last executing test programs: 3m24.439533547s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x2, 0xa8e, 0x0, &(0x7f0000000840)="8cb3ceedbbccb538de93b9ed58784454873c9d4f684dc5e699acabacc6b8fc4d09dd19aa219831bc1c46dc3802e090", 0x0, 0x2f}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3m24.29783288s ago: executing program 2 (id=33): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xc}}], 0x1, 0x90c0) 3m24.248494921s ago: executing program 2 (id=34): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000480), 0x800001d, 0x0) 3m23.746422853s ago: executing program 2 (id=38): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100)="cde0095f3d90dc2f", 0x8, 0x40884, &(0x7f0000000140)={0x2, 0x4e26, @multicast1}, 0x10) 3m23.704652144s ago: executing program 2 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.623131566s ago: executing program 2 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x0, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa98, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m8.45594593s ago: executing program 32 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x0, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa98, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m54.300311972s ago: executing program 1 (id=271): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000500)={0x22, 0x200, 0x6, 0x7, 0x5, 0x1, 0xd5, 0x1005, 0x6, 0x6, 0xf10a, 0xe, 0x61, 0xffffffff}) 2m52.210148821s ago: executing program 1 (id=282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 2m45.583605536s ago: executing program 1 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x6e24, @empty}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x3, 0x0, 0x0, @void, @value=0x0}, 0x20) 2m45.427597309s ago: executing program 1 (id=290): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x48000, 0x80, 0x10}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m44.952352961s ago: executing program 1 (id=293): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000052c0)={[{@nodecompose}, {@gid}, {@gid}]}, 0x1, 0x5dc, &(0x7f0000002280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m44.203702308s ago: executing program 1 (id=297): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x86100) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) dup2(r0, r1) read$FUSE(r1, 0x0, 0x0) 2m29.202181369s ago: executing program 33 (id=297): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x86100) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) dup2(r0, r1) read$FUSE(r1, 0x0, 0x0) 35.655468325s ago: executing program 0 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800004, 0x0) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1bf) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) unshare(0x40000000) socket$inet6_udplite(0xa, 0x2, 0x88) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000000)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) 34.877554624s ago: executing program 0 (id=1098): syz_mount_image$erofs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2800091, &(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./file2\x00', 0x80000, 0x82) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4000) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x3, 0x0) 34.855396164s ago: executing program 3 (id=1099): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x48000, 0x80, 0x10}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 34.686838398s ago: executing program 3 (id=1100): syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x128}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.569112521s ago: executing program 3 (id=1101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x400000f1, 0x1}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x4, 0x0, [{0x80000000, 0x0, 0x0, 0x80000008, 0x1}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x80000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x40000082, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.341424836s ago: executing program 3 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='27', 0x2) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x3a, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x5e, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xc, 0x4}}}}}]}}]}}, 0x0) 33.903284986s ago: executing program 0 (id=1106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r7, 0x0, 0x0) 33.691479522s ago: executing program 0 (id=1107): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100)="cde0095f3d90dc2f", 0x8, 0x40884, &(0x7f0000000140)={0x2, 0x4e26, @multicast1}, 0x10) 33.594673593s ago: executing program 0 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) 33.509640496s ago: executing program 0 (id=1110): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000008, 0x400, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x8001, 0x800003, 0xfffffffd, 0xfaa, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x1, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x7, 0x8003, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x5, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x6, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x6, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x7, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xbffffffffffffffe, 0x40000000000180, 0x0, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="fff8", 0x2}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$KVM_RUN(r6, 0xae80, 0x0) 31.297634147s ago: executing program 3 (id=1121): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) 31.16545899s ago: executing program 3 (id=1122): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='f'], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18.36232987s ago: executing program 34 (id=1110): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000008, 0x400, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x8001, 0x800003, 0xfffffffd, 0xfaa, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x1, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x7, 0x8003, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x5, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x6, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x6, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x7, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xbffffffffffffffe, 0x40000000000180, 0x0, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="fff8", 0x2}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.912308798s ago: executing program 35 (id=1122): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB='f'], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.066840628s ago: executing program 6 (id=1221): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x48000, 0x80, 0x10}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.982235233s ago: executing program 6 (id=1227): open(&(0x7f0000001040)='./bus\x00', 0x1435fe, 0x0) inotify_init1(0x80000) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x20040, 0x0) socket(0xa, 0x3, 0xff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.68912754s ago: executing program 6 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 7.613711332s ago: executing program 6 (id=1233): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18f) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 7.479583825s ago: executing program 6 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r7, 0x0, 0x0) 5.231524037s ago: executing program 6 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cc, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x52, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.099689271s ago: executing program 36 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cc, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x52, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.603509572s ago: executing program 5 (id=1255): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4096, 0x1000}, 0x6}], 0x400020e, 0x10000, 0x0) 4.097416724s ago: executing program 8 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1bf) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) unshare(0x40000000) socket$inet6_udplite(0xa, 0x2, 0x88) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000000)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) 3.515631808s ago: executing program 5 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2.335613245s ago: executing program 5 (id=1263): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r7, 0x0, 0x0) 1.939573414s ago: executing program 4 (id=1264): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="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", 0x411) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000500)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0xbc, 0x4}}, 0x30) close_range(r0, 0xffffffffffffffff, 0x0) 1.798891198s ago: executing program 5 (id=1266): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000180)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r1) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x31, 0x30, 0x37, 0x30, 0x65, 0x30, 0x30, 0x66, 0x30, 0x30, 0x0, 0x31, 0x33]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f0000000a40)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x30, 0x32, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x62, 0x36, 0x30, 0x39]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @desc1}, &(0x7f0000001040)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r1) add_key$keyring(&(0x7f00000010c0), &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @auto=[0x38, 0x32, 0x30, 0x32, 0x65, 0x65, 0x32, 0x66, 0x32, 0x64, 0x66, 0x39, 0x32, 0x38, 0x62, 0x57]}, &(0x7f00000011c0)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f00000012c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001340), &(0x7f0000001380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f00000013c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 1.70750101s ago: executing program 4 (id=1267): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x48000, 0x80, 0x10}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.646641841s ago: executing program 7 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000060000006d05000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000100)="20fe", 0x0}, 0x20) 1.636430832s ago: executing program 5 (id=1269): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x81, 0x1ff8, 0x4, 0xffffffffffffffff, 0xd}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x8020) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.459562445s ago: executing program 7 (id=1270): r0 = fanotify_init(0x40, 0x1) write$P9_RSYMLINK(r0, 0x0, 0x0) 1.381656047s ago: executing program 7 (id=1271): open(&(0x7f0000001040)='./bus\x00', 0x1435fe, 0x0) inotify_init1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x20040, 0x0) socket(0xa, 0x3, 0xff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 834.44049ms ago: executing program 7 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 721.905373ms ago: executing program 5 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x9, 0x7, 0xb, 0x87, 0x9, 0x22, 0x2, 0x8, 0x98, 0xa1, 0x3c, 0xee, 0x9}, {0x2, 0x0, 0x7, 0x1, 0x9, 0x6, 0x9, 0x5, 0x2f, 0x0, 0xf, 0x6}, {0x1, 0x3, 0x3, 0x6, 0x7, 0x77, 0x11, 0xc, 0x0, 0x8, 0x8, 0x40, 0xc8}], 0x7}) 651.883855ms ago: executing program 7 (id=1274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b554", 0x7, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r10, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffeffff, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x3e, 0xc, 0x400, 0x4, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0xfffffffe, 0xc, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x400001, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0xa, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x7, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 586.881856ms ago: executing program 4 (id=1275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r7, 0x0, 0x0) 403.66204ms ago: executing program 4 (id=1276): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="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", 0x411) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000500)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0xbc, 0x4}}, 0x30) close_range(r0, 0xffffffffffffffff, 0x0) 204.472005ms ago: executing program 7 (id=1277): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000580)='\x00', 0x1000400, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x1, 0x6eb, &(0x7f0000001240)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000240)={0x1, &(0x7f00000003c0)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) sysfs$2(0x2, 0x6, &(0x7f00000005c0)=""/93) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x1, 0x0) setitimer(0x0, 0x0, 0x0) read(r0, &(0x7f0000000280)=""/105, 0x69) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r5, 0x10000000005, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6547, &(0x7f0000000440)={0x0, 0x96b, 0x4406c, 0x2, 0x364, 0x0, r5}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x40000, 0x800001, 0x16f}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000056c000/0x3000)=nil, &(0x7f000083d000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000dbd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x68) 145.272306ms ago: executing program 4 (id=1278): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000180)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r1) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x31, 0x30, 0x37, 0x30, 0x65, 0x30, 0x30, 0x66, 0x30, 0x30, 0x0, 0x31, 0x33]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f0000000a40)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x30, 0x32, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x62, 0x36, 0x30, 0x39]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @desc1}, &(0x7f0000001040)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r1) add_key$keyring(&(0x7f00000010c0), &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @auto=[0x38, 0x32, 0x30, 0x32, 0x65, 0x65, 0x32, 0x66, 0x32, 0x64, 0x66, 0x39, 0x32, 0x38, 0x62, 0x57]}, &(0x7f00000011c0)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f00000012c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001340), &(0x7f0000001380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f00000013c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 0s ago: executing program 4 (id=1279): mkdirat(0xffffffffffffff9c, 0x0, 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xff) kernel console output (not intermixed with test programs): 200000000100 RDI: ffffffffffffff9c [ 202.289798][ T7459] RBP: 00007f2634034888 R08: 0000000000000000 R09: 0000000000000000 [ 202.297790][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.305780][ T7459] R13: 00007f2634225128 R14: 00007f2634225090 R15: 00007ffd78640408 [ 202.313914][ T7459] [ 203.786588][ T7500] loop4: detected capacity change from 0 to 8 [ 203.987222][ T7507] loop4: detected capacity change from 0 to 128 [ 204.090716][ T7507] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,nodelalloc,,errors=continue. Quota mode: none. [ 204.172250][ T7507] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.213539][ T7512] FAULT_INJECTION: forcing a failure. [ 204.213539][ T7512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.310892][ T7512] CPU: 0 PID: 7512 Comm: syz.0.852 Not tainted syzkaller #0 [ 204.318221][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.328295][ T7512] Call Trace: [ 204.331589][ T7512] [ 204.334549][ T7512] dump_stack_lvl+0x188/0x250 [ 204.339250][ T7512] ? show_regs_print_info+0x20/0x20 [ 204.344567][ T7512] ? load_image+0x410/0x410 [ 204.349097][ T7512] ? __lock_acquire+0x7d40/0x7d40 [ 204.354149][ T7512] ? __vmalloc_node_range+0x2dd/0x8b0 [ 204.359539][ T7512] ? vzalloc+0x75/0x80 [ 204.363644][ T7512] should_fail+0x383/0x4b0 [ 204.368105][ T7512] prepare_alloc_pages+0x1e3/0x5b0 [ 204.373243][ T7512] __alloc_pages+0x11b/0x480 [ 204.377857][ T7512] ? zone_statistics+0x170/0x170 [ 204.382831][ T7512] ? alloc_pages+0x452/0x560 [ 204.387459][ T7512] __vmalloc_node_range+0x4b1/0x8b0 [ 204.392692][ T7512] ? n_tty_open+0x19/0x150 [ 204.397136][ T7512] vzalloc+0x75/0x80 [ 204.401052][ T7512] ? n_tty_open+0x19/0x150 [ 204.405487][ T7512] n_tty_open+0x19/0x150 [ 204.409753][ T7512] tty_ldisc_setup+0xbf/0x250 [ 204.414457][ T7512] tty_init_dev+0x239/0x470 [ 204.418989][ T7512] tty_open+0x7e8/0xcd0 [ 204.423191][ T7512] ? __lock_acquire+0x7d40/0x7d40 [ 204.428246][ T7512] ? tty_compat_ioctl+0x570/0x570 [ 204.433291][ T7512] ? memset+0x1e/0x40 [ 204.437303][ T7512] ? do_raw_spin_unlock+0x11d/0x230 [ 204.442532][ T7512] chrdev_open+0x585/0x5f0 [ 204.447089][ T7512] ? cd_forget+0x160/0x160 [ 204.451538][ T7512] ? fsnotify_perm+0x3a7/0x560 [ 204.456419][ T7512] ? cd_forget+0x160/0x160 [ 204.460864][ T7512] do_dentry_open+0x7f7/0xf90 [ 204.465558][ T7512] ? vfs_open+0x2b/0x80 [ 204.469736][ T7512] path_openat+0x2718/0x2fb0 [ 204.474374][ T7512] ? __kasan_slab_alloc+0xa9/0xc0 [ 204.479420][ T7512] ? do_filp_open+0x400/0x400 [ 204.484140][ T7512] do_filp_open+0x1df/0x400 [ 204.488670][ T7512] ? vfs_tmpfile+0x300/0x300 [ 204.493311][ T7512] ? _raw_spin_unlock+0x24/0x40 [ 204.498176][ T7512] ? alloc_fd+0x59e/0x650 [ 204.502523][ T7512] do_sys_openat2+0x14b/0x500 [ 204.507215][ T7512] ? __lock_acquire+0x7d40/0x7d40 [ 204.512256][ T7512] ? do_sys_open+0xe0/0xe0 [ 204.516769][ T7512] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 204.522762][ T7512] ? lock_chain_count+0x20/0x20 [ 204.527631][ T7512] __x64_sys_openat+0x135/0x160 [ 204.532497][ T7512] do_syscall_64+0x4c/0xa0 [ 204.536918][ T7512] ? clear_bhb_loop+0x30/0x80 [ 204.541601][ T7512] ? clear_bhb_loop+0x30/0x80 [ 204.546283][ T7512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.552217][ T7512] RIP: 0033:0x7f16d14402d9 [ 204.556645][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.576348][ T7512] RSP: 002b:00007f16cf677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.584780][ T7512] RAX: ffffffffffffffda RBX: 00007f16d16c8090 RCX: 00007f16d14402d9 [ 204.592802][ T7512] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 204.600794][ T7512] RBP: 00007f16d14d7888 R08: 0000000000000000 R09: 0000000000000000 [ 204.608783][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.616767][ T7512] R13: 00007f16d16c8128 R14: 00007f16d16c8090 R15: 00007fff3d3bd098 [ 204.624774][ T7512] [ 204.711563][ T7512] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 206.445783][ T7539] netlink: 200 bytes leftover after parsing attributes in process `syz.0.856'. [ 207.826090][ T7559] FAULT_INJECTION: forcing a failure. [ 207.826090][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 207.858889][ T7559] CPU: 0 PID: 7559 Comm: syz.4.866 Not tainted syzkaller #0 [ 207.866196][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 207.876272][ T7559] Call Trace: [ 207.879545][ T7559] [ 207.882463][ T7559] dump_stack_lvl+0x188/0x250 [ 207.887245][ T7559] ? show_regs_print_info+0x20/0x20 [ 207.892446][ T7559] ? load_image+0x410/0x410 [ 207.897029][ T7559] ? __lock_acquire+0x7d40/0x7d40 [ 207.902050][ T7559] should_fail+0x383/0x4b0 [ 207.906462][ T7559] should_failslab+0x5/0x20 [ 207.910953][ T7559] slab_pre_alloc_hook+0x51/0xc0 [ 207.915898][ T7559] kmem_cache_alloc_trace+0x47/0x290 [ 207.921272][ T7559] ? request_threaded_irq+0x1e7/0x3a0 [ 207.926645][ T7559] ? radix_tree_lookup+0x235/0x280 [ 207.931879][ T7559] ? univ8250_setup_timer+0x270/0x270 [ 207.937266][ T7559] request_threaded_irq+0x1e7/0x3a0 [ 207.942473][ T7559] ? univ8250_setup_timer+0x270/0x270 [ 207.947854][ T7559] univ8250_setup_irq+0x3da/0x4f0 [ 207.952895][ T7559] serial8250_do_startup+0xe72/0x2340 [ 207.958269][ T7559] uart_startup+0x5e1/0xc70 [ 207.962767][ T7559] uart_port_activate+0xe4/0x180 [ 207.967715][ T7559] tty_port_open+0x1d1/0x2a0 [ 207.972294][ T7559] uart_open+0x43/0x50 [ 207.976365][ T7559] tty_open+0x485/0xcd0 [ 207.980516][ T7559] ? tty_compat_ioctl+0x570/0x570 [ 207.985556][ T7559] ? memset+0x1e/0x40 [ 207.989533][ T7559] ? do_raw_spin_unlock+0x11d/0x230 [ 207.994733][ T7559] chrdev_open+0x585/0x5f0 [ 207.999153][ T7559] ? cd_forget+0x160/0x160 [ 208.003567][ T7559] ? fsnotify_perm+0x3a7/0x560 [ 208.008444][ T7559] ? cd_forget+0x160/0x160 [ 208.012862][ T7559] do_dentry_open+0x7f7/0xf90 [ 208.017531][ T7559] ? vfs_open+0x2b/0x80 [ 208.021704][ T7559] path_openat+0x2718/0x2fb0 [ 208.026307][ T7559] ? __kasan_slab_alloc+0xa9/0xc0 [ 208.031331][ T7559] ? do_filp_open+0x400/0x400 [ 208.036011][ T7559] do_filp_open+0x1df/0x400 [ 208.040507][ T7559] ? vfs_tmpfile+0x300/0x300 [ 208.045091][ T7559] ? _raw_spin_unlock+0x24/0x40 [ 208.049934][ T7559] ? alloc_fd+0x59e/0x650 [ 208.054268][ T7559] do_sys_openat2+0x14b/0x500 [ 208.058950][ T7559] ? __lock_acquire+0x7d40/0x7d40 [ 208.063961][ T7559] ? do_sys_open+0xe0/0xe0 [ 208.068364][ T7559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.074337][ T7559] ? lock_chain_count+0x20/0x20 [ 208.079183][ T7559] __x64_sys_openat+0x135/0x160 [ 208.084025][ T7559] do_syscall_64+0x4c/0xa0 [ 208.088435][ T7559] ? clear_bhb_loop+0x30/0x80 [ 208.093188][ T7559] ? clear_bhb_loop+0x30/0x80 [ 208.097853][ T7559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.103735][ T7559] RIP: 0033:0x7f9ae46c92d9 [ 208.108162][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.127844][ T7559] RSP: 002b:00007f9ae2900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.136258][ T7559] RAX: ffffffffffffffda RBX: 00007f9ae4951090 RCX: 00007f9ae46c92d9 [ 208.144227][ T7559] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 208.152218][ T7559] RBP: 00007f9ae4760888 R08: 0000000000000000 R09: 0000000000000000 [ 208.160296][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.168288][ T7559] R13: 00007f9ae4951128 R14: 00007f9ae4951090 R15: 00007ffc5f183b18 [ 208.176259][ T7559] [ 208.886510][ T7583] loop5: detected capacity change from 0 to 16 [ 208.984625][ T7583] erofs: (device loop5): mounted with root inode @ nid 36. [ 209.048958][ T7583] attempt to access beyond end of device [ 209.048958][ T7583] loop5: rw=524288, want=34359738368, limit=16 [ 209.152130][ T5844] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 209.617170][ T5844] Bluetooth: hci1: Injecting HCI hardware error event [ 209.650613][ T7583] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 209.681993][ T146] Bluetooth: hci1: hardware error 0x00 [ 209.700142][ T7583] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 209.726400][ T7583] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 209.780190][ T7583] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 209.910364][ T7583] attempt to access beyond end of device [ 209.910364][ T7583] loop5: rw=524288, want=56, limit=16 [ 209.914726][ T7602] loop4: detected capacity change from 0 to 256 [ 209.922021][ T7583] attempt to access beyond end of device [ 209.922021][ T7583] loop5: rw=0, want=34359738368, limit=16 [ 209.976781][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 209.976796][ T26] audit: type=1800 audit(1791957430.565:152): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.873" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 211.216294][ T7627] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 211.820260][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 212.027428][ T7642] loop3: detected capacity change from 0 to 512 [ 212.033710][ T7641] loop4: detected capacity change from 0 to 1024 [ 212.049706][ T26] audit: type=1326 audit(1791957432.635:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 212.101169][ T7641] hfsplus: unable to parse mount options [ 212.140107][ T7642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.168519][ T26] audit: type=1326 audit(1791957432.675:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 212.336130][ T26] audit: type=1326 audit(1791957432.675:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 212.468519][ T7642] EXT4-fs (loop3): 1 truncate cleaned up [ 212.524552][ T26] audit: type=1326 audit(1791957432.675:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 212.527715][ T7642] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 212.630074][ T26] audit: type=1326 audit(1791957432.675:157): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 212.765532][ T26] audit: type=1326 audit(1791957432.675:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 212.898922][ T26] audit: type=1326 audit(1791957432.675:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 213.038928][ T26] audit: type=1326 audit(1791957432.675:160): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 213.254302][ T26] audit: type=1326 audit(1791957432.695:161): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.5.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce77bf62d9 code=0x7ffc0000 [ 214.010855][ T7669] usbcore.quirks: string doesn't fit in 127 chars. [ 214.112752][ T7675] FAULT_INJECTION: forcing a failure. [ 214.112752][ T7675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.200156][ T5842] Bluetooth: hci6: command 0x0405 tx timeout [ 214.200154][ T7675] CPU: 0 PID: 7675 Comm: syz.0.887 Not tainted syzkaller #0 [ 214.200178][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.200189][ T7675] Call Trace: [ 214.200196][ T7675] [ 214.229791][ T7675] dump_stack_lvl+0x188/0x250 [ 214.234466][ T7675] ? show_regs_print_info+0x20/0x20 [ 214.239657][ T7675] ? load_image+0x410/0x410 [ 214.244158][ T7675] ? __lock_acquire+0x7d40/0x7d40 [ 214.249184][ T7675] should_fail+0x383/0x4b0 [ 214.253598][ T7675] prepare_alloc_pages+0x1e3/0x5b0 [ 214.258708][ T7675] __alloc_pages+0x11b/0x480 [ 214.263290][ T7675] ? zone_statistics+0x170/0x170 [ 214.268218][ T7675] ? __rwlock_init+0x140/0x140 [ 214.272972][ T7675] ? tty_port_open+0x127/0x2a0 [ 214.277732][ T7675] ? alloc_pages+0x452/0x560 [ 214.282312][ T7675] get_zeroed_page+0x13/0x30 [ 214.286897][ T7675] uart_startup+0x29d/0xc70 [ 214.291397][ T7675] uart_port_activate+0xe4/0x180 [ 214.296337][ T7675] tty_port_open+0x1d1/0x2a0 [ 214.300937][ T7675] uart_open+0x43/0x50 [ 214.305003][ T7675] tty_open+0x485/0xcd0 [ 214.309168][ T7675] ? tty_compat_ioctl+0x570/0x570 [ 214.314192][ T7675] ? memset+0x1e/0x40 [ 214.318168][ T7675] ? do_raw_spin_unlock+0x11d/0x230 [ 214.323359][ T7675] chrdev_open+0x585/0x5f0 [ 214.327784][ T7675] ? cd_forget+0x160/0x160 [ 214.332189][ T7675] ? fsnotify_perm+0x3a7/0x560 [ 214.336947][ T7675] ? cd_forget+0x160/0x160 [ 214.341350][ T7675] do_dentry_open+0x7f7/0xf90 [ 214.346020][ T7675] ? vfs_open+0x2b/0x80 [ 214.350167][ T7675] path_openat+0x2718/0x2fb0 [ 214.354791][ T7675] ? __kasan_slab_alloc+0xa9/0xc0 [ 214.359824][ T7675] ? do_filp_open+0x400/0x400 [ 214.364514][ T7675] do_filp_open+0x1df/0x400 [ 214.369019][ T7675] ? vfs_tmpfile+0x300/0x300 [ 214.373615][ T7675] ? _raw_spin_unlock+0x24/0x40 [ 214.378453][ T7675] ? alloc_fd+0x59e/0x650 [ 214.382783][ T7675] do_sys_openat2+0x14b/0x500 [ 214.387452][ T7675] ? __lock_acquire+0x7d40/0x7d40 [ 214.392479][ T7675] ? do_sys_open+0xe0/0xe0 [ 214.396898][ T7675] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 214.402879][ T7675] ? lock_chain_count+0x20/0x20 [ 214.407727][ T7675] __x64_sys_openat+0x135/0x160 [ 214.412585][ T7675] do_syscall_64+0x4c/0xa0 [ 214.416987][ T7675] ? clear_bhb_loop+0x30/0x80 [ 214.421651][ T7675] ? clear_bhb_loop+0x30/0x80 [ 214.426329][ T7675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.432214][ T7675] RIP: 0033:0x7f16d14402d9 [ 214.436635][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.456227][ T7675] RSP: 002b:00007f16cf677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.464631][ T7675] RAX: ffffffffffffffda RBX: 00007f16d16c8090 RCX: 00007f16d14402d9 [ 214.472592][ T7675] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 214.480567][ T7675] RBP: 00007f16d14d7888 R08: 0000000000000000 R09: 0000000000000000 [ 214.488533][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.496491][ T7675] R13: 00007f16d16c8128 R14: 00007f16d16c8090 R15: 00007fff3d3bd098 [ 214.504461][ T7675] [ 216.717363][ T7718] input: syz1 as /devices/virtual/input/input18 [ 217.033489][ T7726] loop5: detected capacity change from 0 to 128 [ 217.093646][ T7726] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 217.397815][ T7732] loop3: detected capacity change from 0 to 16 [ 217.522432][ T7732] erofs: (device loop3): mounted with root inode @ nid 36. [ 217.570573][ T7732] attempt to access beyond end of device [ 217.570573][ T7732] loop3: rw=524288, want=34359738368, limit=16 [ 217.626366][ T7742] FAULT_INJECTION: forcing a failure. [ 217.626366][ T7742] name failslab, interval 1, probability 0, space 0, times 0 [ 217.664253][ T7732] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 217.703589][ T7732] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 217.719501][ T7742] CPU: 1 PID: 7742 Comm: syz.0.920 Not tainted syzkaller #0 [ 217.726824][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.733248][ T7732] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 217.736919][ T7742] Call Trace: [ 217.736965][ T7742] [ 217.749031][ T7732] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 217.750114][ T7742] dump_stack_lvl+0x188/0x250 [ 217.750143][ T7742] ? show_regs_print_info+0x20/0x20 [ 217.750163][ T7742] ? load_image+0x410/0x410 [ 217.753273][ T7732] attempt to access beyond end of device [ 217.753273][ T7732] loop3: rw=524288, want=56, limit=16 [ 217.762012][ T7742] ? __lock_acquire+0x7d40/0x7d40 [ 217.762048][ T7742] should_fail+0x383/0x4b0 [ 217.762075][ T7742] should_failslab+0x5/0x20 [ 217.762092][ T7742] slab_pre_alloc_hook+0x51/0xc0 [ 217.762111][ T7742] kmem_cache_alloc_trace+0x47/0x290 [ 217.762127][ T7742] ? univ8250_setup_irq+0x122/0x4f0 [ 217.762149][ T7742] univ8250_setup_irq+0x122/0x4f0 [ 217.762167][ T7742] ? lockdep_hardirqs_on+0x94/0x140 [ 217.762188][ T7742] serial8250_do_startup+0xe72/0x2340 [ 217.762217][ T7742] uart_startup+0x5e1/0xc70 [ 217.762242][ T7742] uart_port_activate+0xe4/0x180 [ 217.762262][ T7742] tty_port_open+0x1d1/0x2a0 [ 217.762283][ T7742] uart_open+0x43/0x50 [ 217.762297][ T7742] tty_open+0x485/0xcd0 [ 217.762326][ T7742] ? tty_compat_ioctl+0x570/0x570 [ 217.762341][ T7742] ? memset+0x1e/0x40 [ 217.762359][ T7742] ? do_raw_spin_unlock+0x11d/0x230 [ 217.762380][ T7742] chrdev_open+0x585/0x5f0 [ 217.762402][ T7742] ? cd_forget+0x160/0x160 [ 217.762424][ T7742] ? fsnotify_perm+0x3a7/0x560 [ 217.762442][ T7742] ? cd_forget+0x160/0x160 [ 217.762461][ T7742] do_dentry_open+0x7f7/0xf90 [ 217.762481][ T7742] ? vfs_open+0x2b/0x80 [ 217.762504][ T7742] path_openat+0x2718/0x2fb0 [ 217.762546][ T7742] ? __kasan_slab_alloc+0xa9/0xc0 [ 217.762572][ T7742] ? do_filp_open+0x400/0x400 [ 217.762610][ T7742] do_filp_open+0x1df/0x400 [ 217.762634][ T7742] ? vfs_tmpfile+0x300/0x300 [ 217.762673][ T7742] ? _raw_spin_unlock+0x24/0x40 [ 217.762691][ T7742] ? alloc_fd+0x59e/0x650 [ 217.762716][ T7742] do_sys_openat2+0x14b/0x500 [ 217.762733][ T7742] ? __lock_acquire+0x7d40/0x7d40 [ 217.762752][ T7742] ? do_sys_open+0xe0/0xe0 [ 217.773778][ T7745] loop5: detected capacity change from 0 to 16 [ 217.777103][ T7742] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.791314][ T7732] attempt to access beyond end of device [ 217.791314][ T7732] loop3: rw=0, want=34359738368, limit=16 [ 217.792951][ T7742] ? lock_chain_count+0x20/0x20 [ 217.792983][ T7742] __x64_sys_openat+0x135/0x160 [ 217.799727][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 217.799739][ T26] audit: type=1800 audit(1791957438.365:175): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.901" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 217.801875][ T7742] do_syscall_64+0x4c/0xa0 [ 217.801898][ T7742] ? clear_bhb_loop+0x30/0x80 [ 217.801917][ T7742] ? clear_bhb_loop+0x30/0x80 [ 217.801938][ T7742] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.801958][ T7742] RIP: 0033:0x7f16d14402d9 [ 218.024607][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.044203][ T7742] RSP: 002b:00007f16cf677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.052611][ T7742] RAX: ffffffffffffffda RBX: 00007f16d16c8090 RCX: 00007f16d14402d9 [ 218.060701][ T7742] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 218.068683][ T7742] RBP: 00007f16d14d7888 R08: 0000000000000000 R09: 0000000000000000 [ 218.076658][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.084620][ T7742] R13: 00007f16d16c8128 R14: 00007f16d16c8090 R15: 00007fff3d3bd098 [ 218.092594][ T7742] [ 218.142312][ T7745] erofs: (device loop5): mounted with root inode @ nid 36. [ 218.230669][ T7747] loop6: detected capacity change from 0 to 8192 [ 219.121634][ T7775] loop0: detected capacity change from 0 to 512 [ 219.196126][ T7773] loop3: detected capacity change from 0 to 2048 [ 219.305576][ T7775] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.370108][ T7775] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.421497][ T7773] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: none. [ 219.454247][ T7773] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #12: comm syz.3.930: corrupted in-inode xattr [ 219.530457][ T7773] EXT4-fs (loop3): Remounting filesystem read-only [ 219.597052][ T7799] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #12: comm syz.3.930: corrupted in-inode xattr [ 219.660258][ T7799] EXT4-fs (loop3): Remounting filesystem read-only [ 221.125653][ T7844] loop5: detected capacity change from 0 to 164 [ 221.325871][ T7853] loop6: detected capacity change from 0 to 128 [ 221.388579][ T7853] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 221.451782][ T7853] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.480150][ T7853] ext2 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.596295][ T26] audit: type=1800 audit(1791957442.185:176): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.954" name="file2" dev="loop6" ino=12 res=0 errno=0 [ 221.839505][ T7867] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 223.446751][ T7909] loop6: detected capacity change from 0 to 512 [ 223.550973][ T7909] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 223.656172][ T7909] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.971: invalid indirect mapped block 256 (level 1) [ 223.756161][ T7909] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.971: invalid indirect mapped block 2683928664 (level 1) [ 223.825722][ T7924] loop3: detected capacity change from 0 to 128 [ 223.831623][ T7909] EXT4-fs (loop6): 1 truncate cleaned up [ 223.855448][ T7909] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 223.903839][ T7928] loop4: detected capacity change from 0 to 512 [ 224.087081][ T7928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.103275][ T7924] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 224.140337][ T7928] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.151635][ T7924] FAT-fs (loop3): Filesystem has been set read-only [ 224.178472][ T7928] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.976: corrupted xattr block 33 [ 224.186632][ T7924] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 224.260717][ T7936] loop0: detected capacity change from 0 to 2048 [ 224.334170][ T7942] loop4: detected capacity change from 0 to 164 [ 224.359989][ T7936] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 224.420546][ T7942] ISOFS: unable to read i-node block [ 224.420719][ T7936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.425882][ T7942] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 224.521083][ T7936] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (36) [ 224.615501][ T7947] FAULT_INJECTION: forcing a failure. [ 224.615501][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 224.665437][ T7947] CPU: 1 PID: 7947 Comm: syz.3.983 Not tainted syzkaller #0 [ 224.672766][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 224.682830][ T7947] Call Trace: [ 224.686121][ T7947] [ 224.689055][ T7947] dump_stack_lvl+0x188/0x250 [ 224.693750][ T7947] ? show_regs_print_info+0x20/0x20 [ 224.698980][ T7947] ? load_image+0x410/0x410 [ 224.703508][ T7947] ? __lock_acquire+0x7d40/0x7d40 [ 224.708555][ T7947] should_fail+0x383/0x4b0 [ 224.712988][ T7947] should_failslab+0x5/0x20 [ 224.717502][ T7947] slab_pre_alloc_hook+0x51/0xc0 [ 224.722450][ T7947] ? getname_flags+0xb7/0x4f0 [ 224.727134][ T7947] kmem_cache_alloc+0x3d/0x280 [ 224.731918][ T7947] getname_flags+0xb7/0x4f0 [ 224.736438][ T7947] __x64_sys_rename+0x5b/0x90 [ 224.741125][ T7947] do_syscall_64+0x4c/0xa0 [ 224.745567][ T7947] ? clear_bhb_loop+0x30/0x80 [ 224.750252][ T7947] ? clear_bhb_loop+0x30/0x80 [ 224.754944][ T7947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.760851][ T7947] RIP: 0033:0x7f06db8222d9 [ 224.765267][ T7947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.784873][ T7947] RSP: 002b:00007f06d9a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 224.793310][ T7947] RAX: ffffffffffffffda RBX: 00007f06dbaa9fa0 RCX: 00007f06db8222d9 [ 224.801271][ T7947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.809228][ T7947] RBP: 00007f06db8b9888 R08: 0000000000000000 R09: 0000000000000000 [ 224.817185][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.825142][ T7947] R13: 00007f06dbaaa038 R14: 00007f06dbaa9fa0 R15: 00007ffe4f3fd388 [ 224.833114][ T7947] [ 224.922213][ T7934] loop5: detected capacity change from 0 to 164 [ 225.094689][ T7971] FAULT_INJECTION: forcing a failure. [ 225.094689][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 225.167752][ T7971] CPU: 1 PID: 7971 Comm: syz.4.989 Not tainted syzkaller #0 [ 225.175074][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.185123][ T7971] Call Trace: [ 225.188505][ T7971] [ 225.191422][ T7971] dump_stack_lvl+0x188/0x250 [ 225.196089][ T7971] ? show_regs_print_info+0x20/0x20 [ 225.201274][ T7971] ? load_image+0x410/0x410 [ 225.205764][ T7971] ? __lock_acquire+0x7d40/0x7d40 [ 225.210780][ T7971] should_fail+0x383/0x4b0 [ 225.215186][ T7971] should_failslab+0x5/0x20 [ 225.219676][ T7971] slab_pre_alloc_hook+0x51/0xc0 [ 225.224601][ T7971] kmem_cache_alloc_trace+0x47/0x290 [ 225.229875][ T7971] ? request_threaded_irq+0x1e7/0x3a0 [ 225.235243][ T7971] ? radix_tree_lookup+0x235/0x280 [ 225.240349][ T7971] ? univ8250_setup_timer+0x270/0x270 [ 225.245708][ T7971] request_threaded_irq+0x1e7/0x3a0 [ 225.250895][ T7971] ? univ8250_setup_timer+0x270/0x270 [ 225.256258][ T7971] univ8250_setup_irq+0x3da/0x4f0 [ 225.261286][ T7971] serial8250_do_startup+0xe72/0x2340 [ 225.266656][ T7971] uart_startup+0x5e1/0xc70 [ 225.271149][ T7971] uart_port_activate+0xe4/0x180 [ 225.276073][ T7971] tty_port_open+0x1d1/0x2a0 [ 225.280648][ T7971] uart_open+0x43/0x50 [ 225.284706][ T7971] tty_open+0x485/0xcd0 [ 225.288856][ T7971] ? tty_compat_ioctl+0x570/0x570 [ 225.293866][ T7971] ? memset+0x1e/0x40 [ 225.297836][ T7971] ? do_raw_spin_unlock+0x11d/0x230 [ 225.303034][ T7971] chrdev_open+0x585/0x5f0 [ 225.307459][ T7971] ? cd_forget+0x160/0x160 [ 225.311865][ T7971] ? fsnotify_perm+0x3a7/0x560 [ 225.316626][ T7971] ? cd_forget+0x160/0x160 [ 225.321033][ T7971] do_dentry_open+0x7f7/0xf90 [ 225.325696][ T7971] ? vfs_open+0x2b/0x80 [ 225.329842][ T7971] path_openat+0x2718/0x2fb0 [ 225.334528][ T7971] ? __kasan_slab_alloc+0xa9/0xc0 [ 225.339543][ T7971] ? do_filp_open+0x400/0x400 [ 225.344223][ T7971] do_filp_open+0x1df/0x400 [ 225.348722][ T7971] ? vfs_tmpfile+0x300/0x300 [ 225.353316][ T7971] ? _raw_spin_unlock+0x24/0x40 [ 225.358158][ T7971] ? alloc_fd+0x59e/0x650 [ 225.362505][ T7971] do_sys_openat2+0x14b/0x500 [ 225.367169][ T7971] ? __lock_acquire+0x7d40/0x7d40 [ 225.372273][ T7971] ? do_sys_open+0xe0/0xe0 [ 225.376677][ T7971] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 225.382652][ T7971] ? lock_chain_count+0x20/0x20 [ 225.387494][ T7971] __x64_sys_openat+0x135/0x160 [ 225.392348][ T7971] do_syscall_64+0x4c/0xa0 [ 225.396750][ T7971] ? clear_bhb_loop+0x30/0x80 [ 225.401415][ T7971] ? clear_bhb_loop+0x30/0x80 [ 225.406079][ T7971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.411958][ T7971] RIP: 0033:0x7f9ae46c92d9 [ 225.416362][ T7971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.435961][ T7971] RSP: 002b:00007f9ae2900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.444366][ T7971] RAX: ffffffffffffffda RBX: 00007f9ae4951090 RCX: 00007f9ae46c92d9 [ 225.452350][ T7971] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 225.460324][ T7971] RBP: 00007f9ae4760888 R08: 0000000000000000 R09: 0000000000000000 [ 225.468297][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.476264][ T7971] R13: 00007f9ae4951128 R14: 00007f9ae4951090 R15: 00007ffc5f183b18 [ 225.484240][ T7971] [ 225.547773][ T7976] loop6: detected capacity change from 0 to 512 [ 225.650037][ T5842] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 226.465926][ T7991] loop6: detected capacity change from 0 to 1024 [ 226.590305][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.630236][ T5842] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.675337][ T5842] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.726995][ T5842] usb 4-1: config 1 interface 1 has no altsetting 0 [ 226.752374][ T7997] loop5: detected capacity change from 0 to 512 [ 226.840101][ T4230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.920182][ T5842] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.929690][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.950886][ T5842] usb 4-1: Product: syz [ 226.976050][ T5842] usb 4-1: Manufacturer: syz [ 226.998239][ T5842] usb 4-1: SerialNumber: syz [ 227.281353][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.290110][ T5842] usb 4-1: selecting invalid altsetting 0 [ 227.296074][ T5842] usb 4-1: selecting invalid altsetting 0 [ 227.319023][ T5842] cdc_ncm 4-1:1.0: bind() failure [ 227.352868][ T5842] usb 4-1: selecting invalid altsetting 0 [ 227.378786][ T5842] cdc_ncm: probe of 4-1:1.1 failed with error -22 [ 227.395663][ T5842] usb 4-1: selecting invalid altsetting 0 [ 227.402423][ T5842] cdc_mbim: probe of 4-1:1.1 failed with error -22 [ 227.410384][ T4230] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 227.429420][ T5842] usb 4-1: selecting invalid altsetting 0 [ 227.435622][ T5842] usbtest: probe of 4-1:1.1 failed with error -22 [ 227.457035][ T5842] usb 4-1: USB disconnect, device number 14 [ 227.653080][ T4230] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 227.673625][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.683406][ T4230] usb 1-1: Product: syz [ 227.690738][ T4230] usb 1-1: Manufacturer: syz [ 227.695842][ T4230] usb 1-1: SerialNumber: syz [ 227.936068][ T8029] FAULT_INJECTION: forcing a failure. [ 227.936068][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 228.700973][ T4230] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 228.718820][ T8029] CPU: 0 PID: 8029 Comm: syz.3.1005 Not tainted syzkaller #0 [ 228.726238][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.736311][ T8029] Call Trace: [ 228.739594][ T8029] [ 228.742524][ T8029] dump_stack_lvl+0x188/0x250 [ 228.747387][ T8029] ? show_regs_print_info+0x20/0x20 [ 228.752593][ T8029] ? load_image+0x410/0x410 [ 228.757115][ T8029] ? __might_sleep+0xf0/0xf0 [ 228.761713][ T8029] ? __lock_acquire+0x7d40/0x7d40 [ 228.766742][ T8029] should_fail+0x383/0x4b0 [ 228.771160][ T8029] should_failslab+0x5/0x20 [ 228.775652][ T8029] slab_pre_alloc_hook+0x51/0xc0 [ 228.780617][ T8029] ? __proc_create+0x36f/0x8b0 [ 228.785392][ T8029] kmem_cache_alloc+0x3d/0x280 [ 228.790152][ T8029] __proc_create+0x36f/0x8b0 [ 228.794778][ T8029] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 228.800403][ T8029] ? proc_symlink+0x210/0x210 [ 228.805126][ T8029] proc_mkdir+0x3b/0x110 [ 228.809358][ T8029] register_handler_proc+0x2d8/0x370 [ 228.814637][ T8029] ? rcu_lock_release+0x20/0x20 [ 228.819483][ T8029] ? _raw_spin_unlock+0x40/0x40 [ 228.824322][ T8029] ? irq_startup+0x51a/0x670 [ 228.828905][ T8029] __setup_irq+0x13bb/0x1d60 [ 228.833500][ T8029] request_threaded_irq+0x2bd/0x3a0 [ 228.838724][ T8029] ? univ8250_setup_timer+0x270/0x270 [ 228.844234][ T8029] univ8250_setup_irq+0x3da/0x4f0 [ 228.849255][ T8029] serial8250_do_startup+0xe72/0x2340 [ 228.854713][ T8029] uart_startup+0x5e1/0xc70 [ 228.859206][ T8029] uart_port_activate+0xe4/0x180 [ 228.864219][ T8029] tty_port_open+0x1d1/0x2a0 [ 228.868806][ T8029] uart_open+0x43/0x50 [ 228.872863][ T8029] tty_open+0x485/0xcd0 [ 228.877015][ T8029] ? tty_compat_ioctl+0x570/0x570 [ 228.882566][ T8029] ? memset+0x1e/0x40 [ 228.886539][ T8029] ? do_raw_spin_unlock+0x11d/0x230 [ 228.891726][ T8029] chrdev_open+0x585/0x5f0 [ 228.896134][ T8029] ? cd_forget+0x160/0x160 [ 228.900536][ T8029] ? fsnotify_perm+0x3a7/0x560 [ 228.905289][ T8029] ? cd_forget+0x160/0x160 [ 228.909691][ T8029] do_dentry_open+0x7f7/0xf90 [ 228.914440][ T8029] ? vfs_open+0x2b/0x80 [ 228.918585][ T8029] path_openat+0x2718/0x2fb0 [ 228.923187][ T8029] ? __kasan_slab_alloc+0xa9/0xc0 [ 228.928223][ T8029] ? do_filp_open+0x400/0x400 [ 228.932992][ T8029] do_filp_open+0x1df/0x400 [ 228.937518][ T8029] ? vfs_tmpfile+0x300/0x300 [ 228.942111][ T8029] ? _raw_spin_unlock+0x24/0x40 [ 228.946948][ T8029] ? alloc_fd+0x59e/0x650 [ 228.951271][ T8029] do_sys_openat2+0x14b/0x500 [ 228.956037][ T8029] ? __lock_acquire+0x7d40/0x7d40 [ 228.961046][ T8029] ? do_sys_open+0xe0/0xe0 [ 228.965449][ T8029] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 228.971422][ T8029] ? lock_chain_count+0x20/0x20 [ 228.976279][ T8029] __x64_sys_openat+0x135/0x160 [ 228.981140][ T8029] do_syscall_64+0x4c/0xa0 [ 228.985585][ T8029] ? clear_bhb_loop+0x30/0x80 [ 228.990262][ T8029] ? clear_bhb_loop+0x30/0x80 [ 228.994934][ T8029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.000961][ T8029] RIP: 0033:0x7f06db8222d9 [ 229.005381][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.024982][ T8029] RSP: 002b:00007f06d9a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.033393][ T8029] RAX: ffffffffffffffda RBX: 00007f06dbaaa090 RCX: 00007f06db8222d9 [ 229.041381][ T8029] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 229.049379][ T8029] RBP: 00007f06db8b9888 R08: 0000000000000000 R09: 0000000000000000 [ 229.057359][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.065322][ T8029] R13: 00007f06dbaaa128 R14: 00007f06dbaaa090 R15: 00007ffe4f3fd388 [ 229.073308][ T8029] [ 229.124546][ T4230] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 229.202764][ T4230] usb 1-1: USB disconnect, device number 10 [ 229.229772][ T4895] udevd[4895]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.023985][ T8068] loop6: detected capacity change from 0 to 512 [ 231.144344][ T8068] EXT4-fs (loop6): Ignoring removed oldalloc option [ 231.160112][ T8068] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 231.252284][ T8068] EXT4-fs (loop6): 1 truncate cleaned up [ 231.260077][ T5842] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.270107][ T8068] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 231.313572][ T8068] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 231.500109][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 231.620225][ T5842] usb 5-1: config 0 has no interfaces? [ 231.625904][ T5842] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice= 0.13 [ 231.651709][ T8085] FAULT_INJECTION: forcing a failure. [ 231.651709][ T8085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.677869][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.727956][ T5842] usb 5-1: config 0 descriptor?? [ 231.916020][ T8085] CPU: 1 PID: 8085 Comm: syz.3.1020 Not tainted syzkaller #0 [ 231.923445][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.933665][ T8085] Call Trace: [ 231.936938][ T8085] [ 231.939874][ T8085] dump_stack_lvl+0x188/0x250 [ 231.944556][ T8085] ? show_regs_print_info+0x20/0x20 [ 231.949744][ T8085] ? load_image+0x410/0x410 [ 231.954320][ T8085] ? __lock_acquire+0x7d40/0x7d40 [ 231.959351][ T8085] should_fail+0x383/0x4b0 [ 231.963787][ T8085] prepare_alloc_pages+0x1e3/0x5b0 [ 231.968902][ T8085] __alloc_pages+0x11b/0x480 [ 231.973503][ T8085] ? zone_statistics+0x170/0x170 [ 231.978431][ T8085] ? __rwlock_init+0x140/0x140 [ 231.983178][ T8085] ? tty_port_open+0x127/0x2a0 [ 231.987927][ T8085] ? alloc_pages+0x452/0x560 [ 231.992520][ T8085] ? serial8250_set_ldisc+0x70/0x70 [ 231.997703][ T8085] get_zeroed_page+0x13/0x30 [ 232.002299][ T8085] uart_startup+0x29d/0xc70 [ 232.006787][ T8085] uart_port_activate+0xe4/0x180 [ 232.011719][ T8085] tty_port_open+0x1d1/0x2a0 [ 232.016305][ T8085] uart_open+0x43/0x50 [ 232.020353][ T8085] tty_open+0x485/0xcd0 [ 232.024513][ T8085] ? tty_compat_ioctl+0x570/0x570 [ 232.029534][ T8085] ? memset+0x1e/0x40 [ 232.033498][ T8085] ? do_raw_spin_unlock+0x11d/0x230 [ 232.038693][ T8085] chrdev_open+0x585/0x5f0 [ 232.043092][ T8085] ? cd_forget+0x160/0x160 [ 232.047502][ T8085] ? fsnotify_perm+0x3a7/0x560 [ 232.052262][ T8085] ? cd_forget+0x160/0x160 [ 232.056659][ T8085] do_dentry_open+0x7f7/0xf90 [ 232.061360][ T8085] ? vfs_open+0x2b/0x80 [ 232.065501][ T8085] path_openat+0x2718/0x2fb0 [ 232.070091][ T8085] ? do_filp_open+0x400/0x400 [ 232.074758][ T8085] do_filp_open+0x1df/0x400 [ 232.079260][ T8085] ? vfs_tmpfile+0x300/0x300 [ 232.083839][ T8085] ? _raw_spin_unlock+0x24/0x40 [ 232.088687][ T8085] ? alloc_fd+0x59e/0x650 [ 232.093014][ T8085] do_sys_openat2+0x14b/0x500 [ 232.097670][ T8085] ? __lock_acquire+0x7d40/0x7d40 [ 232.102692][ T8085] ? do_sys_open+0xe0/0xe0 [ 232.107091][ T8085] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 232.113054][ T8085] ? lock_chain_count+0x20/0x20 [ 232.117890][ T8085] __x64_sys_openat+0x135/0x160 [ 232.122725][ T8085] do_syscall_64+0x4c/0xa0 [ 232.127121][ T8085] ? clear_bhb_loop+0x30/0x80 [ 232.131913][ T8085] ? clear_bhb_loop+0x30/0x80 [ 232.136571][ T8085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.142484][ T8085] RIP: 0033:0x7f06db8222d9 [ 232.146894][ T8085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.166483][ T8085] RSP: 002b:00007f06d9a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.174913][ T8085] RAX: ffffffffffffffda RBX: 00007f06dbaaa090 RCX: 00007f06db8222d9 [ 232.182888][ T8085] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 232.190917][ T8085] RBP: 00007f06db8b9888 R08: 0000000000000000 R09: 0000000000000000 [ 232.198912][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.206889][ T8085] R13: 00007f06dbaaa128 R14: 00007f06dbaaa090 R15: 00007ffe4f3fd388 [ 232.214876][ T8085] [ 232.238167][ T4175] usb 5-1: USB disconnect, device number 7 [ 234.124271][ T8156] loop5: detected capacity change from 0 to 512 [ 234.175175][ T8156] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 234.212280][ T8156] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 234.268613][ T8156] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.1045: bad orphan inode 131072 [ 234.327012][ T8156] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,data=journal,norecovery,,errors=continue. Quota mode: none. [ 234.606196][ T8173] loop0: detected capacity change from 0 to 16 [ 234.660483][ T8173] erofs: (device loop0): mounted with root inode @ nid 36. [ 234.690693][ T26] audit: type=1800 audit(1791957455.285:177): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1050" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 234.768448][ T8175] loop6: detected capacity change from 0 to 512 [ 234.875002][ T8175] EXT4-fs (loop6): Ignoring removed oldalloc option [ 234.906023][ T8175] EXT4-fs (loop6): Ignoring removed nobh option [ 234.938941][ T8175] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.1051: corrupted inode contents [ 234.967921][ T8175] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 234.987153][ T8175] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.1051: corrupted inode contents [ 235.008695][ T8175] EXT4-fs error (device loop6): ext4_evict_inode:332: inode #15: comm syz.6.1051: mark_inode_dirty error [ 235.038270][ T8175] EXT4-fs (loop6): 1 orphan inode deleted [ 235.069071][ T8175] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,quota,nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 235.857467][ T8203] loop3: detected capacity change from 0 to 2048 [ 235.863872][ T8206] loop6: detected capacity change from 0 to 128 [ 235.918859][ T8206] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,bsddf,,errors=continue. Quota mode: writeback. [ 235.960235][ T8206] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.016735][ T8203] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x00000000000018c4,,errors=continue. Quota mode: none. [ 236.692750][ T8241] FAULT_INJECTION: forcing a failure. [ 236.692750][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 236.698161][ T8243] loop0: detected capacity change from 0 to 256 [ 236.744523][ T8243] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.763489][ T8241] CPU: 0 PID: 8241 Comm: syz.3.1071 Not tainted syzkaller #0 [ 236.770906][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.781153][ T8241] Call Trace: [ 236.784490][ T8241] [ 236.787438][ T8241] dump_stack_lvl+0x188/0x250 [ 236.792137][ T8241] ? show_regs_print_info+0x20/0x20 [ 236.797356][ T8241] ? load_image+0x410/0x410 [ 236.802049][ T8241] ? __lock_acquire+0x7d40/0x7d40 [ 236.807087][ T8241] should_fail+0x383/0x4b0 [ 236.811517][ T8241] should_failslab+0x5/0x20 [ 236.816019][ T8241] slab_pre_alloc_hook+0x51/0xc0 [ 236.820958][ T8241] kmem_cache_alloc_trace+0x47/0x290 [ 236.826233][ T8241] ? request_threaded_irq+0x1e7/0x3a0 [ 236.831598][ T8241] ? radix_tree_lookup+0x235/0x280 [ 236.836789][ T8241] ? univ8250_setup_timer+0x270/0x270 [ 236.842151][ T8241] request_threaded_irq+0x1e7/0x3a0 [ 236.847352][ T8241] ? univ8250_setup_timer+0x270/0x270 [ 236.852714][ T8241] univ8250_setup_irq+0x3da/0x4f0 [ 236.857746][ T8241] serial8250_do_startup+0xe72/0x2340 [ 236.863122][ T8241] uart_startup+0x5e1/0xc70 [ 236.867621][ T8241] uart_port_activate+0xe4/0x180 [ 236.872545][ T8241] tty_port_open+0x1d1/0x2a0 [ 236.877127][ T8241] uart_open+0x43/0x50 [ 236.881252][ T8241] tty_open+0x485/0xcd0 [ 236.885407][ T8241] ? tty_compat_ioctl+0x570/0x570 [ 236.890420][ T8241] ? memset+0x1e/0x40 [ 236.894391][ T8241] ? do_raw_spin_unlock+0x11d/0x230 [ 236.899579][ T8241] chrdev_open+0x585/0x5f0 [ 236.903990][ T8241] ? cd_forget+0x160/0x160 [ 236.908396][ T8241] ? fsnotify_perm+0x3a7/0x560 [ 236.913148][ T8241] ? cd_forget+0x160/0x160 [ 236.917554][ T8241] do_dentry_open+0x7f7/0xf90 [ 236.922220][ T8241] ? vfs_open+0x2b/0x80 [ 236.926369][ T8241] path_openat+0x2718/0x2fb0 [ 236.930969][ T8241] ? __kasan_slab_alloc+0xa9/0xc0 [ 236.935990][ T8241] ? do_filp_open+0x400/0x400 [ 236.940688][ T8241] do_filp_open+0x1df/0x400 [ 236.945207][ T8241] ? vfs_tmpfile+0x300/0x300 [ 236.949805][ T8241] ? _raw_spin_unlock+0x24/0x40 [ 236.954664][ T8241] ? alloc_fd+0x59e/0x650 [ 236.958999][ T8241] do_sys_openat2+0x14b/0x500 [ 236.963674][ T8241] ? __lock_acquire+0x7d40/0x7d40 [ 236.968699][ T8241] ? do_sys_open+0xe0/0xe0 [ 236.973113][ T8241] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.979240][ T8241] ? lock_chain_count+0x20/0x20 [ 236.984110][ T8241] __x64_sys_openat+0x135/0x160 [ 236.989053][ T8241] do_syscall_64+0x4c/0xa0 [ 236.993526][ T8241] ? clear_bhb_loop+0x30/0x80 [ 236.998212][ T8241] ? clear_bhb_loop+0x30/0x80 [ 237.002888][ T8241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.008897][ T8241] RIP: 0033:0x7f06db8222d9 [ 237.013324][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.032965][ T8241] RSP: 002b:00007f06d9a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.041387][ T8241] RAX: ffffffffffffffda RBX: 00007f06dbaaa090 RCX: 00007f06db8222d9 [ 237.049359][ T8241] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 237.057323][ T8241] RBP: 00007f06db8b9888 R08: 0000000000000000 R09: 0000000000000000 [ 237.065395][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.073378][ T8241] R13: 00007f06dbaaa128 R14: 00007f06dbaaa090 R15: 00007ffe4f3fd388 [ 237.081366][ T8241] [ 237.097634][ T8243] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.142618][ T8252] loop6: detected capacity change from 0 to 2048 [ 238.257804][ T8255] loop3: detected capacity change from 0 to 2048 [ 238.292960][ T8252] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.337119][ T8252] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.388655][ T8255] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 238.428071][ T8255] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.1078: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 238.456106][ T8255] EXT4-fs (loop3): Remounting filesystem read-only [ 238.464811][ T8255] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.1078: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 238.501507][ T8255] EXT4-fs (loop3): Remounting filesystem read-only [ 239.203528][ T8298] FAULT_INJECTION: forcing a failure. [ 239.203528][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 239.301413][ T8298] CPU: 1 PID: 8298 Comm: syz.6.1088 Not tainted syzkaller #0 [ 239.308842][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.318922][ T8298] Call Trace: [ 239.322217][ T8298] [ 239.325159][ T8298] dump_stack_lvl+0x188/0x250 [ 239.329858][ T8298] ? show_regs_print_info+0x20/0x20 [ 239.335168][ T8298] ? load_image+0x410/0x410 [ 239.339698][ T8298] ? __lock_acquire+0x7d40/0x7d40 [ 239.344784][ T8298] should_fail+0x383/0x4b0 [ 239.349226][ T8298] should_failslab+0x5/0x20 [ 239.353749][ T8298] slab_pre_alloc_hook+0x51/0xc0 [ 239.358712][ T8298] kmem_cache_alloc_trace+0x47/0x290 [ 239.364017][ T8298] ? request_threaded_irq+0x1e7/0x3a0 [ 239.369409][ T8298] ? radix_tree_lookup+0x235/0x280 [ 239.374542][ T8298] ? univ8250_setup_timer+0x270/0x270 [ 239.379929][ T8298] request_threaded_irq+0x1e7/0x3a0 [ 239.385141][ T8298] ? univ8250_setup_timer+0x270/0x270 [ 239.390534][ T8298] univ8250_setup_irq+0x3da/0x4f0 [ 239.395591][ T8298] serial8250_do_startup+0xe72/0x2340 [ 239.400997][ T8298] uart_startup+0x5e1/0xc70 [ 239.405647][ T8298] uart_port_activate+0xe4/0x180 [ 239.410594][ T8298] tty_port_open+0x1d1/0x2a0 [ 239.415201][ T8298] uart_open+0x43/0x50 [ 239.419278][ T8298] tty_open+0x485/0xcd0 [ 239.423466][ T8298] ? tty_compat_ioctl+0x570/0x570 [ 239.428507][ T8298] ? memset+0x1e/0x40 [ 239.432504][ T8298] ? do_raw_spin_unlock+0x11d/0x230 [ 239.437717][ T8298] chrdev_open+0x585/0x5f0 [ 239.442148][ T8298] ? cd_forget+0x160/0x160 [ 239.446572][ T8298] ? fsnotify_perm+0x3a7/0x560 [ 239.451342][ T8298] ? cd_forget+0x160/0x160 [ 239.455862][ T8298] do_dentry_open+0x7f7/0xf90 [ 239.460556][ T8298] ? vfs_open+0x2b/0x80 [ 239.464731][ T8298] path_openat+0x2718/0x2fb0 [ 239.469359][ T8298] ? __kasan_slab_alloc+0xa9/0xc0 [ 239.474404][ T8298] ? do_filp_open+0x400/0x400 [ 239.479110][ T8298] do_filp_open+0x1df/0x400 [ 239.483641][ T8298] ? vfs_tmpfile+0x300/0x300 [ 239.488351][ T8298] ? _raw_spin_unlock+0x24/0x40 [ 239.493211][ T8298] ? alloc_fd+0x59e/0x650 [ 239.497550][ T8298] do_sys_openat2+0x14b/0x500 [ 239.502228][ T8298] ? __lock_acquire+0x7d40/0x7d40 [ 239.507264][ T8298] ? do_sys_open+0xe0/0xe0 [ 239.511680][ T8298] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 239.517661][ T8298] ? lock_chain_count+0x20/0x20 [ 239.522518][ T8298] __x64_sys_openat+0x135/0x160 [ 239.527373][ T8298] do_syscall_64+0x4c/0xa0 [ 239.531785][ T8298] ? clear_bhb_loop+0x30/0x80 [ 239.536455][ T8298] ? clear_bhb_loop+0x30/0x80 [ 239.541339][ T8298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.547229][ T8298] RIP: 0033:0x7f2633f9d2d9 [ 239.551634][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.571262][ T8298] RSP: 002b:00007f26321d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.579672][ T8298] RAX: ffffffffffffffda RBX: 00007f2634225090 RCX: 00007f2633f9d2d9 [ 239.587647][ T8298] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 239.595605][ T8298] RBP: 00007f2634034888 R08: 0000000000000000 R09: 0000000000000000 [ 239.603566][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.611524][ T8298] R13: 00007f2634225128 R14: 00007f2634225090 R15: 00007ffd78640408 [ 239.619802][ T8298] [ 239.944538][ T8309] loop0: detected capacity change from 0 to 1024 [ 239.983594][ T8311] "syz.6.1093" (8311) uses obsolete ecb(arc4) skcipher [ 240.058079][ T8313] loop6: detected capacity change from 0 to 512 [ 240.158449][ T8313] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=continue,,errors=continue. Quota mode: none. [ 240.303036][ T8320] FAULT_INJECTION: forcing a failure. [ 240.303036][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 240.401819][ T8320] CPU: 0 PID: 8320 Comm: syz.0.1105 Not tainted syzkaller #0 [ 240.409282][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.419524][ T8320] Call Trace: [ 240.422813][ T8320] [ 240.425747][ T8320] dump_stack_lvl+0x188/0x250 [ 240.430466][ T8320] ? show_regs_print_info+0x20/0x20 [ 240.435669][ T8320] ? load_image+0x410/0x410 [ 240.440175][ T8320] ? __might_sleep+0xf0/0xf0 [ 240.444784][ T8320] ? __lock_acquire+0x7d40/0x7d40 [ 240.449803][ T8320] should_fail+0x383/0x4b0 [ 240.454221][ T8320] should_failslab+0x5/0x20 [ 240.458711][ T8320] slab_pre_alloc_hook+0x51/0xc0 [ 240.463637][ T8320] ? __proc_create+0x36f/0x8b0 [ 240.468392][ T8320] kmem_cache_alloc+0x3d/0x280 [ 240.473151][ T8320] __proc_create+0x36f/0x8b0 [ 240.477735][ T8320] ? proc_symlink+0x210/0x210 [ 240.482402][ T8320] ? vscnprintf+0x80/0x80 [ 240.486725][ T8320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 240.492621][ T8320] proc_mkdir+0x3b/0x110 [ 240.496860][ T8320] register_handler_proc+0x2d8/0x370 [ 240.502145][ T8320] ? rcu_lock_release+0x20/0x20 [ 240.506990][ T8320] ? _raw_spin_unlock+0x40/0x40 [ 240.511826][ T8320] ? irq_startup+0x51a/0x670 [ 240.516406][ T8320] __setup_irq+0x13bb/0x1d60 [ 240.520998][ T8320] request_threaded_irq+0x2bd/0x3a0 [ 240.526186][ T8320] ? univ8250_setup_timer+0x270/0x270 [ 240.531546][ T8320] univ8250_setup_irq+0x3da/0x4f0 [ 240.536560][ T8320] serial8250_do_startup+0xe72/0x2340 [ 240.541925][ T8320] uart_startup+0x5e1/0xc70 [ 240.546421][ T8320] uart_port_activate+0xe4/0x180 [ 240.551348][ T8320] tty_port_open+0x1d1/0x2a0 [ 240.555928][ T8320] uart_open+0x43/0x50 [ 240.559980][ T8320] tty_open+0x485/0xcd0 [ 240.564138][ T8320] ? tty_compat_ioctl+0x570/0x570 [ 240.569152][ T8320] ? memset+0x1e/0x40 [ 240.573121][ T8320] ? do_raw_spin_unlock+0x11d/0x230 [ 240.578313][ T8320] chrdev_open+0x585/0x5f0 [ 240.582719][ T8320] ? cd_forget+0x160/0x160 [ 240.587131][ T8320] ? fsnotify_perm+0x3a7/0x560 [ 240.591883][ T8320] ? cd_forget+0x160/0x160 [ 240.596288][ T8320] do_dentry_open+0x7f7/0xf90 [ 240.600955][ T8320] ? vfs_open+0x2b/0x80 [ 240.605107][ T8320] path_openat+0x2718/0x2fb0 [ 240.609704][ T8320] ? __kasan_slab_alloc+0xa9/0xc0 [ 240.614722][ T8320] ? do_filp_open+0x400/0x400 [ 240.619400][ T8320] do_filp_open+0x1df/0x400 [ 240.623894][ T8320] ? vfs_tmpfile+0x300/0x300 [ 240.628485][ T8320] ? _raw_spin_unlock+0x24/0x40 [ 240.633319][ T8320] ? alloc_fd+0x59e/0x650 [ 240.637641][ T8320] do_sys_openat2+0x14b/0x500 [ 240.642311][ T8320] ? __lock_acquire+0x7d40/0x7d40 [ 240.647324][ T8320] ? do_sys_open+0xe0/0xe0 [ 240.651730][ T8320] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.657714][ T8320] ? lock_chain_count+0x20/0x20 [ 240.662552][ T8320] __x64_sys_openat+0x135/0x160 [ 240.667394][ T8320] do_syscall_64+0x4c/0xa0 [ 240.671797][ T8320] ? clear_bhb_loop+0x30/0x80 [ 240.676460][ T8320] ? clear_bhb_loop+0x30/0x80 [ 240.681126][ T8320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.687009][ T8320] RIP: 0033:0x7f16d14402d9 [ 240.691413][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.711007][ T8320] RSP: 002b:00007f16cf677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.719416][ T8320] RAX: ffffffffffffffda RBX: 00007f16d16c8090 RCX: 00007f16d14402d9 [ 240.727375][ T8320] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 240.735334][ T8320] RBP: 00007f16d14d7888 R08: 0000000000000000 R09: 0000000000000000 [ 240.743290][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.751249][ T8320] R13: 00007f16d16c8128 R14: 00007f16d16c8090 R15: 00007fff3d3bd098 [ 240.759220][ T8320] [ 241.465769][ T8319] syz.4.1095 (8319): drop_caches: 2 [ 241.479596][ T8338] loop0: detected capacity change from 0 to 16 [ 241.496367][ T8338] erofs: (device loop0): mounted with root inode @ nid 36. [ 241.505268][ T8338] attempt to access beyond end of device [ 241.505268][ T8338] loop0: rw=524288, want=34359738368, limit=16 [ 241.515057][ T8338] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 241.515086][ T8338] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 241.515104][ T8338] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 241.515123][ T8338] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 241.515209][ T8338] attempt to access beyond end of device [ 241.515209][ T8338] loop0: rw=524288, want=56, limit=16 [ 241.529831][ T8340] FAULT_INJECTION: forcing a failure. [ 241.529831][ T8340] name failslab, interval 1, probability 0, space 0, times 0 [ 241.529860][ T8340] CPU: 0 PID: 8340 Comm: syz.3.1102 Not tainted syzkaller #0 [ 241.529879][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.529889][ T8340] Call Trace: [ 241.529895][ T8340] [ 241.529906][ T8340] dump_stack_lvl+0x188/0x250 [ 241.529930][ T8340] ? show_regs_print_info+0x20/0x20 [ 241.529948][ T8340] ? load_image+0x410/0x410 [ 241.529968][ T8340] ? __might_sleep+0xf0/0xf0 [ 241.529987][ T8340] ? __lock_acquire+0x7d40/0x7d40 [ 241.530013][ T8340] should_fail+0x383/0x4b0 [ 241.530035][ T8340] should_failslab+0x5/0x20 [ 241.530051][ T8340] slab_pre_alloc_hook+0x51/0xc0 [ 241.530081][ T8340] __kmalloc+0x6b/0x340 [ 241.530096][ T8340] ? tomoyo_encode+0x28a/0x550 [ 241.530122][ T8340] tomoyo_encode+0x28a/0x550 [ 241.530146][ T8340] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 241.530180][ T8340] tomoyo_path_number_perm+0x251/0x6b0 [ 241.530202][ T8340] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 241.530222][ T8340] ? make_qualifier+0x3b0/0x3b0 [ 241.530287][ T8340] security_file_ioctl+0x6c/0xa0 [ 241.530308][ T8340] __se_sys_ioctl+0x48/0x170 [ 241.530329][ T8340] do_syscall_64+0x4c/0xa0 [ 241.530348][ T8340] ? clear_bhb_loop+0x30/0x80 [ 241.530367][ T8340] ? clear_bhb_loop+0x30/0x80 [ 241.530383][ T8340] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.530403][ T8340] RIP: 0033:0x7f06db821f6b [ 241.530419][ T8340] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 241.530434][ T8340] RSP: 002b:00007f06d9a77f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.530454][ T8340] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f06db821f6b [ 241.530468][ T8340] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 241.530479][ T8340] RBP: 00007f06d9a78fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 241.530492][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.530503][ T8340] R13: 0000200000000380 R14: 0000000000000001 R15: 0000000000000000 [ 241.530530][ T8340] [ 241.530616][ T8340] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.539284][ T8338] attempt to access beyond end of device [ 241.539284][ T8338] loop0: rw=0, want=34359738368, limit=16 [ 241.823738][ T4230] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 241.831840][ T26] audit: type=1800 audit(1791957462.425:178): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1098" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 242.155458][ T4230] usb 4-1: Invalid ep0 maxpacket: 32 [ 242.330276][ T4230] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 242.600355][ T4230] usb 4-1: Invalid ep0 maxpacket: 32 [ 242.618680][ T4230] usb usb4-port1: attempt power cycle [ 243.100121][ T4230] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 243.139220][ T8373] FAULT_INJECTION: forcing a failure. [ 243.139220][ T8373] name failslab, interval 1, probability 0, space 0, times 0 [ 243.191934][ T8373] CPU: 1 PID: 8373 Comm: syz.4.1113 Not tainted syzkaller #0 [ 243.199368][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.209429][ T8373] Call Trace: [ 243.212714][ T8373] [ 243.215653][ T8373] dump_stack_lvl+0x188/0x250 [ 243.220346][ T8373] ? show_regs_print_info+0x20/0x20 [ 243.225564][ T8373] ? load_image+0x410/0x410 [ 243.230077][ T8373] ? __lock_acquire+0x7d40/0x7d40 [ 243.235120][ T8373] should_fail+0x383/0x4b0 [ 243.239556][ T8373] should_failslab+0x5/0x20 [ 243.244067][ T8373] slab_pre_alloc_hook+0x51/0xc0 [ 243.249018][ T8373] kmem_cache_alloc_trace+0x47/0x290 [ 243.254314][ T8373] ? univ8250_setup_irq+0x122/0x4f0 [ 243.254588][ T4230] usb 4-1: Invalid ep0 maxpacket: 32 [ 243.259533][ T8373] univ8250_setup_irq+0x122/0x4f0 [ 243.259561][ T8373] ? lockdep_hardirqs_on+0x94/0x140 [ 243.259585][ T8373] serial8250_do_startup+0xe72/0x2340 [ 243.259611][ T8373] uart_startup+0x5e1/0xc70 [ 243.259635][ T8373] uart_port_activate+0xe4/0x180 [ 243.259656][ T8373] tty_port_open+0x1d1/0x2a0 [ 243.259679][ T8373] uart_open+0x43/0x50 [ 243.259696][ T8373] tty_open+0x485/0xcd0 [ 243.302729][ T8373] ? tty_compat_ioctl+0x570/0x570 [ 243.307768][ T8373] ? memset+0x1e/0x40 [ 243.311760][ T8373] ? do_raw_spin_unlock+0x11d/0x230 [ 243.316969][ T8373] chrdev_open+0x585/0x5f0 [ 243.321400][ T8373] ? cd_forget+0x160/0x160 [ 243.325829][ T8373] ? fsnotify_perm+0x3a7/0x560 [ 243.330605][ T8373] ? cd_forget+0x160/0x160 [ 243.335030][ T8373] do_dentry_open+0x7f7/0xf90 [ 243.339711][ T8373] ? vfs_open+0x2b/0x80 [ 243.343885][ T8373] path_openat+0x2718/0x2fb0 [ 243.348507][ T8373] ? __kasan_slab_alloc+0xa9/0xc0 [ 243.353548][ T8373] ? do_filp_open+0x400/0x400 [ 243.358295][ T8373] do_filp_open+0x1df/0x400 [ 243.362816][ T8373] ? vfs_tmpfile+0x300/0x300 [ 243.367429][ T8373] ? _raw_spin_unlock+0x24/0x40 [ 243.372288][ T8373] ? alloc_fd+0x59e/0x650 [ 243.376640][ T8373] do_sys_openat2+0x14b/0x500 [ 243.381327][ T8373] ? __lock_acquire+0x7d40/0x7d40 [ 243.386374][ T8373] ? do_sys_open+0xe0/0xe0 [ 243.390792][ T8373] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 243.396788][ T8373] ? lock_chain_count+0x20/0x20 [ 243.401658][ T8373] __x64_sys_openat+0x135/0x160 [ 243.401685][ T8373] do_syscall_64+0x4c/0xa0 [ 243.401705][ T8373] ? clear_bhb_loop+0x30/0x80 [ 243.401723][ T8373] ? clear_bhb_loop+0x30/0x80 [ 243.401744][ T8373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.426858][ T8373] RIP: 0033:0x7f9ae46c92d9 [ 243.431277][ T8373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.450890][ T8373] RSP: 002b:00007f9ae2900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.456168][ T4230] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 243.459487][ T8373] RAX: ffffffffffffffda RBX: 00007f9ae4951090 RCX: 00007f9ae46c92d9 [ 243.459504][ T8373] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 243.459516][ T8373] RBP: 00007f9ae4760888 R08: 0000000000000000 R09: 0000000000000000 [ 243.459526][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.459537][ T8373] R13: 00007f9ae4951128 R14: 00007f9ae4951090 R15: 00007ffc5f183b18 [ 243.459564][ T8373] [ 243.695429][ T4230] usb 4-1: Invalid ep0 maxpacket: 32 [ 243.703324][ T4230] usb usb4-port1: unable to enumerate USB device [ 243.849431][ T8385] device syzkaller1 entered promiscuous mode [ 244.102604][ T8391] FAULT_INJECTION: forcing a failure. [ 244.102604][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 244.125307][ T8391] CPU: 0 PID: 8391 Comm: syz.5.1118 Not tainted syzkaller #0 [ 244.132737][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.142825][ T8391] Call Trace: [ 244.146115][ T8391] [ 244.149049][ T8391] dump_stack_lvl+0x188/0x250 [ 244.153742][ T8391] ? show_regs_print_info+0x20/0x20 [ 244.158953][ T8391] ? load_image+0x410/0x410 [ 244.163464][ T8391] ? __might_sleep+0xf0/0xf0 [ 244.168062][ T8391] ? __lock_acquire+0x7d40/0x7d40 [ 244.173198][ T8391] should_fail+0x383/0x4b0 [ 244.177631][ T8391] should_failslab+0x5/0x20 [ 244.182144][ T8391] slab_pre_alloc_hook+0x51/0xc0 [ 244.187094][ T8391] ? seq_open+0x5e/0x130 [ 244.191351][ T8391] kmem_cache_alloc+0x3d/0x280 [ 244.196132][ T8391] seq_open+0x5e/0x130 [ 244.200219][ T8391] kernfs_fop_open+0x524/0xba0 [ 244.205003][ T8391] ? kernfs_fop_mmap+0x4a0/0x4a0 [ 244.209954][ T8391] do_dentry_open+0x7f7/0xf90 [ 244.214649][ T8391] ? vfs_open+0x2b/0x80 [ 244.218820][ T8391] path_openat+0x2718/0x2fb0 [ 244.223449][ T8391] ? __kasan_slab_alloc+0xa9/0xc0 [ 244.228495][ T8391] ? do_filp_open+0x400/0x400 [ 244.233204][ T8391] do_filp_open+0x1df/0x400 [ 244.237730][ T8391] ? vfs_tmpfile+0x300/0x300 [ 244.242352][ T8391] ? _raw_spin_unlock+0x24/0x40 [ 244.247215][ T8391] ? alloc_fd+0x59e/0x650 [ 244.251564][ T8391] do_sys_openat2+0x14b/0x500 [ 244.256255][ T8391] ? __lock_acquire+0x7d40/0x7d40 [ 244.261305][ T8391] ? do_sys_open+0xe0/0xe0 [ 244.265738][ T8391] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 244.271733][ T8391] ? lock_chain_count+0x20/0x20 [ 244.276615][ T8391] __x64_sys_openat+0x135/0x160 [ 244.281485][ T8391] do_syscall_64+0x4c/0xa0 [ 244.285916][ T8391] ? clear_bhb_loop+0x30/0x80 [ 244.290609][ T8391] ? clear_bhb_loop+0x30/0x80 [ 244.295306][ T8391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.301214][ T8391] RIP: 0033:0x7fce77bf62d9 [ 244.305727][ T8391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.325344][ T8391] RSP: 002b:00007fce75e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.333778][ T8391] RAX: ffffffffffffffda RBX: 00007fce77e7dfa0 RCX: 00007fce77bf62d9 [ 244.341768][ T8391] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 244.349752][ T8391] RBP: 00007fce77c8d888 R08: 0000000000000000 R09: 0000000000000000 [ 244.357740][ T8391] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 244.365726][ T8391] R13: 00007fce77e7e038 R14: 00007fce77e7dfa0 R15: 00007ffee04bfd08 [ 244.373727][ T8391] [ 244.551570][ T8396] tipc: Started in network mode [ 244.570127][ T8396] tipc: Node identity 4, cluster identity 4711 [ 244.580168][ T8396] tipc: Node number set to 4 [ 246.329551][ T8411] FAULT_INJECTION: forcing a failure. [ 246.329551][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 246.418540][ T8411] CPU: 0 PID: 8411 Comm: syz.6.1125 Not tainted syzkaller #0 [ 246.425954][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 246.436024][ T8411] Call Trace: [ 246.439326][ T8411] [ 246.442281][ T8411] dump_stack_lvl+0x188/0x250 [ 246.446979][ T8411] ? show_regs_print_info+0x20/0x20 [ 246.452274][ T8411] ? load_image+0x410/0x410 [ 246.456787][ T8411] ? __lock_acquire+0x7d40/0x7d40 [ 246.461833][ T8411] should_fail+0x383/0x4b0 [ 246.466287][ T8411] should_failslab+0x5/0x20 [ 246.470806][ T8411] slab_pre_alloc_hook+0x51/0xc0 [ 246.475758][ T8411] kmem_cache_alloc_trace+0x47/0x290 [ 246.481057][ T8411] ? request_threaded_irq+0x1e7/0x3a0 [ 246.486473][ T8411] ? radix_tree_lookup+0x235/0x280 [ 246.491609][ T8411] ? univ8250_setup_timer+0x270/0x270 [ 246.496999][ T8411] request_threaded_irq+0x1e7/0x3a0 [ 246.502215][ T8411] ? univ8250_setup_timer+0x270/0x270 [ 246.507614][ T8411] univ8250_setup_irq+0x3da/0x4f0 [ 246.512658][ T8411] serial8250_do_startup+0xe72/0x2340 [ 246.518151][ T8411] uart_startup+0x5e1/0xc70 [ 246.522676][ T8411] uart_port_activate+0xe4/0x180 [ 246.527631][ T8411] tty_port_open+0x1d1/0x2a0 [ 246.532239][ T8411] uart_open+0x43/0x50 [ 246.536321][ T8411] tty_open+0x485/0xcd0 [ 246.540509][ T8411] ? tty_compat_ioctl+0x570/0x570 [ 246.545548][ T8411] ? memset+0x1e/0x40 [ 246.549548][ T8411] ? do_raw_spin_unlock+0x11d/0x230 [ 246.554773][ T8411] chrdev_open+0x585/0x5f0 [ 246.559235][ T8411] ? cd_forget+0x160/0x160 [ 246.563671][ T8411] ? fsnotify_perm+0x3a7/0x560 [ 246.568448][ T8411] ? cd_forget+0x160/0x160 [ 246.572874][ T8411] do_dentry_open+0x7f7/0xf90 [ 246.577563][ T8411] ? vfs_open+0x2b/0x80 [ 246.581724][ T8411] path_openat+0x2718/0x2fb0 [ 246.586357][ T8411] ? __kasan_slab_alloc+0xa9/0xc0 [ 246.591408][ T8411] ? do_filp_open+0x400/0x400 [ 246.596114][ T8411] do_filp_open+0x1df/0x400 [ 246.600636][ T8411] ? vfs_tmpfile+0x300/0x300 [ 246.605269][ T8411] ? _raw_spin_unlock+0x24/0x40 [ 246.610137][ T8411] ? alloc_fd+0x59e/0x650 [ 246.614485][ T8411] do_sys_openat2+0x14b/0x500 [ 246.619167][ T8411] ? __lock_acquire+0x7d40/0x7d40 [ 246.624202][ T8411] ? do_sys_open+0xe0/0xe0 [ 246.628637][ T8411] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 246.634636][ T8411] ? lock_chain_count+0x20/0x20 [ 246.639529][ T8411] __x64_sys_openat+0x135/0x160 [ 246.644399][ T8411] do_syscall_64+0x4c/0xa0 [ 246.648830][ T8411] ? clear_bhb_loop+0x30/0x80 [ 246.653511][ T8411] ? clear_bhb_loop+0x30/0x80 [ 246.658211][ T8411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.664119][ T8411] RIP: 0033:0x7f2633f9d2d9 [ 246.668556][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.688354][ T8411] RSP: 002b:00007f26321d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.696788][ T8411] RAX: ffffffffffffffda RBX: 00007f2634225090 RCX: 00007f2633f9d2d9 [ 246.704772][ T8411] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 246.712756][ T8411] RBP: 00007f2634034888 R08: 0000000000000000 R09: 0000000000000000 [ 246.720747][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.728739][ T8411] R13: 00007f2634225128 R14: 00007f2634225090 R15: 00007ffd78640408 [ 246.736744][ T8411] [ 247.324043][ T8418] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 248.017636][ T8432] FAULT_INJECTION: forcing a failure. [ 248.017636][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 248.110187][ T8432] CPU: 1 PID: 8432 Comm: syz.6.1132 Not tainted syzkaller #0 [ 248.117608][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 248.127675][ T8432] Call Trace: [ 248.130962][ T8432] [ 248.133896][ T8432] dump_stack_lvl+0x188/0x250 [ 248.138598][ T8432] ? show_regs_print_info+0x20/0x20 [ 248.143810][ T8432] ? load_image+0x410/0x410 [ 248.148327][ T8432] ? __might_sleep+0xf0/0xf0 [ 248.152938][ T8432] ? __lock_acquire+0x7d40/0x7d40 [ 248.158031][ T8432] should_fail+0x383/0x4b0 [ 248.162467][ T8432] should_failslab+0x5/0x20 [ 248.166984][ T8432] slab_pre_alloc_hook+0x51/0xc0 [ 248.171930][ T8432] ? seq_open+0x5e/0x130 [ 248.176189][ T8432] kmem_cache_alloc+0x3d/0x280 [ 248.180982][ T8432] seq_open+0x5e/0x130 [ 248.185072][ T8432] kernfs_fop_open+0x524/0xba0 [ 248.189944][ T8432] ? kernfs_fop_mmap+0x4a0/0x4a0 [ 248.194885][ T8432] do_dentry_open+0x7f7/0xf90 [ 248.199570][ T8432] ? vfs_open+0x2b/0x80 [ 248.203745][ T8432] path_openat+0x2718/0x2fb0 [ 248.208384][ T8432] ? __kasan_slab_alloc+0xa9/0xc0 [ 248.213456][ T8432] ? do_filp_open+0x400/0x400 [ 248.218142][ T8432] do_filp_open+0x1df/0x400 [ 248.222647][ T8432] ? vfs_tmpfile+0x300/0x300 [ 248.227237][ T8432] ? _raw_spin_unlock+0x24/0x40 [ 248.232076][ T8432] ? alloc_fd+0x59e/0x650 [ 248.236395][ T8432] do_sys_openat2+0x14b/0x500 [ 248.241061][ T8432] ? __lock_acquire+0x7d40/0x7d40 [ 248.246072][ T8432] ? do_sys_open+0xe0/0xe0 [ 248.250471][ T8432] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 248.256435][ T8432] ? lock_chain_count+0x20/0x20 [ 248.261273][ T8432] __x64_sys_openat+0x135/0x160 [ 248.266111][ T8432] do_syscall_64+0x4c/0xa0 [ 248.270514][ T8432] ? clear_bhb_loop+0x30/0x80 [ 248.275178][ T8432] ? clear_bhb_loop+0x30/0x80 [ 248.279843][ T8432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.285722][ T8432] RIP: 0033:0x7f2633f9d2d9 [ 248.290128][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.309722][ T8432] RSP: 002b:00007f26321f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.318166][ T8432] RAX: ffffffffffffffda RBX: 00007f2634224fa0 RCX: 00007f2633f9d2d9 [ 248.326141][ T8432] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 248.334099][ T8432] RBP: 00007f2634034888 R08: 0000000000000000 R09: 0000000000000000 [ 248.342055][ T8432] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 248.350015][ T8432] R13: 00007f2634225038 R14: 00007f2634224fa0 R15: 00007ffd78640408 [ 248.357985][ T8432] [ 248.910103][ T4231] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 249.107564][ T8441] FAULT_INJECTION: forcing a failure. [ 249.107564][ T8441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.120958][ T8441] CPU: 1 PID: 8441 Comm: syz.4.1136 Not tainted syzkaller #0 [ 249.128343][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 249.138583][ T8441] Call Trace: [ 249.141881][ T8441] [ 249.144797][ T8441] dump_stack_lvl+0x188/0x250 [ 249.149467][ T8441] ? verify_lock_unused+0x140/0x140 [ 249.154709][ T8441] ? show_regs_print_info+0x20/0x20 [ 249.159892][ T8441] ? load_image+0x410/0x410 [ 249.164391][ T8441] ? uncharge_page+0x490/0x490 [ 249.169146][ T8441] should_fail+0x383/0x4b0 [ 249.173553][ T8441] prepare_alloc_pages+0x1e3/0x5b0 [ 249.178656][ T8441] __alloc_pages+0x11b/0x480 [ 249.183242][ T8441] ? zone_statistics+0x170/0x170 [ 249.188169][ T8441] ? rcu_lock_acquire+0x30/0x30 [ 249.193008][ T8441] ? alloc_pages+0x452/0x560 [ 249.197587][ T8441] __get_free_pages+0x8/0x30 [ 249.202164][ T8441] __tlb_remove_page_size+0x1f2/0x3f0 [ 249.207526][ T8441] unmap_page_range+0xfcf/0x2410 [ 249.212472][ T8441] unmap_vmas+0x131/0x250 [ 249.216787][ T8441] ? unmap_page_range+0x2410/0x2410 [ 249.221967][ T8441] ? __mutex_lock_common+0x435/0x2400 [ 249.227327][ T8441] ? exit_mm_release+0x16/0x30 [ 249.232106][ T8441] exit_mmap+0x3b9/0x640 [ 249.236337][ T8441] ? vm_brk+0x20/0x20 [ 249.240312][ T8441] ? uprobe_clear_state+0x2f6/0x460 [ 249.245500][ T8441] __mmput+0x115/0x390 [ 249.249554][ T8441] exit_mm+0x632/0x7b0 [ 249.253610][ T8441] ? perf_pmu_migrate_context+0xb70/0xb70 [ 249.259321][ T8441] ? do_exit+0x2110/0x2110 [ 249.263721][ T8441] ? __ia32_sys_timer_delete+0x40/0x40 [ 249.269165][ T8441] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 249.274697][ T8441] ? tty_audit_exit+0x149/0x1f0 [ 249.279535][ T8441] do_exit+0x5b8/0x2110 [ 249.283680][ T8441] ? put_task_struct+0x80/0x80 [ 249.288432][ T8441] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.294401][ T8441] ? _raw_spin_lock_irq+0xb7/0xf0 [ 249.299420][ T8441] do_group_exit+0x12c/0x2f0 [ 249.303993][ T8441] ? lockdep_hardirqs_on+0x94/0x140 [ 249.309180][ T8441] get_signal+0x7eb/0x12e0 [ 249.313598][ T8441] arch_do_signal_or_restart+0xe6/0x12a0 [ 249.319227][ T8441] ? futex_exit_release+0x1c0/0x1c0 [ 249.324412][ T8441] ? get_sigframe_size+0x10/0x10 [ 249.329333][ T8441] ? __context_tracking_exit+0x4c/0x80 [ 249.334779][ T8441] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 249.340751][ T8441] ? exit_to_user_mode_loop+0x3b/0x130 [ 249.346197][ T8441] exit_to_user_mode_loop+0x9e/0x130 [ 249.351469][ T8441] exit_to_user_mode_prepare+0xee/0x180 [ 249.357001][ T8441] syscall_exit_to_user_mode+0x16/0x40 [ 249.362444][ T8441] do_syscall_64+0x58/0xa0 [ 249.366843][ T8441] ? clear_bhb_loop+0x30/0x80 [ 249.371506][ T8441] ? clear_bhb_loop+0x30/0x80 [ 249.376171][ T8441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.382050][ T8441] RIP: 0033:0x7f9ae46c92d9 [ 249.386447][ T8441] Code: Unable to access opcode bytes at RIP 0x7f9ae46c92af. [ 249.393788][ T8441] RSP: 002b:00007f9ae29000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.402190][ T8441] RAX: fffffffffffffe00 RBX: 00007f9ae4951098 RCX: 00007f9ae46c92d9 [ 249.410182][ T8441] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9ae4951098 [ 249.418139][ T8441] RBP: 00007f9ae4951090 R08: 0000000000000000 R09: 0000000000000000 [ 249.426269][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.434222][ T8441] R13: 00007f9ae4951128 R14: 00007ffc5f183a30 R15: 00007ffc5f183b18 [ 249.442197][ T8441] [ 249.500091][ T4231] usb 6-1: Using ep0 maxpacket: 16 [ 249.670104][ T4231] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 249.699953][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.719963][ T4231] usb 6-1: config 0 has no interface number 0 [ 249.726111][ T4231] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 249.761330][ T4231] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.780365][ T4231] usb 6-1: config 0 interface 98 has no altsetting 0 [ 249.985200][ T4231] usb 6-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 250.000073][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.018316][ T4231] usb 6-1: Product: syz [ 250.028435][ T4231] usb 6-1: Manufacturer: syz [ 250.033156][ T4231] usb 6-1: SerialNumber: syz [ 250.051455][ T4231] usb 6-1: config 0 descriptor?? [ 250.070206][ T8436] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.077251][ T8436] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.304372][ T8436] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.317980][ T8436] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.570081][ T4231] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 250.590343][ T4231] asix: probe of 6-1:0.98 failed with error -71 [ 250.617224][ T4231] usb 6-1: USB disconnect, device number 7 [ 251.307669][ T8461] loop6: detected capacity change from 0 to 16 [ 251.364715][ T8461] erofs: (device loop6): mounted with root inode @ nid 36. [ 251.491444][ T8461] attempt to access beyond end of device [ 251.491444][ T8461] loop6: rw=524288, want=34359738368, limit=16 [ 251.551080][ T146] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[9000] [ 251.623361][ T8461] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 251.707995][ T8461] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 251.766466][ T8472] ip_tables: iptables: counters copy to user failed while replacing table [ 251.822055][ T8461] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 251.877363][ T8461] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 251.935234][ T8461] attempt to access beyond end of device [ 251.935234][ T8461] loop6: rw=524288, want=56, limit=16 [ 251.977268][ T8461] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[8192] [ 252.045520][ T26] audit: type=1800 audit(1791957472.635:179): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1142" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 252.080912][ T8480] device syzkaller0 entered promiscuous mode [ 252.762739][ T8496] FAULT_INJECTION: forcing a failure. [ 252.762739][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 252.811732][ T8496] CPU: 0 PID: 8496 Comm: syz.5.1155 Not tainted syzkaller #0 [ 252.819183][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.829251][ T8496] Call Trace: [ 252.832542][ T8496] [ 252.835488][ T8496] dump_stack_lvl+0x188/0x250 [ 252.840182][ T8496] ? show_regs_print_info+0x20/0x20 [ 252.845402][ T8496] ? load_image+0x410/0x410 [ 252.849919][ T8496] ? __lock_acquire+0x7d40/0x7d40 [ 252.854952][ T8496] should_fail+0x383/0x4b0 [ 252.859361][ T8496] should_failslab+0x5/0x20 [ 252.863858][ T8496] slab_pre_alloc_hook+0x51/0xc0 [ 252.868790][ T8496] kmem_cache_alloc_trace+0x47/0x290 [ 252.874056][ T8496] ? request_threaded_irq+0x1e7/0x3a0 [ 252.879414][ T8496] ? radix_tree_lookup+0x235/0x280 [ 252.884517][ T8496] ? univ8250_setup_timer+0x270/0x270 [ 252.889876][ T8496] request_threaded_irq+0x1e7/0x3a0 [ 252.895082][ T8496] ? univ8250_setup_timer+0x270/0x270 [ 252.900450][ T8496] univ8250_setup_irq+0x3da/0x4f0 [ 252.905466][ T8496] serial8250_do_startup+0xe72/0x2340 [ 252.910833][ T8496] uart_startup+0x5e1/0xc70 [ 252.915321][ T8496] uart_port_activate+0xe4/0x180 [ 252.920251][ T8496] tty_port_open+0x1d1/0x2a0 [ 252.924828][ T8496] uart_open+0x43/0x50 [ 252.928883][ T8496] tty_open+0x485/0xcd0 [ 252.933036][ T8496] ? tty_compat_ioctl+0x570/0x570 [ 252.938061][ T8496] ? memset+0x1e/0x40 [ 252.942030][ T8496] ? do_raw_spin_unlock+0x11d/0x230 [ 252.947221][ T8496] chrdev_open+0x585/0x5f0 [ 252.951629][ T8496] ? cd_forget+0x160/0x160 [ 252.956036][ T8496] ? fsnotify_perm+0x3a7/0x560 [ 252.960809][ T8496] ? cd_forget+0x160/0x160 [ 252.965214][ T8496] do_dentry_open+0x7f7/0xf90 [ 252.969879][ T8496] ? vfs_open+0x2b/0x80 [ 252.974027][ T8496] path_openat+0x2718/0x2fb0 [ 252.978618][ T8496] ? __kasan_slab_alloc+0xa9/0xc0 [ 252.983632][ T8496] ? do_filp_open+0x400/0x400 [ 252.988307][ T8496] do_filp_open+0x1df/0x400 [ 252.992803][ T8496] ? vfs_tmpfile+0x300/0x300 [ 252.997405][ T8496] ? _raw_spin_unlock+0x24/0x40 [ 253.002261][ T8496] ? alloc_fd+0x59e/0x650 [ 253.006583][ T8496] do_sys_openat2+0x14b/0x500 [ 253.011265][ T8496] ? __lock_acquire+0x7d40/0x7d40 [ 253.016281][ T8496] ? do_sys_open+0xe0/0xe0 [ 253.020685][ T8496] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 253.026656][ T8496] ? lock_chain_count+0x20/0x20 [ 253.031498][ T8496] __x64_sys_openat+0x135/0x160 [ 253.036342][ T8496] do_syscall_64+0x4c/0xa0 [ 253.040772][ T8496] ? clear_bhb_loop+0x30/0x80 [ 253.045437][ T8496] ? clear_bhb_loop+0x30/0x80 [ 253.050099][ T8496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.055994][ T8496] RIP: 0033:0x7fce77bf62d9 [ 253.060412][ T8496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.080001][ T8496] RSP: 002b:00007fce75e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.088411][ T8496] RAX: ffffffffffffffda RBX: 00007fce77e7e090 RCX: 00007fce77bf62d9 [ 253.096372][ T8496] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 253.104333][ T8496] RBP: 00007fce77c8d888 R08: 0000000000000000 R09: 0000000000000000 [ 253.112293][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.120247][ T8496] R13: 00007fce77e7e128 R14: 00007fce77e7e090 R15: 00007ffee04bfd08 [ 253.128218][ T8496] [ 253.135811][ T4175] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 253.419992][ T4175] usb 5-1: Using ep0 maxpacket: 16 [ 253.550330][ T4175] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 253.566465][ T4175] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.597527][ T4175] usb 5-1: config 0 has no interface number 0 [ 253.611437][ T4175] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 253.639976][ T4175] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 253.669983][ T4175] usb 5-1: config 0 interface 98 has no altsetting 0 [ 253.811564][ T8499] overlayfs: missing 'lowerdir' [ 253.850144][ T4175] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 253.870205][ T4175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.886494][ T4175] usb 5-1: Product: syz [ 253.891337][ T4175] usb 5-1: Manufacturer: syz [ 253.895949][ T4175] usb 5-1: SerialNumber: syz [ 253.924395][ T4175] usb 5-1: config 0 descriptor?? [ 253.950203][ T8492] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 253.967646][ T8492] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 254.204664][ T8492] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 254.223336][ T8492] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 255.500217][ T4175] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 255.530074][ T4175] asix: probe of 5-1:0.98 failed with error -71 [ 255.560143][ T4175] usb 5-1: USB disconnect, device number 8 [ 255.713240][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719565][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011450][ T8519] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 256.070041][ T8519] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 256.452699][ T8536] FAULT_INJECTION: forcing a failure. [ 256.452699][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 256.467168][ T8536] CPU: 0 PID: 8536 Comm: syz.6.1166 Not tainted syzkaller #0 [ 256.474572][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 256.484628][ T8536] Call Trace: [ 256.487914][ T8536] [ 256.490835][ T8536] dump_stack_lvl+0x188/0x250 [ 256.495509][ T8536] ? show_regs_print_info+0x20/0x20 [ 256.500704][ T8536] ? load_image+0x410/0x410 [ 256.505202][ T8536] ? __lock_acquire+0x7d40/0x7d40 [ 256.510256][ T8536] should_fail+0x383/0x4b0 [ 256.514679][ T8536] should_failslab+0x5/0x20 [ 256.519170][ T8536] slab_pre_alloc_hook+0x51/0xc0 [ 256.524128][ T8536] kmem_cache_alloc_trace+0x47/0x290 [ 256.529400][ T8536] ? univ8250_setup_irq+0x122/0x4f0 [ 256.534590][ T8536] univ8250_setup_irq+0x122/0x4f0 [ 256.539607][ T8536] ? mark_free_pages+0x310/0x310 [ 256.544541][ T8536] serial8250_do_startup+0xe72/0x2340 [ 256.549923][ T8536] uart_startup+0x5e1/0xc70 [ 256.554421][ T8536] uart_port_activate+0xe4/0x180 [ 256.559353][ T8536] tty_port_open+0x1d1/0x2a0 [ 256.563938][ T8536] uart_open+0x43/0x50 [ 256.567992][ T8536] tty_open+0x485/0xcd0 [ 256.572149][ T8536] ? tty_compat_ioctl+0x570/0x570 [ 256.577176][ T8536] ? memset+0x1e/0x40 [ 256.581158][ T8536] ? do_raw_spin_unlock+0x11d/0x230 [ 256.586364][ T8536] chrdev_open+0x585/0x5f0 [ 256.590785][ T8536] ? cd_forget+0x160/0x160 [ 256.595200][ T8536] ? fsnotify_perm+0x3a7/0x560 [ 256.599956][ T8536] ? cd_forget+0x160/0x160 [ 256.604361][ T8536] do_dentry_open+0x7f7/0xf90 [ 256.609050][ T8536] ? vfs_open+0x2b/0x80 [ 256.613198][ T8536] path_openat+0x2718/0x2fb0 [ 256.617794][ T8536] ? __kasan_slab_alloc+0xa9/0xc0 [ 256.622813][ T8536] ? do_filp_open+0x400/0x400 [ 256.627491][ T8536] do_filp_open+0x1df/0x400 [ 256.631991][ T8536] ? vfs_tmpfile+0x300/0x300 [ 256.636586][ T8536] ? _raw_spin_unlock+0x24/0x40 [ 256.641424][ T8536] ? alloc_fd+0x59e/0x650 [ 256.645758][ T8536] do_sys_openat2+0x14b/0x500 [ 256.650435][ T8536] ? __lock_acquire+0x7d40/0x7d40 [ 256.655471][ T8536] ? do_sys_open+0xe0/0xe0 [ 256.659891][ T8536] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 256.665875][ T8536] ? lock_chain_count+0x20/0x20 [ 256.670725][ T8536] __x64_sys_openat+0x135/0x160 [ 256.675571][ T8536] do_syscall_64+0x4c/0xa0 [ 256.679980][ T8536] ? clear_bhb_loop+0x30/0x80 [ 256.684667][ T8536] ? clear_bhb_loop+0x30/0x80 [ 256.689337][ T8536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.695219][ T8536] RIP: 0033:0x7f2633f9d2d9 [ 256.699622][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.719221][ T8536] RSP: 002b:00007f26321d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.727632][ T8536] RAX: ffffffffffffffda RBX: 00007f2634225090 RCX: 00007f2633f9d2d9 [ 256.735591][ T8536] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 256.743560][ T8536] RBP: 00007f2634034888 R08: 0000000000000000 R09: 0000000000000000 [ 256.751533][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.759512][ T8536] R13: 00007f2634225128 R14: 00007f2634225090 R15: 00007ffd78640408 [ 256.767508][ T8536] [ 257.331502][ T8539] overlayfs: missing 'lowerdir' [ 257.363439][ T8533] device syzkaller0 entered promiscuous mode [ 257.522628][ T8547] loop5: detected capacity change from 0 to 256 [ 257.657390][ T8547] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.711739][ T8547] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.075783][ T8560] loop5: detected capacity change from 0 to 2048 [ 259.191307][ T8560] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 259.251609][ T8560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.319535][ T8565] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_ke] [ 259.362475][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 259.410967][ T8565] ecryptfs_parse_options: eCryptfs doesn't support cipher: aNs»G [ 259.418799][ T8565] Error parsing options; rc = [-22] [ 259.496641][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.511295][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.516641][ T8566] loop6: detected capacity change from 0 to 1024 [ 259.519308][ T8558] device bridge_slave_0 entered promiscuous mode [ 259.562307][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.569800][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.581080][ T8558] device bridge_slave_1 entered promiscuous mode [ 259.646324][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.733219][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.800780][ T8573] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 259.848135][ T8558] team0: Port device team_slave_0 added [ 259.860035][ T8573] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 259.892203][ T144] hfsplus: b-tree write err: -5, ino 25 [ 259.892233][ T8558] team0: Port device team_slave_1 added [ 259.897984][ T144] hfsplus: b-tree write err: -5, ino 4 [ 259.944098][ T144] hfsplus: b-tree write err: -5, ino 2 [ 259.986598][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.055079][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.141371][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.180831][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.219982][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.325292][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.405839][ T8584] loop4: detected capacity change from 0 to 2048 [ 260.477555][ T8585] device syzkaller0 entered promiscuous mode [ 260.484876][ T8588] overlayfs: missing 'lowerdir' [ 260.489702][ T8584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.521835][ T8558] device hsr_slave_0 entered promiscuous mode [ 260.549257][ T8558] device hsr_slave_1 entered promiscuous mode [ 260.570286][ T8558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.578006][ T8558] Cannot create hsr debugfs directory [ 261.050209][ T4175] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 261.062199][ T5437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.123504][ T8582] chnl_net:caif_netlink_parms(): no params data found [ 261.150003][ T4237] Bluetooth: hci0: command 0x0409 tx timeout [ 261.223182][ T5437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.349603][ T8612] loop5: detected capacity change from 0 to 128 [ 261.371931][ T5437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.425105][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.439525][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.468988][ T8582] device bridge_slave_0 entered promiscuous mode [ 261.484394][ T8612] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 261.500382][ T4175] usb 7-1: unable to get BOS descriptor or descriptor too short [ 261.508019][ T8612] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1189'. [ 261.523730][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.540808][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.556521][ T8582] device bridge_slave_1 entered promiscuous mode [ 261.569649][ T5437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.630249][ T4175] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.643240][ T8582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.644022][ T8616] overlayfs: missing 'lowerdir' [ 261.659331][ T8615] loop5: detected capacity change from 0 to 1024 [ 261.664689][ T8582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.666311][ T4175] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 4384, setting to 1024 [ 261.686829][ T4175] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 261.724414][ T8582] team0: Port device team_slave_0 added [ 261.735753][ T8615] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.738098][ T8582] team0: Port device team_slave_1 added [ 261.785096][ T5437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.805354][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.813006][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.848769][ T8582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.869369][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.876818][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.909175][ T8582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.939674][ T8615] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,stripe=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 261.974718][ T5437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.993048][ T8582] device hsr_slave_0 entered promiscuous mode [ 262.004125][ T8582] device hsr_slave_1 entered promiscuous mode [ 262.014363][ T8582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.024698][ T8582] Cannot create hsr debugfs directory [ 262.030197][ T4175] usb 7-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 262.030227][ T4175] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.030246][ T4175] usb 7-1: Product: syz [ 262.030259][ T4175] usb 7-1: Manufacturer: syz [ 262.030278][ T4175] usb 7-1: SerialNumber: syz [ 262.070440][ T8598] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 262.084257][ T5437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.152922][ T5437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.156620][ T8624] loop5: detected capacity change from 0 to 128 [ 262.350756][ T5437] tipc: Left network mode [ 262.382802][ T8558] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.411563][ T8558] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 262.440281][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 262.461343][ T8558] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 262.489537][ T8558] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 262.496747][ T4175] usb 7-1: MIDIStreaming interface descriptor not found [ 262.578820][ T4175] usb 7-1: USB disconnect, device number 4 [ 262.666841][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.752454][ T8582] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 262.775158][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.801236][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.809222][ T8633] device syzkaller0 entered promiscuous mode [ 262.824586][ T8628] udevd[8628]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.848578][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.856977][ T8582] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 262.896907][ T8582] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 262.942938][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.971985][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.985895][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.993038][ T5552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.998363][ T8646] loop4: detected capacity change from 0 to 512 [ 263.003332][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.016354][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.027676][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.034793][ T5552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.046158][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.057433][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.069102][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.090422][ T8646] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=continue,,errors=continue. Quota mode: none. [ 263.169434][ T8582] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 263.184569][ T8646] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1199: bg 0: block 67: padding at end of block bitmap is not set [ 263.229070][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.236340][ T8646] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 263.254693][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.264478][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.266565][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 263.273230][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.287309][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.316429][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.327339][ T8647] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 263.330335][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.348819][ T8558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.367185][ T8658] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 263.376428][ T8647] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 263.383328][ T8558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.386325][ T8658] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 263.415432][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.430418][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.577540][ T8669] loop6: detected capacity change from 0 to 16 [ 263.658683][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.670143][ T8669] erofs: (device loop6): mounted with root inode @ nid 36. [ 263.701334][ T8669] attempt to access beyond end of device [ 263.701334][ T8669] loop6: rw=524288, want=40, limit=16 [ 264.693481][ T5611] Bluetooth: hci2: command 0x041b tx timeout [ 264.716933][ T8669] attempt to access beyond end of device [ 264.716933][ T8669] loop6: rw=524288, want=104, limit=16 [ 264.751789][ T8669] attempt to access beyond end of device [ 264.751789][ T8669] loop6: rw=0, want=24, limit=16 [ 264.763500][ T26] audit: type=1800 audit(1791957485.365:180): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1203" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 264.851011][ T8669] attempt to access beyond end of device [ 264.851011][ T8669] loop6: rw=0, want=24, limit=16 [ 264.887884][ T8669] attempt to access beyond end of device [ 264.887884][ T8669] loop6: rw=0, want=24, limit=16 [ 264.897579][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.953171][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.961739][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.010879][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.019566][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.102828][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.109946][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.125605][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.138004][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.167318][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.174472][ T4790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.207911][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.236484][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.295446][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.313424][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.339610][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.356854][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.390129][ T5611] Bluetooth: hci0: command 0x040f tx timeout [ 265.476157][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.492619][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.537225][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.548661][ T8713] netlink: 'syz.6.1211': attribute type 2 has an invalid length. [ 265.559716][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.588885][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.615060][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.630612][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.650692][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.670524][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.783206][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.000110][ T4229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 266.104782][ T8740] device syzkaller0 entered promiscuous mode [ 266.197793][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.210901][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.254248][ T8558] device veth0_vlan entered promiscuous mode [ 266.270253][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 266.303113][ T8582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.390295][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.401749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.418930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.427134][ T4229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.466724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.489503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.540437][ T4229] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 266.549516][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.569513][ T8760] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 266.578754][ T4229] usb 5-1: SerialNumber: syz [ 266.594875][ T8760] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 266.634262][ T4229] usb 5-1: 0:2 : does not exist [ 266.657310][ T8558] device veth1_vlan entered promiscuous mode [ 266.697819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.716408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.750036][ T5838] Bluetooth: hci2: command 0x040f tx timeout [ 266.750167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.032414][ T8558] device veth0_macvtap entered promiscuous mode [ 267.071164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.081732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.110968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.154830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.189098][ T8558] device veth1_macvtap entered promiscuous mode [ 267.270173][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.280239][ T4229] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 267.291906][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.318833][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.340248][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.358376][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.441186][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.481831][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.492850][ T4229] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 267.511819][ T5838] Bluetooth: hci0: command 0x0419 tx timeout [ 267.517951][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.530638][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.541386][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.560293][ T4229] usb 5-1: USB disconnect, device number 9 [ 267.619750][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.632524][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.645382][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.675503][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.730444][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.754550][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.803304][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.835808][ T8582] device veth0_vlan entered promiscuous mode [ 267.868972][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.885295][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.914673][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.929228][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.959862][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.983630][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.001407][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.018309][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.041082][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.054655][ T8812] create_pit_timer: 1 callbacks suppressed [ 268.054667][ T8812] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 268.071019][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.095068][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.105851][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.118316][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.182873][ T8819] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 268.187374][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.202159][ T8819] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 268.241336][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.252829][ T8582] device veth1_vlan entered promiscuous mode [ 268.291937][ T8558] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.310124][ T8558] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.327411][ T8558] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.351687][ T8558] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.474644][ T8820] device syzkaller0 entered promiscuous mode [ 268.494588][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1235'. [ 268.669110][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.684978][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.708967][ T8582] device veth0_macvtap entered promiscuous mode [ 268.759891][ T5437] device hsr_slave_0 left promiscuous mode [ 268.779562][ T5437] device hsr_slave_1 left promiscuous mode [ 268.807206][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.828089][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.835833][ T2300] Bluetooth: hci2: command 0x0419 tx timeout [ 268.855649][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.875464][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.892106][ T5437] device bridge_slave_1 left promiscuous mode [ 268.917575][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.944680][ T5437] device bridge_slave_0 left promiscuous mode [ 268.955887][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.985023][ T5437] device hsr_slave_0 left promiscuous mode [ 269.007952][ T5437] device hsr_slave_1 left promiscuous mode [ 269.024170][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.041443][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.069613][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.089280][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.104918][ T5437] device bridge_slave_1 left promiscuous mode [ 269.107747][ T8855] loop4: detected capacity change from 0 to 2048 [ 269.114239][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.136854][ T5437] device bridge_slave_0 left promiscuous mode [ 269.182136][ T8855] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.182142][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.290699][ T5437] device veth1_macvtap left promiscuous mode [ 269.298919][ T5437] device veth0_macvtap left promiscuous mode [ 269.311110][ T5437] device veth1_vlan left promiscuous mode [ 269.324952][ T5437] device veth0_vlan left promiscuous mode [ 269.332101][ T5437] device veth1_macvtap left promiscuous mode [ 269.338131][ T5437] device veth0_macvtap left promiscuous mode [ 269.380157][ T5437] device veth1_vlan left promiscuous mode [ 269.386025][ T5437] device veth0_vlan left promiscuous mode [ 269.564483][ T8862] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 269.609268][ T8866] overlayfs: missing 'lowerdir' [ 270.049448][ T5437] team0 (unregistering): Port device team_slave_1 removed [ 270.066077][ T5437] team0 (unregistering): Port device team_slave_0 removed [ 270.080477][ T5437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.096156][ T5437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.210307][ T5437] bond0 (unregistering): Released all slaves [ 270.349883][ T5437] team0 (unregistering): Port device team_slave_1 removed [ 270.377838][ T5437] team0 (unregistering): Port device team_slave_0 removed [ 270.399809][ T5437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.416803][ T5437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.421183][ T8894] overlayfs: missing 'lowerdir' [ 270.531135][ T5437] bond0 (unregistering): Released all slaves [ 270.570743][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.592164][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.603220][ T8880] device syzkaller0 entered promiscuous mode [ 270.617261][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.627420][ T8582] device veth1_macvtap entered promiscuous mode [ 270.679437][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.709969][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.729994][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.746894][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.771050][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.789987][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.810043][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.830148][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.851809][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.870218][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.878178][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.888806][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.937785][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.937897][ T5578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.964373][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.974672][ T5578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.996458][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.022997][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.047048][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.074747][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.097340][ T8582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.117473][ T8582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.129008][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.145214][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.171115][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.213873][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.244742][ T8582] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.280587][ T8582] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.289473][ T8582] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.304501][ T8582] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.497934][ T5552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.519113][ T5552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.542435][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.608459][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.626259][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.670753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.837277][ T8931] FAULT_INJECTION: forcing a failure. [ 271.837277][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 271.845853][ T8933] loop4: detected capacity change from 0 to 512 [ 271.856962][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 271.876074][ T8931] CPU: 0 PID: 8931 Comm: syz.8.1179 Not tainted syzkaller #0 [ 271.883476][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.893544][ T8931] Call Trace: [ 271.896834][ T8931] [ 271.899773][ T8931] dump_stack_lvl+0x188/0x250 [ 271.904472][ T8931] ? show_regs_print_info+0x20/0x20 [ 271.909682][ T8931] ? load_image+0x410/0x410 [ 271.914194][ T8931] ? __might_sleep+0xf0/0xf0 [ 271.918918][ T8931] ? __lock_acquire+0x7d40/0x7d40 [ 271.923959][ T8931] should_fail+0x383/0x4b0 [ 271.928381][ T8931] should_failslab+0x5/0x20 [ 271.932881][ T8931] slab_pre_alloc_hook+0x51/0xc0 [ 271.937813][ T8931] ? __proc_create+0x36f/0x8b0 [ 271.942595][ T8931] kmem_cache_alloc+0x3d/0x280 [ 271.947357][ T8931] __proc_create+0x36f/0x8b0 [ 271.951968][ T8931] ? proc_symlink+0x210/0x210 [ 271.956639][ T8931] ? vscnprintf+0x80/0x80 [ 271.960958][ T8931] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.966845][ T8931] proc_mkdir+0x3b/0x110 [ 271.971087][ T8931] register_handler_proc+0x2d8/0x370 [ 271.976366][ T8931] ? rcu_lock_release+0x20/0x20 [ 271.981217][ T8931] ? _raw_spin_unlock+0x40/0x40 [ 271.986067][ T8931] ? irq_startup+0x51a/0x670 [ 271.990650][ T8931] __setup_irq+0x13bb/0x1d60 [ 271.995244][ T8931] request_threaded_irq+0x2bd/0x3a0 [ 272.000430][ T8931] ? univ8250_setup_timer+0x270/0x270 [ 272.005809][ T8931] univ8250_setup_irq+0x3da/0x4f0 [ 272.010842][ T8931] serial8250_do_startup+0xe72/0x2340 [ 272.016223][ T8931] uart_startup+0x5e1/0xc70 [ 272.020718][ T8931] uart_port_activate+0xe4/0x180 [ 272.025659][ T8931] tty_port_open+0x1d1/0x2a0 [ 272.030240][ T8931] uart_open+0x43/0x50 [ 272.034293][ T8931] tty_open+0x485/0xcd0 [ 272.038449][ T8931] ? tty_compat_ioctl+0x570/0x570 [ 272.043475][ T8931] ? memset+0x1e/0x40 [ 272.047477][ T8931] ? do_raw_spin_unlock+0x11d/0x230 [ 272.052769][ T8931] chrdev_open+0x585/0x5f0 [ 272.057180][ T8931] ? cd_forget+0x160/0x160 [ 272.061587][ T8931] ? fsnotify_perm+0x3a7/0x560 [ 272.066338][ T8931] ? cd_forget+0x160/0x160 [ 272.070750][ T8931] do_dentry_open+0x7f7/0xf90 [ 272.075421][ T8931] ? vfs_open+0x2b/0x80 [ 272.079580][ T8931] path_openat+0x2718/0x2fb0 [ 272.084174][ T8931] ? __kasan_slab_alloc+0xa9/0xc0 [ 272.089192][ T8931] ? do_filp_open+0x400/0x400 [ 272.093870][ T8931] do_filp_open+0x1df/0x400 [ 272.098362][ T8931] ? vfs_tmpfile+0x300/0x300 [ 272.102956][ T8931] ? _raw_spin_unlock+0x24/0x40 [ 272.107795][ T8931] ? alloc_fd+0x59e/0x650 [ 272.112121][ T8931] do_sys_openat2+0x14b/0x500 [ 272.116783][ T8931] ? __lock_acquire+0x7d40/0x7d40 [ 272.121797][ T8931] ? do_sys_open+0xe0/0xe0 [ 272.126196][ T8931] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.132168][ T8931] ? lock_chain_count+0x20/0x20 [ 272.137014][ T8931] __x64_sys_openat+0x135/0x160 [ 272.141859][ T8931] do_syscall_64+0x4c/0xa0 [ 272.146263][ T8931] ? clear_bhb_loop+0x30/0x80 [ 272.150926][ T8931] ? clear_bhb_loop+0x30/0x80 [ 272.155592][ T8931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.161492][ T8931] RIP: 0033:0x7f3b123182d9 [ 272.165902][ T8931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.185592][ T8931] RSP: 002b:00007f3b1054f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.194025][ T8931] RAX: ffffffffffffffda RBX: 00007f3b125a0090 RCX: 00007f3b123182d9 [ 272.202078][ T8931] RDX: 0000000000028000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 272.210703][ T8931] RBP: 00007f3b123af888 R08: 0000000000000000 R09: 0000000000000000 [ 272.218677][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.226664][ T8931] R13: 00007f3b125a0128 R14: 00007f3b125a0090 R15: 00007ffc64fdcd28 [ 272.234756][ T8931] [ 272.333177][ T8933] loop4: detected capacity change from 0 to 2048 [ 272.622944][ T8933] UDF-fs: bad mount option "˙˙017777777777777777777770xffffffffffffffff˙˙˙˙˙˙˙˙" or missing value [ 273.071561][ T5838] Bluetooth: hci1: command 0x0409 tx timeout [ 273.181553][ T8940] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 273.192839][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.209105][ T8940] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 273.221756][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.229749][ T8900] device bridge_slave_0 entered promiscuous mode [ 273.268826][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.280209][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.299566][ T8900] device bridge_slave_1 entered promiscuous mode [ 273.371277][ T8950] overlayfs: missing 'lowerdir' [ 273.426714][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.455984][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.495181][ T8952] device syzkaller0 entered promiscuous mode [ 273.584639][ T8900] team0: Port device team_slave_0 added [ 273.634072][ T8900] team0: Port device team_slave_1 added [ 273.969893][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.000167][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.132339][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.217073][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.244560][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.398142][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.511865][ T8900] device hsr_slave_0 entered promiscuous mode [ 274.549637][ T8900] device hsr_slave_1 entered promiscuous mode [ 274.566222][ T8900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.612284][ T8900] Cannot create hsr debugfs directory [ 274.726151][ T8986] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 274.799460][ T8986] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 275.090508][ T8998] overlayfs: missing 'workdir' [ 275.149992][ T5840] Bluetooth: hci1: command 0x041b tx timeout [ 275.295382][ T8900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 275.347801][ T8900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 275.398784][ T9005] device syzkaller0 entered promiscuous mode [ 275.425225][ T8900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 275.453217][ T8900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 275.758842][ T9020] loop7: detected capacity change from 0 to 1024 [ 275.802707][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.997049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.030165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.038358][ T9029] syz.7.1277 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 276.057926][ T9029] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 276.067964][ T9029] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9029, name: syz.7.1277 [ 276.077011][ T9029] 1 lock held by syz.7.1277/9029: [ 276.082039][ T9029] #0: ffffffff8d1448f8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 276.091808][ T9029] irq event stamp: 1282 [ 276.095958][ T9029] hardirqs last enabled at (1281): [] asm_sysvec_reschedule_ipi+0x16/0x20 [ 276.106125][ T9029] hardirqs last disabled at (1282): [] _raw_spin_lock_irq+0x86/0xf0 [ 276.115684][ T9029] softirqs last enabled at (1170): [] ip_setsockopt+0x58a/0x31e0 [ 276.125064][ T9029] softirqs last disabled at (1168): [] release_sock+0x2b/0x1b0 [ 276.134194][ T9029] Preemption disabled at: [ 276.134206][ T9029] [<0000000000000000>] 0x0 [ 276.142945][ T9029] CPU: 0 PID: 9029 Comm: syz.7.1277 Not tainted syzkaller #0 [ 276.150324][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.160385][ T9029] Call Trace: [ 276.163672][ T9029] [ 276.166603][ T9029] dump_stack_lvl+0x188/0x250 [ 276.171288][ T9029] ? ip_setsockopt+0x58a/0x31e0 [ 276.176146][ T9029] ? show_regs_print_info+0x20/0x20 [ 276.181345][ T9029] ? load_image+0x410/0x410 [ 276.185862][ T9029] ___might_sleep+0x493/0x610 [ 276.190556][ T9029] ? __might_sleep+0xf0/0xf0 [ 276.195177][ T9029] down_read+0x20/0x2e0 [ 276.199341][ T9029] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 276.204637][ T9029] ? kernfs_find_ns+0x510/0x510 [ 276.209500][ T9029] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 276.215660][ T9029] cgroup_get_from_path+0x5f/0x2f0 [ 276.220778][ T9029] cgroup_mt_check_v1+0x1f6/0x300 [ 276.225810][ T9029] xt_check_match+0x499/0xc50 [ 276.230497][ T9029] ? xt_check_proc_name+0x240/0x240 [ 276.235706][ T9029] ? strcmp+0x2d/0xb0 [ 276.239700][ T9029] ? xt_find_match+0x1e1/0x210 [ 276.244478][ T9029] translate_table+0x1481/0x1f60 [ 276.249441][ T9029] ? ipt_register_table+0x7b0/0x7b0 [ 276.254640][ T9029] ? __might_fault+0xb7/0x110 [ 276.259321][ T9029] ? __lock_acquire+0x7d40/0x7d40 [ 276.264372][ T9029] ? _copy_from_user+0x111/0x170 [ 276.269327][ T9029] do_ipt_set_ctl+0x963/0xd70 [ 276.274013][ T9029] ? nf_setsockopt+0x218/0x280 [ 276.278806][ T9029] ? ipt_unregister_table_exit+0x220/0x220 [ 276.284616][ T9029] ? __lock_acquire+0x7d40/0x7d40 [ 276.289649][ T9029] ? __mutex_lock_common+0x44c/0x2400 [ 276.295144][ T9029] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 276.300807][ T9029] ? mutex_unlock+0x10/0x10 [ 276.305339][ T9029] ? __local_bh_enable_ip+0x136/0x1c0 [ 276.310719][ T9029] ? lockdep_hardirqs_on+0x94/0x140 [ 276.315919][ T9029] ? __local_bh_enable_ip+0x136/0x1c0 [ 276.321281][ T9029] nf_setsockopt+0x25f/0x280 [ 276.325868][ T9029] ip_setsockopt+0x29c3/0x31e0 [ 276.330625][ T9029] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 276.336095][ T9029] ? release_firmware_map_entry+0x190/0x190 [ 276.342004][ T9029] ? preempt_schedule_irq+0xe6/0x160 [ 276.347277][ T9029] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 276.353250][ T9029] tcp_setsockopt+0x229/0x1e60 [ 276.358001][ T9029] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 276.363637][ T9029] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 276.369023][ T9029] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 276.374666][ T9029] ? security_socket_setsockopt+0x55/0xa0 [ 276.380376][ T9029] ? sock_common_setsockopt+0x32/0xb0 [ 276.385740][ T9029] ? sock_common_recvmsg+0x1c0/0x1c0 [ 276.391008][ T9029] __sys_setsockopt+0x2bf/0x3d0 [ 276.395849][ T9029] __x64_sys_setsockopt+0xb1/0xc0 [ 276.400860][ T9029] do_syscall_64+0x4c/0xa0 [ 276.405264][ T9029] ? clear_bhb_loop+0x30/0x80 [ 276.409927][ T9029] ? clear_bhb_loop+0x30/0x80 [ 276.414609][ T9029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.420508][ T9029] RIP: 0033:0x7f7ff236b2d9 [ 276.424931][ T9029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.444556][ T9029] RSP: 002b:00007f7ff0581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.452982][ T9029] RAX: ffffffffffffffda RBX: 00007f7ff25f3180 RCX: 00007f7ff236b2d9 [ 276.460943][ T9029] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000006 [ 276.468918][ T9029] RBP: 00007f7ff2402888 R08: 00000000000022f8 R09: 0000000000000000 [ 276.476878][ T9029] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 276.484855][ T9029] R13: 00007f7ff25f3218 R14: 00007f7ff25f3180 R15: 00007ffcce7858c8 [ 276.492833][ T9029] [ 276.495852][ T9029] [ 276.498154][ T9029] ============================= [ 276.503075][ T9029] [ BUG: Invalid wait context ] [ 276.507896][ T9029] syzkaller #0 Tainted: G W [ 276.513701][ T9029] ----------------------------- [ 276.518551][ T9029] syz.7.1277/9029 is trying to lock: [ 276.523817][ T9029] ffffffff8d24fb90 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 276.533276][ T9029] other info that might help us debug this: [ 276.539150][ T9029] context-{4:4} [ 276.542589][ T9029] 1 lock held by syz.7.1277/9029: [ 276.547592][ T9029] #0: ffffffff8d1448f8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 276.557353][ T9029] stack backtrace: [ 276.561070][ T9029] CPU: 0 PID: 9029 Comm: syz.7.1277 Tainted: G W syzkaller #0 [ 276.569814][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 276.579865][ T9029] Call Trace: [ 276.583132][ T9029] [ 276.586045][ T9029] dump_stack_lvl+0x188/0x250 [ 276.590823][ T9029] ? show_regs_print_info+0x20/0x20 [ 276.596023][ T9029] ? load_image+0x410/0x410 [ 276.600520][ T9029] __lock_acquire+0x1810/0x7d40 [ 276.605451][ T9029] ? __show_trace_log_lvl+0x479/0x550 [ 276.610835][ T9029] ? verify_lock_unused+0x140/0x140 [ 276.616018][ T9029] ? __printk_cpu_unlock+0x5f/0x70 [ 276.621140][ T9029] ? dump_stack_lvl+0x1fd/0x250 [ 276.625972][ T9029] ? ip_setsockopt+0x58a/0x31e0 [ 276.630811][ T9029] ? show_regs_print_info+0x20/0x20 [ 276.636009][ T9029] ? load_image+0x410/0x410 [ 276.640509][ T9029] lock_acquire+0x19f/0x400 [ 276.645001][ T9029] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 276.650444][ T9029] ? __might_sleep+0xf0/0xf0 [ 276.655016][ T9029] ? read_lock_is_recursive+0x10/0x10 [ 276.660383][ T9029] down_read+0x44/0x2e0 [ 276.664522][ T9029] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 276.670054][ T9029] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 276.675357][ T9029] ? kernfs_find_ns+0x510/0x510 [ 276.680193][ T9029] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 276.686352][ T9029] cgroup_get_from_path+0x5f/0x2f0 [ 276.691463][ T9029] cgroup_mt_check_v1+0x1f6/0x300 [ 276.696483][ T9029] xt_check_match+0x499/0xc50 [ 276.701159][ T9029] ? xt_check_proc_name+0x240/0x240 [ 276.706356][ T9029] ? strcmp+0x2d/0xb0 [ 276.710322][ T9029] ? xt_find_match+0x1e1/0x210 [ 276.715067][ T9029] translate_table+0x1481/0x1f60 [ 276.719991][ T9029] ? ipt_register_table+0x7b0/0x7b0 [ 276.725175][ T9029] ? __might_fault+0xb7/0x110 [ 276.729832][ T9029] ? __lock_acquire+0x7d40/0x7d40 [ 276.734855][ T9029] ? _copy_from_user+0x111/0x170 [ 276.739777][ T9029] do_ipt_set_ctl+0x963/0xd70 [ 276.744454][ T9029] ? nf_setsockopt+0x218/0x280 [ 276.749197][ T9029] ? ipt_unregister_table_exit+0x220/0x220 [ 276.754988][ T9029] ? __lock_acquire+0x7d40/0x7d40 [ 276.760002][ T9029] ? __mutex_lock_common+0x44c/0x2400 [ 276.765363][ T9029] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 276.770995][ T9029] ? mutex_unlock+0x10/0x10 [ 276.775484][ T9029] ? __local_bh_enable_ip+0x136/0x1c0 [ 276.780924][ T9029] ? lockdep_hardirqs_on+0x94/0x140 [ 276.786109][ T9029] ? __local_bh_enable_ip+0x136/0x1c0 [ 276.791470][ T9029] nf_setsockopt+0x25f/0x280 [ 276.796060][ T9029] ip_setsockopt+0x29c3/0x31e0 [ 276.800902][ T9029] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 276.806285][ T9029] ? release_firmware_map_entry+0x190/0x190 [ 276.812171][ T9029] ? preempt_schedule_irq+0xe6/0x160 [ 276.817457][ T9029] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 276.823419][ T9029] tcp_setsockopt+0x229/0x1e60 [ 276.828166][ T9029] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 276.833781][ T9029] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 276.839142][ T9029] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 276.844765][ T9029] ? security_socket_setsockopt+0x55/0xa0 [ 276.850472][ T9029] ? sock_common_setsockopt+0x32/0xb0 [ 276.855827][ T9029] ? sock_common_recvmsg+0x1c0/0x1c0 [ 276.861095][ T9029] __sys_setsockopt+0x2bf/0x3d0 [ 276.865927][ T9029] __x64_sys_setsockopt+0xb1/0xc0 [ 276.870932][ T9029] do_syscall_64+0x4c/0xa0 [ 276.875335][ T9029] ? clear_bhb_loop+0x30/0x80 [ 276.879996][ T9029] ? clear_bhb_loop+0x30/0x80 [ 276.884676][ T9029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.890579][ T9029] RIP: 0033:0x7f7ff236b2d9 [ 276.894976][ T9029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.914560][ T9029] RSP: 002b:00007f7ff0581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.922956][ T9029] RAX: ffffffffffffffda RBX: 00007f7ff25f3180 RCX: 00007f7ff236b2d9 [ 276.930909][ T9029] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000006 [ 276.938865][ T9029] RBP: 00007f7ff2402888 R08: 00000000000022f8 R09: 0000000000000000 [ 276.946818][ T9029] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 276.954799][ T9029] R13: 00007f7ff25f3218 R14: 00007f7ff25f3180 R15: 00007ffcce7858c8 [ 276.962759][ T9029] [ 276.972217][ T9029] xt_cgroup: invalid path, errno=-2 [ 277.018378][ T9026] sched: RT throttling activated [ 277.042599][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.053165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.062188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.070926][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.077988][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.096111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.104591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.122418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.133120][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.140214][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.163540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.180071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.216764][ T8900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.230073][ T5838] Bluetooth: hci1: command 0x040f tx timeout [ 277.265655][ T8900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.303094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.316268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.339356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.360862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.377951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.392945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.407859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.425074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.465826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.484650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.654193][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.666840][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.689571][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.824975][ T5437] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.912833][ T5437] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.973259][ T5437] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.012840][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.027203][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.053939][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.065768][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.087859][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.096005][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.104120][ T8900] device veth0_vlan entered promiscuous mode [ 278.119265][ T5437] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.141480][ T8900] device veth1_vlan entered promiscuous mode [ 278.160881][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.169264][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.181833][ T8900] device veth0_macvtap entered promiscuous mode [ 278.196176][ T8900] device veth1_macvtap entered promiscuous mode [ 278.222293][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.233514][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.243761][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.254462][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.264489][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.275563][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.285731][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.296336][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.306402][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.317125][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.328255][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.348254][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.357029][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.367075][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.375696][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.391428][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.407962][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.418303][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.428986][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.438992][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.449602][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.459722][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.470928][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.481394][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.492067][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.502769][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.512464][ T8900] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.521229][ T8900] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.530207][ T8900] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.538896][ T8900] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.551701][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.563953][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.597825][ T8900] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 278.618653][ T5554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.624383][ T8900] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 278.634450][ T5554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.644778][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.665198][ T6453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.674188][ T6453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.686003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.172846][ T5437] device hsr_slave_0 left promiscuous mode [ 279.179077][ T5437] device hsr_slave_1 left promiscuous mode [ 279.185456][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.192940][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.202788][ T5437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.212212][ T5437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.219804][ T5437] device bridge_slave_1 left promiscuous mode [ 279.226283][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.236583][ T5437] device bridge_slave_0 left promiscuous mode [ 279.243203][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.255949][ T5437] device veth1_macvtap left promiscuous mode [ 279.263197][ T5437] device veth0_macvtap left promiscuous mode [ 279.269244][ T5437] device veth1_vlan left promiscuous mode [ 279.278244][ T5437] device veth0_vlan left promiscuous mode [ 279.309968][ T2300] Bluetooth: hci1: command 0x0419 tx timeout [ 279.404953][ T5437] team0 (unregistering): Port device team_slave_1 removed [ 279.420503][ T5437] team0 (unregistering): Port device team_slave_0 removed [ 279.433237][ T5437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.445212][ T5437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.484176][ T5437] bond0 (unregistering): Released all slaves