, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 3m54.158562062s ago: executing program 4 (id=861): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @generic={0x2b, 0x8, 0x9, 0x5b59, 0x200}, @call={0x85, 0x0, 0x0, 0x61}], &(0x7f0000000540)='GPL\x00', 0x6ee, 0x84, &(0x7f0000000640)=""/132, 0x41100, 0x40, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x2, 0xbe2a, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 3m53.643447363s ago: executing program 4 (id=864): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x2b, 0x8, 0x9, 0x5b59, 0x200}, @call={0x85, 0x0, 0x0, 0x61}], &(0x7f0000000540)='GPL\x00', 0x6ee, 0x84, &(0x7f0000000640)=""/132, 0x41100, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x2, 0xbe2a, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 3m53.124260472s ago: executing program 34 (id=864): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x2b, 0x8, 0x9, 0x5b59, 0x200}, @call={0x85, 0x0, 0x0, 0x61}], &(0x7f0000000540)='GPL\x00', 0x6ee, 0x84, &(0x7f0000000640)=""/132, 0x41100, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x2, 0xbe2a, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 2m46.400488753s ago: executing program 2 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x50) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) preadv(r0, 0x0, 0x0, 0xffffbdea, 0x0) sendmsg$key(r0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000001240)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xf4}}}, 0x4) syz_usbip_server_init(0x0) syz_emit_vhci(0x0, 0x0) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) syz_emit_vhci(&(0x7f0000001680)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x4}}, 0x9) syz_emit_vhci(0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{0x0}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000380)=0x80000005, 0x4) 2m45.780764914s ago: executing program 2 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 2m37.637760975s ago: executing program 2 (id=1078): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d04001c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a5400300001d2300000009"}}}}}}}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m35.235866612s ago: executing program 2 (id=1084): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4010, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@stripe={'stripe', 0x3d, 0x9}}, {@data_ordered}, {@test_dummy_encryption}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") open(0x0, 0x143142, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) 2m32.715571221s ago: executing program 2 (id=1091): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x20048800) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3c0}], 0x1, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f000020"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff00000000001851000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0xfffffffffffffda5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.813744688s ago: executing program 2 (id=1098): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\x00'}, 0x0, 0x0, 0x1) syz_fuse_handle_req(r4, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.115961672s ago: executing program 35 (id=1098): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\x00'}, 0x0, 0x0, 0x1) syz_fuse_handle_req(r4, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.290695011s ago: executing program 1 (id=1384): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffac) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x5120400, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) pipe2(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008004}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = getpgrp(0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000540)=""/246, 0x33, 0xf6, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x77e, '\x00', 0x0, r5, 0x3, 0x5}, 0x50) r6 = gettid() rt_tgsigqueueinfo(r4, r6, 0xb, 0x0) 15.773604661s ago: executing program 5 (id=1386): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.971988536s ago: executing program 1 (id=1388): socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x462, @empty, 0x7}, 0x1c) shutdown(r0, 0x1) bpf$ITER_CREATE(0x21, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffd, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x5, 0x0, 0x0, 0x7ffffff7}, 0x0, 0x0) 13.324594929s ago: executing program 1 (id=1389): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000080)=ANY=[@ANYBLOB='\"'], 0x1, 0x1536, &(0x7f00000004c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 13.23517663s ago: executing program 5 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000002080)='oom_adj\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x4010000, 0xb997, 0xb, "194f2f83c2e798c3584770116cddc8819592b1"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="110000000d0000000400000012000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000380)="dc") 9.608775822s ago: executing program 6 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000024c0)) 9.608477052s ago: executing program 1 (id=1393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x28044085}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000009}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x100, 0x7f}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x40010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.367467806s ago: executing program 5 (id=1395): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x2, 0x14fe, &(0x7f0000001580)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@grpquota}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1308e8, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') creat(0x0, 0x133) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./bus\x00', 0x4000, 0x0, 0xfd, 0x0, &(0x7f0000000340)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) 8.086155312s ago: executing program 6 (id=1396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 7.18234987s ago: executing program 7 (id=1399): socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32, @ANYBLOB="7fc3ba67a36f2b6e591ed23e48c22df5abd2d4aa9d2d5d203c4f3e63cec3d4f9338c79e192e7a10f03770feb4cdfc048cc3928a03cd358d1b97c1791e7f04a3de7f2edb97944e80eecd5f837758b58ad452f9d6f34b00b8bc46a2f5d302abdf0c93e4ad280e23f020849c56f1767059932e4e6e65800860f19325581e3c2e0b81b0c1f09b3f0771c50cbdf10f50778b628cd6df413c16f1a95f4a15192a664be6af9fd5f83a259922545c07de4e050b1c8f90d63cfbab32bd1938827e093ced5226587f33a532ccb10c0e9f99dfafba527c30ae3d1aa7044a76c"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6.791436237s ago: executing program 7 (id=1400): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 6.271952008s ago: executing program 6 (id=1401): syz_open_dev$usbmon(&(0x7f0000000080), 0x80006e2, 0x60080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 6.14697454s ago: executing program 5 (id=1402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x200000}, 0xd1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c100000000000244e0000", 0x58}], 0x1) 4.343214445s ago: executing program 5 (id=1403): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a2, &(0x7f0000000440)="$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") llistxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 3.494765712s ago: executing program 7 (id=1404): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @remote}}}], 0x20}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) unshare(0x6020400) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.279191726s ago: executing program 6 (id=1405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000024c0)) 1.715912907s ago: executing program 6 (id=1406): socket$inet_icmp(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x462, @empty, 0x7}, 0x1c) shutdown(r0, 0x1) bpf$ITER_CREATE(0x21, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffd, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x5, 0x0, 0x0, 0x7ffffff7}, 0x0, 0x0) 1.619192649s ago: executing program 7 (id=1407): pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.218078296s ago: executing program 7 (id=1408): socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="7fc3ba67a36f2b6e591ed23e48c22df5abd2d4aa9d2d5d203c4f3e63cec3d4f9338c79e192e7a10f03770feb4cdfc048cc3928a03cd358d1b97c1791e7f04a3de7f2edb97944e80eecd5f837758b58ad452f9d6f34b00b8bc46a2f5d302abdf0c93e4ad280e23f020849c56f1767059932e4e6e65800860f19325581e3c2e0b81b0c1f09b3f0771c50cbdf10f50778b628cd6df413c16f1a95f4a15192a664be6af9fd5f83a259922545c07de4e050b1c8f90d63cfbab32bd1938827e093ced5226587f33a532ccb10c0e9f99dfafba527c30ae3d1aa7044a76c"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 892.033063ms ago: executing program 1 (id=1409): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80000c, &(0x7f0000000200)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c63726561746f723da75809472c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303030362c747970653d1f02ae0e2c756d61736b3d30303030303030303030303030303030303030352c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6465636f6d706f73652c63726561746f723db6222e882c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp936,gid=', @ANYRESHEX=0x0, @ANYBLOB=',barrier,\x00'], 0x1, 0x6da, &(0x7f0000004980)="$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") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0xee01) 728.324816ms ago: executing program 7 (id=1410): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x2, 0x14fe, &(0x7f0000001580)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@grpquota}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1308e8, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') creat(0x0, 0x133) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./bus\x00', 0x4000, 0x0, 0xfd, 0x0, &(0x7f0000000340)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) 304.122785ms ago: executing program 5 (id=1411): sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 62.409259ms ago: executing program 1 (id=1412): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, 0x0, 0x0) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 0s ago: executing program 6 (id=1413): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000800)=ANY=[], 0x361, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0x4}, @var={0xc, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x0]}}, 0x0, 0x38, 0x0, 0x1, 0x9}, 0x28) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) kernel console output (not intermixed with test programs): .294280][ T6707] tipc: Resetting bearer [ 137.583429][ T6722] netlink: set zone limit has 8 unknown bytes [ 138.187773][ T6139] tipc: Node number set to 134353152 [ 138.819308][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 140.042284][ T6758] netlink: 52 bytes leftover after parsing attributes in process `syz.2.288'. [ 140.103973][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.290'. [ 140.216023][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 141.731816][ T6784] netlink: 52 bytes leftover after parsing attributes in process `syz.0.300'. [ 141.792229][ T6785] tipc: Enabled bearer , priority 0 [ 141.812037][ T6785] syzkaller0: entered promiscuous mode [ 141.817672][ T6785] syzkaller0: entered allmulticast mode [ 141.894695][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 141.938172][ T6785] tipc: Resetting bearer [ 141.994849][ T6783] tipc: Resetting bearer [ 142.058036][ T6783] tipc: Disabling bearer [ 143.800943][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 144.282005][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 145.454908][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 145.471775][ T6854] vlan2: entered promiscuous mode [ 146.232063][ T6876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.240167][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 146.247598][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 149.189487][ T6930] netlink: set zone limit has 8 unknown bytes [ 149.738926][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 149.768560][ T6951] vlan2: entered promiscuous mode [ 149.996688][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 151.350147][ T6970] netlink: set zone limit has 8 unknown bytes [ 151.495361][ T6977] wg1 speed is unknown, defaulting to 1000 [ 151.670735][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 151.750125][ T6989] tipc: Enabling of bearer rejected, already enabled [ 152.065189][ T50] Bluetooth: hci3: link tx timeout [ 152.076879][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.260485][ T7002] netlink: set zone limit has 8 unknown bytes [ 153.202035][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 153.334526][ T7006] syzkaller0: entered promiscuous mode [ 153.341790][ T7006] syzkaller0: entered allmulticast mode [ 153.438361][ T7017] tipc: Started in network mode [ 153.453367][ T7017] tipc: Node identity d28a657aca5c, cluster identity 4711 [ 153.481060][ T7017] tipc: Enabled bearer , priority 0 [ 153.498130][ T7021] syzkaller0: entered promiscuous mode [ 153.519365][ T7021] syzkaller0: entered allmulticast mode [ 153.526049][ T7013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.100173][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 154.625651][ T6139] tipc: Node number set to 416703866 [ 155.654817][ T7019] wg1 speed is unknown, defaulting to 1000 [ 155.668652][ T7021] tipc: Resetting bearer [ 155.677131][ T7014] tipc: Resetting bearer [ 155.699440][ T7014] tipc: Disabling bearer [ 156.172699][ T7043] netlink: 52 bytes leftover after parsing attributes in process `syz.2.392'. [ 157.305181][ T7049] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.522036][ T7049] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.584366][ T7061] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 157.659272][ T7061] bond1: entered promiscuous mode [ 157.664510][ T7061] bond1: entered allmulticast mode [ 157.695596][ T7049] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.729176][ T7065] bridge3: entered promiscuous mode [ 157.734629][ T7065] bridge3: entered allmulticast mode [ 157.747618][ T7066] tipc: Enabled bearer , priority 0 [ 157.768332][ T7064] syzkaller0: entered promiscuous mode [ 157.774342][ T7064] syzkaller0: entered allmulticast mode [ 157.874389][ T7049] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.899025][ T7066] tipc: Resetting bearer [ 157.909163][ T7063] tipc: Resetting bearer [ 157.936561][ T7063] tipc: Disabling bearer [ 157.955211][ T7069] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 158.015737][ T7049] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.038845][ T7049] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.057322][ T7049] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.078473][ T7049] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.549692][ T7086] tipc: Enabled bearer , priority 0 [ 159.572221][ T7086] syzkaller0: entered promiscuous mode [ 159.584139][ T7086] syzkaller0: entered allmulticast mode [ 159.670022][ T7086] tipc: Resetting bearer [ 159.730415][ T7085] tipc: Resetting bearer [ 159.820228][ T7085] tipc: Disabling bearer [ 159.844461][ T7094] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 159.890064][ T7094] bond2: entered promiscuous mode [ 159.903682][ T7094] bond2: entered allmulticast mode [ 159.953619][ T7096] bridge3: entered promiscuous mode [ 159.970883][ T7096] bridge3: entered allmulticast mode [ 159.980118][ T7092] tipc: Enabled bearer , priority 0 [ 159.988753][ T7097] syzkaller0: entered promiscuous mode [ 160.034041][ T7097] syzkaller0: entered allmulticast mode [ 160.166919][ T7092] tipc: Resetting bearer [ 160.190666][ T7091] tipc: Resetting bearer [ 160.457014][ T7091] tipc: Disabling bearer [ 161.204437][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 161.243550][ T7117] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 161.398018][ T7119] syzkaller0: entered promiscuous mode [ 161.429479][ T7119] syzkaller0: entered allmulticast mode [ 162.114125][ T7147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.426'. [ 163.785365][ T7126] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 163.793962][ T7126] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 163.807003][ T7129] bridge4: entered promiscuous mode [ 163.820980][ T7129] bridge4: entered allmulticast mode [ 163.907270][ T7145] tipc: Enabled bearer , priority 0 [ 163.926682][ T7143] wg1 speed is unknown, defaulting to 1000 [ 164.010325][ T7146] syzkaller0: entered promiscuous mode [ 164.028866][ T7146] syzkaller0: entered allmulticast mode [ 164.087387][ T7151] tipc: Resetting bearer [ 164.104608][ T7140] tipc: Resetting bearer [ 164.143292][ T7140] tipc: Disabling bearer [ 165.445725][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 166.351440][ T7198] netlink: 'syz.3.442': attribute type 4 has an invalid length. [ 166.545509][ T7202] netlink: 'syz.3.442': attribute type 4 has an invalid length. [ 167.251697][ T7204] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 167.623484][ T7227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.408718][ T7253] netlink: 'syz.2.454': attribute type 4 has an invalid length. [ 168.490949][ T7253] netlink: 'syz.2.454': attribute type 4 has an invalid length. [ 168.698761][ T7260] Illegal XDP return value 1145815614 on prog (id 92) dev N/A, expect packet loss! [ 168.880575][ T7264] wg1 speed is unknown, defaulting to 1000 [ 168.888006][ T7266] macsec0: entered promiscuous mode [ 168.897839][ T7266] macsec0: entered allmulticast mode [ 168.941526][ T7266] veth1_macvtap: entered allmulticast mode [ 168.958290][ T7266] macsec0: left promiscuous mode [ 168.977462][ T7266] macsec0: left allmulticast mode [ 169.001854][ T7266] veth1_macvtap: left allmulticast mode [ 169.085238][ T7268] syzkaller0: entered promiscuous mode [ 169.093589][ T7268] syzkaller0: entered allmulticast mode [ 169.185650][ T7273] wg1 speed is unknown, defaulting to 1000 [ 169.217110][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.305997][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.390647][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.638212][ T7295] syzkaller1: entered promiscuous mode [ 169.644137][ T7295] syzkaller1: entered allmulticast mode [ 169.811039][ T7295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.466'. [ 170.300138][ T7309] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 170.308528][ T7309] netlink: 'syz.0.468': attribute type 2 has an invalid length. [ 170.567140][ T7315] netlink: set zone limit has 8 unknown bytes [ 171.747281][ T7299] wg1 speed is unknown, defaulting to 1000 [ 171.748912][ T7305] netlink: 'syz.3.467': attribute type 4 has an invalid length. [ 171.782729][ T7306] netlink: 'syz.3.467': attribute type 4 has an invalid length. [ 172.380320][ T7336] netlink: set zone limit has 8 unknown bytes [ 172.443909][ T7334] syzkaller0: entered promiscuous mode [ 172.469399][ T7334] syzkaller0: entered allmulticast mode [ 172.530620][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.773354][ T7347] wg1 speed is unknown, defaulting to 1000 [ 172.818493][ T7346] veth1_macvtap: left promiscuous mode [ 172.824198][ T7346] macsec0: entered promiscuous mode [ 172.830046][ T7346] macsec0: entered allmulticast mode [ 172.900310][ T7346] veth1_macvtap: entered promiscuous mode [ 172.906803][ T7346] veth1_macvtap: entered allmulticast mode [ 172.914928][ T7346] macsec0: left promiscuous mode [ 172.927083][ T7346] macsec0: left allmulticast mode [ 172.935488][ T7346] veth1_macvtap: left allmulticast mode [ 173.520357][ T7368] netlink: set zone limit has 8 unknown bytes [ 175.127965][ T7356] tipc: Enabling of bearer rejected, failed to enable media [ 175.310444][ T7380] netlink: 64 bytes leftover after parsing attributes in process `syz.0.493'. [ 175.359458][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 175.495366][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 175.556506][ T7389] wg1 speed is unknown, defaulting to 1000 [ 175.670930][ T7392] veth1_macvtap: left promiscuous mode [ 175.683797][ T7392] macsec0: entered promiscuous mode [ 175.733174][ T7392] macsec0: entered allmulticast mode [ 175.770902][ T7401] netlink: set zone limit has 8 unknown bytes [ 175.784701][ T7393] veth1_macvtap: entered promiscuous mode [ 175.791508][ T7393] veth1_macvtap: entered allmulticast mode [ 175.797710][ T7393] macsec0: left promiscuous mode [ 175.807381][ T7393] macsec0: left allmulticast mode [ 175.813314][ T7393] veth1_macvtap: left allmulticast mode [ 175.911218][ T7406] tipc: Enabling of bearer rejected, already enabled [ 176.163649][ T7410] syzkaller0: entered promiscuous mode [ 176.169679][ T7410] syzkaller0: entered allmulticast mode [ 176.186865][ T7414] tipc: Enabled bearer , priority 0 [ 176.195506][ T7411] syzkaller0: entered promiscuous mode [ 176.202339][ T7411] syzkaller0: entered allmulticast mode [ 176.214878][ T7408] tipc: Resetting bearer [ 176.263329][ T7408] tipc: Disabling bearer [ 176.289048][ T7416] hsr0: entered promiscuous mode [ 176.294847][ T7416] hsr0: entered allmulticast mode [ 176.301103][ T7416] hsr_slave_0: entered allmulticast mode [ 176.306935][ T7416] hsr_slave_1: entered allmulticast mode [ 176.900988][ T7432] netlink: set zone limit has 8 unknown bytes [ 179.257906][ T7444] tipc: Enabling of bearer rejected, failed to enable media [ 179.865983][ T7473] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 179.868592][ T7477] netlink: set zone limit has 8 unknown bytes [ 179.896817][ T7473] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 180.324569][ T7492] tipc: Enabling of bearer rejected, already enabled [ 180.450390][ T7496] netlink: set zone limit has 8 unknown bytes [ 180.477674][ T7498] netlink: 'syz.2.535': attribute type 4 has an invalid length. [ 180.524299][ T7498] netlink: 'syz.2.535': attribute type 4 has an invalid length. [ 180.771293][ T7502] wg1 speed is unknown, defaulting to 1000 [ 180.796593][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 180.810724][ T7509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.936640][ T7509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.994587][ T7515] tipc: Enabled bearer , priority 0 [ 181.052414][ T7514] tipc: Resetting bearer [ 181.125528][ T7513] tipc: Disabling bearer [ 181.270668][ T7523] netlink: set zone limit has 8 unknown bytes [ 181.553888][ T7528] syzkaller0: entered promiscuous mode [ 181.559768][ T7528] syzkaller0: entered allmulticast mode [ 183.558991][ T7540] tipc: Enabling of bearer rejected, failed to enable media [ 183.571840][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 183.641887][ T7554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.819462][ T7560] tipc: Enabled bearer , priority 0 [ 183.857033][ T7560] syzkaller0: entered promiscuous mode [ 183.880688][ T7560] syzkaller0: entered allmulticast mode [ 183.919045][ T7562] tipc: Enabling of bearer rejected, already enabled [ 183.934993][ T7564] netlink: set zone limit has 8 unknown bytes [ 183.989672][ T7557] tipc: Resetting bearer [ 184.083999][ T7557] tipc: Disabling bearer [ 184.194928][ T7574] bridge4: entered promiscuous mode [ 184.221183][ T7574] bridge4: entered allmulticast mode [ 184.428295][ T7576] syzkaller0: entered promiscuous mode [ 184.474119][ T7576] syzkaller0: entered allmulticast mode [ 184.530478][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 184.559949][ T7588] vlan2: entered promiscuous mode [ 184.565102][ T7588] dummy0: entered promiscuous mode [ 184.709406][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 184.727037][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.859704][ T7591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.738284][ T7598] tipc: Enabling of bearer rejected, failed to enable media [ 187.989513][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.576'. [ 188.057033][ T7626] bridge4: entered promiscuous mode [ 188.069489][ T7626] bridge4: entered allmulticast mode [ 188.295781][ T7638] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 188.585754][ T7642] syzkaller0: entered promiscuous mode [ 188.592101][ T7642] syzkaller0: entered allmulticast mode [ 188.602728][ T7650] tipc: Enabling of bearer rejected, already enabled [ 188.786082][ T7654] wg1 speed is unknown, defaulting to 1000 [ 191.925932][ T7684] tipc: Enabling of bearer rejected, already enabled [ 191.960556][ T7681] tipc: Enabled bearer , priority 0 [ 191.997539][ T7681] tipc: Resetting bearer [ 192.132561][ T7678] tipc: Disabling bearer [ 192.164245][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 192.983678][ T6136] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 193.115134][ T7699] tipc: Enabled bearer , priority 0 [ 193.249017][ T7699] syzkaller0: entered promiscuous mode [ 193.259033][ T7699] syzkaller0: entered allmulticast mode [ 193.270788][ T7699] tipc: Resetting bearer [ 193.300207][ T7698] tipc: Resetting bearer [ 193.825428][ T7726] loop2: detected capacity change from 0 to 2048 [ 193.913912][ T7726] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 193.974131][ T7726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.915176][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.921688][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.429410][ T7698] tipc: Disabling bearer [ 195.474391][ T7727] syz_tun: entered allmulticast mode [ 195.494204][ T7729] syz_tun: left allmulticast mode [ 195.673907][ T7733] tipc: Enabling of bearer rejected, failed to enable media [ 195.770586][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 196.975303][ T7754] netlink: 'syz.0.617': attribute type 13 has an invalid length. [ 197.006131][ T7754] netlink: 'syz.0.617': attribute type 17 has an invalid length. [ 197.197518][ T7754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.245721][ T7765] tipc: Enabled bearer , priority 0 [ 197.342089][ T7765] syzkaller0: entered promiscuous mode [ 197.352045][ T7765] syzkaller0: entered allmulticast mode [ 197.369332][ T7765] tipc: Resetting bearer [ 197.457678][ T7764] tipc: Resetting bearer [ 199.840021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 201.863004][ T7764] tipc: Disabling bearer [ 201.989636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.023645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.058560][ T7790] tipc: Enabling of bearer rejected, already enabled [ 202.377357][ T7793] syzkaller0: entered promiscuous mode [ 202.388421][ T7793] syzkaller0: entered allmulticast mode [ 202.645079][ T7806] loop0: detected capacity change from 0 to 2048 [ 202.669897][ T7806] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.252464][ T7806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.662741][ T7806] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.632: bg 0: block 234: padding at end of block bitmap is not set [ 203.764823][ T7806] EXT4-fs (loop0): Remounting filesystem read-only [ 203.897891][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.056523][ T7818] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 206.703380][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 206.712746][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 206.723354][ T7804] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.775859][ T7833] tipc: Enabling of bearer rejected, failed to enable media [ 206.820562][ T7809] wg1 speed is unknown, defaulting to 1000 [ 207.033689][ T7854] loop0: detected capacity change from 0 to 512 [ 207.074200][ T7854] EXT4-fs error (device loop0): ext4_get_journal_inode:5807: comm syz.0.642: inode #196608: comm syz.0.642: iget: illegal inode # [ 207.133716][ T7854] EXT4-fs (loop0): Remounting filesystem read-only [ 207.158588][ T7854] EXT4-fs (loop0): no journal found [ 207.166240][ T7854] EXT4-fs (loop0): can't get journal size [ 207.194383][ T7854] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 207.219729][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 207.225840][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 207.233134][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 207.245629][ T7861] loop1: detected capacity change from 0 to 256 [ 207.266934][ T7854] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 207.321158][ T7854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.346919][ T50] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 207.385927][ T7861] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 207.422790][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.848995][ T7857] syzkaller0: entered promiscuous mode [ 207.855047][ T7857] syzkaller0: entered allmulticast mode [ 208.328629][ T7866] loop0: detected capacity change from 0 to 256 [ 208.361934][ T7866] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.422885][ T7866] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 208.882802][ T50] Bluetooth: hci3: link tx timeout [ 208.888921][ T50] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 209.813416][ T50] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 209.920082][ T7884] loop0: detected capacity change from 0 to 2048 [ 209.947674][ T7884] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 209.977076][ T7884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.919304][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.371461][ T7879] tipc: Enabling of bearer rejected, failed to enable media [ 211.384012][ T7887] netlink: 80 bytes leftover after parsing attributes in process `syz.0.651'. [ 211.549673][ T7891] loop0: detected capacity change from 0 to 128 [ 211.564847][ T7891] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.621087][ T7891] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.233583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 212.390192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 213.559224][ C1] sched: RT throttling activated [ 214.030539][ T5798] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 214.042553][ T5798] Bluetooth: hci0: Injecting HCI hardware error event [ 214.054366][ T5798] Bluetooth: hci0: hardware error 0x00 [ 214.150223][ T7891] ======================================================= [ 214.150223][ T7891] WARNING: The mand mount option has been deprecated and [ 214.150223][ T7891] and is ignored by this kernel. Remove the mand [ 214.150223][ T7891] option from the mount to silence this warning. [ 214.150223][ T7891] ======================================================= [ 214.304697][ T7899] syzkaller0: entered promiscuous mode [ 214.311920][ T7899] syzkaller0: entered allmulticast mode [ 214.352705][ T7901] bridge6: entered promiscuous mode [ 214.358040][ T7901] bridge6: entered allmulticast mode [ 216.184335][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 216.346357][ T7908] tipc: Enabling of bearer rejected, failed to enable media [ 216.486444][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.579339][ T7914] netlink: 80 bytes leftover after parsing attributes in process `syz.1.661'. [ 216.674560][ T7913] syzkaller0: entered promiscuous mode [ 216.685435][ T7913] syzkaller0: entered allmulticast mode [ 216.696973][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.788312][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.948441][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'. [ 217.258043][ T7924] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 217.979830][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.995307][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.003946][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.012937][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.021397][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.029181][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.051151][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.075399][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'. [ 220.084684][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'. [ 220.097458][ T7929] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 220.102908][ T50] Bluetooth: hci0: command tx timeout [ 220.107104][ T7930] wg1 speed is unknown, defaulting to 1000 [ 220.246940][ T7925] wg1 speed is unknown, defaulting to 1000 [ 220.461108][ T7936] tipc: Enabled bearer , priority 0 [ 220.485407][ T7935] tipc: Disabling bearer [ 220.965378][ T11] tipc: Disabling bearer [ 221.092205][ T11] tipc: Left network mode [ 221.385085][ T7946] Bluetooth: MGMT ver 1.22 [ 221.510397][ T7949] netlink: 80 bytes leftover after parsing attributes in process `syz.2.672'. [ 221.834769][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.675'. [ 221.931322][ T7925] chnl_net:caif_netlink_parms(): no params data found [ 222.179840][ T50] Bluetooth: hci0: command tx timeout [ 223.092039][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.109705][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.117096][ T7925] bridge_slave_0: entered allmulticast mode [ 223.125947][ T7925] bridge_slave_0: entered promiscuous mode [ 223.242501][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.257528][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.275220][ T7925] bridge_slave_1: entered allmulticast mode [ 223.291207][ T7925] bridge_slave_1: entered promiscuous mode [ 223.457270][ T7989] loop3: detected capacity change from 0 to 256 [ 223.472813][ T7985] tipc: Enabled bearer , priority 0 [ 223.499031][ T7989] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.539804][ T7989] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 223.620141][ T7986] syzkaller0: entered promiscuous mode [ 223.635497][ T7986] syzkaller0: entered allmulticast mode [ 223.649999][ T7986] tipc: Resetting bearer [ 223.658719][ T7989] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 223.897582][ T7925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.074662][ T1005] tipc: Resetting bearer [ 224.171555][ T7982] tipc: Resetting bearer [ 224.266557][ T50] Bluetooth: hci0: command tx timeout [ 224.319762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 226.344041][ T50] Bluetooth: hci0: command tx timeout [ 228.643616][ T7982] tipc: Disabling bearer [ 228.656375][ T7925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.731131][ T7996] netlink: 80 bytes leftover after parsing attributes in process `syz.3.681'. [ 228.766581][ T7998] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.794478][ T7925] team0: Port device team_slave_0 added [ 228.945590][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'. [ 228.990098][ T7925] team0: Port device team_slave_1 added [ 229.112546][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.153129][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.255738][ T7925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.346086][ T11] hsr_slave_0: left promiscuous mode [ 229.371025][ T11] hsr_slave_1: left promiscuous mode [ 229.381163][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.388830][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.404256][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.418218][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.431380][ T11] bridge_slave_1: left allmulticast mode [ 229.437479][ T11] bridge_slave_1: left promiscuous mode [ 229.446234][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.462744][ T11] bridge_slave_0: left allmulticast mode [ 229.469071][ T11] bridge_slave_0: left promiscuous mode [ 229.475908][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.587493][ T11] veth0_macvtap: left promiscuous mode [ 229.604304][ T11] veth1_vlan: left promiscuous mode [ 229.610899][ T11] veth0_vlan: left promiscuous mode [ 230.489798][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 230.594886][ T8030] mmap: syz.1.689 (8030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.679305][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 230.695219][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.712136][ T27] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 230.729395][ T27] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 230.742067][ T27] usb 4-1: Product: syz [ 230.746307][ T27] usb 4-1: Manufacturer: syz [ 230.769867][ T27] usb 4-1: SerialNumber: syz [ 230.791060][ T27] usb 4-1: config 0 descriptor?? [ 230.944192][ T11] bond2 (unregistering): Released all slaves [ 231.063493][ T11] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 231.132085][ T27] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 231.144997][ T11] bond1 (unregistering): Released all slaves [ 231.193180][ T8000] udevd[8000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.345064][ T27] usb 4-1: USB disconnect, device number 2 [ 231.744930][ T11] team_slave_1 (unregistering): left promiscuous mode [ 231.756077][ T11] team0 (unregistering): Port device team_slave_1 removed [ 231.810401][ T11] team_slave_0 (unregistering): left promiscuous mode [ 231.818361][ T11] team0 (unregistering): Port device team_slave_0 removed [ 231.872629][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.968922][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.499619][ T11] bond0 (unregistering): Released all slaves [ 232.581085][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.588213][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.614554][ T7925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.641854][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'. [ 232.657645][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 232.671611][ T8036] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 232.678746][ T8040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.691'. [ 232.701816][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 232.755799][ T8037] wg1 speed is unknown, defaulting to 1000 [ 232.876943][ T7925] hsr_slave_0: entered promiscuous mode [ 232.886793][ T7925] hsr_slave_1: entered promiscuous mode [ 233.120745][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.693'. [ 233.317197][ T8058] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 233.533441][ T8065] loop3: detected capacity change from 0 to 128 [ 233.555739][ T8065] FAT-fs (loop3): Unrecognized mount option "gid=0xffffffffffffffffέ҂ãØPP ÕÍLøIœ•7È’¼’O‹ëu»Óصf÷½O¥£Æ¥üV—‡½'Áà6ÎyàbèÖuªUèÙ`=\)`—N^¹{$þ ¤*AÊpg•?}ê4@v." or missing value [ 235.415512][ T7925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.463206][ T7925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.521573][ T7925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.552085][ T7925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.728840][ T8073] loop2: detected capacity change from 0 to 8192 [ 235.935928][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.005736][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.033461][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.040739][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.066841][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.074112][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.007095][ T8093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.700'. [ 237.039439][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 237.405981][ T7925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.499587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 238.559668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 238.671226][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.702'. [ 239.766095][ T7925] veth0_vlan: entered promiscuous mode [ 239.864012][ T7925] veth1_vlan: entered promiscuous mode [ 239.899475][ T7925] veth0_macvtap: entered promiscuous mode [ 239.916362][ T7925] veth1_macvtap: entered promiscuous mode [ 239.973687][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.706'. [ 239.986559][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 240.152901][ T8133] bond2: entered promiscuous mode [ 240.158025][ T8133] bond2: entered allmulticast mode [ 240.193517][ T8133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.251121][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.284070][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.305843][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.317593][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.334313][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.352379][ T8136] wg1 speed is unknown, defaulting to 1000 [ 240.396529][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.463719][ T7925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.473418][ T7925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.483625][ T7925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.492988][ T7925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.680669][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.688646][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.798928][ T8151] loop3: detected capacity change from 0 to 512 [ 240.815087][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.817686][ T8151] EXT4-fs: Ignoring removed oldalloc option [ 240.833448][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.877567][ T8151] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 240.911940][ T8151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.970358][ T8151] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 241.001424][ T8151] EXT4-fs (loop3): 1 truncate cleaned up [ 241.010079][ T8151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.042376][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.711'. [ 241.222258][ T8151] loop3: detected capacity change from 512 to 64 [ 241.263503][ T8165] syz.3.710: attempt to access beyond end of device [ 241.263503][ T8165] loop3: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 241.339785][ T8165] EXT4-fs warning (device loop3): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 35) [ 241.381372][ T8165] Buffer I/O error on device loop3, logical block 35 [ 241.387308][ T8166] wg1 speed is unknown, defaulting to 1000 [ 241.415270][ T8165] syz.3.710: attempt to access beyond end of device [ 241.415270][ T8165] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 241.477966][ T8165] EXT4-fs warning (device loop3): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 255) [ 241.529547][ T8165] Buffer I/O error on device loop3, logical block 255 [ 241.639475][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 242.560911][ T8187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 242.571637][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 242.613480][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.668329][ T8187] bond1: entered promiscuous mode [ 242.675841][ T8187] bond1: entered allmulticast mode [ 242.682085][ T8187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.781154][ T8187] wg1 speed is unknown, defaulting to 1000 [ 243.070410][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'. [ 243.371473][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.392255][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.852490][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.884412][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.073512][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.111645][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.285768][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.350075][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.391964][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.409726][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.418643][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.428942][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.439569][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 245.447205][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.144124][ T8222] wg1 speed is unknown, defaulting to 1000 [ 246.479418][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 246.657005][ T1098] tipc: Left network mode [ 246.682401][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 246.713920][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.770481][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.814351][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.862021][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.900143][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.950121][ T23] usb 3-1: config 0 descriptor?? [ 247.045635][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'. [ 247.121734][ T8247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.731'. [ 247.134717][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 247.195533][ T8247] bond1: entered promiscuous mode [ 247.201027][ T8247] bond1: entered allmulticast mode [ 247.207180][ T8247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.365430][ T8250] wg1 speed is unknown, defaulting to 1000 [ 247.376665][ T8222] chnl_net:caif_netlink_parms(): no params data found [ 247.394936][ T23] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 247.411763][ T23] microsoft 0003:045E:07DA.0003: parse failed [ 247.422202][ T23] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 247.539850][ T50] Bluetooth: hci1: command tx timeout [ 247.586973][ T23] usb 3-1: USB disconnect, device number 2 [ 247.773951][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.785383][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.793383][ T8222] bridge_slave_0: entered allmulticast mode [ 247.803605][ T8222] bridge_slave_0: entered promiscuous mode [ 247.841592][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.851009][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.862678][ T8222] bridge_slave_1: entered allmulticast mode [ 247.878177][ T8222] bridge_slave_1: entered promiscuous mode [ 247.937461][ T8263] wg1 speed is unknown, defaulting to 1000 [ 247.984536][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.028335][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.385290][ T8222] team0: Port device team_slave_0 added [ 248.401052][ T8222] team0: Port device team_slave_1 added [ 248.510241][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.622570][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.259752][ T8222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.294299][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.391015][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.422492][ T8222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.621237][ T50] Bluetooth: hci1: command tx timeout [ 249.758638][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 249.834604][ T8222] hsr_slave_0: entered promiscuous mode [ 249.855414][ T8222] hsr_slave_1: entered promiscuous mode [ 249.870280][ T8222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.893061][ T8222] Cannot create hsr debugfs directory [ 249.949545][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 250.115115][ T1098] hsr_slave_0: left promiscuous mode [ 250.179005][ T1098] hsr_slave_1: left promiscuous mode [ 250.199064][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.214076][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.222839][ T1098] bridge_slave_1: left allmulticast mode [ 250.228791][ T1098] bridge_slave_1: left promiscuous mode [ 250.241522][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.254766][ T1098] bridge_slave_0: left allmulticast mode [ 250.260869][ T1098] bridge_slave_0: left promiscuous mode [ 250.266815][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.307050][ T1098] veth1_macvtap: left promiscuous mode [ 250.314170][ T1098] veth0_macvtap: left promiscuous mode [ 250.319930][ T1098] veth1_vlan: left promiscuous mode [ 250.325305][ T1098] veth0_vlan: left promiscuous mode [ 250.639414][ T1098] bond2 (unregistering): Released all slaves [ 250.875764][ T1098] bond1 (unregistering): Released all slaves [ 251.178660][ T28] audit: type=1326 audit(1759279116.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.201935][ T28] audit: type=1326 audit(1759279116.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.228039][ T28] audit: type=1326 audit(1759279116.303:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.264200][ T28] audit: type=1326 audit(1759279116.303:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.287379][ T28] audit: type=1326 audit(1759279116.303:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95d3d8d710 code=0x7ffc0000 [ 251.309853][ T28] audit: type=1326 audit(1759279116.303:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.332427][ T28] audit: type=1326 audit(1759279116.303:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.355013][ T28] audit: type=1326 audit(1759279116.303:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.377380][ T28] audit: type=1326 audit(1759279116.303:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.399945][ T28] audit: type=1326 audit(1759279116.303:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.1.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 251.699804][ T50] Bluetooth: hci1: command tx timeout [ 251.776643][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.749'. [ 251.992581][ T1098] team_slave_1 (unregistering): left promiscuous mode [ 252.006906][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 252.075595][ T1098] team_slave_0 (unregistering): left promiscuous mode [ 252.084538][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 252.136325][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.192395][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.771221][ T1098] bond0 (unregistering): Released all slaves [ 252.944727][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 253.201044][ T8341] loop2: detected capacity change from 0 to 2048 [ 253.252451][ T8345] netlink: 'syz.1.753': attribute type 27 has an invalid length. [ 253.268932][ T8341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.321639][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 253.527229][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.535354][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.782257][ T50] Bluetooth: hci1: command tx timeout [ 254.096437][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.273539][ T8345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.287595][ T8345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.298088][ T8345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.312267][ T8345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.373450][ T8345] bond1: left promiscuous mode [ 254.378416][ T8345] bond1: left allmulticast mode [ 254.454246][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.464112][ T8346] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.476972][ T8346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.506635][ T8360] netlink: 'syz.2.756': attribute type 12 has an invalid length. [ 254.526279][ T6134] wg1 speed is unknown, defaulting to 1000 [ 254.627480][ T1098] IPVS: stop unused estimator thread 0... [ 254.924151][ T8222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.969886][ T8222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.355746][ T8222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.593863][ T8222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.809156][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.759'. [ 255.857925][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 255.871985][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.083256][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.344767][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.357529][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.398090][ T8398] loop2: detected capacity change from 0 to 1024 [ 256.420580][ T8398] EXT4-fs: Ignoring removed bh option [ 256.442797][ T8398] EXT4-fs: Mount option(s) incompatible with ext3 [ 257.699584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 258.160885][ T8402] loop4: detected capacity change from 0 to 1024 [ 258.379589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 258.386610][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.458757][ T8222] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.071137][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.078349][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.137363][ T1105] hfsplus: b-tree write err: -5, ino 4 [ 259.161419][ T8408] wg1 speed is unknown, defaulting to 1000 [ 259.229788][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.237154][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.133519][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.253223][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 260.923542][ T8460] tipc: Enabling of bearer rejected, failed to enable media [ 260.980724][ T8462] tipc: Enabling of bearer rejected, failed to enable media [ 261.001627][ T8222] veth0_vlan: entered promiscuous mode [ 261.052314][ T8222] veth1_vlan: entered promiscuous mode [ 261.195744][ T8222] veth0_macvtap: entered promiscuous mode [ 261.273616][ T8222] veth1_macvtap: entered promiscuous mode [ 261.357618][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.399352][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.421203][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.468969][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.531937][ T8222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.573808][ T8222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.594737][ T8222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.609499][ T8222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.922956][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.945615][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.028523][ T8491] fuse: Bad value for 'group_id' [ 262.708884][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.741316][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.776055][ T8494] wg1 speed is unknown, defaulting to 1000 [ 262.886715][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 262.947719][ T8504] loop4: detected capacity change from 0 to 256 [ 262.994448][ T8504] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 263.019859][ T8504] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 263.418295][ T8513] tipc: Enabled bearer , priority 0 [ 263.532563][ T8517] syzkaller0: entered promiscuous mode [ 263.542903][ T8517] syzkaller0: entered allmulticast mode [ 263.551068][ T8517] tipc: Resetting bearer [ 263.573027][ T8523] tipc: Enabling of bearer rejected, failed to enable media [ 263.603294][ T8512] tipc: Resetting bearer [ 265.419368][ T5827] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 265.645480][ T8543] syz.1.785 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 265.664391][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 265.674674][ T5827] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.683433][ T5827] usb 5-1: config 179 has no interface number 0 [ 265.694180][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 265.733042][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 265.746301][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.758737][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 265.770698][ T5827] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.821888][ T5827] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.834027][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.855242][ T8546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 266.039932][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.787'. [ 266.246372][ T6136] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 266.400878][ T5827] usb 5-1: USB disconnect, device number 2 [ 266.400959][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 266.401075][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 266.512032][ T5827] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 267.665117][ T8512] tipc: Disabling bearer [ 267.711894][ T8554] veth1_macvtap: left promiscuous mode [ 267.749418][ T8554] macsec0: entered promiscuous mode [ 267.754710][ T8554] macsec0: entered allmulticast mode [ 267.864244][ T8555] veth1_macvtap: entered promiscuous mode [ 267.897160][ T8555] veth1_macvtap: entered allmulticast mode [ 267.929569][ T8555] macsec0: left promiscuous mode [ 267.936271][ T8555] macsec0: left allmulticast mode [ 267.956271][ T8555] veth1_macvtap: left allmulticast mode [ 268.026998][ T8553] wg1 speed is unknown, defaulting to 1000 [ 269.907912][ T8597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.797'. [ 270.229713][ T8602] tipc: Enabling of bearer rejected, failed to enable media [ 270.263352][ T8604] tipc: Started in network mode [ 270.268290][ T8604] tipc: Node identity e65b8e24ae8d, cluster identity 4711 [ 270.276992][ T8604] tipc: Enabled bearer , priority 0 [ 270.358468][ T8604] syzkaller0: entered promiscuous mode [ 270.364295][ T8604] syzkaller0: entered allmulticast mode [ 270.378768][ T8604] tipc: Resetting bearer [ 270.457260][ T8601] tipc: Resetting bearer [ 271.142656][ T8629] loop4: detected capacity change from 0 to 2364 [ 271.319441][ T6136] tipc: Node number set to 1222020644 [ 273.571432][ T8601] tipc: Disabling bearer [ 273.583906][ T8622] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 273.610574][ T8626] bridge7: entered promiscuous mode [ 273.637803][ T8626] bridge7: entered allmulticast mode [ 273.750965][ T8640] tipc: Enabling of bearer rejected, failed to enable media [ 273.978245][ T8642] syzkaller0: entered promiscuous mode [ 274.009302][ T8642] syzkaller0: entered allmulticast mode [ 277.790692][ T8685] tipc: Enabling of bearer rejected, failed to enable media [ 278.035949][ T8700] bond1: entered promiscuous mode [ 278.060276][ T8700] bond1: entered allmulticast mode [ 278.107300][ T8704] bridge4: entered promiscuous mode [ 278.129628][ T8704] bridge4: entered allmulticast mode [ 278.156571][ T8704] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 278.167008][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.5.814'. [ 278.329408][ T6133] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 278.542542][ T6133] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.604406][ T6133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.641618][ T6133] usb 5-1: config 0 descriptor?? [ 278.663651][ T8727] netlink: 'syz.2.820': attribute type 4 has an invalid length. [ 278.675360][ T6133] cp210x 5-1:0.0: cp210x converter detected [ 279.476772][ T8709] loop4: detected capacity change from 0 to 512 [ 279.479527][ T6133] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 279.581340][ T8737] tipc: Enabling of bearer rejected, failed to enable media [ 279.614252][ T8709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.630622][ T8709] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.645604][ T8736] tipc: Enabled bearer , priority 0 [ 279.765207][ T6133] usb 5-1: cp210x converter now attached to ttyUSB0 [ 279.870335][ T8736] syzkaller0: entered promiscuous mode [ 279.899629][ T5827] usb 5-1: USB disconnect, device number 3 [ 279.919382][ T8736] syzkaller0: entered allmulticast mode [ 279.945316][ T8736] tipc: Resetting bearer [ 279.961363][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 280.016207][ T8734] tipc: Resetting bearer [ 280.072855][ T5827] cp210x 5-1:0.0: device disconnected [ 280.496088][ T7925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.170779][ T8734] tipc: Disabling bearer [ 283.298205][ T8768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.825'. [ 284.391432][ T8793] netlink: 'syz.5.831': attribute type 4 has an invalid length. [ 286.544553][ T8808] tipc: Enabled bearer , priority 0 [ 286.557685][ T8809] tipc: Enabling of bearer rejected, failed to enable media [ 286.779999][ T8808] syzkaller0: entered promiscuous mode [ 286.799353][ T8808] syzkaller0: entered allmulticast mode [ 286.820018][ T8808] tipc: Resetting bearer [ 286.929999][ T8806] tipc: Resetting bearer [ 289.690453][ T8806] tipc: Disabling bearer [ 289.714905][ T8836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.836'. [ 290.050097][ T8842] netlink: set zone limit has 8 unknown bytes [ 290.425572][ T8857] netlink: 'syz.5.843': attribute type 4 has an invalid length. [ 290.539797][ T8863] loop2: detected capacity change from 0 to 512 [ 290.571521][ T8863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.656021][ T8863] EXT4-fs (loop2): 1 truncate cleaned up [ 290.674827][ T8867] loop5: detected capacity change from 0 to 512 [ 290.690783][ T8863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.785364][ T8867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 290.816473][ T8867] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.906100][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.199027][ T8222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 291.241485][ T8885] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 291.515998][ T8885] bond2: entered promiscuous mode [ 291.533591][ T8885] bond2: entered allmulticast mode [ 291.968560][ T8888] bridge3: entered promiscuous mode [ 291.974170][ T8888] bridge3: entered allmulticast mode [ 291.985794][ T8888] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 292.198016][ T8898] netlink: set zone limit has 8 unknown bytes [ 292.224379][ T8902] loop5: detected capacity change from 0 to 128 [ 292.266660][ T8902] EXT4-fs: Ignoring removed nobh option [ 292.321667][ T8902] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.375306][ T8902] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.526540][ T8913] netlink: 'syz.1.856': attribute type 4 has an invalid length. [ 292.782481][ T8917] loop4: detected capacity change from 0 to 512 [ 292.798328][ T8917] EXT4-fs: Ignoring removed nobh option [ 292.841900][ T8917] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.610779][ T8917] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 293.664211][ T8917] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.857: invalid indirect mapped block 256 (level 1) [ 293.739379][ T8917] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.857: invalid indirect mapped block 2683928664 (level 1) [ 293.765598][ T8222] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.811623][ T8917] EXT4-fs (loop4): 1 truncate cleaned up [ 293.840148][ T8917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.886014][ T8926] syz.1.859[8926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.886209][ T8926] syz.1.859[8926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.972853][ T8000] udevd[8000]: incorrect jbd checksum on /dev/loop4 [ 294.002864][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 294.084681][ T7925] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /40/file0: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=1024 fake=1 [ 294.226681][ T7925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.423219][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 294.456505][ T8939] netlink: 'syz.5.863': attribute type 1 has an invalid length. [ 294.474476][ T8942] bridge2: entered promiscuous mode [ 294.484339][ T8942] bridge2: entered allmulticast mode [ 294.724498][ T1005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.870002][ T1005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.023308][ T1005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.131032][ T1005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.961634][ T8971] process 'syz.5.871' launched './file0' with NULL argv: empty string added [ 297.904353][ T8985] netlink: 'syz.2.874': attribute type 4 has an invalid length. [ 298.354232][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.365741][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.375057][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.385291][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.393716][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.401673][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.061484][ T8990] wg1 speed is unknown, defaulting to 1000 [ 299.734853][ T9015] Bluetooth: MGMT ver 1.22 [ 301.084892][ T5798] Bluetooth: hci0: command tx timeout [ 301.172346][ T8990] chnl_net:caif_netlink_parms(): no params data found [ 301.788648][ T1005] hsr_slave_0: left promiscuous mode [ 301.802821][ T1005] hsr_slave_1: left promiscuous mode [ 301.813146][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.826379][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.835309][ T1005] bridge_slave_1: left allmulticast mode [ 301.846415][ T1005] bridge_slave_1: left promiscuous mode [ 301.857892][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.879868][ T1005] bridge_slave_0: left allmulticast mode [ 301.893762][ T1005] bridge_slave_0: left promiscuous mode [ 301.909009][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.974132][ T1005] veth1_macvtap: left promiscuous mode [ 301.984455][ T1005] veth0_macvtap: left promiscuous mode [ 302.000191][ T1005] veth1_vlan: left promiscuous mode [ 302.017303][ T1005] veth0_vlan: left promiscuous mode [ 302.349673][ T1005] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 302.359632][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 302.406617][ T1005] bond2 (unregistering): Released all slaves [ 302.601548][ T5855] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.611996][ T5855] usb 3-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.626944][ T5855] usb 3-1: config 1 interface 0 has no altsetting 0 [ 302.635040][ T5855] usb 3-1: language id specifier not provided by device, defaulting to English [ 302.657467][ T5855] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 302.660039][ T1005] bond1 (unregistering): Released all slaves [ 302.672887][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.685902][ T5855] usb 3-1: Product: syz [ 302.691101][ T5855] usb 3-1: Manufacturer: syz [ 302.695928][ T5855] usb 3-1: SerialNumber: syz [ 303.139652][ T5798] Bluetooth: hci0: command tx timeout [ 303.151520][ T5855] usbhid 3-1:1.0: can't add hid device: -71 [ 303.157604][ T5855] usbhid: probe of 3-1:1.0 failed with error -71 [ 303.170388][ T5855] usb 3-1: USB disconnect, device number 3 [ 303.285922][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 303.341820][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 303.397611][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.459265][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.967320][ T9065] loop2: detected capacity change from 0 to 1024 [ 303.982046][ T9065] EXT4-fs: Ignoring removed bh option [ 304.012360][ T9065] EXT4-fs: Mount option(s) incompatible with ext3 [ 305.219449][ T5798] Bluetooth: hci0: command tx timeout [ 305.448412][ T1005] bond0 (unregistering): Released all slaves [ 305.757404][ T8990] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.789946][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.814293][ T8990] bridge_slave_0: entered allmulticast mode [ 305.828000][ T8990] bridge_slave_0: entered promiscuous mode [ 305.847161][ T8990] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.866449][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.918268][ T8990] bridge_slave_1: entered allmulticast mode [ 305.935361][ T8990] bridge_slave_1: entered promiscuous mode [ 306.092556][ T8990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.151593][ T8990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.333118][ T8990] team0: Port device team_slave_0 added [ 306.387906][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'. [ 306.411703][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 306.556321][ T9092] bond2: entered promiscuous mode [ 306.564050][ T9092] bond2: entered allmulticast mode [ 306.570060][ T9092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.585271][ T8990] team0: Port device team_slave_1 added [ 306.711667][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.727134][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.765674][ T8990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.826814][ T9095] wg1 speed is unknown, defaulting to 1000 [ 306.833764][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.842922][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.911623][ T8990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.257189][ T8990] hsr_slave_0: entered promiscuous mode [ 307.309488][ T5798] Bluetooth: hci0: command tx timeout [ 307.318375][ T8990] hsr_slave_1: entered promiscuous mode [ 308.109561][ T8990] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.153075][ T8990] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.190567][ T8990] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.226473][ T8990] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.496989][ T8990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.553895][ T8990] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.602815][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.610267][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.679643][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.687107][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.498254][ T8990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.943436][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 310.104201][ T8990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.469449][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.913'. [ 310.498378][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 310.563623][ T9188] bond2: entered promiscuous mode [ 310.568829][ T9188] bond2: entered allmulticast mode [ 310.589662][ T9188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.798036][ T9188] wg1 speed is unknown, defaulting to 1000 [ 312.139316][ T6147] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 312.204129][ T8990] veth0_vlan: entered promiscuous mode [ 312.233960][ T8990] veth1_vlan: entered promiscuous mode [ 312.349239][ T6147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.362630][ T8990] veth0_macvtap: entered promiscuous mode [ 312.369256][ T6147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.394786][ T8990] veth1_macvtap: entered promiscuous mode [ 312.409368][ T6147] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.443387][ T6147] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.461484][ T8990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.479359][ T6147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.483638][ T8990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.505538][ T6147] usb 6-1: config 0 descriptor?? [ 312.520439][ T8990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.560810][ T8990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.573278][ T8990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.597271][ T8990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.622084][ T8990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.631777][ T8990] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.642458][ T8990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.651924][ T8990] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.878000][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.898788][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.971155][ T6147] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 312.987000][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.008534][ T6147] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 313.012335][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.117664][ T6147] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 314.190232][ T9225] loop6: detected capacity change from 0 to 2048 [ 314.242900][ T27] usb 6-1: USB disconnect, device number 2 [ 314.279042][ T9225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.320625][ T9225] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.380681][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 314.380697][ T28] audit: type=1800 audit(1759279179.503:30): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.867" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 314.387454][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'. [ 314.445580][ T9225] fs-verity: sha512 using implementation "sha512-avx2" [ 314.468232][ T28] audit: type=1804 audit(1759279179.553:31): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.867" name="/newroot/0/file0/file0/file0" dev="loop6" ino=13 res=1 errno=0 [ 314.563744][ T8990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.728135][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.925'. [ 315.738958][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 315.954597][ T9266] bond3: entered promiscuous mode [ 315.987412][ T9266] bond3: entered allmulticast mode [ 316.025646][ T9266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.130847][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 316.200567][ T9275] bridge3: entered promiscuous mode [ 316.225079][ T9275] bridge3: entered allmulticast mode [ 316.310976][ T9269] wg1 speed is unknown, defaulting to 1000 [ 316.622205][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.929'. [ 316.695412][ T9291] loop2: detected capacity change from 0 to 256 [ 316.775344][ T9289] syzkaller0: entered promiscuous mode [ 316.794577][ T9289] syzkaller0: entered allmulticast mode [ 319.387307][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.401115][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.051593][ T6136] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 320.289334][ T6136] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 320.297766][ T6136] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 320.343632][ T6136] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 320.381238][ T6136] usb 3-1: config 220 has no interface number 2 [ 320.387632][ T6136] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 320.429076][ T6136] usb 3-1: config 220 interface 0 has no altsetting 0 [ 320.438654][ T6136] usb 3-1: config 220 interface 76 has no altsetting 0 [ 320.453903][ T6136] usb 3-1: config 220 interface 1 has no altsetting 0 [ 320.467527][ T6136] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 320.488391][ T6136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.499782][ T9333] loop6: detected capacity change from 0 to 4096 [ 320.506278][ T6136] usb 3-1: Product: syz [ 320.525689][ T6136] usb 3-1: Manufacturer: syz [ 320.557337][ T6136] usb 3-1: SerialNumber: syz [ 320.571487][ T9333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.798181][ T6136] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 320.829274][ T6136] usb 3-1: No valid video chain found. [ 320.844706][ T9346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.937'. [ 320.845258][ T6136] usb 3-1: selecting invalid altsetting 0 [ 321.477426][ T6136] usb 3-1: selecting invalid altsetting 0 [ 321.517438][ T8990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.528398][ T6136] usbtest: probe of 3-1:220.1 failed with error -22 [ 321.590880][ T6136] usb 3-1: USB disconnect, device number 4 [ 321.757766][ T9357] bridge3: entered promiscuous mode [ 321.824626][ T9357] bridge3: entered allmulticast mode [ 324.051554][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.954'. [ 325.182886][ T9397] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 325.192134][ T9397] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 325.311385][ T5798] Bluetooth: hci3: unexpected event for opcode 0x204e [ 325.545103][ T9407] bridge5: entered promiscuous mode [ 325.569900][ T9407] bridge5: entered allmulticast mode [ 325.836948][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.6.963'. [ 327.693860][ T9434] netlink: 'syz.6.968': attribute type 4 has an invalid length. [ 327.777524][ T9436] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 327.802779][ T9437] netlink: 'syz.6.968': attribute type 4 has an invalid length. [ 327.992774][ T9440] loop2: detected capacity change from 0 to 256 [ 328.135011][ T9440] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 328.257412][ T9451] bridge1: entered promiscuous mode [ 328.279485][ T9451] bridge1: entered allmulticast mode [ 330.325675][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'. [ 330.794470][ T9475] loop5: detected capacity change from 0 to 1024 [ 330.842591][ T9475] EXT4-fs: Ignoring removed bh option [ 330.895706][ T9475] EXT4-fs: Mount option(s) incompatible with ext3 [ 337.411862][ T9514] loop5: detected capacity change from 0 to 16 [ 337.478545][ T9514] erofs: (device loop5): mounted with root inode @ nid 36. [ 337.890744][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.990'. [ 337.929409][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 338.067547][ T9524] bond3: entered promiscuous mode [ 338.099740][ T9524] bond3: entered allmulticast mode [ 338.109003][ T9524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.420768][ T9538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 338.427085][ T9539] netlink: set zone limit has 8 unknown bytes [ 338.580482][ T5798] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 338.800400][ T5798] Bluetooth: hci2: unexpected event for opcode 0x204e [ 338.943044][ T9557] loop6: detected capacity change from 0 to 764 [ 339.000758][ T9557] rock: directory entry would overflow storage [ 339.025583][ T9557] rock: sig=0x4654, size=5, remaining=4 [ 339.473215][ T9570] isofs: Unable to find the ".." directory for NFS. [ 339.590557][ T9568] netlink: set zone limit has 8 unknown bytes [ 341.854909][ T9580] loop6: detected capacity change from 0 to 1024 [ 342.987766][ T9580] EXT4-fs: Ignoring removed bh option [ 343.047226][ T9580] EXT4-fs: Mount option(s) incompatible with ext3 [ 343.081802][ T5798] Bluetooth: hci3: unexpected event for opcode 0x204e [ 344.017147][ T9591] loop2: detected capacity change from 0 to 1024 [ 344.196812][ T9239] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.208325][ T5798] Bluetooth: hci3: unexpected event for opcode 0x2036 [ 344.621246][ T28] audit: type=1326 audit(1759279209.753:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.6.1014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x0 [ 345.030604][ T9611] netlink: set zone limit has 8 unknown bytes [ 348.368852][ T5798] Bluetooth: hci2: unexpected event for opcode 0x204e [ 348.541054][ T5798] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 349.968592][ T9652] netlink: set zone limit has 8 unknown bytes [ 350.370850][ T9654] syzkaller0: entered promiscuous mode [ 350.399927][ T9654] syzkaller0: entered allmulticast mode [ 354.954645][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1030'. [ 355.390651][ T9715] loop5: detected capacity change from 0 to 256 [ 355.535355][ T9720] fuse: Bad value for 'fd' [ 356.149661][ T9715] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 356.601151][ T9737] loop2: detected capacity change from 0 to 8 [ 356.679101][ T9742] loop6: detected capacity change from 0 to 512 [ 356.690529][ T9742] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 356.834640][ T9742] EXT4-fs (loop6): 1 truncate cleaned up [ 357.700641][ T9742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.837687][ T9742] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.1047: corrupted in-inode xattr: overlapping e_value [ 357.995522][ T9742] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1781: inode #15: comm syz.6.1047: unable to update i_inline_off [ 358.087990][ T9752] EXT4-fs error (device loop6): ext4_xattr_ibody_list:797: inode #15: comm syz.6.1047: corrupted in-inode xattr: overlapping e_value [ 359.258642][ T8990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.848093][ T9782] fuse: Bad value for 'fd' [ 361.884380][ T5798] Bluetooth: hci3: hardware error 0xf4 [ 361.886992][ T9796] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.175705][ T9806] loop6: detected capacity change from 0 to 256 [ 362.260056][ T9806] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 362.788096][ T9815] syzkaller0: entered promiscuous mode [ 362.806029][ T9815] syzkaller0: entered allmulticast mode [ 363.515558][ T9831] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1059'. [ 363.739325][ T9833] fuse: Bad value for 'fd' [ 363.940254][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 369.900128][ T9881] fuse: Invalid rootmode [ 370.907049][ T9892] netlink: set zone limit has 8 unknown bytes [ 371.060842][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 373.822620][ T9920] loop2: detected capacity change from 0 to 1024 [ 374.215241][ T9920] EXT4-fs (loop2): Test dummy encryption mode enabled [ 374.248607][ T9920] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 374.413628][ T9920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.537185][ T9937] fuse: Invalid rootmode [ 376.152628][ T9957] capability: warning: `syz.1.1093' uses 32-bit capabilities (legacy support in use) [ 376.551466][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.700035][ T9963] loop6: detected capacity change from 0 to 1024 [ 376.824985][ T9963] hfsplus: failed to load extents file [ 377.157407][ T9966] loop5: detected capacity change from 0 to 512 [ 377.245186][ T9966] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.326479][ T9966] EXT4-fs (loop5): orphan cleanup on readonly fs [ 377.335735][ T9966] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1094: Bad quota inum: 64, type: 0 [ 377.356538][ T9966] EXT4-fs (loop5): Remounting filesystem read-only [ 377.369268][ T9966] EXT4-fs warning (device loop5): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 377.384300][ T9966] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 377.392605][ T9966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 377.482463][ T9974] loop6: detected capacity change from 0 to 256 [ 377.547900][ T9974] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 377.570752][ T8222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.104020][ T42] tipc: Left network mode [ 379.239560][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.246522][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.730066][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.741951][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.755479][ T6145] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 379.764075][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.779022][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.803375][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 379.811717][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.959451][ T6145] usb 6-1: Using ep0 maxpacket: 16 [ 379.992026][ T6145] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 380.024354][T10004] wg1 speed is unknown, defaulting to 1000 [ 380.039847][ T6145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.089662][ T6145] usb 6-1: Product: syz [ 380.104708][ T6145] usb 6-1: Manufacturer: syz [ 380.132173][ T6145] usb 6-1: SerialNumber: syz [ 380.154204][ T6145] r8152-cfgselector 6-1: config 0 descriptor?? [ 380.175659][ T6145] hub 6-1:0.0: bad descriptor, ignoring hub [ 380.193739][ T6145] hub: probe of 6-1:0.0 failed with error -5 [ 380.601935][ T6145] r8152-cfgselector 6-1: Unknown version 0x0000 [ 380.662197][ T6145] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 380.760003][ T42] hsr_slave_0: left promiscuous mode [ 380.788233][ T42] hsr_slave_1: left promiscuous mode [ 380.800231][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.825360][ T42] bridge_slave_1: left allmulticast mode [ 380.839441][ T42] bridge_slave_1: left promiscuous mode [ 380.869991][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.910940][ T42] bridge_slave_0: left allmulticast mode [ 380.916864][ T42] bridge_slave_0: left promiscuous mode [ 380.936143][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.859356][ T50] Bluetooth: hci3: command tx timeout [ 381.985929][ T42] bond3 (unregistering): Released all slaves [ 382.430584][ T42] bond2 (unregistering): Released all slaves [ 382.494747][ T42] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 382.553193][ T42] bond1 (unregistering): Released all slaves [ 383.297286][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.306678][ T42] bond_slave_1 (unregistering): left promiscuous mode [ 383.408943][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.423812][ T42] bond_slave_0 (unregistering): left promiscuous mode [ 383.536065][T10077] loop6: detected capacity change from 0 to 2048 [ 383.595122][T10077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.668974][T10077] EXT4-fs error (device loop6): ext4_ind_map_blocks:604: inode #15: comm syz.6.1120: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 383.690116][T10077] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 383.703077][T10077] EXT4-fs (loop6): This should not happen!! Data will be lost [ 383.703077][T10077] [ 383.769998][ T8990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.984146][ T50] Bluetooth: hci3: command tx timeout [ 384.728554][ T42] bond0 (unregistering): Released all slaves [ 385.092272][T10087] tipc: Enabling of bearer rejected, failed to enable media [ 385.164952][T10089] syzkaller0: entered promiscuous mode [ 385.202568][T10089] syzkaller0: entered allmulticast mode [ 385.538791][T10004] chnl_net:caif_netlink_parms(): no params data found [ 385.782482][T10004] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.791988][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.799794][T10004] bridge_slave_0: entered allmulticast mode [ 385.808827][T10004] bridge_slave_0: entered promiscuous mode [ 385.836990][T10004] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.844649][T10004] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.852554][T10004] bridge_slave_1: entered allmulticast mode [ 385.861809][T10004] bridge_slave_1: entered promiscuous mode [ 385.918856][T10004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.937909][T10004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.019873][ T50] Bluetooth: hci3: command tx timeout [ 386.043281][T10004] team0: Port device team_slave_0 added [ 386.067187][T10004] team0: Port device team_slave_1 added [ 386.126673][T10133] loop6: detected capacity change from 0 to 764 [ 386.169979][T10133] rock: directory entry would overflow storage [ 386.186900][T10004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.198773][T10133] rock: sig=0x4654, size=5, remaining=4 [ 386.215037][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.242247][T10004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.256092][T10004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.280762][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.309027][T10004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.779001][T10004] hsr_slave_0: entered promiscuous mode [ 386.966258][T10004] hsr_slave_1: entered promiscuous mode [ 387.053648][T10004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.099394][T10004] Cannot create hsr debugfs directory [ 388.129347][ T50] Bluetooth: hci3: command tx timeout [ 388.365393][T10163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1133'. [ 388.403743][T10163] bridge7: entered promiscuous mode [ 388.439828][T10163] bridge7: entered allmulticast mode [ 388.524688][T10162] wg1 speed is unknown, defaulting to 1000 [ 388.556435][T10167] veth1_macvtap: left promiscuous mode [ 388.565832][T10167] macsec0: entered promiscuous mode [ 388.579226][T10167] macsec0: entered allmulticast mode [ 388.699961][T10174] veth1_macvtap: entered promiscuous mode [ 388.705883][T10174] veth1_macvtap: entered allmulticast mode [ 388.741107][T10174] macsec0: left promiscuous mode [ 388.746466][T10174] macsec0: left allmulticast mode [ 388.775204][T10174] veth1_macvtap: left allmulticast mode [ 388.858526][T10004] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 388.926872][T10004] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 388.967643][T10004] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 388.986817][T10004] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.133680][T10004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.693271][T10004] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.894571][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.902056][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.996740][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.004009][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.098851][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1145'. [ 391.105759][T10225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 391.208888][T10224] bridge1: entered promiscuous mode [ 391.229552][T10224] bridge1: entered allmulticast mode [ 391.357002][T10232] wg1 speed is unknown, defaulting to 1000 [ 391.400974][T10230] macsec0: entered promiscuous mode [ 391.417933][T10230] macsec0: entered allmulticast mode [ 391.470073][T10230] veth1_macvtap: entered allmulticast mode [ 391.494515][T10230] macsec0: left promiscuous mode [ 391.535502][T10230] macsec0: left allmulticast mode [ 391.568622][T10230] veth1_macvtap: left allmulticast mode [ 391.889875][ T6147] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 391.961687][T10004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.079444][ T6147] usb 6-1: Using ep0 maxpacket: 16 [ 392.095275][ T6147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.122404][ T6147] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.148058][ T6147] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 392.168951][ T6147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.188371][ T6147] usb 6-1: config 0 descriptor?? [ 392.645962][T10004] veth0_vlan: entered promiscuous mode [ 392.677382][T10004] veth1_vlan: entered promiscuous mode [ 392.753653][T10004] veth0_macvtap: entered promiscuous mode [ 392.792385][T10004] veth1_macvtap: entered promiscuous mode [ 392.869895][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.912060][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.925145][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.936024][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.949621][T10004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.965446][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.979717][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.990656][T10004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.015175][T10004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.034130][T10004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.085454][T10004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.101941][T10004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.115167][T10004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.127143][T10004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.751679][ T6147] usbhid 6-1:0.0: can't add hid device: -71 [ 394.771385][ T6147] usbhid: probe of 6-1:0.0 failed with error -71 [ 394.809352][ T6147] usb 6-1: USB disconnect, device number 4 [ 395.091150][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.144469][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.238226][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.335575][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.547295][T10297] wg1 speed is unknown, defaulting to 1000 [ 395.553388][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1158'. [ 395.613660][T10303] bridge5: entered promiscuous mode [ 395.619078][T10303] bridge5: entered allmulticast mode [ 395.769930][T10299] veth1_macvtap: left promiscuous mode [ 395.815039][T10299] macsec0: entered promiscuous mode [ 395.835352][T10299] macsec0: entered allmulticast mode [ 395.885630][T10304] veth1_macvtap: entered promiscuous mode [ 395.929382][T10304] veth1_macvtap: entered allmulticast mode [ 395.980824][T10304] macsec0: left promiscuous mode [ 395.995361][T10304] macsec0: left allmulticast mode [ 396.019999][T10304] veth1_macvtap: left allmulticast mode [ 401.078858][T10347] loop7: detected capacity change from 0 to 256 [ 401.086790][T10347] exfat: Unknown parameter '"' [ 401.164392][ T9885] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.139466][T10375] macsec0: entered promiscuous mode [ 405.153930][T10375] macsec0: entered allmulticast mode [ 405.208959][T10379] veth1_macvtap: entered allmulticast mode [ 406.871175][T10379] macsec0: left promiscuous mode [ 406.876388][T10379] macsec0: left allmulticast mode [ 406.929362][T10379] veth1_macvtap: left allmulticast mode [ 407.397795][T10394] loop7: detected capacity change from 0 to 256 [ 407.405488][T10394] exfat: Unknown parameter '"' [ 407.444146][ T9885] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.861379][T10403] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.863460][ T50] Bluetooth: hci1: hardware error 0xf4 [ 412.209244][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 412.718954][T10431] loop6: detected capacity change from 0 to 1024 [ 412.769095][T10431] EXT4-fs: Ignoring removed bh option [ 412.817772][T10431] EXT4-fs: Mount option(s) incompatible with ext3 [ 416.323496][T10450] fuse: Unknown parameter '0x000000000000000700000000000000000000' [ 416.735935][T10461] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 416.738476][ T50] Bluetooth: hci0: hardware error 0xf4 [ 418.156726][ T28] audit: type=1326 audit(1759279282.273:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 418.180927][ T28] audit: type=1326 audit(1759279282.273:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 418.293030][ T28] audit: type=1326 audit(1759279283.333:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 418.316767][ T28] audit: type=1326 audit(1759279283.333:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 418.366178][ T28] audit: type=1326 audit(1759279283.333:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d3d8eec9 code=0x7ffc0000 [ 418.646853][T10477] tipc: Enabling of bearer rejected, failed to enable media [ 418.670960][T10477] syzkaller0: entered promiscuous mode [ 418.689331][T10477] syzkaller0: entered allmulticast mode [ 418.697265][T10478] veth1_macvtap: left promiscuous mode [ 418.719500][T10478] macsec0: entered promiscuous mode [ 418.724980][T10478] macsec0: entered allmulticast mode [ 418.782426][T10480] veth1_macvtap: entered promiscuous mode [ 418.788246][T10480] veth1_macvtap: entered allmulticast mode [ 418.819836][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 418.853866][T10480] macsec0: left promiscuous mode [ 418.869534][T10480] macsec0: left allmulticast mode [ 418.874749][T10480] veth1_macvtap: left allmulticast mode [ 420.565747][T10510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.994786][T10527] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 422.448146][ T5798] Bluetooth: hci3: hardware error 0xf4 [ 422.471554][T10538] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.610836][T10540] veth1_macvtap: left promiscuous mode [ 422.640903][T10540] macsec0: entered promiscuous mode [ 422.662150][T10540] macsec0: entered allmulticast mode [ 422.842789][T10543] veth1_macvtap: entered promiscuous mode [ 422.893540][T10543] veth1_macvtap: entered allmulticast mode [ 422.903397][T10543] macsec0: left promiscuous mode [ 422.908957][T10543] macsec0: left allmulticast mode [ 422.914754][T10543] veth1_macvtap: left allmulticast mode [ 423.774162][T10558] binder: 10554:10558 ioctl c0306201 0 returned -14 [ 424.287736][ T28] audit: type=1326 audit(1759279288.813:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x7ffc0000 [ 426.317346][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 426.379628][ T28] audit: type=1326 audit(1759279288.813:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf5338d710 code=0x7ffc0000 [ 426.464188][ T28] audit: type=1326 audit(1759279288.813:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbf533906f7 code=0x7ffc0000 [ 426.986109][ T28] audit: type=1326 audit(1759279288.813:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf5338eec9 code=0x7ffc0000 [ 427.011271][ T28] audit: type=1326 audit(1759279288.823:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbf533906f7 code=0x7ffc0000 [ 427.067982][ T28] audit: type=1326 audit(1759279288.823:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbf5338db2a code=0x7ffc0000 [ 427.157581][ T28] audit: type=1326 audit(1759279288.823:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x7ffc0000 [ 427.201826][ T28] audit: type=1326 audit(1759279288.823:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbf5338eec9 code=0x7ffc0000 [ 427.297248][ T28] audit: type=1326 audit(1759279288.833:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x7ffc0000 [ 427.328751][T10578] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 427.427936][ T28] audit: type=1326 audit(1759279288.833:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.7.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbf5338eec9 code=0x7ffc0000 [ 427.838469][T10594] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 428.713568][ T50] Bluetooth: hci2: hardware error 0xf4 [ 430.820910][T10637] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 430.894558][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 431.809253][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 431.809273][ T28] audit: type=1326 audit(1759279296.583:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 431.918195][ T28] audit: type=1326 audit(1759279296.583:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 431.941663][ T28] audit: type=1326 audit(1759279296.683:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ba518d710 code=0x7ffc0000 [ 432.013990][ T28] audit: type=1326 audit(1759279296.683:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8ba51906f7 code=0x7ffc0000 [ 432.068386][T10650] loop5: detected capacity change from 0 to 512 [ 432.069924][ T28] audit: type=1326 audit(1759279296.683:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 432.118474][T10650] EXT4-fs (loop5): bad geometry: block count 3825205504 exceeds size of device (256 blocks) [ 432.161403][T10649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.184745][ T28] audit: type=1326 audit(1759279296.683:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8ba51906f7 code=0x7ffc0000 [ 432.268841][ T28] audit: type=1326 audit(1759279296.683:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8ba518db2a code=0x7ffc0000 [ 432.323015][ T28] audit: type=1326 audit(1759279296.683:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 432.399207][ T28] audit: type=1326 audit(1759279296.683:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 432.404008][T10659] netlink: set zone limit has 8 unknown bytes [ 432.459212][ T28] audit: type=1326 audit(1759279296.753:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 432.499275][ T5780] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 432.724263][ T5780] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.942958][ T5780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.954353][ T5780] usb 6-1: config 0 descriptor?? [ 432.970819][ T5780] cp210x 6-1:0.0: cp210x converter detected [ 433.080279][T10679] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 433.403245][ T5780] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 433.728470][ T5780] usb 6-1: cp210x converter now attached to ttyUSB0 [ 434.003449][ T5780] usb 6-1: USB disconnect, device number 5 [ 434.013662][ T5780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 434.038530][ T5780] cp210x 6-1:0.0: device disconnected [ 434.673893][T10696] netlink: set zone limit has 8 unknown bytes [ 435.279220][ T6136] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 435.414555][T10711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.588422][ T6136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.719190][ T6136] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 435.753766][ T6136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.805574][ T6136] usb 6-1: config 0 descriptor?? [ 436.599488][T10720] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 438.498695][ T6136] usbhid 6-1:0.0: can't add hid device: -71 [ 438.518383][ T6136] usbhid: probe of 6-1:0.0 failed with error -71 [ 438.541165][ T6136] usb 6-1: USB disconnect, device number 6 [ 438.606338][T10726] loop7: detected capacity change from 0 to 256 [ 438.713315][T10726] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 439.121742][T10738] netlink: set zone limit has 8 unknown bytes [ 440.677604][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.692158][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.879432][ T6140] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 441.089385][ T6140] usb 6-1: Using ep0 maxpacket: 16 [ 441.107449][ T6140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.133098][ T6140] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.166596][ T6140] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.199682][ T6140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.231567][ T6140] usb 6-1: config 0 descriptor?? [ 441.710442][ T6140] microsoft 0003:045E:07DA.0005: item fetching failed at offset 31/34 [ 441.771332][ T6140] microsoft 0003:045E:07DA.0005: parse failed [ 441.807499][ T6140] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 441.901579][T10769] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 442.545177][ T6145] usb 6-1: USB disconnect, device number 7 [ 444.209008][T10785] loop6: detected capacity change from 0 to 256 [ 444.269273][T10785] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 446.028969][T10803] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 447.000622][T10818] netlink: set zone limit has 8 unknown bytes [ 447.358806][T10828] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 449.641000][T10842] xt_cgroup: path and classid specified [ 451.399718][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 451.399737][ T28] audit: type=1326 audit(1759279316.373:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.6.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 451.479702][T10847] loop7: detected capacity change from 0 to 1024 [ 451.520567][T10847] EXT4-fs: Ignoring removed orlov option [ 451.604860][ T28] audit: type=1326 audit(1759279316.373:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.6.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 451.726409][T10847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.763085][ T28] audit: type=1326 audit(1759279316.373:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.6.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 451.789601][ T28] audit: type=1326 audit(1759279316.373:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.6.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba518eec9 code=0x7ffc0000 [ 451.835821][T10854] loop6: detected capacity change from 0 to 256 [ 451.884637][T10854] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 452.152011][T10004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.379842][T10860] capability: warning: `syz.7.1284' uses deprecated v2 capabilities in a way that may be insecure [ 452.643930][T10866] netlink: set zone limit has 8 unknown bytes [ 455.835199][ T28] audit: type=1326 audit(1759279320.963:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.068259][ T28] audit: type=1326 audit(1759279322.153:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.175659][ T28] audit: type=1326 audit(1759279322.153:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.267162][ T28] audit: type=1326 audit(1759279322.153:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.327256][ T28] audit: type=1326 audit(1759279322.153:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.374332][ T28] audit: type=1326 audit(1759279322.153:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.457512][ T28] audit: type=1326 audit(1759279322.153:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.579222][ T28] audit: type=1326 audit(1759279322.153:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.692177][ T28] audit: type=1326 audit(1759279322.153:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.729210][ T28] audit: type=1326 audit(1759279322.153:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 457.820172][ T28] audit: type=1326 audit(1759279322.153:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.7.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf5338eec9 code=0x50000 [ 459.590299][T10912] netlink: set zone limit has 8 unknown bytes [ 463.811960][T10939] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.894544][T10941] loop7: detected capacity change from 0 to 256 [ 463.993410][T10941] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 464.564919][T10952] loop6: detected capacity change from 0 to 256 [ 464.573064][T10952] exfat: Unknown parameter '"' [ 466.186809][T10964] netlink: set zone limit has 8 unknown bytes [ 466.343030][T10967] loop5: detected capacity change from 0 to 764 [ 466.408982][T10967] rock: directory entry would overflow storage [ 466.427078][T10967] rock: sig=0x4654, size=5, remaining=4 [ 466.814882][T10973] isofs: Unable to find the ".." directory for NFS. [ 467.068690][T10972] tipc: Enabling of bearer rejected, failed to enable media [ 468.971430][T10990] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 469.355253][T11001] loop7: detected capacity change from 0 to 1024 [ 469.370586][T11001] EXT4-fs: Ignoring removed i_version option [ 469.397329][T11001] EXT4-fs: inline encryption not supported [ 469.438406][T11001] EXT4-fs (loop7): Test dummy encryption mode enabled [ 469.496876][T11001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.419500][T11017] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2244: inode #15: comm syz.7.1311: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 470.541386][T11018] netlink: set zone limit has 8 unknown bytes [ 470.582232][T10004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.624003][T11024] loop6: detected capacity change from 0 to 256 [ 470.827424][T11024] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 471.490114][T11029] syzkaller0: entered promiscuous mode [ 471.495768][T11029] syzkaller0: entered allmulticast mode [ 471.645668][T11033] tipc: Enabling of bearer rejected, failed to enable media [ 471.685289][T11033] syzkaller0: entered promiscuous mode [ 471.721308][T11033] syzkaller0: entered allmulticast mode [ 473.291492][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1322'. [ 473.971228][T11062] loop5: detected capacity change from 0 to 256 [ 473.978719][T11062] exfat: Unknown parameter '"' [ 474.190790][T11061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 479.124659][T11075] loop7: detected capacity change from 0 to 1024 [ 479.469238][ T9970] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.091037][T11098] netlink: set zone limit has 8 unknown bytes [ 485.383451][T11103] tipc: Enabling of bearer rejected, failed to enable media [ 485.410929][T11103] syzkaller0: entered promiscuous mode [ 485.416658][T11103] syzkaller0: entered allmulticast mode [ 485.479982][T11105] loop5: detected capacity change from 0 to 2048 [ 485.613558][T11105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.849000][ T1105] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 485.884114][T11119] loop6: detected capacity change from 0 to 256 [ 485.944380][ T1105] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 485.954177][T11119] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 485.987589][ T1105] EXT4-fs (loop5): This should not happen!! Data will be lost [ 485.987589][ T1105] [ 486.028241][ T1105] EXT4-fs (loop5): Total free blocks count 0 [ 486.048557][ T1105] EXT4-fs (loop5): Free/Dirty block details [ 486.062991][ T1105] EXT4-fs (loop5): free_blocks=4096 [ 486.069378][T11125] loop7: detected capacity change from 0 to 256 [ 486.076902][T11125] exfat: Unknown parameter '"' [ 486.081953][ T1105] EXT4-fs (loop5): dirty_blocks=16 [ 486.099134][ T1105] EXT4-fs (loop5): Block reservation details [ 486.117877][ T1105] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 486.147110][ T8222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.147730][ T9885] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 486.646184][T11140] loop5: detected capacity change from 0 to 1024 [ 486.668033][T11140] EXT4-fs: Ignoring removed bh option [ 486.684638][T11140] EXT4-fs: Mount option(s) incompatible with ext3 [ 488.381403][T11148] netlink: set zone limit has 8 unknown bytes [ 489.280568][T11170] tipc: Enabling of bearer rejected, failed to enable media [ 491.102494][T11190] loop5: detected capacity change from 0 to 256 [ 491.110207][T11190] exfat: Unknown parameter '"' [ 492.008280][ T9885] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 493.954368][T11203] netlink: set zone limit has 8 unknown bytes [ 495.768131][T11226] tipc: Enabling of bearer rejected, failed to enable media [ 495.822359][T11224] syzkaller0: entered promiscuous mode [ 495.834421][T11224] syzkaller0: entered allmulticast mode [ 497.646988][T11243] loop7: detected capacity change from 0 to 4096 [ 497.664019][T11243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.211830][T11243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.284499][T11246] loop6: detected capacity change from 0 to 256 [ 498.292109][T11246] exfat: Unknown parameter '"' [ 499.752805][T10004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.886765][T11267] syzkaller0: entered promiscuous mode [ 500.929168][T11267] syzkaller0: entered allmulticast mode [ 502.932447][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.938823][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.181558][T11289] tipc: Enabling of bearer rejected, failed to enable media [ 503.230871][T11289] syzkaller0: entered promiscuous mode [ 503.237944][T11289] syzkaller0: entered allmulticast mode [ 503.248844][T11293] loop7: detected capacity change from 0 to 256 [ 503.256529][T11293] exfat: Unknown parameter '"' [ 505.869390][ T5780] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 506.070370][ T5780] usb 7-1: Using ep0 maxpacket: 16 [ 506.081762][ T5780] usb 7-1: config index 0 descriptor too short (expected 4495, got 71) [ 506.094232][ T5780] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 506.110419][ T5780] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.129590][ T5780] usb 7-1: config 0 has no interface number 0 [ 506.143610][ T5780] usb 7-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 506.160498][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.176904][ T5780] usb 7-1: Product: syz [ 506.181603][ T5780] usb 7-1: Manufacturer: syz [ 506.187407][ T5780] usb 7-1: SerialNumber: syz [ 506.199843][ T5780] usb 7-1: config 0 descriptor?? [ 506.451507][ T5780] usb 7-1: Found UVC 0.00 device syz (046c:14e0) [ 506.457940][ T5780] usb 7-1: No valid video chain found. [ 506.536836][ T5780] usb 7-1: USB disconnect, device number 2 [ 508.532229][T11336] loop5: detected capacity change from 0 to 764 [ 508.549647][T11336] rock: directory entry would overflow storage [ 508.558519][T11336] rock: sig=0x4654, size=5, remaining=4 [ 508.617878][T11341] loop7: detected capacity change from 0 to 256 [ 508.625416][T11341] exfat: Unknown parameter '"' [ 509.106307][T11344] isofs: Unable to find the ".." directory for NFS. [ 511.530755][T11350] tipc: Enabling of bearer rejected, failed to enable media [ 511.571223][T11350] syzkaller0: entered promiscuous mode [ 511.576766][T11350] syzkaller0: entered allmulticast mode [ 520.282020][T11415] loop5: detected capacity change from 0 to 256 [ 520.382706][T11415] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 523.946697][T11455] kvm: pic: non byte read [ 523.984002][T11455] kvm: pic: non byte read [ 523.988546][T11455] kvm: pic: non byte read [ 524.006684][T11455] kvm: pic: non byte read [ 524.034487][T11455] kvm: pic: non byte read [ 524.045957][T11455] kvm: pic: non byte read [ 524.051870][T11455] kvm: pic: non byte read [ 524.056666][T11455] kvm: pic: non byte read [ 524.336494][T11455] kvm: pic: non byte read [ 524.364989][T11455] kvm: pic: non byte read [ 526.680145][T11474] tipc: Enabling of bearer rejected, failed to enable media [ 527.646522][T11498] loop5: detected capacity change from 0 to 8 [ 527.737447][T11501] loop7: detected capacity change from 0 to 256 [ 527.746257][T11498] SQUASHFS error: Failed to read block 0x1ec: -5 [ 527.769301][T11498] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 527.822624][T11501] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 528.372452][T11517] loop6: detected capacity change from 0 to 1024 [ 528.520822][T11517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.604232][T11517] ================================================================== [ 528.613335][T11517] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 528.621458][T11517] Read of size 18446744073709551588 at addr ffff8880210b8040 by task syz.6.1413/11517 [ 528.633918][T11517] [ 528.636544][T11517] CPU: 1 PID: 11517 Comm: syz.6.1413 Not tainted syzkaller #0 [ 528.644682][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.655445][T11517] Call Trace: [ 528.658866][T11517] [ 528.662298][T11517] dump_stack_lvl+0x16c/0x230 [ 528.667935][T11517] ? read_lock_is_recursive+0x20/0x20 [ 528.674963][T11517] ? show_regs_print_info+0x20/0x20 [ 528.682243][T11517] ? load_image+0x3b0/0x3b0 [ 528.687646][T11517] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 528.693704][T11517] ? __virt_addr_valid+0x18c/0x540 [ 528.699755][T11517] ? __virt_addr_valid+0x469/0x540 [ 528.706190][T11517] print_report+0xac/0x220 [ 528.711081][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 528.716744][T11517] kasan_report+0x117/0x150 [ 528.721281][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 528.726857][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 528.733078][T11517] kasan_check_range+0x288/0x290 [ 528.738777][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 528.744764][T11517] __asan_memmove+0x29/0x70 [ 528.749488][T11517] ext4_xattr_set_entry+0x94b/0x1e90 [ 528.755096][T11517] ext4_xattr_block_set+0xae3/0x32a0 [ 528.760716][T11517] ? ext4_destroy_inode+0xe8/0x1b0 [ 528.765968][T11517] ? ext4_destroy_inode+0x1b0/0x1b0 [ 528.771400][T11517] ? proc_nr_inodes+0x230/0x230 [ 528.776281][T11517] ? do_raw_spin_unlock+0x121/0x230 [ 528.781527][T11517] ? _raw_spin_unlock+0x28/0x40 [ 528.786500][T11517] ? ext4_xattr_block_find+0x350/0x350 [ 528.792082][T11517] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 528.797836][T11517] ext4_xattr_set_handle+0x10a1/0x1290 [ 528.803325][T11517] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 528.809357][T11517] ? __ext4_journal_start_sb+0x259/0x570 [ 528.815044][T11517] ext4_xattr_set+0x22d/0x320 [ 528.820016][T11517] ? end_current_label_crit_section+0x170/0x170 [ 528.826560][T11517] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 528.832239][T11517] ? posix_xattr_acl+0x93/0xb0 [ 528.837342][T11517] ? evm_protect_xattr+0x36d/0x7a0 [ 528.842482][T11517] ? ext4_xattr_trusted_get+0x40/0x40 [ 528.848053][T11517] __vfs_setxattr+0x431/0x470 [ 528.852763][T11517] __vfs_setxattr_noperm+0x12d/0x5e0 [ 528.858072][T11517] vfs_setxattr+0x16c/0x2f0 [ 528.862696][T11517] ? xattr_permission+0x470/0x470 [ 528.868002][T11517] ? __mnt_want_write+0x223/0x2a0 [ 528.873265][T11517] ? path_setxattr+0x314/0x550 [ 528.878267][T11517] path_setxattr+0x362/0x550 [ 528.883088][T11517] ? simple_xattrs_free+0x150/0x150 [ 528.888428][T11517] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 528.894823][T11517] ? lock_chain_count+0x20/0x20 [ 528.899737][T11517] __x64_sys_lsetxattr+0xb8/0xd0 [ 528.904967][T11517] do_syscall_64+0x55/0xb0 [ 528.909409][T11517] ? clear_bhb_loop+0x40/0x90 [ 528.915164][T11517] ? clear_bhb_loop+0x40/0x90 [ 528.919889][T11517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.925909][T11517] RIP: 0033:0x7f8ba518eec9 [ 528.930352][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.950441][T11517] RSP: 002b:00007f8ba608e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 528.959149][T11517] RAX: ffffffffffffffda RBX: 00007f8ba53e5fa0 RCX: 00007f8ba518eec9 [ 528.967330][T11517] RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0 [ 528.975711][T11517] RBP: 00007f8ba5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 528.983999][T11517] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 528.992212][T11517] R13: 00007f8ba53e6038 R14: 00007f8ba53e5fa0 R15: 00007ffcca52b628 [ 529.000522][T11517] [ 529.003925][T11517] [ 529.006457][T11517] Allocated by task 11517: [ 529.011376][T11517] kasan_set_track+0x4e/0x70 [ 529.016812][T11517] __kasan_kmalloc+0x8f/0xa0 [ 529.021854][T11517] __kmalloc_node_track_caller+0xb2/0x230 [ 529.027593][T11517] kmemdup+0x2b/0x70 [ 529.031509][T11517] ext4_xattr_block_set+0x9e5/0x32a0 [ 529.036917][T11517] ext4_xattr_set_handle+0x10a1/0x1290 [ 529.042523][T11517] ext4_xattr_set+0x22d/0x320 [ 529.047477][T11517] __vfs_setxattr+0x431/0x470 [ 529.052176][T11517] __vfs_setxattr_noperm+0x12d/0x5e0 [ 529.057562][T11517] vfs_setxattr+0x16c/0x2f0 [ 529.062342][T11517] path_setxattr+0x362/0x550 [ 529.067223][T11517] __x64_sys_lsetxattr+0xb8/0xd0 [ 529.072358][T11517] do_syscall_64+0x55/0xb0 [ 529.077345][T11517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.083261][T11517] [ 529.085624][T11517] Last potentially related work creation: [ 529.091357][T11517] kasan_save_stack+0x3e/0x60 [ 529.096664][T11517] __kasan_record_aux_stack+0xaf/0xc0 [ 529.102589][T11517] kvfree_call_rcu+0xee/0x780 [ 529.108218][T11517] neigh_flush_dev+0x177/0xa80 [ 529.113190][T11517] __neigh_ifdown+0x3d/0x460 [ 529.118068][T11517] neigh_ifdown+0x1f/0x30 [ 529.122939][T11517] rt6_disable_ip+0x730/0x7a0 [ 529.127628][T11517] addrconf_ifdown+0x15e/0x1880 [ 529.132940][T11517] addrconf_notify+0x6c6/0x1010 [ 529.137892][T11517] notifier_call_chain+0x197/0x390 [ 529.143050][T11517] dev_close_many+0x297/0x400 [ 529.147750][T11517] unregister_netdevice_many_notify+0x4c1/0x1810 [ 529.154139][T11517] default_device_exit_batch+0x9cb/0xa60 [ 529.159795][T11517] cleanup_net+0x77f/0xb90 [ 529.164233][T11517] process_scheduled_works+0xa45/0x15b0 [ 529.169802][T11517] worker_thread+0xa55/0xfc0 [ 529.174412][T11517] kthread+0x2fa/0x390 [ 529.178760][T11517] ret_from_fork+0x48/0x80 [ 529.183393][T11517] ret_from_fork_asm+0x11/0x20 [ 529.188288][T11517] [ 529.190887][T11517] The buggy address belongs to the object at ffff8880210b8000 [ 529.190887][T11517] which belongs to the cache kmalloc-1k of size 1024 [ 529.205408][T11517] The buggy address is located 64 bytes inside of [ 529.205408][T11517] 1024-byte region [ffff8880210b8000, ffff8880210b8400) [ 529.218950][T11517] [ 529.221466][T11517] The buggy address belongs to the physical page: [ 529.227902][T11517] page:ffffea0000842e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x210b8 [ 529.238248][T11517] head:ffffea0000842e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 529.247285][T11517] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 529.255497][T11517] page_type: 0xffffffff() [ 529.259856][T11517] raw: 00fff00000000840 ffff888017841dc0 ffffea0000c4aa00 dead000000000002 [ 529.268808][T11517] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 529.277511][T11517] page dumped because: kasan: bad access detected [ 529.284132][T11517] page_owner tracks the page as allocated [ 529.290223][T11517] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5792, tgid 5792 (syz-executor), ts 90388195384, free_ts 90385490828 [ 529.312483][T11517] post_alloc_hook+0x1cd/0x210 [ 529.317279][T11517] get_page_from_freelist+0x195c/0x19f0 [ 529.322931][T11517] __alloc_pages+0x1e3/0x460 [ 529.327550][T11517] alloc_slab_page+0x5d/0x170 [ 529.332259][T11517] new_slab+0x87/0x2e0 [ 529.336369][T11517] ___slab_alloc+0xc6d/0x1300 [ 529.341153][T11517] __kmem_cache_alloc_node+0x1a2/0x260 [ 529.346733][T11517] __kmalloc_node_track_caller+0xa2/0x230 [ 529.352572][T11517] kmalloc_reserve+0x117/0x260 [ 529.357351][T11517] __alloc_skb+0x138/0x2c0 [ 529.361815][T11517] inet6_rt_notify+0xb4/0x240 [ 529.366681][T11517] fib6_add+0x1d9a/0x3d20 [ 529.371302][T11517] ip6_route_add+0x8a/0x130 [ 529.375905][T11517] addrconf_permanent_addr+0x659/0x980 [ 529.381535][T11517] addrconf_notify+0x996/0x1010 [ 529.386405][T11517] notifier_call_chain+0x197/0x390 [ 529.391534][T11517] page last free stack trace: [ 529.396304][T11517] free_unref_page_prepare+0x7ce/0x8e0 [ 529.401876][T11517] free_unref_page+0x32/0x2e0 [ 529.406572][T11517] __unfreeze_partials+0x1cf/0x210 [ 529.411823][T11517] put_cpu_partial+0x17c/0x250 [ 529.416608][T11517] __slab_free+0x31d/0x410 [ 529.421068][T11517] qlist_free_all+0x75/0xe0 [ 529.425766][T11517] kasan_quarantine_reduce+0x143/0x160 [ 529.431265][T11517] __kasan_slab_alloc+0x22/0x80 [ 529.436124][T11517] slab_post_alloc_hook+0x6e/0x4d0 [ 529.441338][T11517] kmem_cache_alloc_node+0x150/0x330 [ 529.446643][T11517] __alloc_skb+0x108/0x2c0 [ 529.451072][T11517] netlink_ack+0x376/0x1110 [ 529.455726][T11517] netlink_rcv_skb+0x29a/0x480 [ 529.460509][T11517] netlink_unicast+0x751/0x8d0 [ 529.465379][T11517] netlink_sendmsg+0x8c1/0xbe0 [ 529.470195][T11517] __sys_sendto+0x46a/0x620 [ 529.474808][T11517] [ 529.477141][T11517] Memory state around the buggy address: [ 529.483396][T11517] ffff8880210b7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 529.491741][T11517] ffff8880210b7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 529.499900][T11517] >ffff8880210b8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.508140][T11517] ^ [ 529.514311][T11517] ffff8880210b8080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.522387][T11517] ffff8880210b8100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 529.530660][T11517] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 529.590752][T11517] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 529.598130][T11517] CPU: 0 PID: 11517 Comm: syz.6.1413 Not tainted syzkaller #0 [ 529.605883][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 529.616600][T11517] Call Trace: [ 529.619917][T11517] [ 529.622959][T11517] dump_stack_lvl+0x16c/0x230 [ 529.627772][T11517] ? show_regs_print_info+0x20/0x20 [ 529.633020][T11517] ? load_image+0x3b0/0x3b0 [ 529.637570][T11517] panic+0x2c0/0x710 [ 529.641520][T11517] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 529.647722][T11517] ? bpf_jit_dump+0xd0/0xd0 [ 529.652463][T11517] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 529.658520][T11517] ? _raw_spin_unlock+0x40/0x40 [ 529.663424][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 529.668945][T11517] check_panic_on_warn+0x84/0xa0 [ 529.673933][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 529.679559][T11517] end_report+0x6f/0x140 [ 529.683932][T11517] kasan_report+0x128/0x150 [ 529.688476][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 529.693988][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 529.699525][T11517] kasan_check_range+0x288/0x290 [ 529.704702][T11517] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 529.710396][T11517] __asan_memmove+0x29/0x70 [ 529.715033][T11517] ext4_xattr_set_entry+0x94b/0x1e90 [ 529.720453][T11517] ext4_xattr_block_set+0xae3/0x32a0 [ 529.725784][T11517] ? ext4_destroy_inode+0xe8/0x1b0 [ 529.730936][T11517] ? ext4_destroy_inode+0x1b0/0x1b0 [ 529.736179][T11517] ? proc_nr_inodes+0x230/0x230 [ 529.741134][T11517] ? do_raw_spin_unlock+0x121/0x230 [ 529.746441][T11517] ? _raw_spin_unlock+0x28/0x40 [ 529.751394][T11517] ? ext4_xattr_block_find+0x350/0x350 [ 529.756904][T11517] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 529.762330][T11517] ext4_xattr_set_handle+0x10a1/0x1290 [ 529.767932][T11517] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 529.773937][T11517] ? __ext4_journal_start_sb+0x259/0x570 [ 529.779601][T11517] ext4_xattr_set+0x22d/0x320 [ 529.784894][T11517] ? end_current_label_crit_section+0x170/0x170 [ 529.791167][T11517] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 529.796863][T11517] ? posix_xattr_acl+0x93/0xb0 [ 529.801656][T11517] ? evm_protect_xattr+0x36d/0x7a0 [ 529.806852][T11517] ? ext4_xattr_trusted_get+0x40/0x40 [ 529.812358][T11517] __vfs_setxattr+0x431/0x470 [ 529.817072][T11517] __vfs_setxattr_noperm+0x12d/0x5e0 [ 529.822402][T11517] vfs_setxattr+0x16c/0x2f0 [ 529.827087][T11517] ? xattr_permission+0x470/0x470 [ 529.832125][T11517] ? __mnt_want_write+0x223/0x2a0 [ 529.837175][T11517] ? path_setxattr+0x314/0x550 [ 529.841969][T11517] path_setxattr+0x362/0x550 [ 529.846785][T11517] ? simple_xattrs_free+0x150/0x150 [ 529.852034][T11517] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 529.858069][T11517] ? lock_chain_count+0x20/0x20 [ 529.863823][T11517] __x64_sys_lsetxattr+0xb8/0xd0 [ 529.868779][T11517] do_syscall_64+0x55/0xb0 [ 529.873227][T11517] ? clear_bhb_loop+0x40/0x90 [ 529.877918][T11517] ? clear_bhb_loop+0x40/0x90 [ 529.882613][T11517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.888540][T11517] RIP: 0033:0x7f8ba518eec9 [ 529.892966][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.912688][T11517] RSP: 002b:00007f8ba608e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 529.921125][T11517] RAX: ffffffffffffffda RBX: 00007f8ba53e5fa0 RCX: 00007f8ba518eec9 [ 529.929329][T11517] RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0 [ 529.937319][T11517] RBP: 00007f8ba5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.945475][T11517] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 529.953552][T11517] R13: 00007f8ba53e6038 R14: 00007f8ba53e5fa0 R15: 00007ffcca52b628 [ 529.961668][T11517] [ 529.965080][T11517] Kernel Offset: disabled [ 529.969422][T11517] Rebooting in 86400 seconds..