last executing test programs: 5m13.703207933s ago: executing program 2 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x11c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5m13.490798128s ago: executing program 2 (id=412): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 5m13.229830014s ago: executing program 2 (id=416): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m12.765507156s ago: executing program 2 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 5m11.722202071s ago: executing program 32 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 5m10.006715033s ago: executing program 3 (id=435): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 5m9.629434672s ago: executing program 3 (id=437): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001200578300"/20, @ANYBLOB="000000000000000004002400140010"], 0x38}}, 0x0) 5m8.083394589s ago: executing program 3 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c085}, 0x40000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x30) 5m5.902748252s ago: executing program 3 (id=450): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 5m4.507158626s ago: executing program 3 (id=458): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) pselect6(0xfedc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) 5m3.276119926s ago: executing program 4 (id=462): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m3.096399341s ago: executing program 4 (id=463): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x18440, 0x80) fspick(r0, &(0x7f0000000340)='./file0\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x14, 0xcf0be2279761c16b) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x0) 5m1.919787119s ago: executing program 4 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x11c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5m1.801152682s ago: executing program 4 (id=468): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 5m1.625287947s ago: executing program 4 (id=469): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5m1.550399798s ago: executing program 1 (id=470): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 5m0.632496831s ago: executing program 1 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a"], 0x11c}}, 0x0) 5m0.293186169s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4c085}, 0x40000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) 5m0.25900947s ago: executing program 4 (id=475): syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m59.82225461s ago: executing program 33 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4c085}, 0x40000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) 4m59.813670591s ago: executing program 1 (id=478): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000002600)=""/4113, 0x1011) 4m59.813380571s ago: executing program 34 (id=475): syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m58.709422907s ago: executing program 1 (id=481): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 4m58.128231311s ago: executing program 1 (id=482): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x800000c}, 0x10) 4m57.612530534s ago: executing program 1 (id=484): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4m57.087469017s ago: executing program 35 (id=484): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 44.826846914s ago: executing program 6 (id=1486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xcb4, &(0x7f0000000540)={0x0, 0x69eb, 0x800, 0x2, 0x10}, &(0x7f0000000040)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x5}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 43.096749845s ago: executing program 6 (id=1493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r2, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, 0x0, 0x0, 0x4040000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 41.902553824s ago: executing program 6 (id=1497): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 38.487605697s ago: executing program 5 (id=1507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r2, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, 0x0, 0x0, 0x4040000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 37.259419947s ago: executing program 5 (id=1512): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) accept(r2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 36.867629517s ago: executing program 5 (id=1515): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 36.659989882s ago: executing program 5 (id=1517): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 35.478674771s ago: executing program 5 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x40008000) getresuid(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x294a, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ublk_chdev(0x0, 0x0, 0x381400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 34.841584916s ago: executing program 5 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, &(0x7f00000000c0)) 34.233851811s ago: executing program 36 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, &(0x7f00000000c0)) 32.265308779s ago: executing program 6 (id=1532): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 31.315542702s ago: executing program 6 (id=1535): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 27.925467166s ago: executing program 6 (id=1543): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r1, &(0x7f0000000400)='transport=loop,nqn=t', 0x14) write(r0, &(0x7f0000000000), 0x0) 27.532315905s ago: executing program 37 (id=1543): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r1, &(0x7f0000000400)='transport=loop,nqn=t', 0x14) write(r0, &(0x7f0000000000), 0x0) 15.316933299s ago: executing program 8 (id=1574): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) chdir(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000400)) 14.415634141s ago: executing program 8 (id=1576): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r5, &(0x7f0000002600)=""/4113, 0x1011) 12.896971439s ago: executing program 8 (id=1580): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 12.590277777s ago: executing program 8 (id=1582): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 11.915522824s ago: executing program 8 (id=1584): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x49400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 11.701313639s ago: executing program 8 (id=1586): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.42320141s ago: executing program 9 (id=1603): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 6.081585949s ago: executing program 9 (id=1606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xcb4, &(0x7f0000000540)={0x0, 0x69eb, 0x800, 0x2, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 4.070995959s ago: executing program 7 (id=1610): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.804500895s ago: executing program 9 (id=1611): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 3.704940218s ago: executing program 7 (id=1612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @fda={0x66646185, 0x3, 0xfffffffffffffffd, 0x30}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 3.575480621s ago: executing program 9 (id=1613): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 3.311807968s ago: executing program 7 (id=1614): socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='io\x00') socket(0x15, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@nodelalloc}, {@dioread_nolock}, {@data_err_ignore}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@dioread_lock}]}, 0x1, 0x490, &(0x7f0000000c00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0xfffffd31) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.253839849s ago: executing program 2 (id=1545): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x40008000) getresuid(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x294a, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ublk_chdev(0x0, 0x0, 0x381400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 3.188450401s ago: executing program 0 (id=1615): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 2.43175084s ago: executing program 0 (id=1616): r0 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x134}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffff, 0xe, 0x1, '\x00', 0xb}, 0x1) 2.42773649s ago: executing program 9 (id=1617): unshare(0x8000000) semget$private(0x0, 0x1, 0xf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) unshare(0x2000000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000640)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_emit_ethernet(0x22, &(0x7f00000023c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x4d}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f03f, 0x6e}) fstatfs(r0, &(0x7f0000000140)=""/160) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') 2.129567227s ago: executing program 0 (id=1618): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x2c0040, 0xe8) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.951590271s ago: executing program 7 (id=1619): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x18440, 0x80) fspick(r0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xcf0be2279761c16b) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) setxattr$security_ima(&(0x7f0000000380)='./file7\x00', &(0x7f0000000480), &(0x7f00000004c0)=@md5={0x1, "54d6e2873f2191025362e4bd38c3862c"}, 0x11, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x0) 862.221898ms ago: executing program 9 (id=1620): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xcb4, &(0x7f0000000540)={0x0, 0x69eb, 0x800, 0x2, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 542.410976ms ago: executing program 0 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 541.400776ms ago: executing program 7 (id=1622): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 366.846501ms ago: executing program 0 (id=1623): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @fda={0x66646185, 0x3, 0xfffffffffffffffd, 0x30}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 237.392074ms ago: executing program 7 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 67.818968ms ago: executing program 0 (id=1625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r2, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x4040000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 0s ago: executing program 2 (id=1626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) kernel console output (not intermixed with test programs): 00003e syscall=157 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 297.054914][ T27] audit: type=1326 audit(1806895723.779:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 297.078078][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.126506][ T8196] device syzkaller0 entered promiscuous mode [ 297.146613][ T27] audit: type=1326 audit(1806895723.779:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 297.580220][ T8208] loop8: detected capacity change from 0 to 1024 [ 297.602854][ T8205] loop5: detected capacity change from 0 to 512 [ 297.609850][ T8205] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.617890][ T8205] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 298.131680][ T8205] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2921: inode #15: comm syz.5.1048: corrupted xattr block 252 [ 298.149408][ T8205] EXT4-fs (loop5): Remounting filesystem read-only [ 298.156029][ T8205] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 298.166173][ T8205] EXT4-fs (loop5): 1 orphan inode deleted [ 298.172404][ T8205] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 298.684694][ T8215] syz.7.1050 (8215) used greatest stack depth: 18000 bytes left [ 298.720407][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 298.801200][ T8208] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 299.261127][ T27] audit: type=1326 audit(1807420014.877:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.1055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4379e159 code=0x7ffc0000 [ 299.285312][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.552416][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 299.841823][ T27] audit: type=1326 audit(1807420014.887:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.5.1055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdd4379e159 code=0x7ffc0000 [ 299.865844][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.013912][ T8236] loop7: detected capacity change from 0 to 256 [ 300.084499][ T27] audit: type=1326 audit(1807420014.887:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4379e159 code=0x7ffc0000 [ 300.084802][ T8236] FAT-fs (loop7): Directory bread(block 1285) failed [ 300.107636][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.214320][ T8242] device syzkaller0 entered promiscuous mode [ 300.237380][ T27] audit: type=1326 audit(1807420014.887:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4379e159 code=0x7ffc0000 [ 300.278680][ T8236] FAT-fs (loop7): Directory bread(block 1286) failed [ 300.329883][ T5954] nvmet: connect request for invalid subsystem t! [ 300.329924][ T8236] FAT-fs (loop7): Directory bread(block 1287) failed [ 300.340242][ T8234] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 301.228205][ T8236] FAT-fs (loop7): Directory bread(block 1288) failed [ 301.242540][ T8248] Set syz1 is full, maxelem 65536 reached [ 302.253141][ T8260] FAT-fs (loop7): Directory bread(block 1285) failed [ 302.260680][ T8260] FAT-fs (loop7): Directory bread(block 1286) failed [ 302.267592][ T8260] FAT-fs (loop7): Directory bread(block 1287) failed [ 302.274372][ T8260] FAT-fs (loop7): Directory bread(block 1288) failed [ 302.281171][ T8260] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 303.356105][ T8275] loop5: detected capacity change from 0 to 1024 [ 303.377474][ T27] audit: type=1326 audit(1807420018.976:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.1067" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 303.401613][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.778785][ T27] audit: type=1326 audit(1807420018.976:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.0.1067" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 303.863321][ T8281] loop8: detected capacity change from 0 to 1024 [ 303.906766][ T8275] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 303.967183][ T27] audit: type=1326 audit(1807420018.976:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 303.990396][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.055777][ T8281] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 304.157494][ T27] audit: type=1326 audit(1807420018.976:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 304.378273][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 305.533602][ T8310] Set syz1 is full, maxelem 65536 reached [ 307.303899][ T8338] loop7: detected capacity change from 0 to 256 [ 307.366807][ T8338] FAT-fs (loop7): Directory bread(block 1285) failed [ 307.401022][ T8338] FAT-fs (loop7): Directory bread(block 1286) failed [ 307.411346][ T8342] loop6: detected capacity change from 0 to 1024 [ 307.446319][ T8338] FAT-fs (loop7): Directory bread(block 1287) failed [ 307.485027][ T8338] FAT-fs (loop7): Directory bread(block 1288) failed [ 307.551402][ T8342] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 308.188191][ T8353] Set syz1 is full, maxelem 65536 reached [ 308.243031][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 308.799645][ T8368] loop6: detected capacity change from 0 to 1024 [ 308.834457][ T8369] FAT-fs (loop7): Directory bread(block 1285) failed [ 308.841264][ T8369] FAT-fs (loop7): Directory bread(block 1286) failed [ 308.848106][ T8369] FAT-fs (loop7): Directory bread(block 1287) failed [ 308.854907][ T8369] FAT-fs (loop7): Directory bread(block 1288) failed [ 308.861841][ T8369] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 308.942477][ T8368] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 309.093448][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 309.340153][ T4351] nvmet: connect request for invalid subsystem t! [ 309.348004][ T8377] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 309.515753][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 309.551376][ T8385] loop6: detected capacity change from 0 to 512 [ 309.558530][ T8385] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.567450][ T8385] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 309.622310][ T8385] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2921: inode #15: comm syz.6.1093: corrupted xattr block 252 [ 309.634994][ T8385] EXT4-fs (loop6): Remounting filesystem read-only [ 309.641593][ T8385] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 309.650799][ T8385] EXT4-fs (loop6): 1 orphan inode deleted [ 309.656552][ T8385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 310.037515][ T8401] device syzkaller0 entered promiscuous mode [ 310.209913][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 310.616513][ T8407] Set syz1 is full, maxelem 65536 reached [ 311.319126][ T8414] loop8: detected capacity change from 0 to 1024 [ 311.374331][ T8416] tipc: Failed to remove unknown binding: 66,1,1/0:4037316363/4037316365 [ 311.406737][ T8416] tipc: Failed to remove unknown binding: 66,1,1/0:4037316363/4037316365 [ 311.418445][ T8414] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 311.497121][ T8421] loop5: detected capacity change from 0 to 1024 [ 311.561165][ T8421] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 311.700531][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 311.774832][ T4284] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 311.899555][ T8441] loop8: detected capacity change from 0 to 1024 [ 311.951755][ T8441] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 312.108603][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 312.835004][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.856252][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.874012][ T4322] nvmet: connect request for invalid subsystem t! [ 312.927609][ T8433] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 313.171494][ T8456] device syzkaller0 entered promiscuous mode [ 314.120814][ T8461] Set syz1 is full, maxelem 65536 reached [ 314.489236][ T8476] tipc: Failed to remove unknown binding: 66,1,1/0:1434509036/1434509038 [ 314.542786][ T8478] tipc: Failed to remove unknown binding: 66,1,1/0:1434509036/1434509038 [ 314.700060][ T8484] loop8: detected capacity change from 0 to 1024 [ 314.782691][ T8484] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 314.949952][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 315.530691][ T8502] Set syz1 is full, maxelem 65536 reached [ 316.183892][ T8509] device syzkaller0 entered promiscuous mode [ 316.788257][ T8526] loop8: detected capacity change from 0 to 1024 [ 316.798056][ T8528] tipc: Failed to remove unknown binding: 66,1,1/0:2733917025/2733917027 [ 316.817130][ T8528] tipc: Failed to remove unknown binding: 66,1,1/0:2733917025/2733917027 [ 316.826589][ T8531] binder: 8529:8531 ioctl c0306201 0 returned -14 [ 316.870270][ T8526] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 316.954320][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 317.322293][ T4322] nvmet: connect request for invalid subsystem t! [ 317.332082][ T8546] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 317.882962][ T8562] device syzkaller0 entered promiscuous mode [ 317.939073][ T8564] loop6: detected capacity change from 0 to 256 [ 317.959782][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 317.986753][ T8564] FAT-fs (loop6): Directory bread(block 1285) failed [ 318.016170][ T8564] FAT-fs (loop6): Directory bread(block 1286) failed [ 318.022940][ T8564] FAT-fs (loop6): Directory bread(block 1287) failed [ 318.128442][ T8564] FAT-fs (loop6): Directory bread(block 1288) failed [ 318.880536][ T8576] loop5: detected capacity change from 0 to 1024 [ 319.094636][ T8576] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 319.424186][ T8584] FAT-fs (loop6): Directory bread(block 1285) failed [ 319.431116][ T8584] FAT-fs (loop6): Directory bread(block 1286) failed [ 319.438138][ T8584] FAT-fs (loop6): Directory bread(block 1287) failed [ 319.444941][ T8584] FAT-fs (loop6): Directory bread(block 1288) failed [ 319.451831][ T8584] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 320.197057][ T8606] binder: 8602:8606 ioctl c0306201 0 returned -14 [ 320.251121][ T4318] nvmet: connect request for invalid subsystem t! [ 320.264318][ T8598] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 320.588845][ T8615] loop8: detected capacity change from 0 to 1024 [ 320.643007][ T8615] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 321.008247][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 321.833356][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 321.964524][ T8647] tipc: Failed to remove unknown binding: 66,1,1/0:4132571422/4132571424 [ 322.214598][ T27] audit: type=1326 audit(1808992902.398:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.6.1168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f679619e159 code=0x0 [ 322.238147][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.925666][ T7777] nvmet: connect request for invalid subsystem t! [ 322.937677][ T8654] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 323.014449][ T8663] loop7: detected capacity change from 0 to 1024 [ 323.261345][ T8663] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 323.353786][ T8664] Set syz1 is full, maxelem 65536 reached [ 323.589539][ T8674] loop8: detected capacity change from 0 to 256 [ 323.632094][ T8674] FAT-fs (loop8): Directory bread(block 1285) failed [ 323.653635][ T8674] FAT-fs (loop8): Directory bread(block 1286) failed [ 323.699692][ T8674] FAT-fs (loop8): Directory bread(block 1287) failed [ 323.734977][ T8674] FAT-fs (loop8): Directory bread(block 1288) failed [ 324.170000][ T8685] loop6: detected capacity change from 0 to 1024 [ 324.322282][ T8685] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 325.681942][ T8705] device syzkaller0 entered promiscuous mode [ 325.753238][ T8706] FAT-fs (loop8): Directory bread(block 1285) failed [ 325.789898][ T8706] FAT-fs (loop8): Directory bread(block 1286) failed [ 326.145508][ T8706] FAT-fs (loop8): Directory bread(block 1287) failed [ 326.196840][ T8706] FAT-fs (loop8): Directory bread(block 1288) failed [ 326.275198][ T8706] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 326.331920][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 326.983035][ T8731] Set syz1 is full, maxelem 65536 reached [ 326.988829][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 328.498130][ T8753] device syzkaller0 entered promiscuous mode [ 329.679415][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 330.164536][ T8792] loop7: detected capacity change from 0 to 1024 [ 330.414266][ T8792] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 330.558245][ T8802] Set syz1 is full, maxelem 65536 reached [ 330.645258][ T8805] loop6: detected capacity change from 0 to 512 [ 330.664001][ T8805] EXT4-fs: inline encryption not supported [ 330.703305][ T8805] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 330.760825][ T8805] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1205: corrupted inode contents [ 330.877808][ T8805] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.1205: mark_inode_dirty error [ 330.943243][ T8805] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1205: corrupted inode contents [ 330.983986][ T8805] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.1205: mark_inode_dirty error [ 331.065557][ T8805] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2953: inode #15: comm syz.6.1205: mark inode dirty (error -117) [ 331.129119][ T8805] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 331.154248][ T8805] EXT4-fs (loop6): 1 orphan inode deleted [ 331.170290][ T8805] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 331.176638][ T8820] device syzkaller0 entered promiscuous mode [ 331.291988][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 331.551080][ T4290] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 332.600300][ T8851] process 'syz.5.1215' launched './file0' with NULL argv: empty string added [ 332.917931][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 333.035580][ T8858] loop8: detected capacity change from 0 to 1024 [ 333.137560][ T8858] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 333.409184][ T8876] device syzkaller0 entered promiscuous mode [ 333.428864][ T8872] loop5: detected capacity change from 0 to 512 [ 333.482327][ T8872] EXT4-fs: inline encryption not supported [ 333.533177][ T8872] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 333.584669][ T8872] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1219: corrupted inode contents [ 333.624349][ T8872] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1219: mark_inode_dirty error [ 333.640253][ T8872] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1219: corrupted inode contents [ 333.661343][ T8872] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.1219: mark_inode_dirty error [ 333.674221][ T8872] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2953: inode #15: comm syz.5.1219: mark inode dirty (error -117) [ 333.694192][ T8872] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 333.716673][ T8872] EXT4-fs (loop5): 1 orphan inode deleted [ 333.735192][ T8872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 333.887909][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 334.014148][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 334.025544][ T4290] CPU: 0 PID: 4290 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 334.033126][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.043195][ T4290] Workqueue: hci1 hci_rx_work [ 334.047909][ T4290] Call Trace: [ 334.051198][ T4290] [ 334.054141][ T4290] dump_stack_lvl+0x188/0x24e [ 334.058851][ T4290] ? show_regs_print_info+0x12/0x12 [ 334.064080][ T4290] ? load_image+0x410/0x410 [ 334.068624][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 334.073761][ T4290] ? __lock_acquire+0x7c40/0x7c40 [ 334.078815][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 334.083519][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 334.088741][ T4290] kobject_add_internal+0x617/0xca0 [ 334.093969][ T4290] kobject_add+0x160/0x230 [ 334.098414][ T4290] ? kobject_init+0x1c0/0x1c0 [ 334.103120][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 334.108454][ T4290] ? klist_children_get+0x50/0x50 [ 334.113514][ T4290] ? get_device_parent+0x121/0x3e0 [ 334.118659][ T4290] device_add+0x470/0x1050 [ 334.123117][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 334.128088][ T4290] le_conn_complete_evt+0xfac/0x15c0 [ 334.133407][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 334.139680][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 334.145339][ T4290] ? mutex_unlock+0x10/0x10 [ 334.149857][ T4290] ? skb_pull_data+0xec/0x1f0 [ 334.154560][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 334.160145][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 334.166234][ T4290] hci_event_packet+0x7b3/0x1290 [ 334.171197][ T4290] ? lock_chain_count+0x20/0x20 [ 334.176076][ T4290] ? hci_conn_valid+0x220/0x220 [ 334.180941][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 334.186862][ T4290] ? kcov_remote_start+0x50f/0x810 [ 334.191995][ T4290] ? lockdep_hardirqs_on+0x94/0x140 [ 334.197217][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 334.202448][ T4290] hci_rx_work+0x3eb/0xd40 [ 334.206899][ T4290] ? process_one_work+0x7b4/0x1160 [ 334.212035][ T4290] process_one_work+0x8ab/0x1160 [ 334.217013][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 334.222672][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 334.227730][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 334.233303][ T4290] ? wq_worker_running+0x97/0x190 [ 334.238366][ T4290] worker_thread+0xaf5/0x12a0 [ 334.243080][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 334.249010][ T4290] kthread+0x29d/0x330 [ 334.253098][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 334.258144][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 334.262751][ T4290] ret_from_fork+0x1f/0x30 [ 334.267212][ T4290] [ 334.272211][ T4290] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 334.286573][ T4290] Bluetooth: hci1: failed to register connection device [ 335.805800][ T8926] device syzkaller0 entered promiscuous mode [ 336.518422][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 336.755396][ T8938] loop7: detected capacity change from 0 to 512 [ 336.790304][ T8938] EXT4-fs: inline encryption not supported [ 337.106902][ T8941] Set syz1 is full, maxelem 65536 reached [ 337.179967][ T8938] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 337.212306][ T8938] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1232: corrupted inode contents [ 337.224954][ T8938] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1232: mark_inode_dirty error [ 337.239739][ T8938] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1232: corrupted inode contents [ 337.255026][ T8938] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1232: mark_inode_dirty error [ 337.270666][ T8938] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1232: mark inode dirty (error -117) [ 337.284191][ T8938] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 337.293629][ T8938] EXT4-fs (loop7): 1 orphan inode deleted [ 337.299503][ T8938] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 337.317274][ T8946] loop6: detected capacity change from 0 to 256 [ 337.352438][ T8946] FAT-fs (loop6): Directory bread(block 1285) failed [ 337.381958][ T8946] FAT-fs (loop6): Directory bread(block 1286) failed [ 337.405529][ T8946] FAT-fs (loop6): Directory bread(block 1287) failed [ 337.418565][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 337.421489][ T8946] FAT-fs (loop6): Directory bread(block 1288) failed [ 338.838632][ T8965] binder: BINDER_SET_CONTEXT_MGR already set [ 338.865789][ T8965] binder: 8963:8965 ioctl 4018620d 200000004a80 returned -16 [ 339.207054][ T8977] FAT-fs (loop6): Directory bread(block 1285) failed [ 339.274621][ T8977] FAT-fs (loop6): Directory bread(block 1286) failed [ 339.322080][ T8978] loop7: detected capacity change from 0 to 1024 [ 339.350487][ T8977] FAT-fs (loop6): Directory bread(block 1287) failed [ 339.357275][ T8977] FAT-fs (loop6): Directory bread(block 1288) failed [ 339.365638][ T8989] loop5: detected capacity change from 0 to 512 [ 339.385990][ T8987] device syzkaller0 entered promiscuous mode [ 339.415959][ T8989] EXT4-fs: inline encryption not supported [ 339.431149][ T8977] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 339.498092][ T8978] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 339.665824][ T8989] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 339.697138][ T8989] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1246: corrupted inode contents [ 339.773319][ T8989] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1246: mark_inode_dirty error [ 339.785514][ T8989] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1246: corrupted inode contents [ 340.145429][ T9000] Set syz1 is full, maxelem 65536 reached [ 340.188438][ T8989] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.1246: mark_inode_dirty error [ 340.200843][ T8989] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2953: inode #15: comm syz.5.1246: mark inode dirty (error -117) [ 340.276314][ T8989] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 340.354540][ T8989] EXT4-fs (loop5): 1 orphan inode deleted [ 340.384190][ T8989] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 340.564695][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 340.840769][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 341.099182][ T9024] loop5: detected capacity change from 0 to 512 [ 341.524284][ T9024] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 341.940649][ T9024] EXT4-fs (loop5): 1 truncate cleaned up [ 341.973900][ T9024] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 342.110377][ T9024] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 342.427949][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 342.739335][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 343.326478][ T9056] Set syz1 is full, maxelem 65536 reached [ 343.689154][ T9069] loop5: detected capacity change from 0 to 512 [ 343.719664][ T9069] EXT4-fs: inline encryption not supported [ 343.748509][ T9069] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 343.912519][ T9069] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1260: corrupted inode contents [ 343.925726][ T9069] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1260: mark_inode_dirty error [ 343.949250][ T9069] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1260: corrupted inode contents [ 343.963295][ T9069] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.1260: mark_inode_dirty error [ 343.990165][ T9069] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2953: inode #15: comm syz.5.1260: mark inode dirty (error -117) [ 344.014951][ T9069] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 344.056160][ T9069] EXT4-fs (loop5): 1 orphan inode deleted [ 344.071162][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.079867][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.088266][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.096608][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.104991][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.113358][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.121754][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.130135][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.138510][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.146882][ T9079] tc action pedit unable to extract header offset for header type (0x5) [ 344.155284][ T9079] 0: reclassify loop, rule prio 0, protocol 800 [ 344.167572][ T9069] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 344.216838][ T9084] loop6: detected capacity change from 0 to 256 [ 344.278356][ T9084] FAT-fs (loop6): Directory bread(block 1285) failed [ 344.326892][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 344.335465][ T9084] FAT-fs (loop6): Directory bread(block 1286) failed [ 344.378204][ T9084] FAT-fs (loop6): Directory bread(block 1287) failed [ 344.389804][ T9084] FAT-fs (loop6): Directory bread(block 1288) failed [ 344.757441][ T9093] FAT-fs (loop6): Directory bread(block 1285) failed [ 344.764282][ T9093] FAT-fs (loop6): Directory bread(block 1286) failed [ 344.771140][ T9093] FAT-fs (loop6): Directory bread(block 1287) failed [ 344.778009][ T9093] FAT-fs (loop6): Directory bread(block 1288) failed [ 344.785255][ T9093] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 346.102477][ T9107] loop6: detected capacity change from 0 to 1024 [ 346.216369][ T9107] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 346.934285][ T9124] Set syz1 is full, maxelem 65536 reached [ 347.442515][ T9138] loop8: detected capacity change from 0 to 512 [ 347.478902][ T9138] EXT4-fs: inline encryption not supported [ 347.507766][ T9138] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 347.569305][ T9138] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1277: corrupted inode contents [ 347.655165][ T9138] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #15: comm syz.8.1277: mark_inode_dirty error [ 347.734797][ T9138] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1277: corrupted inode contents [ 347.995450][ T9138] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2950: inode #15: comm syz.8.1277: mark_inode_dirty error [ 348.745384][ T9138] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2953: inode #15: comm syz.8.1277: mark inode dirty (error -117) [ 348.811637][ T9138] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 348.851406][ T9138] EXT4-fs (loop8): 1 orphan inode deleted [ 348.857394][ T9138] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 349.031796][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 349.442624][ T9162] Set syz1 is full, maxelem 65536 reached [ 350.004906][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 350.417308][ T9179] loop5: detected capacity change from 0 to 1024 [ 350.438345][ T9177] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 350.498007][ T9177] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 350.505407][ T9179] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 350.726101][ T9189] loop8: detected capacity change from 0 to 256 [ 350.785640][ T9189] FAT-fs (loop8): Directory bread(block 1285) failed [ 350.812576][ T9189] FAT-fs (loop8): Directory bread(block 1286) failed [ 350.842376][ T9189] FAT-fs (loop8): Directory bread(block 1287) failed [ 350.884902][ T9189] FAT-fs (loop8): Directory bread(block 1288) failed [ 351.206383][ T9195] FAT-fs (loop8): Directory bread(block 1285) failed [ 351.213317][ T9195] FAT-fs (loop8): Directory bread(block 1286) failed [ 351.220194][ T9195] FAT-fs (loop8): Directory bread(block 1287) failed [ 351.227006][ T9195] FAT-fs (loop8): Directory bread(block 1288) failed [ 351.234389][ T9195] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 351.855421][ T9207] loop6: detected capacity change from 0 to 512 [ 351.917055][ T9207] EXT4-fs: inline encryption not supported [ 351.988249][ T9207] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 352.000506][ T9207] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1294: corrupted inode contents [ 352.022822][ T9207] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.1294: mark_inode_dirty error [ 352.034677][ T9207] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1294: corrupted inode contents [ 352.047425][ T9207] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.1294: mark_inode_dirty error [ 352.065655][ T9207] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2953: inode #15: comm syz.6.1294: mark inode dirty (error -117) [ 352.160743][ T9207] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 352.210007][ T9207] EXT4-fs (loop6): 1 orphan inode deleted [ 352.301140][ T9220] loop8: detected capacity change from 0 to 1024 [ 352.307666][ T9207] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 353.137171][ T9220] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 353.664013][ T9234] Set syz1 is full, maxelem 65536 reached [ 353.704901][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 353.899397][ T9242] netlink: 'syz.6.1298': attribute type 4 has an invalid length. [ 354.209795][ T9247] netlink: 'syz.6.1298': attribute type 4 has an invalid length. [ 354.923720][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 354.933331][ T4284] CPU: 0 PID: 4284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 354.940900][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.950966][ T4284] Workqueue: hci2 hci_rx_work [ 354.955658][ T4284] Call Trace: [ 354.958932][ T4284] [ 354.961856][ T4284] dump_stack_lvl+0x188/0x24e [ 354.966540][ T4284] ? show_regs_print_info+0x12/0x12 [ 354.971747][ T4284] ? load_image+0x410/0x410 [ 354.976264][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 354.981379][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 354.986411][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 354.991091][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 354.996285][ T4284] kobject_add_internal+0x617/0xca0 [ 355.001499][ T4284] kobject_add+0x160/0x230 [ 355.005925][ T4284] ? kobject_init+0x1c0/0x1c0 [ 355.010601][ T4284] ? __raw_spin_lock_init+0x41/0x100 [ 355.015883][ T4284] ? klist_children_get+0x50/0x50 [ 355.020910][ T4284] ? get_device_parent+0x121/0x3e0 [ 355.026030][ T4284] device_add+0x470/0x1050 [ 355.030455][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 355.035401][ T4284] le_conn_complete_evt+0xfac/0x15c0 [ 355.040700][ T4284] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 355.047217][ T4284] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 355.052848][ T4284] ? mutex_unlock+0x10/0x10 [ 355.057372][ T4284] ? skb_pull_data+0xec/0x1f0 [ 355.062047][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 355.067600][ T4284] ? hci_remote_host_features_evt+0x230/0x230 [ 355.073663][ T4284] hci_event_packet+0x7b3/0x1290 [ 355.078599][ T4284] ? lock_chain_count+0x20/0x20 [ 355.083451][ T4284] ? hci_conn_valid+0x220/0x220 [ 355.088293][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 355.094188][ T4284] ? kcov_remote_start+0x50f/0x810 [ 355.099300][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 355.104499][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 355.109703][ T4284] hci_rx_work+0x3eb/0xd40 [ 355.114127][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 355.118980][ T4284] ? process_one_work+0x7b4/0x1160 [ 355.124087][ T4284] process_one_work+0x8ab/0x1160 [ 355.129036][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 355.134667][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 355.139692][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 355.145241][ T4284] ? wq_worker_running+0x97/0x190 [ 355.150278][ T4284] worker_thread+0xaf5/0x12a0 [ 355.154979][ T4284] kthread+0x29d/0x330 [ 355.159041][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 355.164062][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 355.168645][ T4284] ret_from_fork+0x1f/0x30 [ 355.173069][ T4284] [ 355.177547][ T4284] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 355.191361][ T4284] Bluetooth: hci2: failed to register connection device [ 355.572488][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 355.766579][ T9266] loop5: detected capacity change from 0 to 256 [ 355.809177][ T9266] FAT-fs (loop5): Directory bread(block 1285) failed [ 355.835983][ T9266] FAT-fs (loop5): Directory bread(block 1286) failed [ 355.843377][ T9266] FAT-fs (loop5): Directory bread(block 1287) failed [ 355.860615][ T9266] FAT-fs (loop5): Directory bread(block 1288) failed [ 356.098448][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 356.177770][ T9272] FAT-fs (loop5): Directory bread(block 1285) failed [ 356.184719][ T9272] FAT-fs (loop5): Directory bread(block 1286) failed [ 356.191594][ T9272] FAT-fs (loop5): Directory bread(block 1287) failed [ 356.198475][ T9272] FAT-fs (loop5): Directory bread(block 1288) failed [ 356.205882][ T9272] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 357.487097][ T4284] Bluetooth: hci2: command 0x2016 tx timeout [ 357.605090][ T9288] nvme_fabrics: unknown parameter or missing value 'transport=' in ctrl creation request [ 357.628131][ T9285] loop8: detected capacity change from 0 to 512 [ 357.676093][ T9285] EXT4-fs: inline encryption not supported [ 357.736408][ T9285] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 357.823757][ T9285] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1308: corrupted inode contents [ 357.901814][ T9285] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #15: comm syz.8.1308: mark_inode_dirty error [ 357.949878][ T9285] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1308: corrupted inode contents [ 357.966477][ T9303] loop6: detected capacity change from 0 to 1024 [ 357.984163][ T9285] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2950: inode #15: comm syz.8.1308: mark_inode_dirty error [ 358.039377][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 358.048939][ T4284] CPU: 0 PID: 4284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 358.056506][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.066578][ T4284] Workqueue: hci2 hci_rx_work [ 358.071287][ T4284] Call Trace: [ 358.074579][ T4284] [ 358.077526][ T4284] dump_stack_lvl+0x188/0x24e [ 358.082247][ T4284] ? show_regs_print_info+0x12/0x12 [ 358.087478][ T4284] ? load_image+0x410/0x410 [ 358.092023][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 358.097165][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 358.102217][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 358.106941][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 358.112161][ T4284] kobject_add_internal+0x617/0xca0 [ 358.114592][ T9303] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 358.117371][ T4284] kobject_add+0x160/0x230 [ 358.117405][ T4284] ? kobject_init+0x1c0/0x1c0 [ 358.117430][ T4284] ? __raw_spin_lock_init+0x41/0x100 [ 358.140213][ T4284] ? klist_children_get+0x50/0x50 [ 358.145278][ T4284] ? get_device_parent+0x121/0x3e0 [ 358.150427][ T4284] device_add+0x470/0x1050 [ 358.154869][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 358.159821][ T4284] le_conn_complete_evt+0xfac/0x15c0 [ 358.165119][ T4284] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 358.171363][ T4284] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 358.176993][ T4284] ? mutex_unlock+0x10/0x10 [ 358.181492][ T4284] ? skb_pull_data+0xec/0x1f0 [ 358.186164][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 358.191715][ T4284] ? hci_remote_host_features_evt+0x230/0x230 [ 358.197781][ T4284] hci_event_packet+0x7b3/0x1290 [ 358.202717][ T4284] ? lock_chain_count+0x20/0x20 [ 358.207568][ T4284] ? hci_conn_valid+0x220/0x220 [ 358.212411][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 358.218307][ T4284] ? kcov_remote_start+0x50f/0x810 [ 358.223413][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 358.228609][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 358.233812][ T4284] hci_rx_work+0x3eb/0xd40 [ 358.238233][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 358.243090][ T4284] ? process_one_work+0x7b4/0x1160 [ 358.248202][ T4284] process_one_work+0x8ab/0x1160 [ 358.253154][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 358.258787][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 358.263809][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 358.269355][ T4284] ? wq_worker_running+0x97/0x190 [ 358.274392][ T4284] worker_thread+0xaf5/0x12a0 [ 358.279091][ T4284] kthread+0x29d/0x330 [ 358.283154][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 358.288171][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 358.292754][ T4284] ret_from_fork+0x1f/0x30 [ 358.297179][ T4284] [ 358.308553][ T4284] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 358.321966][ T4284] Bluetooth: hci2: failed to register connection device [ 358.375962][ T9285] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2953: inode #15: comm syz.8.1308: mark inode dirty (error -117) [ 358.487100][ T9285] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 358.541997][ T9285] EXT4-fs (loop8): 1 orphan inode deleted [ 358.592555][ T9285] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 358.800096][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 359.120822][ T9322] loop7: detected capacity change from 0 to 1024 [ 359.299443][ T9327] siw: device registration error -23 [ 359.342569][ T9322] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 360.304847][ T4284] Bluetooth: hci2: command 0x2016 tx timeout [ 360.671846][ T9300] Set syz1 is full, maxelem 65536 reached [ 361.124914][ T9354] nvme_fabrics: unknown parameter or missing value 'transport=' in ctrl creation request [ 361.427829][ T9363] netlink: 'syz.0.1328': attribute type 4 has an invalid length. [ 361.470697][ T9367] loop8: detected capacity change from 0 to 512 [ 361.516904][ T9367] EXT4-fs: inline encryption not supported [ 361.717380][ T9367] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 361.810431][ T9367] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1327: corrupted inode contents [ 361.876454][ T9373] netlink: 'syz.0.1328': attribute type 4 has an invalid length. [ 361.904362][ T9367] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #15: comm syz.8.1327: mark_inode_dirty error [ 361.955388][ T9367] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1327: corrupted inode contents [ 362.007909][ T9367] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2950: inode #15: comm syz.8.1327: mark_inode_dirty error [ 362.050702][ T9367] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2953: inode #15: comm syz.8.1327: mark inode dirty (error -117) [ 362.107695][ T9367] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 362.147543][ T9367] EXT4-fs (loop8): 1 orphan inode deleted [ 362.173751][ T9367] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 362.399318][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 362.529233][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 362.768656][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 362.806302][ T9388] loop8: detected capacity change from 0 to 256 [ 362.872220][ T9388] FAT-fs (loop8): Directory bread(block 1285) failed [ 362.911150][ T9388] FAT-fs (loop8): Directory bread(block 1286) failed [ 362.936591][ T9388] FAT-fs (loop8): Directory bread(block 1287) failed [ 362.953632][ T9388] FAT-fs (loop8): Directory bread(block 1288) failed [ 363.327456][ T27] audit: type=1326 audit(1812662960.528:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm="syz.7.1334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 363.533473][ T9398] FAT-fs (loop8): Directory bread(block 1285) failed [ 363.540249][ T9398] FAT-fs (loop8): Directory bread(block 1286) failed [ 363.547024][ T9398] FAT-fs (loop8): Directory bread(block 1287) failed [ 363.553775][ T9398] FAT-fs (loop8): Directory bread(block 1288) failed [ 363.560824][ T9398] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 363.843999][ T27] audit: type=1326 audit(1812662960.528:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm="syz.7.1334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 363.868002][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.881027][ T27] audit: type=1326 audit(1812662960.528:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 363.997330][ T27] audit: type=1326 audit(1812662960.528:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 364.795850][ T9421] nvme_fabrics: unknown parameter or missing value 'transport=' in ctrl creation request [ 365.112512][ T9426] loop7: detected capacity change from 0 to 512 [ 365.150281][ T9426] EXT4-fs: inline encryption not supported [ 365.210445][ T9426] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 365.381567][ T9426] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1341: corrupted inode contents [ 365.412828][ T9409] Set syz1 is full, maxelem 65536 reached [ 365.448438][ T9436] loop8: detected capacity change from 0 to 1024 [ 365.509132][ T9426] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1341: mark_inode_dirty error [ 365.547378][ T9426] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1341: corrupted inode contents [ 365.571587][ T9436] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 365.620565][ T9426] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1341: mark_inode_dirty error [ 365.643591][ T9426] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1341: mark inode dirty (error -117) [ 365.662845][ T9426] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 365.689195][ T9426] EXT4-fs (loop7): 1 orphan inode deleted [ 365.724886][ T9426] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 365.929693][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 369.876277][ T9486] nvme_fabrics: missing parameter 'nqn=%s' [ 370.307584][ T9496] loop7: detected capacity change from 0 to 512 [ 370.326815][ T9496] EXT4-fs: inline encryption not supported [ 370.390958][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 370.443623][ T9496] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 370.495612][ T9496] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1355: corrupted inode contents [ 370.966697][ T9496] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1355: mark_inode_dirty error [ 371.137499][ T9496] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1355: corrupted inode contents [ 371.239403][ T9496] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1355: mark_inode_dirty error [ 371.291788][ T9496] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1355: mark inode dirty (error -117) [ 371.344366][ T9496] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 371.356504][ T9511] syz.0.1358 uses obsolete (PF_INET,SOCK_PACKET) [ 371.382836][ T9496] EXT4-fs (loop7): 1 orphan inode deleted [ 371.399654][ T9496] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 371.620072][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 371.805998][ T9521] loop7: detected capacity change from 0 to 1024 [ 371.929214][ T9521] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 372.555544][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.562168][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.768036][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 374.146952][ T9515] Set syz1 is full, maxelem 65536 reached [ 374.500188][ T9550] loop5: detected capacity change from 0 to 1024 [ 374.677577][ T9550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 374.690716][ T9543] nvme_fabrics: missing parameter 'nqn=%s' [ 375.787296][ T9567] loop7: detected capacity change from 0 to 512 [ 375.868856][ T9567] EXT4-fs: inline encryption not supported [ 376.348030][ T9567] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 376.716112][ T9567] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1370: corrupted inode contents [ 376.847940][ T9567] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1370: mark_inode_dirty error [ 376.962378][ T9567] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1370: corrupted inode contents [ 377.073632][ T9567] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1370: mark_inode_dirty error [ 377.156228][ T9567] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1370: mark inode dirty (error -117) [ 377.230398][ T9567] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 377.329542][ T9567] EXT4-fs (loop7): 1 orphan inode deleted [ 377.354141][ T9567] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 377.536537][ T9586] loop8: detected capacity change from 0 to 1024 [ 377.641539][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 377.673008][ T9586] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 378.167650][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 378.394817][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 378.673747][ T9606] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 380.081141][ T9613] nvme_fabrics: missing parameter 'nqn=%s' [ 380.094916][ T9613] FAULT_INJECTION: forcing a failure. [ 380.094916][ T9613] name fail_futex, interval 1, probability 0, space 0, times 0 [ 380.523803][ T9613] CPU: 1 PID: 9613 Comm: syz.8.1380 Not tainted syzkaller #0 [ 380.531227][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.541287][ T9613] Call Trace: [ 380.544568][ T9613] [ 380.547509][ T9613] dump_stack_lvl+0x188/0x24e [ 380.552203][ T9613] ? lock_chain_count+0x20/0x20 [ 380.557066][ T9613] ? show_regs_print_info+0x12/0x12 [ 380.562276][ T9613] ? load_image+0x410/0x410 [ 380.566788][ T9613] ? lockdep_hardirqs_on+0x94/0x140 [ 380.572003][ T9613] should_fail_ex+0x390/0x4c0 [ 380.576703][ T9613] get_futex_key+0x922/0x1000 [ 380.581394][ T9613] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 380.587044][ T9613] ? futex_setup_timer+0xc0/0xc0 [ 380.591997][ T9613] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 380.598009][ T9613] ? preempt_schedule_notrace+0x120/0x120 [ 380.603766][ T9613] futex_wake+0x123/0x4f0 [ 380.608118][ T9613] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 380.613772][ T9613] ? lockdep_hardirqs_on+0x94/0x140 [ 380.618987][ T9613] ? futex_wake_mark+0x150/0x150 [ 380.623942][ T9613] ? __sanitizer_cov_trace_switch+0x61/0xe0 [ 380.629857][ T9613] do_futex+0x2e2/0x320 [ 380.634031][ T9613] ? __ia32_sys_get_robust_list+0x100/0x100 [ 380.639944][ T9613] ? __might_fault+0xc2/0x120 [ 380.644646][ T9613] mm_release+0x20a/0x330 [ 380.648992][ T9613] ? exit_robust_list+0x2ce/0x2f0 [ 380.654035][ T9613] ? exit_mm_release+0x30/0x30 [ 380.658808][ T9613] ? lockdep_hardirqs_on+0x94/0x140 [ 380.664025][ T9613] exit_mm+0xa0/0x350 [ 380.668035][ T9613] ? sysctl_delayacct+0x220/0x220 [ 380.673077][ T9613] ? do_exit+0x2570/0x2570 [ 380.677508][ T9613] ? mm_trace_rss_stat+0xa7/0x250 [ 380.682552][ T9613] ? sync_mm_rss+0x211/0x350 [ 380.687157][ T9613] do_exit+0x958/0x2570 [ 380.691331][ T9613] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 380.697328][ T9613] ? put_task_struct+0x80/0x80 [ 380.702104][ T9613] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 380.707750][ T9613] ? lockdep_hardirqs_on+0x94/0x140 [ 380.712960][ T9613] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 380.718611][ T9613] do_group_exit+0x229/0x2e0 [ 380.723234][ T9613] get_signal+0x1259/0x1340 [ 380.727781][ T9613] arch_do_signal_or_restart+0xc4/0x1310 [ 380.733434][ T9613] ? kick_process+0xd4/0x140 [ 380.738037][ T9613] ? task_work_add+0x2cb/0x330 [ 380.742818][ T9613] ? get_sigframe_size+0x10/0x10 [ 380.747781][ T9613] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 380.753187][ T9613] ? ksys_write+0x1fd/0x260 [ 380.757706][ T9613] ? exit_to_user_mode_loop+0x3b/0x110 [ 380.763185][ T9613] exit_to_user_mode_loop+0x70/0x110 [ 380.768491][ T9613] exit_to_user_mode_prepare+0xee/0x180 [ 380.774064][ T9613] syscall_exit_to_user_mode+0x16/0x40 [ 380.779530][ T9613] do_syscall_64+0x58/0xa0 [ 380.783957][ T9613] ? clear_bhb_loop+0x60/0xb0 [ 380.788658][ T9613] ? clear_bhb_loop+0x60/0xb0 [ 380.793363][ T9613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.799276][ T9613] RIP: 0033:0x7ff72ef9e159 [ 380.803698][ T9613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.823317][ T9613] RSP: 002b:00007ff72fe96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.831739][ T9613] RAX: ffffffffffffffea RBX: 00007ff72f225fa0 RCX: 00007ff72ef9e159 [ 380.839718][ T9613] RDX: 000000000000000f RSI: 0000200000000400 RDI: 0000000000000004 [ 380.847709][ T9613] RBP: 00007ff72f035024 R08: 0000000000000000 R09: 0000000000000000 [ 380.855695][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.863681][ T9613] R13: 00007ff72f226038 R14: 00007ff72f225fa0 R15: 00007ffeed298628 [ 380.871683][ T9613] [ 380.874784][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.060982][ T9640] loop6: detected capacity change from 0 to 512 [ 382.142361][ T9640] EXT4-fs: inline encryption not supported [ 382.158591][ T9643] loop7: detected capacity change from 0 to 1024 [ 382.186916][ T9640] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 382.246106][ T9649] loop8: detected capacity change from 0 to 1024 [ 382.323470][ T9643] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 382.334608][ T9640] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1386: corrupted inode contents [ 382.354191][ T9649] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 382.583922][ T9640] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.1386: mark_inode_dirty error [ 382.690507][ T9640] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1386: corrupted inode contents [ 382.780996][ T9640] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.1386: mark_inode_dirty error [ 382.896931][ T9640] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2953: inode #15: comm syz.6.1386: mark inode dirty (error -117) [ 382.963044][ T9631] Set syz1 is full, maxelem 65536 reached [ 383.009531][ T9640] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 383.150282][ T9640] EXT4-fs (loop6): 1 orphan inode deleted [ 383.156108][ T9640] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 383.167753][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 383.457157][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 384.517864][ T9683] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 384.695672][ T9684] loop5: detected capacity change from 0 to 256 [ 384.767718][ T9684] FAT-fs (loop5): Directory bread(block 1285) failed [ 384.794939][ T9684] FAT-fs (loop5): Directory bread(block 1286) failed [ 384.802468][ T9684] FAT-fs (loop5): Directory bread(block 1287) failed [ 384.812164][ T9684] FAT-fs (loop5): Directory bread(block 1288) failed [ 385.144952][ T9688] FAT-fs (loop5): Directory bread(block 1285) failed [ 385.151798][ T9688] FAT-fs (loop5): Directory bread(block 1286) failed [ 385.158670][ T9688] FAT-fs (loop5): Directory bread(block 1287) failed [ 385.165533][ T9688] FAT-fs (loop5): Directory bread(block 1288) failed [ 385.172910][ T9688] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 385.873513][ T9704] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request [ 386.133514][ T9710] loop6: detected capacity change from 0 to 512 [ 386.194231][ T9710] EXT4-fs: inline encryption not supported [ 386.253682][ T9710] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 386.398005][ T9710] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1403: corrupted inode contents [ 386.458387][ T9710] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.1403: mark_inode_dirty error [ 386.470180][ T9710] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.1403: corrupted inode contents [ 386.482428][ T9710] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.1403: mark_inode_dirty error [ 386.504605][ T9710] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2953: inode #15: comm syz.6.1403: mark inode dirty (error -117) [ 386.534881][ T9720] binder: 9719:9720 unknown command 0 [ 386.541127][ T9710] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 386.561783][ T9720] binder: 9719:9720 ioctl c0306201 2000000001c0 returned -22 [ 386.571809][ T9710] EXT4-fs (loop6): 1 orphan inode deleted [ 386.592201][ T9710] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 386.702133][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 387.253918][ T9733] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 387.961797][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 388.163549][ T9748] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request [ 388.213149][ T9748] FAULT_INJECTION: forcing a failure. [ 388.213149][ T9748] name fail_futex, interval 1, probability 0, space 0, times 0 [ 388.297606][ T9748] CPU: 0 PID: 9748 Comm: syz.0.1414 Not tainted syzkaller #0 [ 388.305035][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.315110][ T9748] Call Trace: [ 388.318402][ T9748] [ 388.321345][ T9748] dump_stack_lvl+0x188/0x24e [ 388.326053][ T9748] ? show_regs_print_info+0x12/0x12 [ 388.331279][ T9748] ? load_image+0x410/0x410 [ 388.335799][ T9748] ? mark_lock+0x94/0x320 [ 388.340155][ T9748] ? __lock_acquire+0x1465/0x7c40 [ 388.345209][ T9748] should_fail_ex+0x390/0x4c0 [ 388.349919][ T9748] get_futex_key+0x1de/0x1000 [ 388.354621][ T9748] ? __stack_depot_save+0x35/0x480 [ 388.359753][ T9748] ? verify_lock_unused+0x140/0x140 [ 388.364973][ T9748] ? futex_setup_timer+0xc0/0xc0 [ 388.369937][ T9748] ? verify_lock_unused+0x140/0x140 [ 388.375165][ T9748] futex_wake+0x123/0x4f0 [ 388.379514][ T9748] ? futex_wake_mark+0x150/0x150 [ 388.384486][ T9748] do_futex+0x2e2/0x320 [ 388.388659][ T9748] ? __ia32_sys_get_robust_list+0x100/0x100 [ 388.394571][ T9748] ? __might_fault+0xc2/0x120 [ 388.399268][ T9748] mm_release+0x20a/0x330 [ 388.403607][ T9748] ? exit_robust_list+0x2ce/0x2f0 [ 388.408641][ T9748] ? exit_mm_release+0x30/0x30 [ 388.413423][ T9748] ? lockdep_hardirqs_on+0x94/0x140 [ 388.418647][ T9748] exit_mm+0xa0/0x350 [ 388.422652][ T9748] ? sysctl_delayacct+0x220/0x220 [ 388.427702][ T9748] ? do_exit+0x2570/0x2570 [ 388.432139][ T9748] ? mm_trace_rss_stat+0xa7/0x250 [ 388.437186][ T9748] ? sync_mm_rss+0x211/0x350 [ 388.441805][ T9748] do_exit+0x958/0x2570 [ 388.445989][ T9748] ? put_task_struct+0x80/0x80 [ 388.450777][ T9748] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 388.456780][ T9748] ? lock_chain_count+0x20/0x20 [ 388.461651][ T9748] ? _raw_spin_lock_irq+0xb7/0xf0 [ 388.466690][ T9748] do_group_exit+0x229/0x2e0 [ 388.471301][ T9748] ? lockdep_hardirqs_on+0x94/0x140 [ 388.476519][ T9748] get_signal+0x1259/0x1340 [ 388.481068][ T9748] arch_do_signal_or_restart+0xc4/0x1310 [ 388.486723][ T9748] ? file_end_write+0xd8/0x250 [ 388.491509][ T9748] ? vfs_write+0x777/0x9a0 [ 388.495954][ T9748] ? do_futex+0x310/0x320 [ 388.500296][ T9748] ? file_end_write+0x250/0x250 [ 388.505168][ T9748] ? get_sigframe_size+0x10/0x10 [ 388.510124][ T9748] ? __ia32_sys_get_robust_list+0x100/0x100 [ 388.516049][ T9748] ? exit_to_user_mode_loop+0x3b/0x110 [ 388.521529][ T9748] exit_to_user_mode_loop+0x70/0x110 [ 388.526835][ T9748] exit_to_user_mode_prepare+0xee/0x180 [ 388.532404][ T9748] syscall_exit_to_user_mode+0x16/0x40 [ 388.537880][ T9748] do_syscall_64+0x58/0xa0 [ 388.542316][ T9748] ? clear_bhb_loop+0x60/0xb0 [ 388.547017][ T9748] ? clear_bhb_loop+0x60/0xb0 [ 388.551714][ T9748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.557628][ T9748] RIP: 0033:0x7f2ad8f9e159 [ 388.562056][ T9748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.581671][ T9748] RSP: 002b:00007f2ad9dff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 388.590102][ T9748] RAX: fffffffffffffe00 RBX: 00007f2ad9225fa8 RCX: 00007f2ad8f9e159 [ 388.598091][ T9748] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ad9225fa8 [ 388.606074][ T9748] RBP: 00007f2ad9225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 388.614056][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.622040][ T9748] R13: 00007f2ad9226038 R14: 00007ffec5a0fd30 R15: 00007ffec5a0fe18 [ 388.630042][ T9748] [ 389.801755][ T9783] loop6: detected capacity change from 0 to 256 [ 389.942237][ T9783] FAT-fs (loop6): Directory bread(block 1285) failed [ 389.961966][ T9783] FAT-fs (loop6): Directory bread(block 1286) failed [ 389.998884][ T9783] FAT-fs (loop6): Directory bread(block 1287) failed [ 390.014919][ T9786] loop5: detected capacity change from 0 to 1024 [ 390.034182][ T9783] FAT-fs (loop6): Directory bread(block 1288) failed [ 390.274316][ T9791] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 390.415753][ T9795] FAT-fs (loop6): Directory bread(block 1285) failed [ 390.422687][ T9795] FAT-fs (loop6): Directory bread(block 1286) failed [ 390.429674][ T9795] FAT-fs (loop6): Directory bread(block 1287) failed [ 390.436574][ T9795] FAT-fs (loop6): Directory bread(block 1288) failed [ 390.443982][ T9795] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 390.511897][ T9786] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 390.642433][ T9737] Set syz1 is full, maxelem 65536 reached [ 391.520973][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 391.588349][ T9808] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request [ 393.012620][ T9842] loop6: detected capacity change from 0 to 1024 [ 393.020588][ T9840] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 393.070032][ T9842] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 393.278768][ T9848] loop5: detected capacity change from 0 to 256 [ 393.294329][ T9848] FAT-fs (loop5): Directory bread(block 1285) failed [ 393.938600][ T9848] FAT-fs (loop5): Directory bread(block 1286) failed [ 393.954636][ T9848] FAT-fs (loop5): Directory bread(block 1287) failed [ 393.961512][ T9848] FAT-fs (loop5): Directory bread(block 1288) failed [ 394.244094][ T9867] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 394.320912][ T9871] FAT-fs (loop5): Directory bread(block 1285) failed [ 394.327812][ T9871] FAT-fs (loop5): Directory bread(block 1286) failed [ 394.334701][ T9871] FAT-fs (loop5): Directory bread(block 1287) failed [ 394.341501][ T9871] FAT-fs (loop5): Directory bread(block 1288) failed [ 394.348812][ T9871] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 394.562953][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 394.640779][ T9867] FAULT_INJECTION: forcing a failure. [ 394.640779][ T9867] name fail_futex, interval 1, probability 0, space 0, times 0 [ 394.703059][ T9867] CPU: 0 PID: 9867 Comm: syz.8.1439 Not tainted syzkaller #0 [ 394.710483][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.720550][ T9867] Call Trace: [ 394.723834][ T9867] [ 394.726770][ T9867] dump_stack_lvl+0x188/0x24e [ 394.731469][ T9867] ? show_regs_print_info+0x12/0x12 [ 394.736680][ T9867] ? load_image+0x410/0x410 [ 394.741211][ T9867] ? get_user_pages_fast_only+0x40/0x40 [ 394.746787][ T9867] should_fail_ex+0x390/0x4c0 [ 394.751501][ T9867] get_futex_key+0x922/0x1000 [ 394.756204][ T9867] ? futex_setup_timer+0xc0/0xc0 [ 394.761167][ T9867] ? verify_lock_unused+0x140/0x140 [ 394.766386][ T9867] futex_wake+0x123/0x4f0 [ 394.770728][ T9867] ? futex_wake_mark+0x150/0x150 [ 394.775691][ T9867] do_futex+0x2e2/0x320 [ 394.779860][ T9867] ? __ia32_sys_get_robust_list+0x100/0x100 [ 394.785768][ T9867] ? __might_fault+0xc2/0x120 [ 394.790463][ T9867] mm_release+0x20a/0x330 [ 394.794806][ T9867] ? exit_robust_list+0x2ce/0x2f0 [ 394.799841][ T9867] ? exit_mm_release+0x30/0x30 [ 394.804615][ T9867] ? lockdep_hardirqs_on+0x94/0x140 [ 394.809834][ T9867] exit_mm+0xa0/0x350 [ 394.813832][ T9867] ? sysctl_delayacct+0x220/0x220 [ 394.818878][ T9867] ? do_exit+0x2570/0x2570 [ 394.823309][ T9867] ? mm_trace_rss_stat+0xa7/0x250 [ 394.828352][ T9867] ? sync_mm_rss+0x211/0x350 [ 394.832953][ T9867] do_exit+0x958/0x2570 [ 394.837129][ T9867] ? put_task_struct+0x80/0x80 [ 394.841917][ T9867] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 394.847911][ T9867] ? lock_chain_count+0x20/0x20 [ 394.852772][ T9867] ? _raw_spin_lock_irq+0xb7/0xf0 [ 394.857808][ T9867] do_group_exit+0x229/0x2e0 [ 394.862414][ T9867] ? lockdep_hardirqs_on+0x94/0x140 [ 394.867623][ T9867] get_signal+0x1259/0x1340 [ 394.872168][ T9867] arch_do_signal_or_restart+0xc4/0x1310 [ 394.877819][ T9867] ? do_futex+0xaf/0x320 [ 394.882063][ T9867] ? do_futex+0x310/0x320 [ 394.886387][ T9867] ? preempt_schedule_irq+0xe6/0x160 [ 394.891672][ T9867] ? get_sigframe_size+0x10/0x10 [ 394.896603][ T9867] ? __ia32_sys_get_robust_list+0x100/0x100 [ 394.902504][ T9867] ? exit_to_user_mode_loop+0x3b/0x110 [ 394.907960][ T9867] exit_to_user_mode_loop+0x70/0x110 [ 394.913241][ T9867] exit_to_user_mode_prepare+0xee/0x180 [ 394.918783][ T9867] syscall_exit_to_user_mode+0x16/0x40 [ 394.924235][ T9867] do_syscall_64+0x58/0xa0 [ 394.928652][ T9867] ? clear_bhb_loop+0x60/0xb0 [ 394.933327][ T9867] ? clear_bhb_loop+0x60/0xb0 [ 394.938002][ T9867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.943889][ T9867] RIP: 0033:0x7ff72ef9e159 [ 394.948297][ T9867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.967898][ T9867] RSP: 002b:00007ff72fe960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 394.976308][ T9867] RAX: fffffffffffffe00 RBX: 00007ff72f225fa8 RCX: 00007ff72ef9e159 [ 394.984272][ T9867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff72f225fa8 [ 394.992233][ T9867] RBP: 00007ff72f225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 395.000194][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.008160][ T9867] R13: 00007ff72f226038 R14: 00007ffeed298540 R15: 00007ffeed298628 [ 395.016136][ T9867] [ 396.910250][ T9913] loop6: detected capacity change from 0 to 1024 [ 396.996532][ T9912] loop8: detected capacity change from 0 to 1024 [ 397.072315][ T9914] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 397.106200][ T9913] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 397.123963][ T9912] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 397.956385][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 398.187385][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 398.283911][ T9931] loop7: detected capacity change from 0 to 256 [ 398.337100][ T9931] FAT-fs (loop7): Directory bread(block 1285) failed [ 398.371741][ T9931] FAT-fs (loop7): Directory bread(block 1286) failed [ 398.425286][ T9931] FAT-fs (loop7): Directory bread(block 1287) failed [ 398.458422][ T9931] FAT-fs (loop7): Directory bread(block 1288) failed [ 398.764314][ T9944] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 398.990484][ T9895] Set syz1 is full, maxelem 65536 reached [ 399.380786][ T9960] FAT-fs (loop7): Directory bread(block 1285) failed [ 399.873944][ T9960] FAT-fs (loop7): Directory bread(block 1286) failed [ 399.987874][ T9967] loop6: detected capacity change from 0 to 1024 [ 400.011620][ T9960] FAT-fs (loop7): Directory bread(block 1287) failed [ 400.101183][ T9960] FAT-fs (loop7): Directory bread(block 1288) failed [ 400.108016][ T9960] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 400.167930][ T9967] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 401.111728][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 401.151125][ T9977] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 402.242292][ T9992] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 403.440407][T10004] Set syz1 is full, maxelem 65536 reached [ 403.567789][T10010] loop8: detected capacity change from 0 to 512 [ 403.584945][T10010] EXT4-fs: inline encryption not supported [ 403.632050][T10010] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 403.676795][T10010] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1472: corrupted inode contents [ 403.712166][T10010] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #15: comm syz.8.1472: mark_inode_dirty error [ 403.758081][T10010] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1472: corrupted inode contents [ 403.812295][T10010] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2950: inode #15: comm syz.8.1472: mark_inode_dirty error [ 403.864172][T10010] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2953: inode #15: comm syz.8.1472: mark inode dirty (error -117) [ 403.934228][T10010] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 403.986658][T10010] EXT4-fs (loop8): 1 orphan inode deleted [ 403.992443][T10010] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 404.313948][T10027] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 404.350010][T10028] loop5: detected capacity change from 0 to 1024 [ 404.405937][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 404.463895][T10028] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 404.644903][T10039] loop7: detected capacity change from 0 to 1024 [ 404.719981][T10039] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 405.248399][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 405.583853][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 406.011403][ T4351] nvmet: connect request for invalid subsystem t! [ 406.028230][T10057] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 407.146562][T10066] Set syz1 is full, maxelem 65536 reached [ 407.683655][T10079] loop7: detected capacity change from 0 to 256 [ 407.779770][T10079] FAT-fs (loop7): Directory bread(block 1285) failed [ 407.850415][T10079] FAT-fs (loop7): Directory bread(block 1286) failed [ 407.877023][T10082] loop5: detected capacity change from 0 to 512 [ 407.897717][T10082] EXT4-fs: inline encryption not supported [ 407.899729][T10079] FAT-fs (loop7): Directory bread(block 1287) failed [ 407.938681][T10079] FAT-fs (loop7): Directory bread(block 1288) failed [ 407.954994][T10082] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 408.091212][T10082] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1489: corrupted inode contents [ 408.236315][T10082] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1489: mark_inode_dirty error [ 408.299987][T10082] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.1489: corrupted inode contents [ 408.342088][T10082] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.1489: mark_inode_dirty error [ 408.407835][T10095] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 408.464018][T10082] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2953: inode #15: comm syz.5.1489: mark inode dirty (error -117) [ 408.685151][T10082] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 408.922856][T10082] EXT4-fs (loop5): 1 orphan inode deleted [ 408.995107][T10082] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 409.410989][T10101] loop8: detected capacity change from 0 to 1024 [ 409.448169][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 409.579636][T10101] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 409.814885][T10112] FAT-fs (loop7): Directory bread(block 1285) failed [ 409.840714][T10112] FAT-fs (loop7): Directory bread(block 1286) failed [ 410.323027][T10112] FAT-fs (loop7): Directory bread(block 1287) failed [ 410.397643][T10112] FAT-fs (loop7): Directory bread(block 1288) failed [ 410.471637][T10112] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 410.582578][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 411.151675][T10132] Set syz1 is full, maxelem 65536 reached [ 411.936698][ T27] audit: type=1326 audit(1818430178.402:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 411.960797][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.180427][ T27] audit: type=1326 audit(1818430178.402:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.0.1495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 412.204562][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.306153][ T27] audit: type=1326 audit(1818430178.402:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 412.329485][ T27] audit: type=1326 audit(1818430178.402:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 413.005939][T10163] loop5: detected capacity change from 0 to 1024 [ 413.070024][T10163] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 413.849213][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 414.460466][T10182] Set syz1 is full, maxelem 65536 reached [ 415.449068][T10205] logitech-hidpp-device 0005:046D:B012.0004: received hid++ report of bad size (4096) [ 415.490485][ T6307] logitech-hidpp-device 0005:046D:B012.0004: Device not connected [ 415.826207][ T27] audit: type=1326 audit(1818954470.370:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.7.1510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 415.995979][T10214] loop5: detected capacity change from 0 to 512 [ 416.002523][ T27] audit: type=1326 audit(1818954470.370:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.7.1510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 416.199412][ T27] audit: type=1326 audit(1818954470.370:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 416.224185][T10214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 416.243220][T10214] System zones: 1-12 [ 416.259970][ T27] audit: type=1326 audit(1818954470.370:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 416.295265][T10214] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.1517: ea_inode file size=0 entry size=6 [ 416.318869][T10223] FAULT_INJECTION: forcing a failure. [ 416.318869][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 416.332863][T10223] CPU: 0 PID: 10223 Comm: syz.0.1518 Not tainted syzkaller #0 [ 416.339654][T10222] loop7: detected capacity change from 0 to 256 [ 416.340329][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.340343][T10223] Call Trace: [ 416.340349][T10223] [ 416.340358][T10223] dump_stack_lvl+0x188/0x24e [ 416.357099][T10214] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1517: iget: bad extra_isize 90 (inode size 256) [ 416.359902][T10223] ? show_regs_print_info+0x12/0x12 [ 416.377029][T10214] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1517: error while reading EA inode 11 err=-117 [ 416.380744][T10223] ? load_image+0x410/0x410 [ 416.380777][T10223] ? __might_sleep+0xd0/0xd0 [ 416.380797][T10223] ? __lock_acquire+0x7c40/0x7c40 [ 416.380827][T10223] should_fail_ex+0x390/0x4c0 [ 416.380859][T10223] should_failslab+0x5/0x20 [ 416.380877][T10223] slab_pre_alloc_hook+0x59/0x300 [ 416.380902][T10223] ? kvmalloc_node+0x6c/0x180 [ 416.380932][T10223] __kmem_cache_alloc_node+0x4f/0x270 [ 416.380959][T10223] ? kvmalloc_node+0x6c/0x180 [ 416.380986][T10223] __kmalloc_node+0xa2/0x240 [ 416.381015][T10223] kvmalloc_node+0x6c/0x180 [ 416.381044][T10223] alloc_fdtable+0x106/0x2c0 [ 416.381073][T10223] dup_fd+0x743/0xa20 [ 416.381101][T10223] ? _raw_spin_unlock+0x24/0x40 [ 416.381124][T10223] ? copy_fs_struct+0x1bf/0x270 [ 416.381147][T10223] ksys_unshare+0x458/0x8e0 [ 416.381177][T10223] ? sighand_ctor+0x40/0x40 [ 416.381199][T10223] ? lock_chain_count+0x20/0x20 [ 416.381230][T10223] ? syscall_enter_from_user_mode+0x21/0x80 [ 416.381256][T10223] __x64_sys_unshare+0x34/0x40 [ 416.381278][T10223] do_syscall_64+0x4c/0xa0 [ 416.381306][T10223] ? clear_bhb_loop+0x60/0xb0 [ 416.381334][T10223] ? clear_bhb_loop+0x60/0xb0 [ 416.381360][T10223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.512857][T10223] RIP: 0033:0x7f2ad8f9e159 [ 416.517275][T10223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.536877][T10223] RSP: 002b:00007f2ad9dff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 416.545289][T10223] RAX: ffffffffffffffda RBX: 00007f2ad9225fa0 RCX: 00007f2ad8f9e159 [ 416.553254][T10223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 416.561231][T10223] RBP: 00007f2ad9035024 R08: 0000000000000000 R09: 0000000000000000 [ 416.569206][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.577174][T10223] R13: 00007f2ad9226038 R14: 00007f2ad9225fa0 R15: 00007ffec5a0fe18 [ 416.585153][T10223] [ 416.605564][T10222] FAT-fs (loop7): Directory bread(block 1285) failed [ 416.612313][T10222] FAT-fs (loop7): Directory bread(block 1286) failed [ 416.627479][T10214] EXT4-fs (loop5): 1 orphan inode deleted [ 416.642801][T10222] FAT-fs (loop7): Directory bread(block 1287) failed [ 416.657820][T10214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 416.667078][T10222] FAT-fs (loop7): Directory bread(block 1288) failed [ 416.824659][ T5601] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 416.845060][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.894970][ T5601] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 416.981322][ T5601] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 417.260524][ T5601] bond0: (slave syz_tun): Releasing backup interface [ 417.370980][ T5601] EXT4-fs (loop5): unmounting filesystem. [ 417.411795][T10234] FAT-fs (loop7): Directory bread(block 1285) failed [ 417.418550][T10234] FAT-fs (loop7): Directory bread(block 1286) failed [ 417.511434][T10234] FAT-fs (loop7): Directory bread(block 1287) failed [ 417.518190][T10234] FAT-fs (loop7): Directory bread(block 1288) failed [ 417.557369][ T7072] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.592853][T10234] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 417.718748][ T7072] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.907927][ T7072] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.085843][ T7072] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.248653][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.259350][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.267626][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.288928][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.308366][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 419.315705][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.646497][ T27] audit: type=1326 audit(1818954474.292:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 419.723685][ T27] audit: type=1326 audit(1818954474.302:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 419.829121][ T27] audit: type=1326 audit(1818954474.302:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 419.923025][ T27] audit: type=1326 audit(1818954474.302:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 420.121399][T10284] loop6: detected capacity change from 0 to 512 [ 420.211845][T10284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 420.261934][T10284] System zones: 1-12 [ 420.294832][T10284] EXT4-fs warning (device loop6): ext4_xattr_inode_get:492: inode #11: comm syz.6.1532: ea_inode file size=0 entry size=6 [ 420.336644][T10284] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1532: iget: bad extra_isize 90 (inode size 256) [ 420.371789][T10284] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1532: error while reading EA inode 11 err=-117 [ 420.386230][T10284] EXT4-fs (loop6): 1 orphan inode deleted [ 420.400258][T10284] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 420.789635][T10299] Set syz1 is full, maxelem 65536 reached [ 421.013609][ T5804] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 421.081011][ T5804] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 421.102585][T10271] chnl_net:caif_netlink_parms(): no params data found [ 421.157649][ T5804] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 421.183893][ T7072] device hsr_slave_0 left promiscuous mode [ 421.240628][ T7072] device hsr_slave_1 left promiscuous mode [ 421.259845][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.277850][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.322608][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.331332][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.357798][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 421.388209][ T7072] device bridge_slave_1 left promiscuous mode [ 421.394427][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.444497][ T7072] device bridge_slave_0 left promiscuous mode [ 421.467173][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.533949][ T7072] device veth1_macvtap left promiscuous mode [ 421.540009][ T7072] device veth0_macvtap left promiscuous mode [ 421.552888][ T7072] device veth1_vlan left promiscuous mode [ 421.558933][ T7072] device veth0_vlan left promiscuous mode [ 421.940785][T10313] loop7: detected capacity change from 0 to 512 [ 421.952419][T10313] EXT4-fs: inline encryption not supported [ 421.989602][T10313] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 422.011481][T10313] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1538: corrupted inode contents [ 422.040009][T10313] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1538: mark_inode_dirty error [ 422.075797][T10313] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1538: corrupted inode contents [ 422.088128][T10313] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1538: mark_inode_dirty error [ 422.107074][T10313] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1538: mark inode dirty (error -117) [ 422.126865][T10313] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 422.139802][T10313] EXT4-fs (loop7): 1 orphan inode deleted [ 422.146141][T10313] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 422.202353][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 422.273996][T10321] loop7: detected capacity change from 0 to 256 [ 422.296577][T10321] FAT-fs (loop7): Directory bread(block 1285) failed [ 422.303577][T10321] FAT-fs (loop7): Directory bread(block 1286) failed [ 422.322173][T10321] FAT-fs (loop7): Directory bread(block 1287) failed [ 422.359901][T10321] FAT-fs (loop7): Directory bread(block 1288) failed [ 422.805744][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 422.858528][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 422.896317][T10327] FAT-fs (loop7): Directory bread(block 1285) failed [ 422.903176][T10327] FAT-fs (loop7): Directory bread(block 1286) failed [ 422.909919][T10327] FAT-fs (loop7): Directory bread(block 1287) failed [ 422.916691][T10327] FAT-fs (loop7): Directory bread(block 1288) failed [ 422.923500][T10327] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 423.152884][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.315155][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.416901][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 423.652231][ T27] audit: type=1326 audit(1818954478.385:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.7.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 423.677350][ T27] audit: type=1326 audit(1818954478.385:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.7.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 423.743835][ T27] audit: type=1326 audit(1818954478.415:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz.7.1542" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 423.801632][ T27] audit: type=1326 audit(1818954478.415:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 423.857466][ T27] audit: type=1326 audit(1818954478.415:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 423.950359][ T7072] bond0 (unregistering): Released all slaves [ 424.287291][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 424.296569][T10271] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.380435][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.388574][T10271] device bridge_slave_0 entered promiscuous mode [ 424.437618][T10271] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.488086][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.506564][T10271] device bridge_slave_1 entered promiscuous mode [ 424.640646][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.683930][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.829054][T10271] team0: Port device team_slave_0 added [ 424.864143][T10271] team0: Port device team_slave_1 added [ 424.969963][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.007391][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.115143][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.232012][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.249334][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.360799][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.449898][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 425.542914][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 425.552167][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.554528][T10271] device hsr_slave_0 entered promiscuous mode [ 425.560518][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.577288][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.585050][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 425.592419][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.648272][T10271] device hsr_slave_1 entered promiscuous mode [ 425.659252][T10271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.667106][T10271] Cannot create hsr debugfs directory [ 426.641016][ T7072] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.939890][ T7072] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.942595][T10368] loop8: detected capacity change from 0 to 512 [ 426.994259][T10368] EXT4-fs: inline encryption not supported [ 427.020122][ T7072] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.038651][T10368] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 427.101255][T10271] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 427.112107][T10271] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 427.122020][T10271] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 427.156261][T10368] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1549: corrupted inode contents [ 427.182743][T10271] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 427.202215][T10368] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #15: comm syz.8.1549: mark_inode_dirty error [ 427.250853][ T7072] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.272806][T10368] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.1549: corrupted inode contents [ 427.311954][T10368] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2950: inode #15: comm syz.8.1549: mark_inode_dirty error [ 427.347272][T10368] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2953: inode #15: comm syz.8.1549: mark inode dirty (error -117) [ 427.351750][T10353] chnl_net:caif_netlink_parms(): no params data found [ 427.378714][T10368] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 427.409115][T10368] EXT4-fs (loop8): 1 orphan inode deleted [ 427.421723][T10368] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 427.494109][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 427.598089][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 427.604926][T10271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.649105][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 427.707037][T10353] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.714892][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.724617][T10353] device bridge_slave_0 entered promiscuous mode [ 427.737210][T10271] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.762877][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.782304][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.797923][T10353] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.805051][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.813742][T10388] loop8: detected capacity change from 0 to 256 [ 427.832768][T10353] device bridge_slave_1 entered promiscuous mode [ 427.841727][T10388] FAT-fs (loop8): Directory bread(block 1285) failed [ 427.861093][T10388] FAT-fs (loop8): Directory bread(block 1286) failed [ 427.890322][T10388] FAT-fs (loop8): Directory bread(block 1287) failed [ 427.942680][T10388] FAT-fs (loop8): Directory bread(block 1288) failed [ 428.133083][T10393] fuse: Unknown parameter 'group_id00000000000000000000' [ 428.152373][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 428.162063][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.196270][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.203430][ T7060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.239808][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.277646][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.316498][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.323680][ T7060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.339593][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.348516][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.363844][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 428.378623][T10353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.499928][T10353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.575280][T10407] FAT-fs (loop8): Directory bread(block 1285) failed [ 428.582743][T10407] FAT-fs (loop8): Directory bread(block 1286) failed [ 428.589597][T10407] FAT-fs (loop8): Directory bread(block 1287) failed [ 428.596394][T10407] FAT-fs (loop8): Directory bread(block 1288) failed [ 428.603221][T10407] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 428.759658][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.788540][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.838592][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.867766][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.909076][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.928616][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.973134][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.982123][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.013755][T10271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.203942][T10353] team0: Port device team_slave_0 added [ 429.214276][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.303775][T10353] team0: Port device team_slave_1 added [ 429.363673][ T27] audit: type=1326 audit(1818954484.181:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.0.1555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 429.404962][T10353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.462082][ T27] audit: type=1326 audit(1818954484.181:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.0.1555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 429.469139][T10353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.486194][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.518136][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.668730][ T27] audit: type=1326 audit(1818954484.181:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.0.1555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 429.701938][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 429.774402][T10353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.797854][ T27] audit: type=1326 audit(1818954484.181:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 430.090232][ T27] audit: type=1326 audit(1818954484.181:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 430.113548][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.453447][T10353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.460431][T10353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.548870][T10353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.732422][T10433] loop7: detected capacity change from 0 to 512 [ 430.760767][T10433] EXT4-fs: inline encryption not supported [ 430.836047][T10433] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 430.890732][T10353] device hsr_slave_0 entered promiscuous mode [ 430.898622][T10433] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1559: corrupted inode contents [ 430.912496][T10353] device hsr_slave_1 entered promiscuous mode [ 430.932836][T10353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.944104][T10433] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1559: mark_inode_dirty error [ 430.962693][T10353] Cannot create hsr debugfs directory [ 430.995807][T10433] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1559: corrupted inode contents [ 431.020835][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.039784][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.049950][T10433] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1559: mark_inode_dirty error [ 431.062892][T10433] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1559: mark inode dirty (error -117) [ 431.090195][T10433] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 431.111827][T10433] EXT4-fs (loop7): 1 orphan inode deleted [ 431.121461][T10433] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 431.127564][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.234380][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 431.330914][T10440] fuse: Unknown parameter 'group_id00000000000000000000' [ 431.757954][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 431.900200][ T7072] device hsr_slave_0 left promiscuous mode [ 431.915147][ T7072] device hsr_slave_1 left promiscuous mode [ 432.139175][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.161669][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.186708][ T7072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.194409][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.202220][ T7072] device bridge_slave_1 left promiscuous mode [ 432.506189][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.580805][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.587555][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.740092][ T7072] device bridge_slave_0 left promiscuous mode [ 432.804269][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.965603][ T7072] device veth1_macvtap left promiscuous mode [ 432.971687][ T7072] device veth0_macvtap left promiscuous mode [ 432.985137][ T7072] device veth1_vlan left promiscuous mode [ 432.990978][ T7072] device veth0_vlan left promiscuous mode [ 433.154940][T10462] loop8: detected capacity change from 0 to 1024 [ 433.218546][T10462] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 433.927355][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 434.138481][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 435.178308][T10475] fuse: Bad value for 'user_id' [ 435.260585][ T27] audit: type=1326 audit(1818954490.144:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.0.1570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 435.291297][ T7072] team0 (unregistering): Port device team_slave_1 removed [ 435.353695][ T27] audit: type=1326 audit(1818954490.144:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.0.1570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 435.409676][ T27] audit: type=1326 audit(1818954490.144:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.0.1570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 435.463623][ T27] audit: type=1326 audit(1818954490.144:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 435.486869][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.515111][ T7072] team0 (unregistering): Port device team_slave_0 removed [ 435.538737][ T27] audit: type=1326 audit(1818954490.144:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 435.705995][ T7072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.803919][ T7072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.618636][ T7072] team0 (unregistering): Port device bond0 removed [ 436.694726][ T7072] bond0 (unregistering): Released all slaves [ 438.018087][T10494] loop8: detected capacity change from 0 to 1024 [ 438.149357][T10271] device veth0_vlan entered promiscuous mode [ 438.161920][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.221336][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.258793][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 438.267624][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 438.281389][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 438.290051][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 438.309890][T10271] device veth1_vlan entered promiscuous mode [ 438.312987][T10501] loop7: detected capacity change from 0 to 512 [ 438.419621][T10271] device veth0_macvtap entered promiscuous mode [ 438.445721][T10271] device veth1_macvtap entered promiscuous mode [ 438.472775][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.602110][T10501] EXT4-fs: inline encryption not supported [ 438.620520][T10494] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 438.639317][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.844443][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.863978][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.899054][T10501] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 439.200005][T10501] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1578: corrupted inode contents [ 439.253399][T10501] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1578: mark_inode_dirty error [ 439.305990][T10501] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1578: corrupted inode contents [ 439.368584][T10501] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1578: mark_inode_dirty error [ 439.405981][T10501] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1578: mark inode dirty (error -117) [ 439.447539][T10501] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 439.462331][T10501] EXT4-fs (loop7): 1 orphan inode deleted [ 439.468237][T10501] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 439.520081][ T5839] EXT4-fs (loop8): unmounting filesystem. [ 439.593654][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 439.680090][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.701077][T10512] fuse: Bad value for 'user_id' [ 439.719602][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.747775][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.758727][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.769231][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.785222][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.810079][T10271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.945507][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.958979][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.986525][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.019454][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.041322][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.056929][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.072115][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.082712][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.095488][T10271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.106111][T10271] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.115208][T10271] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.125900][T10271] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.141788][T10271] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.259739][ T27] audit: type=1326 audit(1818954495.181:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.0.1583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 440.283836][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.316022][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.329355][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.341278][ T27] audit: type=1326 audit(1818954495.181:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.0.1583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 440.457005][ T27] audit: type=1326 audit(1818954495.181:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm="syz.0.1583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 440.546647][ T7064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.580423][ T7064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.604319][ T27] audit: type=1326 audit(1818954495.181:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 440.648899][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.716424][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.745094][T10526] loop7: detected capacity change from 0 to 256 [ 440.751798][ T27] audit: type=1326 audit(1818954495.181:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10518 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad8f9e159 code=0x7ffc0000 [ 440.754607][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.810131][T10526] FAT-fs (loop7): Directory bread(block 1285) failed [ 440.826916][T10526] FAT-fs (loop7): Directory bread(block 1286) failed [ 440.858664][T10526] FAT-fs (loop7): Directory bread(block 1287) failed [ 440.876237][T10526] FAT-fs (loop7): Directory bread(block 1288) failed [ 440.949959][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 441.298522][T10532] FAT-fs (loop7): Directory bread(block 1285) failed [ 441.305427][T10532] FAT-fs (loop7): Directory bread(block 1286) failed [ 441.312321][T10532] FAT-fs (loop7): Directory bread(block 1287) failed [ 441.319123][T10532] FAT-fs (loop7): Directory bread(block 1288) failed [ 441.326567][T10532] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 441.849339][T10353] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.949249][T10353] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.026443][T10536] loop7: detected capacity change from 0 to 512 [ 442.027433][T10353] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.046905][T10353] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.063423][T10536] EXT4-fs: inline encryption not supported [ 442.105690][T10538] fuse: Bad value for 'user_id' [ 442.115713][T10536] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 442.184204][T10353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.202089][T10353] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.210487][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.222151][T10536] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1589: corrupted inode contents [ 442.294365][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.325633][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 442.348519][T10536] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1589: mark_inode_dirty error [ 442.349544][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.379357][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.386545][ T7072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.393330][T10536] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1589: corrupted inode contents [ 442.412682][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.429000][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 442.454531][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.471381][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.478539][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.486777][T10536] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1589: mark_inode_dirty error [ 442.531471][T10536] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1589: mark inode dirty (error -117) [ 442.571803][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 442.586203][T10536] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 442.611814][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 442.626750][T10536] EXT4-fs (loop7): 1 orphan inode deleted [ 442.646434][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 442.662275][T10536] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 442.705006][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.783554][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.827233][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 442.849366][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 442.862027][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.908419][T10353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.957488][T10353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.168541][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 443.171046][ T27] audit: type=1326 audit(1818954498.119:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.7.1593" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 443.204722][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.239146][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 443.269333][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.385522][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 443.446912][ T27] audit: type=1326 audit(1818954498.119:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.7.1593" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 443.471032][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.585572][T10559] loop7: detected capacity change from 0 to 1024 [ 443.594260][ T27] audit: type=1326 audit(1818954498.119:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm="syz.7.1593" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 443.618366][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.676821][T10559] EXT4-fs: Ignoring removed bh option [ 443.696395][ T27] audit: type=1326 audit(1818954498.119:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 443.796003][T10559] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 443.831830][T10559] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.899680][ T27] audit: type=1326 audit(1818954498.119:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10551 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 443.953623][T10559] EXT4-fs (loop7): shut down requested (0) [ 444.688692][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 444.930629][T10579] fuse: Bad value for 'fd' [ 444.939321][T10578] loop7: detected capacity change from 0 to 1024 [ 445.031472][T10578] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 445.045885][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.053966][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.191849][T10353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.269742][T10587] binder: 10585:10587 unknown command 0 [ 445.275360][T10587] binder: 10585:10587 ioctl c0306201 2000000001c0 returned -22 [ 445.283964][T10587] binder_alloc: 10585: binder_alloc_buf, no vma [ 445.657550][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.786261][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.873123][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.955542][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.976322][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.986764][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 445.995618][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.033548][T10353] device veth0_vlan entered promiscuous mode [ 446.133626][T10353] device veth1_vlan entered promiscuous mode [ 446.326894][T10353] device veth0_macvtap entered promiscuous mode [ 446.367101][T10353] device veth1_macvtap entered promiscuous mode [ 446.375753][ T27] audit: type=1326 audit(1818954501.335:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.7.1604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 446.497441][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.561443][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.744220][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.791668][ T27] audit: type=1326 audit(1818954501.335:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.7.1604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 446.916966][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.961965][ T27] audit: type=1326 audit(1818954501.335:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.7.1604" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 446.986046][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.004002][ T27] audit: type=1326 audit(1818954501.335:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 447.164303][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.209109][ T27] audit: type=1326 audit(1818954501.335:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399f59e159 code=0x7ffc0000 [ 447.232313][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.236331][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.287255][T10611] loop7: detected capacity change from 0 to 256 [ 447.294020][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.324877][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.335915][T10611] FAT-fs (loop7): Directory bread(block 1285) failed [ 447.345512][T10611] FAT-fs (loop7): Directory bread(block 1286) failed [ 447.363290][T10611] FAT-fs (loop7): Directory bread(block 1287) failed [ 447.370418][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.388509][T10611] FAT-fs (loop7): Directory bread(block 1288) failed [ 447.403079][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.496195][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.577636][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.607919][T10353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.615271][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 447.713645][T10617] FAT-fs (loop7): Directory bread(block 1285) failed [ 447.720633][T10617] FAT-fs (loop7): Directory bread(block 1286) failed [ 447.727624][T10617] FAT-fs (loop7): Directory bread(block 1287) failed [ 447.734418][T10617] FAT-fs (loop7): Directory bread(block 1288) failed [ 447.741813][T10617] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 447.773025][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.266984][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.294589][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.305014][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.315639][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.353448][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.386789][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.408772][T10353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.430267][T10353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.465734][T10353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.504150][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.537727][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.551094][T10624] fuse: Bad value for 'fd' [ 448.578999][T10353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.598111][T10353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.626185][T10353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.643840][T10353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.828619][T10629] binder: 10628:10629 unknown command 0 [ 448.834819][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.852660][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.856225][T10629] binder: 10628:10629 ioctl c0306201 2000000001c0 returned -22 [ 448.892362][T10629] binder_alloc: 10628: binder_alloc_buf, no vma [ 448.902422][ T7081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 448.908246][T10632] loop9: detected capacity change from 0 to 1024 [ 448.930270][ T7050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.956325][ T7050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.980928][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 449.020293][T10632] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 449.759493][T10649] loop7: detected capacity change from 0 to 512 [ 449.820705][T10649] EXT4-fs: inline encryption not supported [ 449.925193][T10649] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 449.965569][T10649] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1614: corrupted inode contents [ 449.978955][T10649] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #15: comm syz.7.1614: mark_inode_dirty error [ 450.023971][T10649] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.1614: corrupted inode contents [ 450.049232][T10271] EXT4-fs (loop9): unmounting filesystem. [ 450.127940][T10649] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2950: inode #15: comm syz.7.1614: mark_inode_dirty error [ 450.170040][T10649] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2953: inode #15: comm syz.7.1614: mark inode dirty (error -117) [ 450.206320][T10649] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 450.247340][T10649] EXT4-fs (loop7): 1 orphan inode deleted [ 450.253215][T10649] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 450.501877][ T5801] EXT4-fs (loop7): unmounting filesystem. [ 450.662672][ T27] audit: type=1326 audit(1818954505.632:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308c39e159 code=0x7ffc0000 [ 450.686764][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.773636][T10667] loop7: detected capacity change from 0 to 256 [ 450.811921][ T27] audit: type=1326 audit(1818954505.632:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm="syz.9.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f308c39e159 code=0x7ffc0000 [ 450.836025][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.868542][T10667] FAT-fs (loop7): Directory bread(block 1285) failed [ 450.913465][T10667] FAT-fs (loop7): Directory bread(block 1286) failed [ 450.964365][T10667] FAT-fs (loop7): Directory bread(block 1287) failed [ 450.984553][ T27] audit: type=1326 audit(1818954505.632:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308c39e159 code=0x7ffc0000 [ 451.012247][T10667] FAT-fs (loop7): Directory bread(block 1288) failed [ 451.315152][T10672] FAT-fs (loop7): Directory bread(block 1285) failed [ 451.322028][T10672] FAT-fs (loop7): Directory bread(block 1286) failed [ 451.328898][T10672] FAT-fs (loop7): Directory bread(block 1287) failed [ 451.335751][T10672] FAT-fs (loop7): Directory bread(block 1288) failed [ 451.343077][T10672] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 451.636711][ T27] audit: type=1326 audit(1818954505.632:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10661 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308c39e159 code=0x7ffc0000 [ 451.869120][T10676] fuse: Bad value for 'fd' [ 452.134611][T10681] binder: 10680:10681 unknown command 0 [ 452.140214][T10681] binder: 10680:10681 ioctl c0306201 2000000001c0 returned -22 [ 452.162419][T10681] binder_alloc: 10680: binder_alloc_buf, no vma [ 452.233304][T10683] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 452.272194][T10683] gadgetfs: probe of gadget.0 failed with error -12 [ 452.318854][T10683] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 452.355983][T10683] gadgetfs: probe of gadget.1 failed with error -12 [ 452.380634][T10683] ================================================================== [ 452.388736][T10683] BUG: KASAN: use-after-free in gadgetfs_bind+0xcf/0x820 [ 452.395789][T10683] Write of size 8 at addr ffff888146f600c0 by task syz.7.1624/10683 [ 452.403777][T10683] [ 452.406110][T10683] CPU: 1 PID: 10683 Comm: syz.7.1624 Not tainted syzkaller #0 [ 452.413581][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.423651][T10683] Call Trace: [ 452.426937][T10683] [ 452.429886][T10683] dump_stack_lvl+0x188/0x24e [ 452.434601][T10683] ? __lock_acquire+0x7c40/0x7c40 [ 452.439651][T10683] ? show_regs_print_info+0x12/0x12 [ 452.444873][T10683] ? load_image+0x410/0x410 [ 452.449378][T10683] ? __virt_addr_valid+0x467/0x540 [ 452.454494][T10683] ? gadgetfs_bind+0xcf/0x820 [ 452.459172][T10683] print_report+0xa8/0x210 [ 452.463591][T10683] kasan_report+0x10b/0x140 [ 452.468094][T10683] ? gadgetfs_bind+0xcf/0x820 [ 452.472772][T10683] gadgetfs_bind+0xcf/0x820 [ 452.477277][T10683] ? kernfs_put+0x442/0x480 [ 452.481776][T10683] ? is_valid_config+0x1a0/0x1a0 [ 452.486715][T10683] gadget_bind_driver+0x2af/0x760 [ 452.491744][T10683] ? gadget_match_driver+0x130/0x130 [ 452.497029][T10683] really_probe+0x24a/0xb40 [ 452.501529][T10683] ? pm_runtime_barrier+0x147/0x1c0 [ 452.506721][T10683] __driver_probe_device+0x1f5/0x390 [ 452.512004][T10683] driver_probe_device+0x4f/0x420 [ 452.517026][T10683] __driver_attach+0x43d/0x6c0 [ 452.521783][T10683] ? driver_attach+0x40/0x40 [ 452.526367][T10683] bus_for_each_dev+0x182/0x1f0 [ 452.531209][T10683] ? kobject_add+0x230/0x230 [ 452.535793][T10683] ? bus_remove_file+0xd0/0xd0 [ 452.540549][T10683] ? do_raw_spin_unlock+0x11d/0x230 [ 452.545741][T10683] bus_add_driver+0x324/0x5d0 [ 452.550410][T10683] driver_register+0x32d/0x430 [ 452.555170][T10683] usb_gadget_register_driver_owner+0xf5/0x260 [ 452.561325][T10683] dev_config+0xe45/0x1260 [ 452.565744][T10683] ? rcu_read_lock_any_held+0xb0/0x130 [ 452.571197][T10683] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 452.576475][T10683] ? end_current_label_crit_section+0x14b/0x170 [ 452.582713][T10683] ? ep0_read+0x1880/0x1880 [ 452.587215][T10683] ? common_file_perm+0x171/0x1c0 [ 452.592238][T10683] ? ep0_read+0x1880/0x1880 [ 452.596738][T10683] vfs_write+0x2dc/0x9a0 [ 452.600987][T10683] ? file_end_write+0x250/0x250 [ 452.605847][T10683] ? __fget_files+0x28/0x460 [ 452.610437][T10683] ? __fget_files+0x3fc/0x460 [ 452.615113][T10683] ? __fdget_pos+0x2ae/0x360 [ 452.619702][T10683] ? ksys_write+0x70/0x260 [ 452.624122][T10683] ksys_write+0x14d/0x260 [ 452.628452][T10683] ? __ia32_sys_read+0x80/0x80 [ 452.633217][T10683] ? lockdep_hardirqs_on+0x94/0x140 [ 452.638410][T10683] do_syscall_64+0x4c/0xa0 [ 452.642825][T10683] ? clear_bhb_loop+0x60/0xb0 [ 452.647506][T10683] ? clear_bhb_loop+0x60/0xb0 [ 452.652182][T10683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.658073][T10683] RIP: 0033:0x7f399f59e159 [ 452.662481][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.682078][T10683] RSP: 002b:00007f39a04d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.690484][T10683] RAX: ffffffffffffffda RBX: 00007f399f825fa0 RCX: 00007f399f59e159 [ 452.698454][T10683] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 452.706417][T10683] RBP: 00007f399f635024 R08: 0000000000000000 R09: 0000000000000000 [ 452.714379][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.722349][T10683] R13: 00007f399f826038 R14: 00007f399f825fa0 R15: 00007ffea7e2b618 [ 452.730325][T10683] [ 452.733339][T10683] [ 452.735657][T10683] Allocated by task 4283: [ 452.739967][T10683] kasan_set_track+0x4b/0x70 [ 452.744554][T10683] __kasan_kmalloc+0x8e/0xa0 [ 452.749141][T10683] gadgetfs_fill_super+0x30d/0x610 [ 452.754249][T10683] get_tree_single+0xb5/0x160 [ 452.758920][T10683] vfs_get_tree+0x88/0x270 [ 452.763328][T10683] do_new_mount+0x247/0xa40 [ 452.767824][T10683] __se_sys_mount+0x2e3/0x3d0 [ 452.772500][T10683] do_syscall_64+0x4c/0xa0 [ 452.776916][T10683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.782810][T10683] [ 452.785130][T10683] Freed by task 10683: [ 452.789182][T10683] kasan_set_track+0x4b/0x70 [ 452.793769][T10683] kasan_save_free_info+0x27/0x40 [ 452.798784][T10683] ____kasan_slab_free+0x126/0x1f0 [ 452.803897][T10683] slab_free_freelist_hook+0x133/0x1b0 [ 452.809349][T10683] __kmem_cache_free+0xb6/0x200 [ 452.814196][T10683] gadgetfs_bind+0x6d2/0x820 [ 452.818783][T10683] gadget_bind_driver+0x2af/0x760 [ 452.823812][T10683] really_probe+0x24a/0xb40 [ 452.828323][T10683] __driver_probe_device+0x1f5/0x390 [ 452.833606][T10683] driver_probe_device+0x4f/0x420 [ 452.838625][T10683] __driver_attach+0x43d/0x6c0 [ 452.843382][T10683] bus_for_each_dev+0x182/0x1f0 [ 452.848221][T10683] bus_add_driver+0x324/0x5d0 [ 452.852888][T10683] driver_register+0x32d/0x430 [ 452.857642][T10683] usb_gadget_register_driver_owner+0xf5/0x260 [ 452.863794][T10683] dev_config+0xe45/0x1260 [ 452.868209][T10683] vfs_write+0x2dc/0x9a0 [ 452.872454][T10683] ksys_write+0x14d/0x260 [ 452.876779][T10683] do_syscall_64+0x4c/0xa0 [ 452.881198][T10683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.887089][T10683] [ 452.889399][T10683] The buggy address belongs to the object at ffff888146f60000 [ 452.889399][T10683] which belongs to the cache kmalloc-1k of size 1024 [ 452.903440][T10683] The buggy address is located 192 bytes inside of [ 452.903440][T10683] 1024-byte region [ffff888146f60000, ffff888146f60400) [ 452.916801][T10683] [ 452.919116][T10683] The buggy address belongs to the physical page: [ 452.925527][T10683] page:ffffea00051bd800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888146f60800 pfn:0x146f60 [ 452.937062][T10683] head:ffffea00051bd800 order:3 compound_mapcount:0 compound_pincount:0 [ 452.945372][T10683] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 452.953434][T10683] raw: 057ff00000010200 ffff888140000888 ffffea00050efa08 ffff888017441dc0 [ 452.962009][T10683] raw: ffff888146f60800 000000000010000c 00000001ffffffff 0000000000000000 [ 452.970576][T10683] page dumped because: kasan: bad access detected [ 452.976990][T10683] page_owner tracks the page as allocated [ 452.982689][T10683] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11591805751, free_ts 0 [ 453.002385][T10683] post_alloc_hook+0x173/0x1a0 [ 453.007148][T10683] get_page_from_freelist+0x206b/0x2180 [ 453.012689][T10683] __alloc_pages+0x1ec/0x4f0 [ 453.017276][T10683] alloc_page_interleave+0x24/0x1e0 [ 453.022468][T10683] alloc_slab_page+0x5d/0x180 [ 453.027142][T10683] new_slab+0x87/0x2d0 [ 453.031203][T10683] ___slab_alloc+0xbc5/0x1240 [ 453.035872][T10683] __kmem_cache_alloc_node+0x126/0x270 [ 453.041324][T10683] kmalloc_trace+0x26/0xe0 [ 453.045740][T10683] dev_pm_qos_constraints_allocate+0x4f/0x3f0 [ 453.051796][T10683] __dev_pm_qos_add_request+0x11a/0x530 [ 453.057343][T10683] dev_pm_qos_add_request+0x32/0x50 [ 453.062538][T10683] usb_hub_create_port_device+0x44b/0xaf0 [ 453.068249][T10683] hub_probe+0x2671/0x3790 [ 453.072662][T10683] usb_probe_interface+0x5be/0xae0 [ 453.077763][T10683] really_probe+0x24a/0xb40 [ 453.082262][T10683] page_owner free stack trace missing [ 453.087615][T10683] [ 453.089927][T10683] Memory state around the buggy address: [ 453.095544][T10683] ffff888146f5ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 453.103593][T10683] ffff888146f60000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.111642][T10683] >ffff888146f60080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.119690][T10683] ^ [ 453.125827][T10683] ffff888146f60100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.133872][T10683] ffff888146f60180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.141916][T10683] ================================================================== [ 453.473973][T10683] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.481215][T10683] CPU: 0 PID: 10683 Comm: syz.7.1624 Not tainted syzkaller #0 [ 453.488696][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.498763][T10683] Call Trace: [ 453.502055][T10683] [ 453.504996][T10683] dump_stack_lvl+0x188/0x24e [ 453.509701][T10683] ? memcpy+0x3c/0x60 [ 453.513694][T10683] ? show_regs_print_info+0x12/0x12 [ 453.518913][T10683] ? load_image+0x410/0x410 [ 453.523442][T10683] panic+0x2d3/0x710 [ 453.527359][T10683] ? bpf_jit_dump+0xd0/0xd0 [ 453.531879][T10683] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 453.537860][T10683] ? _raw_spin_unlock+0x40/0x40 [ 453.542704][T10683] ? print_memory_metadata+0x314/0x400 [ 453.548178][T10683] check_panic_on_warn+0x80/0xa0 [ 453.553129][T10683] ? gadgetfs_bind+0xcf/0x820 [ 453.557816][T10683] end_report+0x66/0x110 [ 453.562066][T10683] kasan_report+0x118/0x140 [ 453.566582][T10683] ? gadgetfs_bind+0xcf/0x820 [ 453.571282][T10683] gadgetfs_bind+0xcf/0x820 [ 453.575798][T10683] ? kernfs_put+0x442/0x480 [ 453.580301][T10683] ? is_valid_config+0x1a0/0x1a0 [ 453.585241][T10683] gadget_bind_driver+0x2af/0x760 [ 453.590271][T10683] ? gadget_match_driver+0x130/0x130 [ 453.595556][T10683] really_probe+0x24a/0xb40 [ 453.600056][T10683] ? pm_runtime_barrier+0x147/0x1c0 [ 453.605248][T10683] __driver_probe_device+0x1f5/0x390 [ 453.610533][T10683] driver_probe_device+0x4f/0x420 [ 453.615553][T10683] __driver_attach+0x43d/0x6c0 [ 453.620310][T10683] ? driver_attach+0x40/0x40 [ 453.624896][T10683] bus_for_each_dev+0x182/0x1f0 [ 453.629756][T10683] ? kobject_add+0x230/0x230 [ 453.634351][T10683] ? bus_remove_file+0xd0/0xd0 [ 453.639231][T10683] ? do_raw_spin_unlock+0x11d/0x230 [ 453.644431][T10683] bus_add_driver+0x324/0x5d0 [ 453.649106][T10683] driver_register+0x32d/0x430 [ 453.653867][T10683] usb_gadget_register_driver_owner+0xf5/0x260 [ 453.660023][T10683] dev_config+0xe45/0x1260 [ 453.664439][T10683] ? rcu_read_lock_any_held+0xb0/0x130 [ 453.669894][T10683] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 453.675178][T10683] ? end_current_label_crit_section+0x14b/0x170 [ 453.681421][T10683] ? ep0_read+0x1880/0x1880 [ 453.685922][T10683] ? common_file_perm+0x171/0x1c0 [ 453.690946][T10683] ? ep0_read+0x1880/0x1880 [ 453.695448][T10683] vfs_write+0x2dc/0x9a0 [ 453.699693][T10683] ? file_end_write+0x250/0x250 [ 453.704544][T10683] ? __fget_files+0x28/0x460 [ 453.709133][T10683] ? __fget_files+0x3fc/0x460 [ 453.713811][T10683] ? __fdget_pos+0x2ae/0x360 [ 453.718404][T10683] ? ksys_write+0x70/0x260 [ 453.722826][T10683] ksys_write+0x14d/0x260 [ 453.727157][T10683] ? __ia32_sys_read+0x80/0x80 [ 453.731918][T10683] ? lockdep_hardirqs_on+0x94/0x140 [ 453.737108][T10683] do_syscall_64+0x4c/0xa0 [ 453.741527][T10683] ? clear_bhb_loop+0x60/0xb0 [ 453.746200][T10683] ? clear_bhb_loop+0x60/0xb0 [ 453.750878][T10683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.756769][T10683] RIP: 0033:0x7f399f59e159 [ 453.761174][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.780770][T10683] RSP: 002b:00007f39a04d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.789179][T10683] RAX: ffffffffffffffda RBX: 00007f399f825fa0 RCX: 00007f399f59e159 [ 453.797146][T10683] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 453.805120][T10683] RBP: 00007f399f635024 R08: 0000000000000000 R09: 0000000000000000 [ 453.813090][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.821056][T10683] R13: 00007f399f826038 R14: 00007f399f825fa0 R15: 00007ffea7e2b618 [ 453.829029][T10683] [ 453.832307][T10683] Kernel Offset: disabled [ 453.836618][T10683] Rebooting in 86400 seconds..