last executing test programs: 8m11.33229262s ago: executing program 32 (id=948): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x28000003, 0x2000007, 0x30, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x40) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "2179899dbfe49c684d0ab5b35e4afe77b4d3fee8fe1f9f42b070580c6a31d74180511239f9328f8ee34ad434335b144c2e7cbdad9a2f859d1d32e601ec34ac5e286bed9c3762cc0e8b1be157638b60af51ec578dab81ec04e54a024380ca9480f7cb304f00632ca47ef8eb845143f9d55be23d1132247c9833353b571ad367aa38e52663025092151eeabf59e99a92618be06081dafb58cbb1268beeb73ca5da93b0dfd4acc43c7949446c6dfb0765b10dca7abe25e4b7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7312a9a66b2a9af}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0xc010) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x2, 0x80006, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000007000000030000000000000e0501"], 0x0, 0x2f, 0x0, 0x4}, 0x28) 7m55.87386518s ago: executing program 2 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c000280050001000000000054001880080001"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 7m55.531977488s ago: executing program 2 (id=1048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x3a) 7m55.180659477s ago: executing program 2 (id=1049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8034}, 0x50) 7m54.858260585s ago: executing program 2 (id=1050): syz_mount_image$ext4(&(0x7f0000001580)='ext4\x00', &(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000016c0), 0x5, 0x50a, &(0x7f0000001700)="$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") open(&(0x7f0000001c40)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000001c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001cc0)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000001d00)='./bus\x00', 0x8000, 0xe0) open(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x929cc1, 0x13c) 7m54.27057458s ago: executing program 33 (id=1051): setns(0xc9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1bf) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='27', 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000006c0)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000000c00)=0x520) 7m54.22960497s ago: executing program 2 (id=1053): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r0, 0x329, 0xfffffffc, 0x25dfdbfe, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x4008004) 7m52.102365413s ago: executing program 2 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x3a) 7m51.776261601s ago: executing program 34 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x3a) 7m48.645478467s ago: executing program 4 (id=1068): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0}) write$UHID_DESTROY(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) 7m48.352789205s ago: executing program 4 (id=1069): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "2179899dbfe49c684d0ab5b35e4afe77b4d3fee8fe1f9f42b070580c6a31d74180511239f9328f8ee34ad434335b144c2e7cbdad9a2f859d1d32e601ec34ac5e286bed9c3762cc0e8b1be157638b60af51ec578dab81ec04e54a024380ca9480f7cb304f00632ca47ef8eb845143f9d55be23d1132247c9833353b571ad367aa38e52663025092151eeabf59e99a92618be06081dafb58cbb1268beeb73ca5da93b0dfd4acc43c7949446c6dfb0765b10dca7abe25e4b7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7312a9a66b2a9af}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0xc010) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x2, 0x80006, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 7m47.372602079s ago: executing program 4 (id=1070): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0xaa82, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a00)={0x2, 0xc}) 7m47.170259624s ago: executing program 4 (id=1071): syz_mount_image$ext4(&(0x7f0000001580)='ext4\x00', &(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000016c0), 0x5, 0x50a, &(0x7f0000001700)="$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") open(&(0x7f0000001c40)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000001c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001cc0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x929cc1, 0x13c) 7m46.814397853s ago: executing program 4 (id=1074): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 7m45.099530835s ago: executing program 4 (id=1077): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) 7m44.48272598s ago: executing program 35 (id=1077): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) 7m3.41299799s ago: executing program 6 (id=1227): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0xc, {{0x10, 0x4, 0x0, 0x10, 0x40, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x3f, [@rand_addr=0x64010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x1, 0xa, "df32d6a743bfaf1f"}, {0x5, 0x9, "7fd356cec23675"}]}, @timestamp={0x44, 0x4, 0x9e, 0x0, 0x7}]}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x240440d0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="14000280060001002800000006"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e40)={'gre0\x00', &(0x7f0000000dc0)={'tunl0\x00', r3, 0x1, 0x702, 0x45, 0x2, {{0xe, 0x4, 0x0, 0x11, 0x38, 0x65, 0x0, 0x9b, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ssrr={0x89, 0x23, 0xa8, [@loopback, @remote, @rand_addr=0x64010100, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001f00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="50002f800c0002000201aaaaaaaaaaaa38000380080001000000000005000300000000002400038006000300a1aa0000080002000200000006000100030000000800020002"], 0x6c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000900), r7) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000009c0)={&(0x7f0000000300), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4030) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/time\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="11042abd7000fddbdf250800000008000300", @ANYRES32=r9, @ANYBLOB="08001d00"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 7m2.149895481s ago: executing program 6 (id=1229): syz_mount_image$ext4(&(0x7f0000000a40)='ext4\x00', &(0x7f0000000a80)='./file0/file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xbdb, &(0x7f0000001040)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f00000002c0), 0xffffffffffffff94, 0x15, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000340)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m56.543357119s ago: executing program 6 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x40) close(r3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "2179899dbfe49c684d0ab5b35e4afe77b4d3fee8fe1f9f42b070580c6a31d74180511239f9328f8ee34ad434335b144c2e7cbdad9a2f859d1d32e601ec34ac5e286bed9c3762cc0e8b1be157638b60af51ec578dab81ec04e54a024380ca9480f7cb304f00632ca47ef8eb845143f9d55be23d1132247c9833353b571ad367aa38e52663025092151eeabf59e99a92618be06081dafb58cbb1268beeb73ca5da93b0dfd4acc43c7949446c6dfb0765b10dca7abe25e4b7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7312a9a66b2a9af}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0xc010) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x2, 0x80006, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 6m54.800914311s ago: executing program 6 (id=1252): syz_mount_image$ext4(&(0x7f0000001580)='ext4\x00', &(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000016c0), 0x5, 0x50a, &(0x7f0000001700)="$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") open(&(0x7f0000001c40)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000001c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001cc0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(0x0, 0x8000, 0xe0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x929cc1, 0x13c) 6m54.141864778s ago: executing program 6 (id=1258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x8, 0x1d}, {0x4, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f4c}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 6m53.926275413s ago: executing program 5 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000b80)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m53.514927173s ago: executing program 5 (id=1260): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x28000003, 0x2000007, 0x30, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "2179899dbfe49c684d0ab5b35e4afe77b4d3fee8fe1f9f42b070580c6a31d74180511239f9328f8ee34ad434335b144c2e7cbdad9a2f859d1d32e601ec34ac5e286bed9c3762cc0e8b1be157638b60af51ec578dab81ec04e54a024380ca9480f7cb304f00632ca47ef8eb845143f9d55be23d1132247c9833353b571ad367aa38e52663025092151eeabf59e99a92618be06081dafb58cbb1268beeb73ca5da93b0dfd4acc43c7949446c6dfb0765b10dca7abe25e4b7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7312a9a66b2a9af}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0xc010) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x2, 0x80006, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 6m52.602607116s ago: executing program 6 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x40) close(r3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "2179899dbfe49c684d0ab5b35e4afe77b4d3fee8fe1f9f42b070580c6a31d74180511239f9328f8ee34ad434335b144c2e7cbdad9a2f859d1d32e601ec34ac5e286bed9c3762cc0e8b1be157638b60af51ec578dab81ec04e54a024380ca9480f7cb304f00632ca47ef8eb845143f9d55be23d1132247c9833353b571ad367aa38e52663025092151eeabf59e99a92618be06081dafb58cbb1268beeb73ca5da93b0dfd4acc43c7949446c6dfb0765b10dca7abe25e4b7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7312a9a66b2a9af}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0xc010) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x2, 0x80006, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 6m51.959437131s ago: executing program 36 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x40) close(r3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "2179899dbfe49c684d0ab5b35e4afe77b4d3fee8fe1f9f42b070580c6a31d74180511239f9328f8ee34ad434335b144c2e7cbdad9a2f859d1d32e601ec34ac5e286bed9c3762cc0e8b1be157638b60af51ec578dab81ec04e54a024380ca9480f7cb304f00632ca47ef8eb845143f9d55be23d1132247c9833353b571ad367aa38e52663025092151eeabf59e99a92618be06081dafb58cbb1268beeb73ca5da93b0dfd4acc43c7949446c6dfb0765b10dca7abe25e4b7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7312a9a66b2a9af}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0xc010) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x2, 0x80006, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) 6m51.927774732s ago: executing program 5 (id=1264): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x28000003, 0x2000007, 0x30, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x40) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "2179899dbfe49c684d0ab5b35e4afe77b4d3fee8fe1f9f42b070580c6a31d74180511239f9328f8ee34ad434335b144c2e7cbdad9a2f859d1d32e601ec34ac5e286bed9c3762cc0e8b1be157638b60af51ec578dab81ec04e54a024380ca9480f7cb304f00632ca47ef8eb845143f9d55be23d1132247c9833353b571ad367aa38e52663025092151eeabf59e99a92618be06081dafb58cbb1268beeb73ca5da93b0dfd4acc43c7949446c6dfb0765b10dca7abe25e4b7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf7312a9a66b2a9af}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0xc010) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x2, 0x80006, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/usb/usbmon/0s\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000007000000030000000000000e0501"], 0x0, 0x2f, 0x0, 0x4}, 0x28) 6m50.777347741s ago: executing program 5 (id=1266): syz_mount_image$ext4(&(0x7f0000001580)='ext4\x00', &(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000016c0), 0x5, 0x50a, &(0x7f0000001700)="$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") open(&(0x7f0000001c40)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000001c80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001cc0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(0x0, 0x8000, 0xe0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x929cc1, 0x13c) 6m50.138266786s ago: executing program 5 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={0x0}}, 0x0) 6m48.132597716s ago: executing program 5 (id=1272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x3c, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4772000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 6m47.512670311s ago: executing program 37 (id=1272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x3c, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4772000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 1m28.576358272s ago: executing program 8 (id=2571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000240)='GPL\x00', 0xa, 0x1011, &(0x7f00000005c0)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1m28.394300456s ago: executing program 8 (id=2573): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@dax_always}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noload}, {@journal_checksum}, {@usrjquota}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000700)={0x1, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x403, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}}}, 0x108) close(r3) semget(0x1, 0x5, 0x6b4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x0, 0x1}}}}]}, 0x58}}, 0x4000804) sendto$packet(r7, &(0x7f00000008c0)="05", 0x1, 0x4, &(0x7f0000000d80)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="635a0b420074060000000000000000000000000000000000200100000000000000000000000000022f08040400080100fe8000000000000000000000000000bbfc000000000000000000000000010001fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000a01004e2200004e240000000000000002000000010000000400000001"], 0x9c) 1m25.967585576s ago: executing program 8 (id=2575): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f00000006c0)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000001f80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x71, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x0, 0x9, "02270e000042eb"}, {0x2, 0x8, "743495437356"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x2, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 1m25.838139489s ago: executing program 8 (id=2579): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3018000, &(0x7f00000000c0)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x5a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x10017, 0x0) 1m24.672987768s ago: executing program 8 (id=2581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000a80)="bae27fe8", 0x4, 0x8080, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) 1m24.345680726s ago: executing program 8 (id=2584): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@dax_always}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noload}, {@journal_checksum}, {@usrjquota}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000700)={0x1, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x403, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}}}, 0x108) close(r3) semget(0x1, 0x5, 0x6b4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x0, 0x1}}}}]}, 0x58}}, 0x4000804) sendto$packet(0xffffffffffffffff, &(0x7f00000008c0)="05", 0x1, 0x4, &(0x7f0000000d80)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="635a0b420074060000000000000000000000000000000000200100000000000000000000000000022f08040400080100fe8000000000000000000000000000bbfc000000000000000000000000010001fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000a01004e2200004e240000000000000002000000010000000400000001"], 0x9c) 1m23.77522442s ago: executing program 38 (id=2584): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@dax_always}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noload}, {@journal_checksum}, {@usrjquota}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000700)={0x1, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x403, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}}}, 0x108) close(r3) semget(0x1, 0x5, 0x6b4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x0, 0x1}}}}]}, 0x58}}, 0x4000804) sendto$packet(0xffffffffffffffff, &(0x7f00000008c0)="05", 0x1, 0x4, &(0x7f0000000d80)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="635a0b420074060000000000000000000000000000000000200100000000000000000000000000022f08040400080100fe8000000000000000000000000000bbfc000000000000000000000000010001fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000a01004e2200004e240000000000000002000000010000000400000001"], 0x9c) 1m22.773255895s ago: executing program 7 (id=2591): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000380)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321014000000000000000100001c"], 0x4a) 1m20.161252969s ago: executing program 7 (id=2592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000a80)="bae27fe8", 0x4, 0x8080, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) 1m19.370827128s ago: executing program 7 (id=2597): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805001001"], 0x8) 1m18.537240098s ago: executing program 7 (id=2599): socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000004040)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) ptrace(0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/../file0\x00') 1m18.373710773s ago: executing program 7 (id=2600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001080)=@newtfilter={0x88, 0x2c, 0xd37, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20000007, 0x4, 0x5, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001140), 0x56) sendmsg$kcm(r6, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m17.956264653s ago: executing program 7 (id=2601): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x143603, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0xc203400) pwritev(r1, &(0x7f0000001c40)=[{&(0x7f0000000080)}], 0x1, 0xffffffff, 0x8) 1m17.528055294s ago: executing program 39 (id=2601): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x143603, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0xc203400) pwritev(r1, &(0x7f0000001c40)=[{&(0x7f0000000080)}], 0x1, 0xffffffff, 0x8) 7.958463994s ago: executing program 1 (id=2874): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 6.855703571s ago: executing program 1 (id=2882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) write$nbd(r0, &(0x7f0000000080)={0x67446698, 0x0, 0x0, 0x3, 0x3, "0c19c132ab3c3cc4ee8521151166fe939347288ceb389e4d359a"}, 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bridge0/bridge/vlan_stats_enabled\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(r1, r1, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 4.898197869s ago: executing program 1 (id=2887): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 4.091099329s ago: executing program 3 (id=2890): pipe(0x0) close(0x3) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 3.851169685s ago: executing program 3 (id=2893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x30bd22, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x255fdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3004c8b9}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.65657591s ago: executing program 9 (id=2894): socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000005c0)={'wlan1\x00', @random="0100"}) 3.523670613s ago: executing program 9 (id=2895): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.480293904s ago: executing program 0 (id=2896): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 3.468624955s ago: executing program 3 (id=2897): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002440)=""/102400, 0x19000, 0x1000000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002340)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a8001600a400034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) 2.203057465s ago: executing program 0 (id=2898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2ac02, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) 1.949159672s ago: executing program 0 (id=2899): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000400)=0xa, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4002085) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r3, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000001140)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c, &(0x7f0000001280), &(0x7f00000012c0)}, 0x40) 1.369948006s ago: executing program 3 (id=2900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001080)=@newtfilter={0x88, 0x2c, 0xd37, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20000007, 0x4, 0x5, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001140), 0x56) sendmsg$kcm(r6, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.369794976s ago: executing program 9 (id=2901): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 1.286370698s ago: executing program 1 (id=2902): pipe(0x0) close(0x3) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 1.109603993s ago: executing program 9 (id=2903): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 812.114019ms ago: executing program 1 (id=2904): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 804.38842ms ago: executing program 0 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) 626.422074ms ago: executing program 0 (id=2906): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 568.129895ms ago: executing program 9 (id=2907): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000024000000"], &(0x7f0000000040)=""/3, 0x3e, 0x3, 0x1, 0x9}, 0x28) 506.255017ms ago: executing program 3 (id=2908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r0, &(0x7f00000037c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) 446.001009ms ago: executing program 0 (id=2909): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002440)=""/102400, 0x19000, 0x1000000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002340)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a8001600a400034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) 22.525949ms ago: executing program 3 (id=2910): unshare(0x2040080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 21.758919ms ago: executing program 1 (id=2911): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x143) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x93, 0xa}, 0x1, 0x40, 0x8, {0xfa, 0x5}, 0x42, 0x400}) 0s ago: executing program 9 (id=2912): pipe(0x0) close(0x3) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ? arch_do_signal_or_restart+0x4bd/0x7b0 [ 607.923547][T16228] ? get_sigframe_size+0x20/0x20 [ 607.928489][T16228] ? exit_to_user_mode_loop+0x3b/0x110 [ 607.933949][T16228] exit_to_user_mode_loop+0x70/0x110 [ 607.939225][T16228] exit_to_user_mode_prepare+0xee/0x180 [ 607.944763][T16228] syscall_exit_to_user_mode+0x1a/0x50 [ 607.950214][T16228] do_syscall_64+0x61/0xb0 [ 607.954619][T16228] ? clear_bhb_loop+0x40/0x90 [ 607.959283][T16228] ? clear_bhb_loop+0x40/0x90 [ 607.963951][T16228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.969838][T16228] RIP: 0033:0x7f102d59f559 [ 607.974245][T16228] Code: Unable to access opcode bytes at 0x7f102d59f52f. [ 607.981245][T16228] RSP: 002b:00007f102b7f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 607.989649][T16228] RAX: 0000000000000001 RBX: 00007f102d825fa8 RCX: 00007f102d59f559 [ 607.997610][T16228] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f102d825fac [ 608.005573][T16228] RBP: 00007f102d825fa0 R08: 0000000000745adf R09: 0000000000000000 [ 608.013532][T16228] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 608.021490][T16228] R13: 00007f102d826038 R14: 00007ffd5398ccb0 R15: 00007ffd5398cd98 [ 608.029467][T16228] [ 608.765275][T16247] FAULT_INJECTION: forcing a failure. [ 608.765275][T16247] name failslab, interval 1, probability 0, space 0, times 0 [ 608.815917][T16247] CPU: 1 PID: 16247 Comm: syz.7.2362 Not tainted syzkaller #0 [ 608.823427][T16247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 608.833501][T16247] Call Trace: [ 608.836794][T16247] [ 608.839740][T16247] dump_stack_lvl+0x18c/0x250 [ 608.844441][T16247] ? show_regs_print_info+0x20/0x20 [ 608.849658][T16247] ? load_image+0x420/0x420 [ 608.854189][T16247] ? __might_sleep+0xe0/0xe0 [ 608.858806][T16247] ? __lock_acquire+0x7eb0/0x7eb0 [ 608.863863][T16247] should_fail_ex+0x394/0x4c0 [ 608.868583][T16247] should_failslab+0x9/0x20 [ 608.873119][T16247] slab_pre_alloc_hook+0x59/0x300 [ 608.878172][T16247] ? crypto_akcipher_sync_prep+0xfb/0x500 [ 608.883919][T16247] ? crypto_akcipher_sync_prep+0xfb/0x500 [ 608.889659][T16247] __kmem_cache_alloc_node+0x53/0x250 [ 608.895082][T16247] ? crypto_akcipher_sync_prep+0xfb/0x500 [ 608.900830][T16247] __kmalloc+0xa7/0x240 [ 608.905024][T16247] crypto_akcipher_sync_prep+0xfb/0x500 [ 608.910606][T16247] crypto_sig_verify+0x126/0x250 [ 608.915567][T16247] ? crypto_sig_sign+0x240/0x240 [ 608.920545][T16247] ? rsa_max_size+0x19/0x70 [ 608.925068][T16247] ? pkcs1pad_set_pub_key+0x15d/0x1c0 [ 608.930475][T16247] public_key_verify_signature+0x607/0x870 [ 608.936324][T16247] ? public_key_free+0x80/0x80 [ 608.941126][T16247] ? asymmetric_key_generate_id+0x60/0x150 [ 608.946962][T16247] ? asymmetric_key_id_same+0x67/0xe0 [ 608.952371][T16247] x509_check_for_self_signed+0x31b/0x430 [ 608.958110][T16247] x509_cert_parse+0x5a0/0x7b0 [ 608.962907][T16247] x509_key_preparse+0x64/0x6c0 [ 608.967773][T16247] ? down_read+0x1ac/0x2e0 [ 608.972220][T16247] asymmetric_key_preparse+0xa9/0x140 [ 608.977627][T16247] __key_create_or_update+0x3a6/0xa60 [ 608.983031][T16247] ? __lock_acquire+0x7eb0/0x7eb0 [ 608.988098][T16247] ? key_create_or_update+0x60/0x60 [ 608.993323][T16247] ? bpf_lsm_key_permission+0x9/0x10 [ 608.998644][T16247] ? lookup_user_key+0xb66/0x1140 [ 609.003697][T16247] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 609.009700][T16247] ? keyring_search_rcu+0x280/0x280 [ 609.014928][T16247] key_create_or_update+0x42/0x60 [ 609.019977][T16247] __se_sys_add_key+0x34f/0x410 [ 609.024858][T16247] ? __x64_sys_add_key+0xc0/0xc0 [ 609.029829][T16247] ? lockdep_hardirqs_on+0x98/0x150 [ 609.035044][T16247] ? __x64_sys_add_key+0x20/0xc0 [ 609.040015][T16247] do_syscall_64+0x55/0xb0 [ 609.044457][T16247] ? clear_bhb_loop+0x40/0x90 [ 609.049150][T16247] ? clear_bhb_loop+0x40/0x90 [ 609.053857][T16247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.059783][T16247] RIP: 0033:0x7f4ca9b9f559 [ 609.064214][T16247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.083840][T16247] RSP: 002b:00007f4caa9b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 609.092278][T16247] RAX: ffffffffffffffda RBX: 00007f4ca9e25fa0 RCX: 00007f4ca9b9f559 [ 609.100274][T16247] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 609.108268][T16247] RBP: 00007f4ca9c36b20 R08: 000000001a223b98 R09: 0000000000000000 [ 609.114718][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 609.116239][T16247] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 609.126512][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 609.131339][T16247] R13: 00007f4ca9e26038 R14: 00007f4ca9e25fa0 R15: 00007ffd92f08428 [ 609.139573][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 609.146223][T16247] [ 609.173244][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 609.181883][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 609.190125][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 609.293875][T16256] syzkaller0: entered promiscuous mode [ 609.299396][T16256] syzkaller0: entered allmulticast mode [ 609.320050][T16250] rxe_eth0 speed is unknown, defaulting to 1000 [ 609.343888][T16255] syzkaller0: entered promiscuous mode [ 609.361627][T16255] syzkaller0: entered allmulticast mode [ 610.123838][T16277] netlink: 'syz.7.2370': attribute type 27 has an invalid length. [ 610.131807][T16277] netlink: 'syz.7.2370': attribute type 3 has an invalid length. [ 611.308453][ T5780] Bluetooth: hci4: command tx timeout [ 611.361659][T16250] chnl_net:caif_netlink_parms(): no params data found [ 611.458213][ T5894] tipc: Left network mode [ 611.734084][T16293] syzkaller0: entered promiscuous mode [ 611.739634][T16293] syzkaller0: entered allmulticast mode [ 612.120904][T16250] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.163811][T16250] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.171068][T16250] bridge_slave_0: entered allmulticast mode [ 612.185833][T16250] bridge_slave_0: entered promiscuous mode [ 612.226847][T16309] syzkaller0: entered promiscuous mode [ 612.239425][T16309] syzkaller0: entered allmulticast mode [ 612.337991][T16250] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.346608][T16250] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.365242][T16250] bridge_slave_1: entered allmulticast mode [ 612.394088][T16250] bridge_slave_1: entered promiscuous mode [ 612.651235][T16250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.702896][T16250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.351662][ T5780] Bluetooth: hci4: command tx timeout [ 613.467630][T16250] team0: Port device team_slave_0 added [ 613.576667][T16333] loop7: detected capacity change from 0 to 128 [ 613.624708][T16333] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 613.657273][T16333] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.697791][T16250] team0: Port device team_slave_1 added [ 613.726585][T16250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.733667][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.761678][T16250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.804150][T16333] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.851480][T16250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.858639][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.451063][T16250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.851115][T16250] hsr_slave_0: entered promiscuous mode [ 614.867988][T16250] hsr_slave_1: entered promiscuous mode [ 614.889911][T16352] syzkaller0: entered promiscuous mode [ 614.896776][T16352] syzkaller0: entered allmulticast mode [ 615.193865][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.213198][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.231606][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.253307][ T5894] bridge_slave_0: left allmulticast mode [ 615.259164][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.433590][ T5780] Bluetooth: hci4: command tx timeout [ 616.897396][ T5894] team0 (unregistering): Port device team_slave_1 removed [ 616.944024][ T5894] team0 (unregistering): Port device team_slave_0 removed [ 616.992256][ T5894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.039796][ T5894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.380803][ T5894] bond0 (unregistering): Released all slaves [ 617.511751][ T5780] Bluetooth: hci4: command tx timeout [ 617.699899][T16400] FAULT_INJECTION: forcing a failure. [ 617.699899][T16400] name failslab, interval 1, probability 0, space 0, times 0 [ 617.704530][T16395] syzkaller0: entered promiscuous mode [ 617.718318][T16400] CPU: 0 PID: 16400 Comm: syz.7.2398 Not tainted syzkaller #0 [ 617.725807][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 617.735188][T16395] syzkaller0: entered allmulticast mode [ 617.735859][T16400] Call Trace: [ 617.735869][T16400] [ 617.747633][T16400] dump_stack_lvl+0x18c/0x250 [ 617.752344][T16400] ? show_regs_print_info+0x20/0x20 [ 617.757578][T16400] ? load_image+0x420/0x420 [ 617.762116][T16400] ? __might_sleep+0xe0/0xe0 [ 617.766738][T16400] ? __lock_acquire+0x7eb0/0x7eb0 [ 617.771802][T16400] should_fail_ex+0x394/0x4c0 [ 617.776517][T16400] should_failslab+0x9/0x20 [ 617.781053][T16400] slab_pre_alloc_hook+0x59/0x300 [ 617.786105][T16400] ? __rdma_create_id+0x65/0x620 [ 617.791081][T16400] __kmem_cache_alloc_node+0x53/0x250 [ 617.796491][T16400] ? __rdma_create_id+0x65/0x620 [ 617.801458][T16400] kmalloc_trace+0x2a/0xe0 [ 617.805915][T16400] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 617.810797][T16400] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 617.815678][T16400] __rdma_create_id+0x65/0x620 [ 617.820472][T16400] ? do_raw_spin_unlock+0x121/0x230 [ 617.825701][T16400] ? ucma_alloc_ctx+0x2d0/0x2d0 [ 617.830583][T16400] rdma_create_user_id+0x81/0xc0 [ 617.835551][T16400] ucma_create_id+0x22b/0x370 [ 617.840254][T16400] ? __might_fault+0xaa/0x120 [ 617.844959][T16400] ? ucma_close+0x170/0x170 [ 617.849487][T16400] ? try_to_wake_up+0x6f5/0x10e0 [ 617.854461][T16400] ? __might_fault+0xaa/0x120 [ 617.859163][T16400] ? __might_fault+0xc6/0x120 [ 617.863864][T16400] ? __might_fault+0xaa/0x120 [ 617.868576][T16400] ucma_write+0x252/0x2f0 [ 617.872932][T16400] ? ucma_get_global_nl_info+0x70/0x70 [ 617.878429][T16400] ? fsnotify_perm+0x5d/0x5e0 [ 617.883140][T16400] ? security_file_permission+0x79/0xa0 [ 617.888722][T16400] ? ucma_get_global_nl_info+0x70/0x70 [ 617.894209][T16400] vfs_write+0x299/0x9a0 [ 617.898491][T16400] ? file_end_write+0x250/0x250 [ 617.903373][T16400] ? __fget_files+0x28/0x460 [ 617.907998][T16400] ? __fget_files+0x3fc/0x460 [ 617.912713][T16400] ? __fdget_pos+0x1d8/0x330 [ 617.917338][T16400] ? ksys_write+0x74/0x260 [ 617.921788][T16400] ksys_write+0x151/0x260 [ 617.926156][T16400] ? __ia32_sys_read+0x90/0x90 [ 617.930957][T16400] ? lockdep_hardirqs_on+0x98/0x150 [ 617.936187][T16400] do_syscall_64+0x55/0xb0 [ 617.940635][T16400] ? clear_bhb_loop+0x40/0x90 [ 617.945339][T16400] ? clear_bhb_loop+0x40/0x90 [ 617.950046][T16400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 617.955975][T16400] RIP: 0033:0x7f4ca9b9f559 [ 617.960422][T16400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.980073][T16400] RSP: 002b:00007f4caa9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 617.988517][T16400] RAX: ffffffffffffffda RBX: 00007f4ca9e25fa0 RCX: 00007f4ca9b9f559 [ 617.996514][T16400] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 618.004520][T16400] RBP: 00007f4ca9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 618.012515][T16400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.020508][T16400] R13: 00007f4ca9e26038 R14: 00007f4ca9e25fa0 R15: 00007ffd92f08428 [ 618.028518][T16400] [ 618.300841][T16413] netlink: 'syz.8.2399': attribute type 27 has an invalid length. [ 618.307365][T16415] program syz.7.2400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.309603][T16413] netlink: 'syz.8.2399': attribute type 3 has an invalid length. [ 618.508792][T16419] syzkaller0: entered promiscuous mode [ 618.526064][T16419] syzkaller0: entered allmulticast mode [ 618.554821][T16419] tipc: Enabled bearer , priority 0 [ 618.665046][T16419] tipc: Resetting bearer [ 618.873712][T16418] tipc: Resetting bearer [ 618.926475][T16418] tipc: Disabling bearer [ 619.980423][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2407'. [ 619.990462][T16438] loop8: detected capacity change from 0 to 4096 [ 620.014059][T16442] batadv1: entered promiscuous mode [ 620.030468][T16442] batadv1: entered allmulticast mode [ 620.050540][T16438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.065712][T16442] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 620.168266][T16250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 620.414580][T16250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.178281][T16250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.218811][T16250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.503998][T10967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.521580][T16472] syzkaller0: entered promiscuous mode [ 621.527090][T16472] syzkaller0: entered allmulticast mode [ 621.540704][T16250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.582885][T16472] tipc: Enabled bearer , priority 0 [ 621.622923][T16472] tipc: Resetting bearer [ 621.638650][T16250] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.682351][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.689520][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.693818][T16477] FAULT_INJECTION: forcing a failure. [ 621.693818][T16477] name failslab, interval 1, probability 0, space 0, times 0 [ 621.725915][T16477] CPU: 0 PID: 16477 Comm: syz.8.2413 Not tainted syzkaller #0 [ 621.733465][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.743542][T16477] Call Trace: [ 621.746840][T16477] [ 621.749788][T16477] dump_stack_lvl+0x18c/0x250 [ 621.754497][T16477] ? show_regs_print_info+0x20/0x20 [ 621.759720][T16477] ? load_image+0x420/0x420 [ 621.764255][T16477] ? __might_sleep+0xe0/0xe0 [ 621.768881][T16477] ? __lock_acquire+0x7eb0/0x7eb0 [ 621.773936][T16477] should_fail_ex+0x394/0x4c0 [ 621.778658][T16477] should_failslab+0x9/0x20 [ 621.783194][T16477] slab_pre_alloc_hook+0x59/0x300 [ 621.788250][T16477] ? mpi_powm+0x188b/0x2390 [ 621.792792][T16477] ? mpi_powm+0x188b/0x2390 [ 621.797316][T16477] __kmem_cache_alloc_node+0x53/0x250 [ 621.802731][T16477] ? mpi_powm+0x188b/0x2390 [ 621.807267][T16477] __kmalloc+0xa7/0x240 [ 621.811461][T16477] mpi_powm+0x188b/0x2390 [ 621.815845][T16477] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 621.822036][T16477] ? mpihelp_cmp+0xba/0xd0 [ 621.826478][T16477] ? mpi_cmp+0x1b8/0x290 [ 621.830748][T16477] rsa_enc+0x293/0x3d0 [ 621.834849][T16477] ? crypto_dh_decode_key+0x170/0x170 [ 621.840250][T16477] ? __virt_addr_valid+0x10c/0x380 [ 621.845396][T16477] ? __virt_addr_valid+0x10c/0x380 [ 621.850544][T16477] pkcs1pad_verify+0x406/0x5e0 [ 621.855342][T16477] crypto_sig_verify+0x1bc/0x250 [ 621.860308][T16477] ? crypto_sig_sign+0x240/0x240 [ 621.865299][T16477] ? rsa_max_size+0x19/0x70 [ 621.869831][T16477] ? pkcs1pad_set_pub_key+0x15d/0x1c0 [ 621.875241][T16477] public_key_verify_signature+0x607/0x870 [ 621.881104][T16477] ? public_key_free+0x80/0x80 [ 621.885916][T16477] ? asymmetric_key_generate_id+0x60/0x150 [ 621.891755][T16477] ? asymmetric_key_id_same+0x67/0xe0 [ 621.897168][T16477] x509_check_for_self_signed+0x31b/0x430 [ 621.902921][T16477] x509_cert_parse+0x5a0/0x7b0 [ 621.907722][T16477] x509_key_preparse+0x64/0x6c0 [ 621.912711][T16477] ? down_read+0x1ac/0x2e0 [ 621.917163][T16477] asymmetric_key_preparse+0xa9/0x140 [ 621.922570][T16477] __key_create_or_update+0x3a6/0xa60 [ 621.927979][T16477] ? __lock_acquire+0x7eb0/0x7eb0 [ 621.933041][T16477] ? key_create_or_update+0x60/0x60 [ 621.938276][T16477] ? bpf_lsm_key_permission+0x9/0x10 [ 621.943600][T16477] ? lookup_user_key+0xb66/0x1140 [ 621.948669][T16477] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 621.954685][T16477] ? keyring_search_rcu+0x280/0x280 [ 621.959920][T16477] key_create_or_update+0x42/0x60 [ 621.964993][T16477] __se_sys_add_key+0x34f/0x410 [ 621.969895][T16477] ? __x64_sys_add_key+0xc0/0xc0 [ 621.974871][T16477] ? lockdep_hardirqs_on+0x98/0x150 [ 621.980100][T16477] ? __x64_sys_add_key+0x20/0xc0 [ 621.985080][T16477] do_syscall_64+0x55/0xb0 [ 621.989523][T16477] ? clear_bhb_loop+0x40/0x90 [ 621.994314][T16477] ? clear_bhb_loop+0x40/0x90 [ 621.999019][T16477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.004950][T16477] RIP: 0033:0x7f1841f9f559 [ 622.009387][T16477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.029019][T16477] RSP: 002b:00007f1842e59028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 622.037462][T16477] RAX: ffffffffffffffda RBX: 00007f1842225fa0 RCX: 00007f1841f9f559 [ 622.045458][T16477] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 622.053450][T16477] RBP: 00007f1842036b20 R08: 00000000327d6c8a R09: 0000000000000000 [ 622.061443][T16477] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 622.069436][T16477] R13: 00007f1842226038 R14: 00007f1842225fa0 R15: 00007ffcc06d3fe8 [ 622.077449][T16477] [ 622.086486][T16471] tipc: Resetting bearer [ 622.182538][T16471] tipc: Disabling bearer [ 622.208180][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.215364][T14438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.431474][T16496] syzkaller0: entered promiscuous mode [ 622.486258][T16496] syzkaller0: entered allmulticast mode [ 622.935467][T16508] syzkaller0: entered promiscuous mode [ 622.941104][T16508] syzkaller0: entered allmulticast mode [ 623.190596][T16250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.289068][T16250] veth0_vlan: entered promiscuous mode [ 623.346671][T16250] veth1_vlan: entered promiscuous mode [ 623.479800][T16250] veth0_macvtap: entered promiscuous mode [ 623.510507][T16250] veth1_macvtap: entered promiscuous mode [ 623.591049][T16250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.631584][T16250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.647347][T16250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.677016][T16250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.711429][T16250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.732914][T16250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.744719][T16250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.756411][T16250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.797334][T16250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.822238][T16250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.848838][T16250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.872290][T12445] kernel read not supported for file /kmsg (pid: 12445 comm: kworker/1:7) [ 623.893268][T16250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.931970][T16250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.964253][T16250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.038754][T16250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.076462][T16250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.089116][T16549] loop8: detected capacity change from 0 to 256 [ 624.101956][T16250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.127099][T16250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.409467][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.528764][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.568494][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.675662][T16557] syzkaller0: entered promiscuous mode [ 624.681179][T16557] syzkaller0: entered allmulticast mode [ 624.703125][ T5894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.728295][ T5894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.627554][T16593] syzkaller0: entered promiscuous mode [ 625.635885][T16593] syzkaller0: entered allmulticast mode [ 626.745470][T16611] loop8: detected capacity change from 0 to 512 [ 626.808955][T16611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.852764][T16611] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.901339][ T27] audit: type=1800 audit(2000000276.040:146): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2447" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 626.963292][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2448'. [ 626.992268][T10967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.188177][T16626] syzkaller0: entered promiscuous mode [ 627.196056][T16626] syzkaller0: entered allmulticast mode [ 627.211695][T16629] netlink: 'syz.7.2454': attribute type 1 has an invalid length. [ 627.214500][T16626] tipc: Enabled bearer , priority 0 [ 627.230086][T16627] syzkaller0: entered promiscuous mode [ 627.240098][T16627] syzkaller0: entered allmulticast mode [ 627.259504][T16626] tipc: Resetting bearer [ 627.305031][T16624] tipc: Resetting bearer [ 627.361433][T16624] tipc: Disabling bearer [ 627.541001][T16640] 9pnet_fd: Insufficient options for proto=fd [ 627.711378][T16649] x_tables: duplicate underflow at hook 2 [ 628.026679][T16657] loop1: detected capacity change from 0 to 512 [ 628.080084][T16657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.093627][T16657] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.167445][T16649] loop7: detected capacity change from 0 to 32768 [ 628.178136][T16649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2460 (16649) [ 628.203193][T16250] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.214485][T16649] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 628.227626][T16649] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 628.242549][T16649] BTRFS info (device loop7): force clearing of disk cache [ 628.250260][T16649] BTRFS info (device loop7): enabling auto defrag [ 628.289242][T16649] BTRFS info (device loop7): max_inline at 0 [ 628.310829][T16649] BTRFS info (device loop7): enabling disk space caching [ 628.334372][T16649] BTRFS info (device loop7): disk space caching is enabled [ 628.377205][T16664] syzkaller0: entered promiscuous mode [ 628.387137][T16664] syzkaller0: entered allmulticast mode [ 628.405982][T16664] tipc: Started in network mode [ 628.411271][T16664] tipc: Node identity ee574c589811, cluster identity 4711 [ 628.451098][T16664] tipc: Enabled bearer , priority 0 [ 628.480608][T16649] BTRFS info (device loop7): enabling ssd optimizations [ 628.490891][T16649] BTRFS info (device loop7): rebuilding free space tree [ 628.510685][T16664] tipc: Resetting bearer [ 628.556823][T16649] BTRFS info (device loop7): disabling free space tree [ 628.585689][T16649] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 628.603504][T16663] tipc: Resetting bearer [ 628.619462][T16649] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 628.670013][T16663] tipc: Disabling bearer [ 628.706107][ T27] audit: type=1800 audit(2000000277.850:147): pid=16649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2460" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 628.779592][ T27] audit: type=1800 audit(2000000277.890:148): pid=16649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2460" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 628.796183][ T11] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 629.184287][ T5953] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 629.257537][T16701] loop8: detected capacity change from 0 to 2048 [ 629.274758][T16701] EXT4-fs: Ignoring removed bh option [ 629.295395][T16701] ext4: Unknown parameter 'noacl' [ 629.427750][T16706] netlink: 'syz.8.2471': attribute type 9 has an invalid length. [ 629.452938][T16706] netlink: 'syz.8.2471': attribute type 7 has an invalid length. [ 629.460865][T16706] netlink: 'syz.8.2471': attribute type 8 has an invalid length. [ 630.823043][ T5953] usb 8-1: unable to get BOS descriptor or descriptor too short [ 630.852906][ T5953] usb 8-1: no configurations [ 630.870585][ T5953] usb 8-1: can't read configurations, error -22 [ 630.971124][ T9836] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 631.741684][ T5774] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 631.944003][ T5774] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.955381][ T5774] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.981789][ T5774] usb 2-1: config 0 interface 0 has no altsetting 0 [ 631.988492][ T5774] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 632.008332][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.045169][ T5774] usb 2-1: config 0 descriptor?? [ 632.287299][T16731] syz.1.2477: attempt to access beyond end of device [ 632.287299][T16731] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 632.322846][T16731] qnx6: unable to read the first superblock [ 632.329123][T16731] syz.1.2477: attempt to access beyond end of device [ 632.329123][T16731] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 632.386029][T16731] qnx6: unable to read the first superblock [ 632.398511][T16731] qnx6: unable to read the first superblock [ 632.637051][ T5774] hid_mf 0003:0079:1801.0001: unknown main item tag 0x5 [ 632.659897][ T5774] hid_mf 0003:0079:1801.0001: unknown main item tag 0x0 [ 632.680987][ T5774] hid_mf 0003:0079:1801.0001: No inputs registered, leaving [ 632.733744][ T5774] hid_mf 0003:0079:1801.0001: hidraw0: USB HID vff.ff Keyboard [HID 0079:1801] on usb-dummy_hcd.1-1/input0 [ 632.767870][ T5774] hid_mf 0003:0079:1801.0001: Invalid report, this should never happen! [ 632.800055][ T5774] hid_mf 0003:0079:1801.0001: Force feedback init failed. [ 632.823888][T16731] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 632.852803][T16774] syzkaller0: entered promiscuous mode [ 632.871977][T16774] syzkaller0: entered allmulticast mode [ 632.879625][T16731] lo speed is unknown, defaulting to 1000 [ 632.891943][T16731] lo speed is unknown, defaulting to 1000 [ 632.928803][T16731] lo speed is unknown, defaulting to 1000 [ 632.966687][T16731] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 633.065815][T16731] lo speed is unknown, defaulting to 1000 [ 633.077555][T16731] lo speed is unknown, defaulting to 1000 [ 633.087850][T16731] lo speed is unknown, defaulting to 1000 [ 633.095676][T16731] lo speed is unknown, defaulting to 1000 [ 633.110879][T16780] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 633.277644][ T5953] usb 2-1: USB disconnect, device number 20 [ 633.749894][T16801] syzkaller0: entered promiscuous mode [ 633.757424][T16801] syzkaller0: entered allmulticast mode [ 633.827107][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2497'. [ 634.237279][T16820] loop8: detected capacity change from 0 to 2048 [ 634.244778][T16820] EXT4-fs: Ignoring removed bh option [ 634.250347][T16820] ext4: Unknown parameter 'noacl' [ 634.300640][T16287] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 634.560098][T16829] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2506'. [ 634.635888][T16830] netlink: 'syz.8.2503': attribute type 9 has an invalid length. [ 634.643768][T16830] netlink: 'syz.8.2503': attribute type 7 has an invalid length. [ 634.651588][T16830] netlink: 'syz.8.2503': attribute type 8 has an invalid length. [ 635.295401][T16832] syzkaller0: entered promiscuous mode [ 635.301012][T16832] syzkaller0: entered allmulticast mode [ 635.351315][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2508'. [ 635.380059][T16838] loop8: detected capacity change from 0 to 512 [ 635.404409][T16838] EXT4-fs: Mount option(s) incompatible with ext3 [ 635.803314][T16844] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 635.803314][T16844] program syz.8.2510 not setting count and/or reply_len properly [ 636.258804][T16842] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2511'. [ 636.366584][T16842] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2511'. [ 636.381872][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2511'. [ 637.111301][T16863] loop1: detected capacity change from 0 to 2048 [ 637.138369][T16863] EXT4-fs: Ignoring removed bh option [ 637.161046][T16863] ext4: Unknown parameter 'noacl' [ 637.510708][T16866] netlink: 'syz.1.2518': attribute type 9 has an invalid length. [ 637.518652][T16866] netlink: 'syz.1.2518': attribute type 7 has an invalid length. [ 637.526516][T16866] netlink: 'syz.1.2518': attribute type 8 has an invalid length. [ 638.122303][T16868] 9pnet_fd: Insufficient options for proto=fd [ 638.208344][T16870] syzkaller0: entered promiscuous mode [ 638.221637][T16870] syzkaller0: entered allmulticast mode [ 638.371158][T16874] loop8: detected capacity change from 0 to 1024 [ 638.446846][T16872] team0 (unregistering): Port device team_slave_0 removed [ 638.515126][T16872] team0 (unregistering): Port device team_slave_1 removed [ 638.564855][T16874] EXT4-fs: quotafile must be on filesystem root [ 638.827243][T16880] loop7: detected capacity change from 0 to 512 [ 638.959095][T16881] loop8: detected capacity change from 0 to 1024 [ 638.972624][T16881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 639.102431][T16880] EXT4-fs: Mount option(s) incompatible with ext3 [ 639.241810][T16881] EXT4-fs (loop8): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 639.254361][T16881] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.499258][T16888] netlink: 'syz.9.2525': attribute type 14 has an invalid length. [ 639.807636][T16891] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 639.807636][T16891] program syz.7.2523 not setting count and/or reply_len properly [ 639.960388][T10967] EXT4-fs (loop8): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 639.992702][T16887] FAULT_INJECTION: forcing a failure. [ 639.992702][T16887] name failslab, interval 1, probability 0, space 0, times 0 [ 640.030108][T16892] FAULT_INJECTION: forcing a failure. [ 640.030108][T16892] name failslab, interval 1, probability 0, space 0, times 0 [ 640.086646][T16887] CPU: 1 PID: 16887 Comm: syz.1.2524 Not tainted syzkaller #0 [ 640.094152][T16887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.104219][T16887] Call Trace: [ 640.107506][T16887] [ 640.110446][T16887] dump_stack_lvl+0x18c/0x250 [ 640.115145][T16887] ? show_regs_print_info+0x20/0x20 [ 640.120363][T16887] ? load_image+0x420/0x420 [ 640.124893][T16887] ? __lock_acquire+0x7eb0/0x7eb0 [ 640.129944][T16887] should_fail_ex+0x394/0x4c0 [ 640.134649][T16887] should_failslab+0x9/0x20 [ 640.139176][T16887] slab_pre_alloc_hook+0x59/0x300 [ 640.144222][T16887] kmem_cache_alloc_lru+0x4d/0x2b0 [ 640.149353][T16887] ? proc_alloc_inode+0x2a/0xb0 [ 640.154225][T16887] proc_alloc_inode+0x2a/0xb0 [ 640.158911][T16887] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 640.165252][T16887] new_inode_pseudo+0x63/0x1d0 [ 640.170041][T16887] new_inode+0x22/0x1d0 [ 640.174220][T16887] proc_pid_make_inode+0x24/0x190 [ 640.179268][T16887] proc_task_instantiate+0x54/0x2c0 [ 640.184491][T16887] ? proc_task_lookup+0xe1/0x540 [ 640.189451][T16887] proc_task_lookup+0x37a/0x540 [ 640.194326][T16887] ? proc_task_lookup+0xe1/0x540 [ 640.199286][T16887] __lookup_slow+0x2a1/0x400 [ 640.203892][T16887] ? lookup_one_len+0x2e0/0x2e0 [ 640.208775][T16887] ? down_read+0x1ac/0x2e0 [ 640.213214][T16887] lookup_slow+0x53/0x70 [ 640.217471][T16887] walk_component+0x2ad/0x3e0 [ 640.222171][T16887] link_path_walk+0x6b5/0xe40 [ 640.226884][T16887] ? handle_lookup_down+0x130/0x130 [ 640.232112][T16887] path_openat+0x291/0x3270 [ 640.236660][T16887] ? do_sys_openat2+0xda/0x1d0 [ 640.241440][T16887] ? __x64_sys_openat+0x139/0x160 [ 640.246486][T16887] ? verify_lock_unused+0x140/0x140 [ 640.251702][T16887] ? do_filp_open+0x430/0x430 [ 640.256415][T16887] do_filp_open+0x1f2/0x430 [ 640.260938][T16887] ? vfs_tmpfile+0x620/0x620 [ 640.265554][T16887] ? noop_direct_IO+0x20/0x20 [ 640.270262][T16887] ? _raw_spin_unlock+0x28/0x40 [ 640.275147][T16887] ? alloc_fd+0x590/0x640 [ 640.279469][T16887] do_sys_openat2+0x134/0x1d0 [ 640.284148][T16887] ? do_sys_open+0xe0/0xe0 [ 640.288567][T16887] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 640.294555][T16887] ? lock_chain_count+0x20/0x20 [ 640.299443][T16887] __x64_sys_openat+0x139/0x160 [ 640.304331][T16887] do_syscall_64+0x55/0xb0 [ 640.308767][T16887] ? clear_bhb_loop+0x40/0x90 [ 640.313468][T16887] ? clear_bhb_loop+0x40/0x90 [ 640.318182][T16887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.324102][T16887] RIP: 0033:0x7f409c15fd8e [ 640.328544][T16887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 640.348170][T16887] RSP: 002b:00007f409d05fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 640.356589][T16887] RAX: ffffffffffffffda RBX: 00007f409d0606c0 RCX: 00007f409c15fd8e [ 640.364559][T16887] RDX: 0000000000000002 RSI: 00007f409d05ff90 RDI: ffffffffffffff9c [ 640.372528][T16887] RBP: 00007f409c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 640.380491][T16887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.388456][T16887] R13: 00007f409c426038 R14: 00007f409c425fa0 R15: 00007ffc34e5a7b8 [ 640.396440][T16887] [ 640.411886][T16892] CPU: 1 PID: 16892 Comm: syz.9.2526 Not tainted syzkaller #0 [ 640.419387][T16892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.429458][T16892] Call Trace: [ 640.432739][T16892] [ 640.435666][T16892] dump_stack_lvl+0x18c/0x250 [ 640.440346][T16892] ? show_regs_print_info+0x20/0x20 [ 640.445540][T16892] ? load_image+0x420/0x420 [ 640.450048][T16892] ? __might_sleep+0xe0/0xe0 [ 640.454641][T16892] ? __lock_acquire+0x7eb0/0x7eb0 [ 640.459671][T16892] should_fail_ex+0x394/0x4c0 [ 640.464356][T16892] should_failslab+0x9/0x20 [ 640.468859][T16892] slab_pre_alloc_hook+0x59/0x300 [ 640.473880][T16892] ? __might_fault+0xaa/0x120 [ 640.478562][T16892] kmem_cache_alloc+0x5a/0x2c0 [ 640.483328][T16892] ? getname_flags+0xbb/0x500 [ 640.488005][T16892] getname_flags+0xbb/0x500 [ 640.492504][T16892] user_path_at_empty+0x2c/0x60 [ 640.497349][T16892] __se_sys_mount+0x2a8/0x3d0 [ 640.502027][T16892] ? __x64_sys_mount+0xc0/0xc0 [ 640.506788][T16892] ? lockdep_hardirqs_on+0x98/0x150 [ 640.511983][T16892] ? __x64_sys_mount+0x20/0xc0 [ 640.516740][T16892] do_syscall_64+0x55/0xb0 [ 640.521153][T16892] ? clear_bhb_loop+0x40/0x90 [ 640.525828][T16892] ? clear_bhb_loop+0x40/0x90 [ 640.530506][T16892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.536401][T16892] RIP: 0033:0x7ff25df9f559 [ 640.540813][T16892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.560415][T16892] RSP: 002b:00007ff25edda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.568826][T16892] RAX: ffffffffffffffda RBX: 00007ff25e225fa0 RCX: 00007ff25df9f559 [ 640.576813][T16892] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000380 [ 640.584786][T16892] RBP: 00007ff25e036b20 R08: 0000000000000000 R09: 0000000000000000 [ 640.592747][T16892] R10: 0000000003235060 R11: 0000000000000246 R12: 0000000000000000 [ 640.600713][T16892] R13: 00007ff25e226038 R14: 00007ff25e225fa0 R15: 00007ffd544989f8 [ 640.608697][T16892] [ 640.824889][T16899] loop9: detected capacity change from 0 to 2048 [ 640.833254][T16899] EXT4-fs: Ignoring removed bh option [ 640.839509][T16899] ext4: Unknown parameter 'noacl' [ 641.169031][T16910] netlink: 'syz.9.2529': attribute type 9 has an invalid length. [ 641.176924][T16910] netlink: 'syz.9.2529': attribute type 7 has an invalid length. [ 641.184830][T16910] netlink: 'syz.9.2529': attribute type 8 has an invalid length. [ 642.280075][T16917] netlink: 'syz.1.2533': attribute type 27 has an invalid length. [ 642.288182][T16917] netlink: 'syz.1.2533': attribute type 3 has an invalid length. [ 642.586559][T16924] syz.8.2537 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 642.600549][T16924] ip_tables: iptables: counters copy to user failed while replacing table [ 642.622704][T16926] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2539'. [ 642.639288][T16926] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2539'. [ 642.901283][T16936] loop7: detected capacity change from 0 to 2048 [ 642.937895][T16936] EXT4-fs: Ignoring removed bh option [ 642.949806][T16936] ext4: Unknown parameter 'noacl' [ 643.300965][T16949] netlink: 'syz.7.2543': attribute type 9 has an invalid length. [ 643.309065][T16949] netlink: 'syz.7.2543': attribute type 7 has an invalid length. [ 643.316955][T16949] netlink: 'syz.7.2543': attribute type 8 has an invalid length. [ 644.306168][T16971] tipc: Enabled bearer , priority 0 [ 644.325117][T16971] syzkaller0: entered promiscuous mode [ 644.330893][T16971] syzkaller0: entered allmulticast mode [ 644.382075][T16971] tipc: Resetting bearer [ 644.397480][T16970] tipc: Resetting bearer [ 644.454382][T16970] tipc: Disabling bearer [ 644.467812][T16985] loop9: detected capacity change from 0 to 512 [ 644.487804][T16985] EXT4-fs: Mount option(s) incompatible with ext3 [ 644.503912][T16983] loop1: detected capacity change from 0 to 2048 [ 644.513835][T16983] EXT4-fs: Ignoring removed bh option [ 644.523821][T16983] ext4: Unknown parameter 'noacl' [ 644.749921][T16284] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 644.765108][T16989] loop8: detected capacity change from 0 to 512 [ 644.818468][T16989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.860629][T16995] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 644.860629][T16995] program syz.9.2561 not setting count and/or reply_len properly [ 645.299051][T16989] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.414449][T16999] netlink: 'syz.1.2560': attribute type 9 has an invalid length. [ 645.422546][T16999] netlink: 'syz.1.2560': attribute type 7 has an invalid length. [ 645.450518][ T27] audit: type=1800 audit(2000000294.580:149): pid=16989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2562" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 645.629286][T10967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.638505][T17005] loop9: detected capacity change from 0 to 1024 [ 645.647343][T17005] EXT4-fs: Ignoring removed oldalloc option [ 645.696542][T17005] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 645.744585][T17005] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.838381][ T27] audit: type=1800 audit(2000000294.980:150): pid=17005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2564" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 645.920903][T11021] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 646.002542][T17011] syzkaller0: entered promiscuous mode [ 646.031706][T17011] syzkaller0: entered allmulticast mode [ 647.066570][T17033] loop8: detected capacity change from 0 to 512 [ 647.107487][T17033] EXT4-fs: Mount option(s) incompatible with ext3 [ 647.574882][T17038] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 647.574882][T17038] program syz.8.2573 not setting count and/or reply_len properly [ 649.428457][T17040] 9pnet_fd: Insufficient options for proto=fd [ 649.663053][T17050] loop8: detected capacity change from 0 to 512 [ 649.880275][ T5852] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 650.071707][T12445] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 650.339012][ T5852] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.451295][T17050] EXT4-fs (loop8): 1 orphan inode deleted [ 650.498666][ T5852] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.506201][T17050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.526237][ T7362] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 650.547715][T17050] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.567993][ T7362] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:14: Failed to release dquot type 1 [ 650.591029][ T5852] usb 10-1: config 0 interface 0 has no altsetting 0 [ 650.618498][ T5852] usb 10-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 650.656824][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.666063][T17050] EXT4-fs (loop8): shut down requested (2) [ 650.681821][T12445] usb 8-1: Using ep0 maxpacket: 8 [ 650.692698][ T5852] usb 10-1: config 0 descriptor?? [ 650.699087][T12445] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 650.720844][T12445] usb 8-1: config 0 has no interface number 0 [ 650.736727][T12445] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 650.775238][T12445] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 650.801772][T12445] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.823367][T12445] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 650.832943][T12445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.889714][T12445] usb 8-1: config 0 descriptor?? [ 650.913186][T12445] ldusb 8-1:0.55: Interrupt in endpoint not found [ 650.915188][T17044] syz.9.2577: attempt to access beyond end of device [ 650.915188][T17044] nbd9: rw=0, sector=16, nr_sectors = 1 limit=0 [ 650.946189][T17044] qnx6: unable to read the first superblock [ 650.972962][T17044] syz.9.2577: attempt to access beyond end of device [ 650.972962][T17044] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 650.988185][T17044] qnx6: unable to read the first superblock [ 650.996205][T17044] qnx6: unable to read the first superblock [ 651.030852][T10967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.078071][ T7362] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.193099][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.249430][ T5852] hid_mf 0003:0079:1801.0002: unknown main item tag 0x5 [ 651.262115][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.321705][ T5852] hid_mf 0003:0079:1801.0002: unknown main item tag 0x0 [ 651.332029][ T5953] usb 8-1: USB disconnect, device number 18 [ 651.409442][ T5852] hid_mf 0003:0079:1801.0002: No inputs registered, leaving [ 651.448375][ T7362] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.498529][ T5852] hid_mf 0003:0079:1801.0002: hidraw0: USB HID vff.ff Keyboard [HID 0079:1801] on usb-dummy_hcd.9-1/input0 [ 651.554977][ T5852] hid_mf 0003:0079:1801.0002: Invalid report, this should never happen! [ 651.587345][ T5852] hid_mf 0003:0079:1801.0002: Force feedback init failed. [ 651.621614][ T5852] usb 10-1: USB disconnect, device number 7 [ 651.635957][ T7362] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.664921][T17074] fido_id[17074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 651.905539][ T7362] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.022258][T17079] syzkaller0: entered promiscuous mode [ 652.028997][T17079] syzkaller0: entered allmulticast mode [ 652.130331][T12313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.140228][T12313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.151232][T12313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.166394][T12313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.177682][T12313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 652.185872][T12313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 652.367403][T17090] x_tables: duplicate underflow at hook 2 [ 652.909522][T17090] loop9: detected capacity change from 0 to 32768 [ 652.927635][T17090] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.2590 (17090) [ 652.987531][T17090] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.005164][T17090] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 653.015746][T17090] BTRFS info (device loop9): force clearing of disk cache [ 653.025110][T17090] BTRFS info (device loop9): enabling auto defrag [ 653.036476][T17090] BTRFS info (device loop9): max_inline at 0 [ 653.042886][T17090] BTRFS info (device loop9): enabling disk space caching [ 653.061680][T17090] BTRFS info (device loop9): disk space caching is enabled [ 653.274895][T17090] BTRFS info (device loop9): enabling ssd optimizations [ 653.283251][T17090] BTRFS info (device loop9): rebuilding free space tree [ 653.301978][T17090] BTRFS info (device loop9): disabling free space tree [ 653.308987][T17090] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 653.319329][T17090] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 653.371176][ T27] audit: type=1800 audit(2000000302.510:151): pid=17090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2590" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 653.436920][ T27] audit: type=1800 audit(2000000302.540:152): pid=17090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2590" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 653.453572][ T42] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared) [ 653.811831][ T5774] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 654.245167][ T5780] Bluetooth: hci2: command tx timeout [ 655.362912][T17082] rxe_eth0 speed is unknown, defaulting to 1000 [ 655.480932][ T7362] tipc: Left network mode [ 655.491856][ T5774] usb 10-1: unable to get BOS descriptor or descriptor too short [ 655.515972][ T5774] usb 10-1: no configurations [ 655.552263][ T5774] usb 10-1: can't read configurations, error -22 [ 655.571976][T17118] syzkaller0: entered promiscuous mode [ 655.577495][T17118] syzkaller0: entered allmulticast mode [ 655.992816][T17082] lo speed is unknown, defaulting to 1000 [ 656.026913][T11021] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 656.252198][ T173] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 656.311602][ T5780] Bluetooth: hci2: command tx timeout [ 656.480367][ T173] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.506868][ T173] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.553939][ T173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 656.573905][ T173] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 656.609367][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.632733][ T173] usb 2-1: config 0 descriptor?? [ 656.854659][T17130] syz.1.2596: attempt to access beyond end of device [ 656.854659][T17130] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 656.901647][T17130] qnx6: unable to read the first superblock [ 656.912532][T17130] syz.1.2596: attempt to access beyond end of device [ 656.912532][T17130] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 656.948258][T17082] chnl_net:caif_netlink_parms(): no params data found [ 656.967877][T17130] qnx6: unable to read the first superblock [ 657.021751][T17130] qnx6: unable to read the first superblock [ 657.194718][ T173] hid_mf 0003:0079:1801.0003: unknown main item tag 0x5 [ 657.206028][ T173] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0 [ 657.215270][ T173] hid_mf 0003:0079:1801.0003: No inputs registered, leaving [ 657.243199][ T173] hid_mf 0003:0079:1801.0003: hidraw0: USB HID vff.ff Keyboard [HID 0079:1801] on usb-dummy_hcd.1-1/input0 [ 657.273223][ T173] hid_mf 0003:0079:1801.0003: Invalid report, this should never happen! [ 657.292023][ T173] hid_mf 0003:0079:1801.0003: Force feedback init failed. [ 657.418010][ T5756] usb 2-1: USB disconnect, device number 21 [ 657.908855][T17082] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.945470][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.988755][T17082] bridge_slave_0: entered allmulticast mode [ 658.013025][T17082] bridge_slave_0: entered promiscuous mode [ 658.033095][T17082] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.060084][T17082] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.081769][T17082] bridge_slave_1: entered allmulticast mode [ 658.089822][T17082] bridge_slave_1: entered promiscuous mode [ 658.121250][T17178] validate_nla: 1 callbacks suppressed [ 658.121263][T17178] netlink: 'syz.9.2603': attribute type 27 has an invalid length. [ 658.134944][T17178] netlink: 'syz.9.2603': attribute type 3 has an invalid length. [ 658.287760][T17177] syzkaller0: entered promiscuous mode [ 658.307811][T17177] syzkaller0: entered allmulticast mode [ 658.344765][T17082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.386925][T17082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.396280][ T5780] Bluetooth: hci2: command tx timeout [ 658.597627][T12313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 658.610184][T12313] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 658.620025][T12313] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 658.629631][T12313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 658.639095][T12313] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 658.647136][T12313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 658.655174][ T7362] hsr_slave_0: left promiscuous mode [ 658.676251][ T7362] hsr_slave_1: left promiscuous mode [ 658.695702][ T7362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.708878][ T7362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.721077][ T7362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.736183][ T7362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.747190][ T7362] bridge_slave_1: left allmulticast mode [ 658.763117][ T7362] bridge_slave_1: left promiscuous mode [ 658.769445][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.787872][ T7362] bridge_slave_0: left allmulticast mode [ 658.795396][ T7362] bridge_slave_0: left promiscuous mode [ 658.801128][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.830548][ T7362] veth1_macvtap: left promiscuous mode [ 658.836307][ T7362] veth0_macvtap: left promiscuous mode [ 658.844755][ T7362] veth1_vlan: left promiscuous mode [ 658.850067][ T7362] veth0_vlan: left promiscuous mode [ 659.341712][T12445] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 659.522796][T12445] usb 10-1: not running at top speed; connect to a high speed hub [ 659.539085][T12445] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 659.550386][T12445] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.570225][T12445] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 659.579837][T12445] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 659.594798][T12445] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.739065][ T7362] team0 (unregistering): Port device team_slave_1 removed [ 659.798724][ T7362] team0 (unregistering): Port device team_slave_0 removed [ 659.883392][ T7362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.986002][ T7362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.471600][T12313] Bluetooth: hci2: command tx timeout [ 660.656464][ T7362] bond0 (unregistering): Released all slaves [ 660.713251][T12313] Bluetooth: hci0: command tx timeout [ 660.729250][T12445] usb 10-1: string descriptor 0 read error: -71 [ 660.748937][T12445] usb 10-1: Found UVC 1.00 device (046d:0825) [ 660.770076][T12445] usb 10-1: No valid video chain found. [ 660.786595][T17082] team0: Port device team_slave_0 added [ 660.790326][T12445] usb 10-1: USB disconnect, device number 10 [ 660.839886][T17082] team0: Port device team_slave_1 added [ 660.902517][T17082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.910003][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.939120][T17082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.962471][T17188] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.970468][T17082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.986642][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.071657][T17082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.268110][T17082] hsr_slave_0: entered promiscuous mode [ 661.299762][T17082] hsr_slave_1: entered promiscuous mode [ 661.893004][T17082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.900609][T17082] Cannot create hsr debugfs directory [ 662.071959][T17188] lo speed is unknown, defaulting to 1000 [ 662.582947][ T6645] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.797457][T12313] Bluetooth: hci0: command tx timeout [ 662.834910][ T6645] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.099609][T17228] netlink: 'syz.9.2611': attribute type 1 has an invalid length. [ 663.148525][T17228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.206890][T17223] bond1: (slave veth3): Enslaving as an active interface with a down link [ 663.233611][ T6645] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.257446][T17231] bond1: (slave macvlan0): making interface the new active one [ 663.282217][T17231] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 663.554693][ T6645] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.571328][T17237] syzkaller0: entered promiscuous mode [ 663.579615][T17237] syzkaller0: entered allmulticast mode [ 663.600854][T17188] chnl_net:caif_netlink_parms(): no params data found [ 663.795762][T17248] loop1: detected capacity change from 0 to 2048 [ 663.828702][T17248] EXT4-fs: Ignoring removed bh option [ 663.846726][T17248] ext4: Unknown parameter 'noacl' [ 664.076279][T17254] netlink: 'syz.1.2614': attribute type 9 has an invalid length. [ 664.097005][T17254] netlink: 'syz.1.2614': attribute type 7 has an invalid length. [ 664.115244][T17254] netlink: 'syz.1.2614': attribute type 8 has an invalid length. [ 664.272525][T17188] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.307675][T17188] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.331832][T17188] bridge_slave_0: entered allmulticast mode [ 664.339150][T17188] bridge_slave_0: entered promiscuous mode [ 664.393259][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.400656][T17188] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.437205][T17188] bridge_slave_1: entered allmulticast mode [ 664.455084][T17188] bridge_slave_1: entered promiscuous mode [ 664.537744][ T6645] tipc: Left network mode [ 664.587735][T17082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.645849][T17082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.681488][T17188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.693276][T17082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.724852][T17082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.761903][T17188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.871772][T12313] Bluetooth: hci0: command tx timeout [ 664.958231][T17188] team0: Port device team_slave_0 added [ 665.022929][T17188] team0: Port device team_slave_1 added [ 665.839837][T17188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.873282][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.971580][T17188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.001688][T17188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.011578][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.039099][T17188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.221154][T17188] hsr_slave_0: entered promiscuous mode [ 666.229449][T17188] hsr_slave_1: entered promiscuous mode [ 666.240900][T17188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.256026][T17188] Cannot create hsr debugfs directory [ 666.257482][T17278] loop1: detected capacity change from 0 to 512 [ 666.323913][T17278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.341837][T17278] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 666.360864][ T27] audit: type=1800 audit(2000000315.500:153): pid=17278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2618" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 666.410511][T16250] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.515075][ T27] audit: type=1800 audit(2000000315.660:154): pid=17283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2619" name="max_speed" dev="configfs" ino=37308 res=0 errno=0 [ 666.656258][T17082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.831215][T17082] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.871975][ T5852] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 666.902550][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.909695][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.933665][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.940826][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.958615][T12313] Bluetooth: hci0: command tx timeout [ 666.960018][T17287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.100595][ T5852] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.121623][T17289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.135369][ T5852] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.169179][ T5852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 667.186172][ T5852] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 667.202421][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.214344][ T5852] usb 2-1: config 0 descriptor?? [ 667.270923][ T6645] hsr_slave_0: left promiscuous mode [ 667.278006][ T6645] hsr_slave_1: left promiscuous mode [ 667.287974][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.296478][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.318363][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.325939][ T6645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.338632][ T6645] bridge_slave_1: left allmulticast mode [ 667.344864][ T6645] bridge_slave_1: left promiscuous mode [ 667.350744][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.361189][ T6645] bridge_slave_0: left allmulticast mode [ 667.367298][ T6645] bridge_slave_0: left promiscuous mode [ 667.373936][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.416770][ T6645] veth1_macvtap: left promiscuous mode [ 667.426682][T17285] syz.1.2620: attempt to access beyond end of device [ 667.426682][T17285] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 667.439879][ T6645] veth0_macvtap: left promiscuous mode [ 667.446351][ T6645] veth1_vlan: left promiscuous mode [ 667.451880][ T6645] veth0_vlan: left promiscuous mode [ 667.457457][T17285] qnx6: unable to read the first superblock [ 667.475982][T17285] syz.1.2620: attempt to access beyond end of device [ 667.475982][T17285] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 667.511869][T17285] qnx6: unable to read the first superblock [ 667.519521][T17285] qnx6: unable to read the first superblock [ 667.713996][ T5852] hid_mf 0003:0079:1801.0004: unknown main item tag 0x5 [ 667.731239][ T5852] hid_mf 0003:0079:1801.0004: unknown main item tag 0x0 [ 667.764400][ T5852] hid_mf 0003:0079:1801.0004: No inputs registered, leaving [ 667.803612][ T5852] hid_mf 0003:0079:1801.0004: hidraw0: USB HID vff.ff Keyboard [HID 0079:1801] on usb-dummy_hcd.1-1/input0 [ 667.827750][ T5852] hid_mf 0003:0079:1801.0004: Invalid report, this should never happen! [ 667.847816][ T5852] hid_mf 0003:0079:1801.0004: Force feedback init failed. [ 667.935075][ T5852] usb 2-1: USB disconnect, device number 22 [ 667.955100][T17303] fido_id[17303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 669.219214][T17316] loop1: detected capacity change from 0 to 2048 [ 669.234220][T17316] EXT4-fs: Ignoring removed bh option [ 669.239675][T17316] ext4: Unknown parameter 'noacl' [ 669.314246][ T6645] team0 (unregistering): Port device team_slave_1 removed [ 669.398290][ T6645] team0 (unregistering): Port device team_slave_0 removed [ 669.585736][ T6645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.713480][ T6645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.320831][ T6645] bond0 (unregistering): Released all slaves [ 670.513193][T17322] netlink: 'syz.1.2625': attribute type 9 has an invalid length. [ 670.520970][T17322] netlink: 'syz.1.2625': attribute type 7 has an invalid length. [ 670.541750][T17322] netlink: 'syz.1.2625': attribute type 8 has an invalid length. [ 672.192549][T17082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.680088][T17082] veth0_vlan: entered promiscuous mode [ 672.733599][T17082] veth1_vlan: entered promiscuous mode [ 672.910228][T17188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 672.941499][T17188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 672.971396][T17188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 672.991221][T17082] veth0_macvtap: entered promiscuous mode [ 673.016655][T17082] veth1_macvtap: entered promiscuous mode [ 673.035898][T17188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 673.104985][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.135270][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.146447][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.157235][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.172036][ T5853] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 673.193218][T17082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.241059][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.257369][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.296105][T17082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.317183][T17082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.343213][T17082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.381487][ T5853] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.397196][T17082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.405527][ T5853] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.426037][ T5853] usb 2-1: config 0 interface 0 has no altsetting 0 [ 673.431556][T17082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.433055][ T5853] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 673.451496][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.461278][T17082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.473072][ T5853] usb 2-1: config 0 descriptor?? [ 673.474348][T17082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.611435][T17188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.668313][T17188] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.679684][T17372] loop9: detected capacity change from 0 to 2048 [ 673.715121][T17355] syz.1.2632: attempt to access beyond end of device [ 673.715121][T17355] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 673.722471][T17372] EXT4-fs: Ignoring removed bh option [ 673.729187][T17355] qnx6: unable to read the first superblock [ 673.740362][T17355] syz.1.2632: attempt to access beyond end of device [ 673.740362][T17355] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 673.754446][T17355] qnx6: unable to read the first superblock [ 673.758859][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.760367][T17355] qnx6: unable to read the first superblock [ 673.767463][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.771312][T17372] ext4: Unknown parameter 'noacl' [ 673.787328][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.794509][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.831463][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.849317][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.940433][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.948371][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.025311][ T5853] hid_mf 0003:0079:1801.0005: unknown main item tag 0x5 [ 674.062818][ T5853] hid_mf 0003:0079:1801.0005: unknown main item tag 0x0 [ 674.086595][ T5853] hid_mf 0003:0079:1801.0005: No inputs registered, leaving [ 674.121953][ T5853] hid_mf 0003:0079:1801.0005: hidraw0: USB HID vff.ff Keyboard [HID 0079:1801] on usb-dummy_hcd.1-1/input0 [ 674.154710][ T5853] hid_mf 0003:0079:1801.0005: Invalid report, this should never happen! [ 674.171599][ T5853] hid_mf 0003:0079:1801.0005: Force feedback init failed. [ 674.193345][T17382] 9pnet_fd: Insufficient options for proto=fd [ 674.266256][ T5853] usb 2-1: USB disconnect, device number 23 [ 674.350915][T17383] fido_id[17383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 674.497291][T17188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.613311][T17188] veth0_vlan: entered promiscuous mode [ 674.637137][T17188] veth1_vlan: entered promiscuous mode [ 674.724027][T17188] veth0_macvtap: entered promiscuous mode [ 674.753942][T17188] veth1_macvtap: entered promiscuous mode [ 674.805197][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.844462][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.874389][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.895364][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.921573][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.939721][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.987917][T17188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.028485][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.061714][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.091772][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.131547][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.157203][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.181754][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.203664][T17188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.277575][T17188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.311663][T17188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.320400][T17188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.362125][T17188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.629685][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.656765][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.723213][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.761087][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.170160][ T27] audit: type=1800 audit(2000000325.310:155): pid=17434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2644" name="max_speed" dev="configfs" ino=38924 res=0 errno=0 [ 677.351842][ T5953] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 677.382327][T17451] loop1: detected capacity change from 0 to 2048 [ 677.551949][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 677.582573][T17451] EXT4-fs: Ignoring removed bh option [ 677.858390][T17451] ext4: Unknown parameter 'noacl' [ 677.907073][ T5953] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 677.915642][ T5953] usb 1-1: config 0 has no interface number 0 [ 677.943166][ T5953] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 677.961846][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.969867][ T5953] usb 1-1: Product: syz [ 678.012609][T17456] netlink: 'syz.1.2648': attribute type 9 has an invalid length. [ 678.021538][T17456] netlink: 'syz.1.2648': attribute type 7 has an invalid length. [ 678.037207][ T5953] usb 1-1: Manufacturer: syz [ 678.048860][ T5953] usb 1-1: SerialNumber: syz [ 678.054086][T17456] netlink: 'syz.1.2648': attribute type 8 has an invalid length. [ 678.069164][ T5953] usb 1-1: config 0 descriptor?? [ 678.097276][ T5953] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 678.111451][ T5953] usb 1-1: selecting invalid altsetting 1 [ 678.127970][ T5953] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 678.167988][ T5953] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 678.216063][ T5953] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 678.265962][ T5953] usb 1-1: media controller created [ 678.307993][T17446] warning: `syz.0.2647' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 678.407103][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.881940][T17471] futex_wake_op: syz.3.2651 tries to shift op by 144; fix this program [ 679.361550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 679.990533][ T5953] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 680.110573][ T5953] zl10353_read_register: readreg error (reg=127, ret==-110) [ 680.184192][ T5953] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 680.342261][ T5953] usb 1-1: USB disconnect, device number 15 [ 680.417650][ T27] audit: type=1800 audit(2000000329.560:156): pid=17480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2654" name="max_speed" dev="configfs" ino=38986 res=0 errno=0 [ 681.951970][T17502] x_tables: duplicate underflow at hook 2 [ 681.977662][ T27] audit: type=1800 audit(2000000332.105:157): pid=17499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2661" name="size" dev="configfs" ino=38298 res=0 errno=0 [ 682.082166][ T27] audit: type=1800 audit(2000000332.145:158): pid=17499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2661" name="zoned" dev="configfs" ino=38299 res=0 errno=0 [ 682.165601][ T27] audit: type=1800 audit(2000000332.165:159): pid=17499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2661" name="power" dev="configfs" ino=38300 res=0 errno=0 [ 682.210876][T17499] null_blk: disk nullb1 created [ 682.511687][ T5953] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 682.729791][ T5953] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.759573][ T5953] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.778688][T17532] 9pnet_fd: Insufficient options for proto=fd [ 682.792614][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 682.800071][T17502] loop3: detected capacity change from 0 to 32768 [ 682.821925][ T5953] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 682.842391][T17502] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2659 (17502) [ 682.867135][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.878538][T17502] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 682.912335][ T5953] usb 1-1: config 0 descriptor?? [ 682.918202][T17502] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 682.969533][T17502] BTRFS info (device loop3): force clearing of disk cache [ 682.995197][T17502] BTRFS info (device loop3): enabling auto defrag [ 683.022540][T17502] BTRFS info (device loop3): max_inline at 0 [ 683.030094][T17502] BTRFS info (device loop3): enabling disk space caching [ 683.055566][T17502] BTRFS info (device loop3): disk space caching is enabled [ 683.133809][T17517] syz.0.2665: attempt to access beyond end of device [ 683.133809][T17517] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 683.177066][T17517] qnx6: unable to read the first superblock [ 683.217054][T17517] syz.0.2665: attempt to access beyond end of device [ 683.217054][T17517] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 683.245563][T17550] loop1: detected capacity change from 0 to 2048 [ 683.256427][T17550] EXT4-fs: Ignoring removed bh option [ 683.256789][T17502] BTRFS info (device loop3): enabling ssd optimizations [ 683.283005][T17517] qnx6: unable to read the first superblock [ 683.289000][T17517] qnx6: unable to read the first superblock [ 683.297630][T17550] ext4: Unknown parameter 'noacl' [ 683.301451][T17502] BTRFS info (device loop3): rebuilding free space tree [ 683.358265][T17502] BTRFS info (device loop3): disabling free space tree [ 683.376444][T17502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 683.410870][T17502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 683.483515][T17562] netlink: 'syz.1.2671': attribute type 9 has an invalid length. [ 683.493854][T17562] netlink: 'syz.1.2671': attribute type 7 has an invalid length. [ 683.496131][ T5953] hid_mf 0003:0079:1801.0006: unknown main item tag 0x5 [ 683.531155][T17562] netlink: 'syz.1.2671': attribute type 8 has an invalid length. [ 683.539756][ T5953] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 683.545608][ T27] audit: type=1800 audit(2000000333.665:160): pid=17502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2659" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 683.571208][ T5953] hid_mf 0003:0079:1801.0006: No inputs registered, leaving [ 683.626838][ T42] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 683.653352][ T27] audit: type=1800 audit(2000000333.715:161): pid=17502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2659" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 683.654102][ T5953] hid_mf 0003:0079:1801.0006: hidraw0: USB HID vff.ff Keyboard [HID 0079:1801] on usb-dummy_hcd.0-1/input0 [ 683.810855][ T5953] hid_mf 0003:0079:1801.0006: Invalid report, this should never happen! [ 683.853249][ T5953] hid_mf 0003:0079:1801.0006: Force feedback init failed. [ 683.897659][ T5953] usb 1-1: USB disconnect, device number 16 [ 683.943808][T17566] fido_id[17566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0079:1801.0006/report_descriptor': No such device [ 684.111770][ T5853] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 685.193869][T17586] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 685.846474][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.944838][ T5853] usb 4-1: unable to get BOS descriptor or descriptor too short [ 685.955097][T17565] syz.3.2659 (17565) used greatest stack depth: 19992 bytes left [ 685.982272][ T5853] usb 4-1: no configurations [ 685.986909][ T5853] usb 4-1: can't read configurations, error -22 [ 686.964033][T17188] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 687.097207][T17606] netlink: 'syz.9.2676': attribute type 3 has an invalid length. [ 687.126593][T17606] netlink: 'syz.9.2676': attribute type 3 has an invalid length. [ 687.143460][T17610] 9pnet_fd: Insufficient options for proto=fd [ 687.169125][T17606] netlink: 'syz.9.2676': attribute type 3 has an invalid length. [ 687.177605][T17606] netlink: 'syz.9.2676': attribute type 3 has an invalid length. [ 687.191617][T17606] netlink: 'syz.9.2676': attribute type 3 has an invalid length. [ 687.202116][T17606] netlink: 'syz.9.2676': attribute type 3 has an invalid length. [ 687.211555][T17606] netlink: 'syz.9.2676': attribute type 3 has an invalid length. [ 687.510479][T17617] FAULT_INJECTION: forcing a failure. [ 687.510479][T17617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.577743][T17617] CPU: 1 PID: 17617 Comm: syz.0.2680 Not tainted syzkaller #0 [ 687.585251][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 687.595314][T17617] Call Trace: [ 687.598593][T17617] [ 687.601519][T17617] dump_stack_lvl+0x18c/0x250 [ 687.606205][T17617] ? show_regs_print_info+0x20/0x20 [ 687.611396][T17617] ? load_image+0x420/0x420 [ 687.615898][T17617] ? __might_fault+0xaa/0x120 [ 687.620578][T17617] ? __lock_acquire+0x7eb0/0x7eb0 [ 687.625606][T17617] should_fail_ex+0x394/0x4c0 [ 687.630288][T17617] _copy_from_user+0x2f/0xe0 [ 687.634885][T17617] __tun_chr_ioctl+0x226/0x2070 [ 687.639746][T17617] ? tun_flow_create+0x310/0x310 [ 687.644698][T17617] ? bpf_lsm_file_ioctl+0x9/0x10 [ 687.649635][T17617] ? security_file_ioctl+0x80/0xa0 [ 687.654746][T17617] ? tun_chr_poll+0x630/0x630 [ 687.659419][T17617] __se_sys_ioctl+0xfd/0x170 [ 687.664011][T17617] do_syscall_64+0x55/0xb0 [ 687.668419][T17617] ? clear_bhb_loop+0x40/0x90 [ 687.673090][T17617] ? clear_bhb_loop+0x40/0x90 [ 687.677761][T17617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.683659][T17617] RIP: 0033:0x7f533079f559 [ 687.688071][T17617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.707671][T17617] RSP: 002b:00007f5331725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.716082][T17617] RAX: ffffffffffffffda RBX: 00007f5330a25fa0 RCX: 00007f533079f559 [ 687.724047][T17617] RDX: 0000200000000280 RSI: 00000000400454ca RDI: 0000000000000004 [ 687.732015][T17617] RBP: 00007f5330836b20 R08: 0000000000000000 R09: 0000000000000000 [ 687.739979][T17617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.747947][T17617] R13: 00007f5330a26038 R14: 00007f5330a25fa0 R15: 00007ffe54d84f98 [ 687.755930][T17617] [ 687.937897][T17625] dummy0 speed is unknown, defaulting to 1000 [ 687.982122][T17625] dummy0 speed is unknown, defaulting to 1000 [ 688.031609][T17625] dummy0 speed is unknown, defaulting to 1000 [ 688.099299][T17625] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 688.206850][T17625] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 688.419371][T17625] dummy0 speed is unknown, defaulting to 1000 [ 688.487449][T17625] dummy0 speed is unknown, defaulting to 1000 [ 688.534157][T17625] dummy0 speed is unknown, defaulting to 1000 [ 688.559178][T17625] dummy0 speed is unknown, defaulting to 1000 [ 688.803202][T17625] infiniband spz1: RDMA CMA: cma_listen_on_dev, error -98 [ 688.831655][ T5853] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 688.981931][T17630] smc: removing ib device rxe0 [ 689.041670][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 689.077255][ T5853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.151738][ T5853] usb 1-1: config 0 has no interfaces? [ 689.184884][ T5853] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 689.211955][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.234317][ T5853] usb 1-1: config 0 descriptor?? [ 689.540662][T17657] FAULT_INJECTION: forcing a failure. [ 689.540662][T17657] name failslab, interval 1, probability 0, space 0, times 0 [ 689.553793][T17657] CPU: 0 PID: 17657 Comm: syz.9.2686 Not tainted syzkaller #0 [ 689.561273][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 689.571339][T17657] Call Trace: [ 689.574620][T17657] [ 689.577560][T17657] dump_stack_lvl+0x18c/0x250 [ 689.582239][T17657] ? __lock_acquire+0x7eb0/0x7eb0 [ 689.587263][T17657] ? show_regs_print_info+0x20/0x20 [ 689.592458][T17657] ? load_image+0x420/0x420 [ 689.596973][T17657] should_fail_ex+0x394/0x4c0 [ 689.601654][T17657] should_failslab+0x9/0x20 [ 689.606164][T17657] slab_pre_alloc_hook+0x59/0x300 [ 689.611182][T17657] ? hash_ipport6_add+0x180d/0x2090 [ 689.616384][T17657] ? hash_ipport6_add+0x180d/0x2090 [ 689.621583][T17657] __kmem_cache_alloc_node+0x53/0x250 [ 689.626962][T17657] ? hash_ipport6_add+0x180d/0x2090 [ 689.632161][T17657] __kmalloc+0xa7/0x240 [ 689.636315][T17657] ? hash_ipport6_add+0x75d/0x2090 [ 689.641427][T17657] hash_ipport6_add+0x180d/0x2090 [ 689.646479][T17657] hash_ipport6_uadt+0x7ee/0xaa0 [ 689.651416][T17657] ? hash_ipport6_uadt+0xaa0/0xaa0 [ 689.656525][T17657] ? hash_ipport6_kadt+0x5d0/0x5d0 [ 689.661631][T17657] ? __nla_validate_parse+0x25fa/0x2fd0 [ 689.667188][T17657] ? __lock_acquire+0x135d/0x7eb0 [ 689.672226][T17657] call_ad+0x185/0xb30 [ 689.676304][T17657] ? ip_set_ad+0x9c0/0x9c0 [ 689.680736][T17657] ? __nla_parse+0x40/0x50 [ 689.685151][T17657] ip_set_ad+0x81a/0x9c0 [ 689.689404][T17657] ? ip_set_dump_done+0x320/0x320 [ 689.694429][T17657] ? rcu_is_watching+0x15/0xb0 [ 689.699223][T17657] nfnetlink_rcv_msg+0xcaf/0x1290 [ 689.704245][T17657] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.710314][T17657] ? nfnetlink_rcv_msg+0x228/0x1290 [ 689.715528][T17657] ? nfnetlink_unbind+0x160/0x160 [ 689.720582][T17657] ? __dev_queue_xmit+0x1be8/0x37e0 [ 689.725775][T17657] ? __netlink_deliver_tap+0x579/0x7f0 [ 689.731227][T17657] ? netlink_deliver_tap+0x19c/0x1b0 [ 689.736506][T17657] ? netlink_unicast+0x77b/0x930 [ 689.741440][T17657] ? netlink_sendmsg+0x8d0/0xbf0 [ 689.746372][T17657] ? ____sys_sendmsg+0x61b/0x980 [ 689.751304][T17657] ? ___sys_sendmsg+0x2a6/0x360 [ 689.756155][T17657] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 689.761175][T17657] ? do_syscall_64+0x55/0xb0 [ 689.765771][T17657] netlink_rcv_skb+0x235/0x4c0 [ 689.770535][T17657] ? nfnetlink_unbind+0x160/0x160 [ 689.775556][T17657] ? netlink_ack+0x1160/0x1160 [ 689.780343][T17657] ? apparmor_capable+0x137/0x1a0 [ 689.785384][T17657] ? bpf_lsm_capable+0x9/0x10 [ 689.790053][T17657] ? security_capable+0x89/0xb0 [ 689.794908][T17657] nfnetlink_rcv+0x2c9/0x2490 [ 689.799589][T17657] ? __local_bh_enable_ip+0x13a/0x1c0 [ 689.804955][T17657] ? lockdep_hardirqs_on+0x98/0x150 [ 689.810149][T17657] ? __local_bh_enable_ip+0x13a/0x1c0 [ 689.815515][T17657] ? _local_bh_enable+0xa0/0xa0 [ 689.820367][T17657] ? __dev_queue_xmit+0x272/0x37e0 [ 689.825477][T17657] ? __dev_queue_xmit+0x1329/0x37e0 [ 689.830667][T17657] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 689.836211][T17657] ? __dev_queue_xmit+0x272/0x37e0 [ 689.841340][T17657] ? ref_tracker_free+0x686/0x830 [ 689.846361][T17657] ? refcount_inc+0x70/0x70 [ 689.850859][T17657] ? __asan_memcpy+0x40/0x70 [ 689.855446][T17657] ? __skb_clone+0x5c/0x6c0 [ 689.859951][T17657] ? __skb_clone+0x446/0x6c0 [ 689.864549][T17657] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.869747][T17657] ? __lock_acquire+0x7eb0/0x7eb0 [ 689.874772][T17657] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.879970][T17657] netlink_unicast+0x7b1/0x930 [ 689.884741][T17657] netlink_sendmsg+0x8d0/0xbf0 [ 689.889512][T17657] ? netlink_getsockopt+0x590/0x590 [ 689.894710][T17657] ? apparmor_socket_sendmsg+0x8e/0x330 [ 689.900257][T17657] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 689.905551][T17657] ? security_socket_sendmsg+0x80/0xa0 [ 689.911004][T17657] ? netlink_getsockopt+0x590/0x590 [ 689.916203][T17657] ____sys_sendmsg+0x61b/0x980 [ 689.920974][T17657] ? __asan_memset+0x22/0x40 [ 689.925563][T17657] ? __sys_sendmsg_sock+0x30/0x30 [ 689.930582][T17657] ? __import_iovec+0x5f2/0x850 [ 689.935444][T17657] ? import_iovec+0x73/0xa0 [ 689.939950][T17657] ___sys_sendmsg+0x2a6/0x360 [ 689.944630][T17657] ? __sys_sendmsg+0x2b0/0x2b0 [ 689.949435][T17657] __se_sys_sendmsg+0x1d0/0x2c0 [ 689.954284][T17657] ? __x64_sys_sendmsg+0x80/0x80 [ 689.959234][T17657] ? lockdep_hardirqs_on+0x98/0x150 [ 689.964429][T17657] do_syscall_64+0x55/0xb0 [ 689.968836][T17657] ? clear_bhb_loop+0x40/0x90 [ 689.973505][T17657] ? clear_bhb_loop+0x40/0x90 [ 689.978175][T17657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.984084][T17657] RIP: 0033:0x7ff25df9f559 [ 689.988495][T17657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.008100][T17657] RSP: 002b:00007ff25edda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.016511][T17657] RAX: ffffffffffffffda RBX: 00007ff25e225fa0 RCX: 00007ff25df9f559 [ 690.024477][T17657] RDX: 0000000000000080 RSI: 00002000000007c0 RDI: 000000000000000c [ 690.032546][T17657] RBP: 00007ff25e036b20 R08: 0000000000000000 R09: 0000000000000000 [ 690.040510][T17657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.048479][T17657] R13: 00007ff25e226038 R14: 00007ff25e225fa0 R15: 00007ffd544989f8 [ 690.056460][T17657] [ 691.069598][T17674] 9pnet_fd: Insufficient options for proto=fd [ 691.534645][T17683] loop3: detected capacity change from 0 to 512 [ 691.608739][T17683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.631080][ T9] usb 1-1: USB disconnect, device number 17 [ 691.751928][T17683] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 691.832502][T17690] Bluetooth: MGMT ver 1.22 [ 691.845615][ T27] audit: type=1800 audit(2000000341.975:162): pid=17683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2690" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 691.943651][T17188] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.234272][T17703] binder: BINDER_SET_CONTEXT_MGR already set [ 692.241007][T17703] binder: 17701:17703 ioctl 4018620d 200000000300 returned -16 [ 692.474472][ T5853] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 692.671708][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 692.690570][ T5853] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 692.717397][ T5853] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 692.733106][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 692.757052][ T5853] usb 2-1: Product: syz [ 692.773486][ T5853] usb 2-1: Manufacturer: syz [ 692.783594][ T5853] usb 2-1: SerialNumber: syz [ 692.805927][ T5853] usb 2-1: config 0 descriptor?? [ 692.814373][T17700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 695.252631][ T5953] usb 2-1: USB disconnect, device number 24 [ 695.424534][T17773] loop9: detected capacity change from 0 to 2048 [ 695.458861][T17773] EXT4-fs: Ignoring removed bh option [ 695.468324][T17773] ext4: Unknown parameter 'noacl' [ 695.629254][T17786] validate_nla: 45 callbacks suppressed [ 695.629269][T17786] netlink: 'syz.9.2707': attribute type 9 has an invalid length. [ 695.638048][T17787] fuse: Unknown parameter '0xffffffffffffffff' [ 695.676049][T17786] netlink: 'syz.9.2707': attribute type 7 has an invalid length. [ 695.721408][T17786] netlink: 'syz.9.2707': attribute type 8 has an invalid length. [ 695.723499][T17782] input: syz0 as /devices/virtual/input/input11 [ 695.761625][ T5953] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 695.969229][ T5953] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.995449][ T5953] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.030657][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 696.048786][ T5953] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 696.068152][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.092397][ T5953] usb 2-1: config 0 descriptor?? [ 696.171725][ T5853] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 696.312679][T17777] syz.1.2708: attempt to access beyond end of device [ 696.312679][T17777] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 696.343396][T17777] qnx6: unable to read the first superblock [ 696.370698][T17777] syz.1.2708: attempt to access beyond end of device [ 696.370698][T17777] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 696.392945][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 696.394119][T17777] qnx6: unable to read the first superblock [ 696.412554][ T5853] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 696.431713][T17777] qnx6: unable to read the first superblock [ 696.448223][ T5853] usb 4-1: config 0 has no interface number 0 [ 696.464779][ T5853] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 696.505984][ T5853] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 696.537000][ T5853] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 696.581226][ T5853] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 696.602404][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.605696][ T5953] usbhid 2-1:0.0: can't add hid device: -71 [ 696.631930][ T5953] usbhid: probe of 2-1:0.0 failed with error -71 [ 696.642328][ T5853] usb 4-1: config 0 descriptor?? [ 696.660459][ T5853] ldusb 4-1:0.55: Interrupt in endpoint not found [ 696.673106][ T5953] usb 2-1: USB disconnect, device number 25 [ 697.235556][T12442] IPVS: starting estimator thread 0... [ 697.341807][T17824] IPVS: using max 21 ests per chain, 50400 per kthread [ 697.446152][T17830] team0 (unregistering): Port device team_slave_0 removed [ 697.465211][T17830] team0 (unregistering): Port device team_slave_1 removed [ 697.533769][T17835] syz_tun: entered allmulticast mode [ 698.040193][T17854] loop9: detected capacity change from 0 to 2048 [ 698.060791][T17854] EXT4-fs: Ignoring removed bh option [ 698.089615][T17854] ext4: Unknown parameter 'noacl' [ 698.225974][T17864] netlink: 'syz.9.2723': attribute type 9 has an invalid length. [ 698.269818][T17864] netlink: 'syz.9.2723': attribute type 7 has an invalid length. [ 698.300879][T17864] netlink: 'syz.9.2723': attribute type 8 has an invalid length. [ 698.990985][ T173] usb 4-1: USB disconnect, device number 10 [ 699.563355][T17895] 9pnet_fd: Insufficient options for proto=fd [ 700.320884][T17915] TCP: TCP_TX_DELAY enabled [ 701.612534][T17921] overlayfs: failed to resolve './bus': -2 [ 701.787182][T17912] Can't find ip_set type hash:n [ 701.876888][ T27] audit: type=1326 audit(2000000352.015:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 701.959330][ T27] audit: type=1326 audit(2000000352.015:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 702.000592][T17932] jffs2: notice: (17932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 702.011596][ T27] audit: type=1326 audit(2000000352.015:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 702.073137][T17936] loop3: detected capacity change from 0 to 2048 [ 702.089790][T17936] EXT4-fs: Ignoring removed bh option [ 702.106004][ T27] audit: type=1326 audit(2000000352.015:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 702.135686][ T27] audit: type=1326 audit(2000000352.035:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 702.163837][ T27] audit: type=1326 audit(2000000352.045:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 702.163891][T17936] ext4: Unknown parameter 'noacl' [ 702.189014][ T27] audit: type=1326 audit(2000000352.045:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 702.217967][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 702.225748][ T27] audit: type=1326 audit(2000000352.075:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f409c15fd8e code=0x7ffc0000 [ 702.251283][ T27] audit: type=1326 audit(2000000352.075:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f409c19f1eb code=0x7ffc0000 [ 702.335700][ T27] audit: type=1326 audit(2000000352.075:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.2736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f409c19f1eb code=0x7ffc0000 [ 702.457698][ T9] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 702.552850][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.629423][ T9] usb 2-1: Product: syz [ 702.629649][T17943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2740'. [ 702.637546][ T9] usb 2-1: Manufacturer: syz [ 702.651615][ T9] usb 2-1: SerialNumber: syz [ 702.668269][ T9] usb 2-1: USB2VGA dongle found at address 26 [ 702.698502][ T9] usb 2-1: Allocated 8 output buffers [ 702.869843][T17950] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2742'. [ 702.899856][T17950] tc_dump_action: action bad kind [ 703.051625][ T173] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 703.086834][T17958] ublk_ctrl_add_dev: dev id not match 4294967295 1023 [ 703.246111][ T9] usb 2-1: Failed to early initialize device [ 703.262617][ T173] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 703.280476][T17963] netlink: 'syz.3.2739': attribute type 9 has an invalid length. [ 703.280595][ T9] usb 2-1: USB disconnect, device number 26 [ 703.295989][ T173] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 703.313041][ T173] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 703.325932][ T173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.334241][T17963] netlink: 'syz.3.2739': attribute type 7 has an invalid length. [ 703.357047][ T173] usb 10-1: Product: syz [ 703.365018][ T173] usb 10-1: Manufacturer: syz [ 703.369731][ T173] usb 10-1: SerialNumber: syz [ 703.376667][T17963] netlink: 'syz.3.2739': attribute type 8 has an invalid length. [ 703.392207][T17965] overlayfs: failed to resolve './bus': -2 [ 703.408540][T17946] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 703.419145][T17946] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 703.433036][ T173] usbserial_generic 10-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 703.466748][ T173] usbserial_generic 10-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 703.494584][ T173] usbserial_generic 10-1:1.0: generic converter detected [ 703.539428][ T173] usb 10-1: generic converter now attached to ttyUSB0 [ 703.699937][T17970] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 703.764119][T17970] netlink: 'syz.0.2744': attribute type 10 has an invalid length. [ 703.817787][T17970] team0: Port device netdevsim0 added [ 703.993862][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.029970][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.039492][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.090619][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.116878][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.126404][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.136133][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.145647][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.155946][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.165527][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.175300][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.184837][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.194638][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.204130][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.214084][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.223650][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.233345][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.242853][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.253328][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 704.262841][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 705.602351][ T5835] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 705.628514][ T28] usb 10-1: USB disconnect, device number 11 [ 705.675731][ T28] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 705.713400][ T28] usbserial_generic 10-1:1.0: device disconnected [ 705.827340][ T5835] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.869729][ T5835] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.904220][ T5835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 705.910881][ T5835] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 705.944710][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.974180][ T5835] usb 1-1: config 0 descriptor?? [ 706.214216][T17998] syz.0.2749: attempt to access beyond end of device [ 706.214216][T17998] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 706.259352][T17998] qnx6: unable to read the first superblock [ 706.266593][T17998] syz.0.2749: attempt to access beyond end of device [ 706.266593][T17998] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 706.281204][T17998] qnx6: unable to read the first superblock [ 706.294191][T17998] qnx6: unable to read the first superblock [ 707.061853][ T5835] usbhid 1-1:0.0: can't add hid device: -71 [ 707.067892][ T5835] usbhid: probe of 1-1:0.0 failed with error -71 [ 707.084953][ T5835] usb 1-1: USB disconnect, device number 18 [ 707.449695][T18033] 9pnet_virtio: no channels available for device syz [ 707.823910][T18046] fuse: Unknown parameter '0xffffffffffffffff' [ 707.859649][T18046] input: syz0 as /devices/virtual/input/input12 [ 708.152535][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2763'. [ 708.564010][T18074] FAULT_INJECTION: forcing a failure. [ 708.564010][T18074] name failslab, interval 1, probability 0, space 0, times 0 [ 708.578813][T18074] CPU: 0 PID: 18074 Comm: syz.1.2768 Not tainted syzkaller #0 [ 708.586326][T18074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 708.596411][T18074] Call Trace: [ 708.599707][T18074] [ 708.602652][T18074] dump_stack_lvl+0x18c/0x250 [ 708.607355][T18074] ? show_regs_print_info+0x20/0x20 [ 708.612582][T18074] ? load_image+0x420/0x420 [ 708.617123][T18074] ? __might_sleep+0xe0/0xe0 [ 708.621749][T18074] ? __lock_acquire+0x7eb0/0x7eb0 [ 708.626806][T18074] should_fail_ex+0x394/0x4c0 [ 708.631516][T18074] should_failslab+0x9/0x20 [ 708.636051][T18074] slab_pre_alloc_hook+0x59/0x300 [ 708.641099][T18074] ? afs_alloc_vlserver+0x3e/0x210 [ 708.646236][T18074] ? afs_alloc_vlserver+0x3e/0x210 [ 708.651379][T18074] __kmem_cache_alloc_node+0x53/0x250 [ 708.656792][T18074] ? afs_alloc_vlserver+0x3e/0x210 [ 708.661926][T18074] __kmalloc+0xa7/0x240 [ 708.666128][T18074] afs_alloc_vlserver+0x3e/0x210 [ 708.671094][T18074] afs_parse_text_addrs+0x307/0xcb0 [ 708.676330][T18074] ? free_zapped_rcu+0x250/0x250 [ 708.681301][T18074] ? afs_alloc_addrlist+0x320/0x320 [ 708.686533][T18074] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 708.692462][T18074] afs_lookup_cell+0xce5/0x1680 [ 708.697331][T18074] ? afs_find_cell+0x310/0x310 [ 708.702102][T18074] ? afs_net+0x45/0x270 [ 708.706255][T18074] ? afs_net+0x45/0x270 [ 708.710410][T18074] afs_cell_init+0x6e/0x300 [ 708.714914][T18074] proc_simple_write+0x109/0x140 [ 708.719851][T18074] ? proc_remove+0x80/0x80 [ 708.724264][T18074] proc_reg_write+0x1e4/0x2d0 [ 708.728943][T18074] ? proc_reg_llseek+0x280/0x280 [ 708.733883][T18074] vfs_write+0x299/0x9a0 [ 708.738135][T18074] ? file_end_write+0x250/0x250 [ 708.742992][T18074] ? __fget_files+0x28/0x460 [ 708.747587][T18074] ? __fget_files+0x3fc/0x460 [ 708.752273][T18074] ? __fdget_pos+0x2a3/0x330 [ 708.756861][T18074] ? ksys_write+0x74/0x260 [ 708.761284][T18074] ksys_write+0x151/0x260 [ 708.765619][T18074] ? __ia32_sys_read+0x90/0x90 [ 708.770387][T18074] ? lockdep_hardirqs_on+0x98/0x150 [ 708.775588][T18074] do_syscall_64+0x55/0xb0 [ 708.779999][T18074] ? clear_bhb_loop+0x40/0x90 [ 708.784673][T18074] ? clear_bhb_loop+0x40/0x90 [ 708.789344][T18074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.795244][T18074] RIP: 0033:0x7f409c19f559 [ 708.799653][T18074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.819256][T18074] RSP: 002b:00007f409d060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 708.827671][T18074] RAX: ffffffffffffffda RBX: 00007f409c425fa0 RCX: 00007f409c19f559 [ 708.835642][T18074] RDX: 0000000000000006 RSI: 0000200000000240 RDI: 0000000000000007 [ 708.843609][T18074] RBP: 00007f409c236b20 R08: 0000000000000000 R09: 0000000000000000 [ 708.851577][T18074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.859544][T18074] R13: 00007f409c426038 R14: 00007f409c425fa0 R15: 00007ffc34e5a7b8 [ 708.867524][T18074] [ 708.872777][T12442] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 709.062936][T12442] usb 1-1: not running at top speed; connect to a high speed hub [ 709.073230][T12442] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 709.094237][T12442] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.149366][T12442] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 709.178780][T18090] input: syz0 as /devices/virtual/input/input13 [ 709.208104][T12442] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 709.294164][T12442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.513859][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 709.513872][ T27] audit: type=1800 audit(2000000359.655:240): pid=18099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2775" name="max_speed" dev="configfs" ino=40112 res=0 errno=0 [ 710.129721][T12442] usb 1-1: string descriptor 0 read error: -71 [ 710.139266][T12442] usb 1-1: Found UVC 1.00 device (046d:0825) [ 710.146586][T12442] usb 1-1: No valid video chain found. [ 710.172294][T12442] usb 1-1: USB disconnect, device number 19 [ 710.269721][ T173] IPVS: starting estimator thread 0... [ 710.371663][T18108] IPVS: using max 19 ests per chain, 45600 per kthread [ 711.061887][T12442] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 711.279583][T12442] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.314107][T12442] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.354419][T12442] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 711.365785][T12442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.407843][T12442] usb 4-1: Product: syz [ 711.425695][T18154] loop9: detected capacity change from 0 to 2048 [ 711.435561][T12442] usb 4-1: Manufacturer: syz [ 711.440198][T12442] usb 4-1: SerialNumber: syz [ 711.463924][T18154] EXT4-fs: Ignoring removed bh option [ 711.477381][T18154] ext4: Unknown parameter 'noacl' [ 711.530496][T16287] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 711.703472][T12442] usb 4-1: USB disconnect, device number 11 [ 711.931075][T12445] IPVS: starting estimator thread 0... [ 711.982444][T12445] lo speed is unknown, defaulting to 1000 [ 712.042060][T18174] IPVS: using max 18 ests per chain, 43200 per kthread [ 712.240010][T18188] netlink: 'syz.9.2789': attribute type 9 has an invalid length. [ 712.248542][T18188] netlink: 'syz.9.2789': attribute type 7 has an invalid length. [ 712.256341][T18188] netlink: 'syz.9.2789': attribute type 8 has an invalid length. [ 712.671826][T18199] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 712.671826][T18199] program syz.0.2802 not setting count and/or reply_len properly [ 712.811440][T18202] sg_write: process 135 (syz.0.2804) changed security contexts after opening file descriptor, this is not allowed. [ 712.961318][T18206] loop3: detected capacity change from 0 to 2048 [ 712.986713][T18206] EXT4-fs: Ignoring removed bh option [ 713.037185][T18206] ext4: Unknown parameter 'noacl' [ 713.174133][T18218] netlink: 'syz.3.2805': attribute type 9 has an invalid length. [ 713.207131][T18218] netlink: 'syz.3.2805': attribute type 7 has an invalid length. [ 713.245884][T18218] netlink: 'syz.3.2805': attribute type 8 has an invalid length. [ 713.470876][T18229] input: syz0 as /devices/virtual/input/input14 [ 713.809511][T18241] netlink: 'syz.0.2808': attribute type 27 has an invalid length. [ 713.817763][T18241] netlink: 'syz.0.2808': attribute type 3 has an invalid length. [ 714.111711][T18247] netlink: 196 bytes leftover after parsing attributes in process `syz.9.2816'. [ 714.512058][ T27] audit: type=1326 audit(2000000364.645:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 714.611764][ T27] audit: type=1326 audit(2000000364.685:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 714.688593][ T27] audit: type=1326 audit(2000000364.685:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 714.791794][ T27] audit: type=1326 audit(2000000364.685:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 714.871704][ T27] audit: type=1326 audit(2000000364.685:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 714.945874][ T27] audit: type=1326 audit(2000000364.685:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 715.007439][ T27] audit: type=1326 audit(2000000364.685:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 715.053776][ T27] audit: type=1326 audit(2000000364.695:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f409c15fd8e code=0x7ffc0000 [ 715.084794][ T27] audit: type=1326 audit(2000000364.695:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f409c19f1eb code=0x7ffc0000 [ 715.115297][ T27] audit: type=1326 audit(2000000364.695:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 715.175472][ T27] audit: type=1326 audit(2000000364.705:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18256 comm="syz.1.2819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f409c19f559 code=0x7ffc0000 [ 715.318871][T18276] input: syz0 as /devices/virtual/input/input15 [ 716.773379][T18315] netlink: 'syz.0.2832': attribute type 11 has an invalid length. [ 718.840918][T18316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.947527][T18317] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 718.954791][T18317] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 719.225964][T18348] 9pnet_virtio: no channels available for device syz [ 719.470697][T18351] team0 (unregistering): Port device team_slave_0 removed [ 719.519922][T18351] team0 (unregistering): Port device team_slave_1 removed [ 720.175294][T18380] netlink: 'syz.9.2843': attribute type 27 has an invalid length. [ 720.183225][T18380] netlink: 'syz.9.2843': attribute type 3 has an invalid length. [ 720.739372][T18393] loop9: detected capacity change from 0 to 2048 [ 720.756427][T18393] EXT4-fs: Ignoring removed bh option [ 720.795235][T18393] ext4: Unknown parameter 'noacl' [ 720.826010][T18393] netlink: 'syz.9.2852': attribute type 9 has an invalid length. [ 720.835656][T18393] netlink: 'syz.9.2852': attribute type 7 has an invalid length. [ 720.843528][T18393] netlink: 'syz.9.2852': attribute type 8 has an invalid length. [ 720.941000][T18400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2853'. [ 723.059326][ T5835] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 723.481914][ T5835] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 723.625363][ T5835] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 723.879479][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.003384][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.139101][ T5835] usb 4-1: Product: syz [ 724.208654][ T5835] usb 4-1: Manufacturer: ᰉ [ 724.297368][ T5835] usb 4-1: SerialNumber: syz [ 725.778657][ T5835] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 725.816009][ T5835] cdc_ncm 4-1:1.0: bind() failure [ 725.923466][ T5835] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 725.940524][ T5835] cdc_ncm 4-1:1.1: bind() failure [ 725.960720][ T5835] usb 4-1: USB disconnect, device number 12 [ 725.971140][T18446] team0 (unregistering): Port device team_slave_0 removed [ 726.055415][T18446] team0 (unregistering): Port device team_slave_1 removed [ 726.086695][T18446] team0 (unregistering): Port device netdevsim0 removed [ 727.688803][T12442] IPVS: starting estimator thread 0... [ 727.796248][T18488] IPVS: using max 20 ests per chain, 48000 per kthread [ 727.901750][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 728.101607][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 728.124149][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 728.147071][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.160029][ T9] usb 1-1: config 0 descriptor?? [ 728.170332][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 728.180876][ T9] usb 1-1: Detected FT2233HP [ 728.401329][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 728.424719][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 728.741904][T18504] jffs2: notice: (18504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 728.866383][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 728.866397][ T27] audit: type=1800 audit(2000000379.005:267): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2883" name="idVendor" dev="configfs" ino=41322 res=0 errno=0 [ 728.902574][ T27] audit: type=1800 audit(2000000379.045:268): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2883" name="idProduct" dev="configfs" ino=41323 res=0 errno=0 [ 728.929961][ T27] audit: type=1800 audit(2000000379.045:269): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2883" name="serialnumber" dev="configfs" ino=41325 res=0 errno=0 [ 729.031390][ T27] audit: type=1800 audit(2000000379.165:270): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2883" name="report_length" dev="configfs" ino=41328 res=0 errno=0 [ 729.099870][ T27] audit: type=1800 audit(2000000379.165:271): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2883" name="report_desc" dev="configfs" ino=41329 res=0 errno=0 [ 729.127137][ T27] audit: type=1800 audit(2000000379.235:272): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2883" name="UDC" dev="configfs" ino=41331 res=0 errno=0 [ 730.072103][T18512] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity [ 730.130354][T18512] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 730.188625][T18512] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 730.244199][T18482] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 730.358875][T18482] ftdi_sio ttyUSB0: error from flowcontrol urb [ 730.384757][ T9] usb 1-1: USB disconnect, device number 20 [ 730.469316][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 730.559139][T18524] netlink: 'syz.9.2886': attribute type 27 has an invalid length. [ 730.567145][T18524] netlink: 'syz.9.2886': attribute type 3 has an invalid length. [ 731.167592][ T9] ftdi_sio 1-1:0.0: device disconnected [ 731.491745][ T27] audit: type=1800 audit(2000000381.625:273): pid=18533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2890" name="max_speed" dev="configfs" ino=40805 res=0 errno=0 [ 733.634312][T18577] netlink: 'syz.3.2897': attribute type 27 has an invalid length. [ 733.642420][T18577] netlink: 'syz.3.2897': attribute type 3 has an invalid length. [ 734.077841][T12313] Bluetooth: hci4: command 0x0406 tx timeout [ 734.394243][ T27] audit: type=1800 audit(2000000385.539:274): pid=18586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2902" name="max_speed" dev="configfs" ino=40855 res=0 errno=0 [ 734.956785][T18612] FAULT_INJECTION: forcing a failure. [ 734.956785][T18612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.009306][T18612] CPU: 0 PID: 18612 Comm: syz.9.2907 Not tainted syzkaller #0 [ 735.016840][T18612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 735.026921][T18612] Call Trace: [ 735.030214][T18612] [ 735.033169][T18612] dump_stack_lvl+0x18c/0x250 [ 735.037876][T18612] ? show_regs_print_info+0x20/0x20 [ 735.043101][T18612] ? load_image+0x420/0x420 [ 735.047624][T18612] ? __lock_acquire+0x7eb0/0x7eb0 [ 735.052656][T18612] ? __virt_addr_valid+0x10c/0x380 [ 735.057798][T18612] should_fail_ex+0x394/0x4c0 [ 735.062515][T18612] _copy_from_user+0x2f/0xe0 [ 735.067130][T18612] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 735.072358][T18612] bpf_vlog_finalize+0x1b3/0x3e0 [ 735.077307][T18612] btf_new_fd+0x4ca/0x9e0 [ 735.081643][T18612] ? bpf_btf_show_fdinfo+0x80/0x80 [ 735.086769][T18612] ? capable+0x88/0xe0 [ 735.090847][T18612] __sys_bpf+0x670/0x890 [ 735.095093][T18612] ? bpf_link_show_fdinfo+0x560/0x560 [ 735.100472][T18612] ? lock_chain_count+0x20/0x20 [ 735.105334][T18612] __x64_sys_bpf+0x7c/0x90 [ 735.109751][T18612] do_syscall_64+0x55/0xb0 [ 735.114171][T18612] ? clear_bhb_loop+0x40/0x90 [ 735.118848][T18612] ? clear_bhb_loop+0x40/0x90 [ 735.123528][T18612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.129427][T18612] RIP: 0033:0x7ff25df9f559 [ 735.133840][T18612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.153443][T18612] RSP: 002b:00007ff25edda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.162204][T18612] RAX: ffffffffffffffda RBX: 00007ff25e225fa0 RCX: 00007ff25df9f559 [ 735.170171][T18612] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 735.178134][T18612] RBP: 00007ff25e036b20 R08: 0000000000000000 R09: 0000000000000000 [ 735.186106][T18612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.194071][T18612] R13: 00007ff25e226038 R14: 00007ff25e225fa0 R15: 00007ffd544989f8 [ 735.202051][T18612] [ 735.519765][T18624] netlink: 'syz.0.2909': attribute type 27 has an invalid length. [ 735.527828][T18624] netlink: 'syz.0.2909': attribute type 3 has an invalid length. [ 735.989839][ T27] audit: type=1800 audit(2000000387.129:275): pid=18627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2912" name="max_speed" dev="configfs" ino=40898 res=0 errno=0 [ 736.045411][T18630] ------------[ cut here ]------------ [ 736.050921][T18630] WARNING: CPU: 1 PID: 18630 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2ee/0x3c0 [ 736.061177][T18630] Modules linked in: [ 736.065480][T18630] CPU: 1 PID: 18630 Comm: syz.3.2910 Not tainted syzkaller #0 [ 736.073283][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 736.084012][T18630] RIP: 0010:nft_socket_init+0x2ee/0x3c0 [ 736.089658][T18630] Code: 30 84 c0 0f 85 d8 00 00 00 41 88 2c 24 bd 08 00 00 00 e9 b2 fe ff ff 89 f3 e8 be 3c a6 f8 89 d8 e9 5c ff ff ff e8 b2 3c a6 f8 <0f> 0b e9 4b ff ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 736.109351][T18630] RSP: 0018:ffffc9000c1ff1d8 EFLAGS: 00010283 [ 736.115749][T18630] RAX: ffffffff88e153fe RBX: ffff8880625f0020 RCX: 0000000000080000 [ 736.123814][T18630] RDX: ffffc9000bca1000 RSI: 0000000000002791 RDI: 0000000000002792 [ 736.131864][T18630] RBP: 00000000000000ff R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 736.139859][T18630] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: 0000000000000100 [ 736.147908][T18630] R13: ffff88801baa6618 R14: dffffc0000000000 R15: 1ffff1100c4be004 [ 736.156154][T18630] FS: 00007f73ef74e6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 736.165880][T18630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.173065][T18630] CR2: 00007fd24a9a0fe8 CR3: 000000007d281000 CR4: 00000000003506e0 [ 736.181309][T18630] Call Trace: [ 736.184696][T18630] [ 736.187648][T18630] nf_tables_newrule+0x176e/0x2870 [ 736.192888][T18630] ? nf_tables_delchain+0x1050/0x1050 [ 736.198291][T18630] ? __lock_acquire+0x7eb0/0x7eb0 [ 736.203407][T18630] ? mutex_unlock+0x10/0x10 [ 736.207951][T18630] ? __nla_parse+0x40/0x50 [ 736.212434][T18630] nfnetlink_rcv+0x1133/0x2490 [ 736.217267][T18630] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 736.223040][T18630] ? __lock_acquire+0x7eb0/0x7eb0 [ 736.228113][T18630] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.233537][T18630] netlink_unicast+0x7b1/0x930 [ 736.238351][T18630] netlink_sendmsg+0x8d0/0xbf0 [ 736.243223][T18630] ? netlink_getsockopt+0x590/0x590 [ 736.248457][T18630] ? apparmor_socket_sendmsg+0x8e/0x330 [ 736.254090][T18630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 736.259412][T18630] ? security_socket_sendmsg+0x80/0xa0 [ 736.264989][T18630] ? netlink_getsockopt+0x590/0x590 [ 736.270452][T18630] ____sys_sendmsg+0x61b/0x980 [ 736.275352][T18630] ? __asan_memset+0x22/0x40 [ 736.279984][T18630] ? __sys_sendmsg_sock+0x30/0x30 [ 736.285336][T18630] ? __import_iovec+0x5f2/0x850 [ 736.290237][T18630] ? import_iovec+0x73/0xa0 [ 736.294874][T18630] ___sys_sendmsg+0x2a6/0x360 [ 736.299597][T18630] ? __sys_sendmsg+0x2b0/0x2b0 [ 736.304497][T18630] __se_sys_sendmsg+0x1d0/0x2c0 [ 736.309385][T18630] ? __x64_sys_sendmsg+0x80/0x80 [ 736.314423][T18630] ? lockdep_hardirqs_on+0x98/0x150 [ 736.319663][T18630] do_syscall_64+0x55/0xb0 [ 736.324151][T18630] ? clear_bhb_loop+0x40/0x90 [ 736.328854][T18630] ? clear_bhb_loop+0x40/0x90 [ 736.333610][T18630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.339542][T18630] RIP: 0033:0x7f73ee79f559 [ 736.344041][T18630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.363730][T18630] RSP: 002b:00007f73ef74e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.372391][T18630] RAX: ffffffffffffffda RBX: 00007f73eea25fa0 RCX: 00007f73ee79f559 [ 736.380432][T18630] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 736.388682][T18630] RBP: 00007f73ee836b20 R08: 0000000000000000 R09: 0000000000000000 [ 736.397463][T18630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.405553][T18630] R13: 00007f73eea26038 R14: 00007f73eea25fa0 R15: 00007ffd94244cc8 [ 736.413601][T18630] [ 736.416643][T18630] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 736.423931][T18630] CPU: 1 PID: 18630 Comm: syz.3.2910 Not tainted syzkaller #0 [ 736.431402][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 736.441473][T18630] Call Trace: [ 736.444765][T18630] [ 736.447707][T18630] dump_stack_lvl+0x18c/0x250 [ 736.452419][T18630] ? show_regs_print_info+0x20/0x20 [ 736.457899][T18630] ? load_image+0x420/0x420 [ 736.462444][T18630] panic+0x2ca/0x720 [ 736.466372][T18630] ? bpf_jit_dump+0xd0/0xd0 [ 736.470915][T18630] __warn+0x2e0/0x470 [ 736.474922][T18630] ? nft_socket_init+0x2ee/0x3c0 [ 736.479888][T18630] ? nft_socket_init+0x2ee/0x3c0 [ 736.484854][T18630] report_bug+0x2be/0x4f0 [ 736.489207][T18630] ? nft_socket_init+0x2ee/0x3c0 [ 736.494166][T18630] ? nft_socket_init+0x2ee/0x3c0 [ 736.499109][T18630] ? nft_socket_init+0x2f0/0x3c0 [ 736.504045][T18630] handle_bug+0xcf/0x120 [ 736.508281][T18630] exc_invalid_op+0x1a/0x50 [ 736.512776][T18630] asm_exc_invalid_op+0x1a/0x20 [ 736.517620][T18630] RIP: 0010:nft_socket_init+0x2ee/0x3c0 [ 736.523191][T18630] Code: 30 84 c0 0f 85 d8 00 00 00 41 88 2c 24 bd 08 00 00 00 e9 b2 fe ff ff 89 f3 e8 be 3c a6 f8 89 d8 e9 5c ff ff ff e8 b2 3c a6 f8 <0f> 0b e9 4b ff ff ff 89 e9 80 e1 07 38 c1 0f 8c 8e fd ff ff 48 89 [ 736.542798][T18630] RSP: 0018:ffffc9000c1ff1d8 EFLAGS: 00010283 [ 736.548865][T18630] RAX: ffffffff88e153fe RBX: ffff8880625f0020 RCX: 0000000000080000 [ 736.556836][T18630] RDX: ffffc9000bca1000 RSI: 0000000000002791 RDI: 0000000000002792 [ 736.564800][T18630] RBP: 00000000000000ff R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 736.572767][T18630] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: 0000000000000100 [ 736.580738][T18630] R13: ffff88801baa6618 R14: dffffc0000000000 R15: 1ffff1100c4be004 [ 736.588718][T18630] ? nft_socket_init+0x2ee/0x3c0 [ 736.593661][T18630] ? nft_socket_init+0x2ee/0x3c0 [ 736.598596][T18630] nf_tables_newrule+0x176e/0x2870 [ 736.603718][T18630] ? nf_tables_delchain+0x1050/0x1050 [ 736.609086][T18630] ? __lock_acquire+0x7eb0/0x7eb0 [ 736.614113][T18630] ? mutex_unlock+0x10/0x10 [ 736.618618][T18630] ? __nla_parse+0x40/0x50 [ 736.623030][T18630] nfnetlink_rcv+0x1133/0x2490 [ 736.627810][T18630] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 736.633390][T18630] ? __lock_acquire+0x7eb0/0x7eb0 [ 736.638411][T18630] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.643611][T18630] netlink_unicast+0x7b1/0x930 [ 736.648376][T18630] netlink_sendmsg+0x8d0/0xbf0 [ 736.653144][T18630] ? netlink_getsockopt+0x590/0x590 [ 736.658341][T18630] ? apparmor_socket_sendmsg+0x8e/0x330 [ 736.663883][T18630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 736.669162][T18630] ? security_socket_sendmsg+0x80/0xa0 [ 736.674614][T18630] ? netlink_getsockopt+0x590/0x590 [ 736.679814][T18630] ____sys_sendmsg+0x61b/0x980 [ 736.684586][T18630] ? __asan_memset+0x22/0x40 [ 736.689177][T18630] ? __sys_sendmsg_sock+0x30/0x30 [ 736.694217][T18630] ? __import_iovec+0x5f2/0x850 [ 736.699090][T18630] ? import_iovec+0x73/0xa0 [ 736.703599][T18630] ___sys_sendmsg+0x2a6/0x360 [ 736.708282][T18630] ? __sys_sendmsg+0x2b0/0x2b0 [ 736.713080][T18630] __se_sys_sendmsg+0x1d0/0x2c0 [ 736.717936][T18630] ? __x64_sys_sendmsg+0x80/0x80 [ 736.722885][T18630] ? lockdep_hardirqs_on+0x98/0x150 [ 736.728084][T18630] do_syscall_64+0x55/0xb0 [ 736.732494][T18630] ? clear_bhb_loop+0x40/0x90 [ 736.737168][T18630] ? clear_bhb_loop+0x40/0x90 [ 736.741851][T18630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.747754][T18630] RIP: 0033:0x7f73ee79f559 [ 736.752166][T18630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.771788][T18630] RSP: 002b:00007f73ef74e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.780215][T18630] RAX: ffffffffffffffda RBX: 00007f73eea25fa0 RCX: 00007f73ee79f559 [ 736.788199][T18630] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 736.796171][T18630] RBP: 00007f73ee836b20 R08: 0000000000000000 R09: 0000000000000000 [ 736.804145][T18630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.812107][T18630] R13: 00007f73eea26038 R14: 00007f73eea25fa0 R15: 00007ffd94244cc8 [ 736.820083][T18630] [ 736.823322][T18630] Kernel Offset: disabled [ 736.827727][T18630] Rebooting in 86400 seconds..