last executing test programs: 8m17.489423833s ago: executing program 32 (id=828): syz_usb_connect$cdc_ncm(0x2, 0x8b, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102020000202505a1a440000102030109027900020104f0060904000001020d00000b240600019cec62d84cdb052400fbff0d240f010600000001fe00042402010c241bb0008200040203000b09058103ff03030136090401"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 8m16.747379296s ago: executing program 33 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a30000000001400028006000100000200000500020006000000", 0x34}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x80) 7m37.228935413s ago: executing program 34 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x3c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8943, 0x0) 4m54.172751946s ago: executing program 35 (id=2691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x19217}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000c000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x4005) 4m53.157334363s ago: executing program 36 (id=2697): socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r5, 0x0, 0x16, 0x0, &(0x7f0000000240)) r6 = socket$inet(0x2, 0x3, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0x20}}}}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0xfffffe29, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) 4m53.12830776s ago: executing program 37 (id=2708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8bb4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0xfdef) 3m34.697923342s ago: executing program 38 (id=2847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x30004000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r4, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)='z', 0x14}], 0x1}, 0x4011) 3m34.681493636s ago: executing program 39 (id=2846): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') fcntl$dupfd(r0, 0x0, r1) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000014, 0x1, 0x0, 0x9, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3m33.668282423s ago: executing program 40 (id=2853): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m33.63795987s ago: executing program 41 (id=2852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000101000000080009000200100014001f00ff05000000ffffe400000000000000011400200000000000fc0100000000ffffac1414bb0500070000000000060002000100000008000a"], 0x5c}}, 0x0) 2m1.685269955s ago: executing program 3 (id=2956): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x58}, 0x80) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r5, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m1.293830299s ago: executing program 3 (id=2973): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 2m1.246096297s ago: executing program 3 (id=2966): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 2m1.180089814s ago: executing program 3 (id=2968): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$eJzs3M1vFGUYAPBnptsvWmkxRoWY2MSgRuNSKMGEE3g2aiIHj9R2S5ouH7Y1sQ2Hgnf1YIwHEsOfYOJdLp5MPOBB0X+AGIkhegEOa2Y/SmW7Sy27O6X8fsm787777s7zPDuw806y0wCeWBPZQxqxPyJOJxFj9efTiBio9oYi1mqvu3v74kzWkqhU3v8riSQi7ty+ONPYV1LfjtQHQxFx/a0knv60Oe7SyurCdLlcWqyPDy2fvXBoaWX1jfmz02dKZ0rnjk69eXTq2NRUB2u9eeHDr1/4+Z2XL1/9bPLdr/b+mMSJGK3PbayjUyZiYv0zyfTXt4WImO50sJz01evZWGdSyDEhAADaSjes4Z6NseiL+4u3sfjhl1yTAwAAADqi0hdRAQAAAHa5xPU/AAAA7HKN3wHcuX1xptHy/UVCb906GRHjtfob9zfXZgqxVt0OVe/b3fN3Ehtva01qb3tkE1mk734qZS26dB9yO2uXIuL5zY5/Uq1/vHoXd3P9aURMdiD+xAPjx6n+Ex2In3f9ADyZrp2snciaz3/p+vonNjn/FTY5d21H3ue/xvrvbtP67379fS3Wf+9tMcaBe69dbzW3cf33wee/zWbxs+0jFfU/3LoUcaCwWf3Jev1Ji/pPbzHGyMzNK63msvqzehut1/VXrkYcrK7mmutvSNr9faJDc/Pl0mTtcZP9rxxrH3/j8c9aFr9xLdAL2fHfE9s7/he2GGP8uT/3t5p7eP3pHwPJqWpvoP7MJ9PLy4uHIwaSt5ufP9I+l8ZrGvvI6n/1pfb//zerP/tOWKt/Dtm/nkv1bTa+/EDMkYNHvt1+/d2V1T+7zeP/xRZjfPP9lY9azeVdPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPhzQiRiNJi+v9NC0WI0Yi4pnYk5bPLy2/Pnf+43Oz2VzEePSnc/Pl0mREjNXGSTY+XO3fHx95YDwVEfsi4sux4eq4OHO+PJt38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwbiYjRSNJiRKQR8c9YmhaLeWcFAAAAdNx43gkAAAAAXef6HwAAAHa/puv/wn9GQ73MBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF1p34vXbiQRsXZ8uNoyA/W5/lwzA7ot3fY7K5WOJgL0XF/eCQC5KWzoVyrO6fAkcY0PJA+ZH6pvf2+aGexKPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTK/sv3YjiYi148PVlhmoz/XnmhnQbWneCQC56Ws3mfQuD6D3CnknAOTGNT5QW+rfq9Q0zw+1fOdgN9MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIcZrbYkLUZEWu2nabEY8VREjEd/MjdfLk1GxN6I+HWsfzAbH847aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpuaWV1YbpcLi3qbLdz71TEDkhDZ2d1hqPrIQa7WUXe30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORhaWV1YbpcLi0u5Z0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLelldWF6XK5tNjFTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn38DAAD//yk3EKU=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}}, 0x10, 0xe5eb00, 0xb, 0x5, 0x2}, &(0x7f0000000000)=0x98) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x800718, &(0x7f0000000180)={[{@quota}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@dax_never}, {@oldalloc}, {@resuid}, {@resuid}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}]}, 0x22, 0x4aa, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x30182db, &(0x7f0000000080), 0x1, 0x666, &(0x7f0000000cc0)="$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") 2m0.609539781s ago: executing program 3 (id=2971): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) 2m0.098517053s ago: executing program 3 (id=2981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.043057314s ago: executing program 42 (id=2981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m29.299949515s ago: executing program 7 (id=3445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) 1m29.265178215s ago: executing program 7 (id=3448): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0x2c}}, 0x0) 1m29.155149248s ago: executing program 7 (id=3451): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='autogroup\x00') writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='+5', 0x2}, {&(0x7f00000000c0)="e488b964", 0x4}], 0x2) 1m29.154781038s ago: executing program 7 (id=3452): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x1, 0x2, 0x8000, 0xffffff01}) 1m29.083779649s ago: executing program 1 (id=3454): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 1m28.967712775s ago: executing program 7 (id=3456): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xb}, &(0x7f0000000340)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a601d00000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m28.965126137s ago: executing program 1 (id=3466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) 1m28.867617582s ago: executing program 1 (id=3460): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000340)={0x29, 0xf, 0x14, 0x2, 0x2, 0x100, 0x6, 0x115}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x98, 0xe0, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa40}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7fffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2bc1}]}, 0x3c}}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, 0x0, 0x0) 1m28.410253314s ago: executing program 6 (id=3462): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x3, 0xfffff01c}, {0x6, 0xfd, 0x0, 0x2}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) 1m27.87499826s ago: executing program 1 (id=3468): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x1, 0x2, 0x8000, 0xffffff01}) 1m27.538529552s ago: executing program 7 (id=3470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, 0x0, 0x0) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008c1c1"], 0x4a) 1m27.328957533s ago: executing program 43 (id=3470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, 0x0, 0x0) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008c1c1"], 0x4a) 1m27.31564443s ago: executing program 1 (id=3472): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f00000000c0)='attr/keycreate\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='270', 0x3) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000040)={0x8}) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0xd243, @mcast2, 0x200}, 0x1c) r2 = socket(0x10, 0x800, 0x2) madvise(&(0x7f000008f000/0x4000)=nil, 0x4000, 0xa) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000300), 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) unshare(0x40000000) mmap(&(0x7f000008f000/0x1000)=nil, 0x1000, 0x3, 0x2010, r2, 0xce97f000) 1m27.128202657s ago: executing program 6 (id=3477): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 1m26.906707994s ago: executing program 6 (id=3479): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000004a00)="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", 0x2000, &(0x7f0000000480)={&(0x7f0000000080)={0x50, 0x0, 0x7, {0x7, 0x29, 0x1000, 0x24ff871999b45d65, 0xe87, 0x9, 0xb, 0x8000005, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138227e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac303001bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909190000000000000000c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a005c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc75949424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a901000000036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe28c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x9, {0x3, 0x2, 0x0, {0x100000000000006, 0xffff, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2, 0x7, 0x9e5, 0x42, 0x47e, 0x8000, 0xd5000000, 0x0, 0xee01, 0x627e, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) read$FUSE(r0, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000004600)={0x28, 0x0, r1, {{0x6b, 0x2, 0x2}}}, 0x28) syz_fuse_handle_req(r0, &(0x7f000000cbc0)="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", 0x2000, &(0x7f000000f600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x5, {0x9, 0xfffff800, 0x0, {0x4, 0x0, 0xb4800000000, 0x6, 0x3, 0x8, 0x6, 0xfffffff7, 0xc, 0x8000, 0xfd, r2, r3, 0x10, 0xfffffff8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m26.731783064s ago: executing program 6 (id=3482): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x1, 0x2, 0x8000, 0xffffff01}) 1m26.56373662s ago: executing program 1 (id=3484): sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x24000011) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="313500000100890124a8b86712", 0xd}], 0x1) 1m26.538640444s ago: executing program 6 (id=3485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m26.170579035s ago: executing program 44 (id=3484): sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x24000011) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="313500000100890124a8b86712", 0xd}], 0x1) 1m25.783446996s ago: executing program 6 (id=3491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000006b00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) 1m25.351156943s ago: executing program 45 (id=3491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000006b00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) 41.901354949s ago: executing program 9 (id=3669): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4880) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}, 0x20004014) 41.244530156s ago: executing program 9 (id=3672): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) write$binfmt_misc(r0, &(0x7f0000004640)="5e97421135b55c4de98a", 0xa) 40.931221591s ago: executing program 9 (id=3674): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007917b000000000002d000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x48) 40.052657281s ago: executing program 9 (id=3690): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)={[{@fat=@fmask={'fmask', 0x3d, 0x4}}, {@shortname_mixed}, {@fat=@nfs}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_lower}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$eJzs3MFr024YwPFn7bZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUpFYq4nbz6t8xPHpSUP+BXbx5Fy9DELzsIEbWJlvXRVenM936/cDIu/fJk7zhTcaTwN7Nm88fVMueUTYbkkirJETWZEskt90KjATbRLs9Lt3W5MLk1w+nr9+6faVQLM4vqi4Uli7mVXX6zJtHT16cfdeYvPFy+nVKNnJ3Nr/kP278t/H/5vel8OiOiKnLjtMwl21LVype1VC9ZlumZ2ml5lluQ011w3jZdur1lpq1lalM3bU8T81aS6tWSxuONtyWmvfMSk0Nw9CpjAyb5G9nlNYXF83CkQwGcZiI6nTdgpmMDJbW/8WgAADAYImr/r9f8bTiac3Zru9/Uf8npDt+QP0vMtT1/2HVfx6KrCdxvGzX/5ng+d2L+h8AAAAAAAAAAAAAAAAAAAAAgONgy/ezvu9nw234kxKRtIiEv8c9ThwN5n+4df3jXlrEftYsNUudbSdeKEtFbLFkdkzkW/t+CHTaC5eL87PalpO39mqQv9osJSUV5ody0flznXztzl+VMcl0nz8vWZmJzs9H5DdL43L+nJ8KzmyJIVl5f1ccsWWlfV/v5j+dU710tdiTP9HeDwAAAACAk8DQHfve39txQ8NlQ3rinc7d7wOSPeD7QM/79aicGo3vugEAAAAAGCbeuFRN27Zcr/X4pDfCxWz/ygFF4r6cdL87j4pI0PNqUOain0ZCRHpDY/t6ohvJP5vlzyJ7n4uZ2Kf70A0/uXOvfnrYeQL6SY/zrxIAAACAoxAW/SNxDwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHW7ypi4f6HWYSs63TJeK4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAw/AgAA//9crBNs") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) close(0x3) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) 39.923966642s ago: executing program 9 (id=3693): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='autogroup\x00') writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='+5', 0x2}, {&(0x7f00000000c0)="e4", 0x1}], 0x2) 38.919591123s ago: executing program 9 (id=3699): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) 38.833719093s ago: executing program 46 (id=3699): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) 11.119853198s ago: executing program 4 (id=3942): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000000380)="e12c", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000004c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r2}) 10.98569558s ago: executing program 4 (id=3945): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000600)) 10.915534557s ago: executing program 4 (id=3947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x200080d4) munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='3', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @loopback}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 10.850055912s ago: executing program 4 (id=3949): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0x30a9408, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 10.735986359s ago: executing program 4 (id=3951): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x200802, &(0x7f00000003c0)) 9.968467783s ago: executing program 4 (id=3963): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x4040010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000480)={[{@noload}, {@test_dummy_encryption}, {@data_err_ignore}, {@noinit_itable}, {@dax_never}, {@nodiscard}]}, 0x1, 0x4eb, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 9.31437139s ago: executing program 47 (id=3963): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x4040010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000480)={[{@noload}, {@test_dummy_encryption}, {@data_err_ignore}, {@noinit_itable}, {@dax_never}, {@nodiscard}]}, 0x1, 0x4eb, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.994551213s ago: executing program 0 (id=4057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7}, {0x10}, {0x8, 0x7}, {0x34, 0x7}, {0x0, 0x2}], "4fec5f4b8c85e8c2"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2.304355658s ago: executing program 0 (id=4069): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x200802, &(0x7f00000003c0)) 2.261440199s ago: executing program 0 (id=4070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0x8) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) 2.1272234s ago: executing program 5 (id=4072): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x10}, {&(0x7f0000000200)="9efe80000000000000dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88) 1.764008627s ago: executing program 5 (id=4074): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) close_range(r0, r0, 0x0) 1.743436243s ago: executing program 5 (id=4076): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.672038889s ago: executing program 8 (id=4078): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c7, &(0x7f0000002d80)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThy6IXGjKHYcxU5pQg/p/4BEJU7wJ3BA4oDUE3ducENI5YBUoAI1SByMZjxJ09ROI5p4uvHnI41m3jzb3/fcznuTbxy/AEbW5YjYi4hLEfFJRMwW55Niiw96W/a4Rw9vL+8/vL2cRLf78T+SvD47F0eek3m5eM2piPjBdyN+nDwdt72zu77UaNS3inK109ystnd2/7LWXFqtr9Y3arXFhcX59669Wzuzvr7R/PWD76x9+MPf/fbL9/+w962fZs2aKeqO9uMs9bo+cRgnMx4RH55HsBKMFf25VHZD+L+kEfGZiHgzu/67ZbcGABiGbnc2urNHywDARZfmObAkrRS5gJlI00qll8N7PabTRqvduXqjtb2x0suVzcVEemOtUZ8vcoVzMZFk5YX8+HG5dqx8LSJei4ifTb6UlyvLrcZKmTc+ADDCXj42//97sjf/AwAX3FTZDQAAhs78DwCjx/wPAKPH/A8Ao8f8DwCjx/wPAKPH/A8AI+X7H32Ubd394vuvV27ubK+3br69Um+vV5rby5Xl1tZmZbXVWs2/s6f5rNdrtFqbC+/E9q1qp97uVNs7u9ebre2NzvX8e72v1yeG0isA4CSvvXHvT0lE7L3/Ur7FkbUczNVwsaVlNwAozVjZDQBKM152A4DS+Bkf6LNE7xMGfkTo7sCnGFrgBXflC/L/MKqezP/7IDCMEvl/GF3y/zC6ut3Emv8AMGLk+IFz+P0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHgz+ZaklWIt8JlI00ol4pWImIuJ5MZaoz4fEa9GxB8nJyaz8kLZjQYAnlP6t6RY/+vK7Fszx2svJf+ZzPcR8ZNffPzzW0udztZCdv6fh+c7d4vztRMDWWoQAEpyME8fzOMHHj28vXywDbM9D77dW1w0i7tfbL2a8RjP91P5jcP0v5Ki3JPdr4ydQfy9OxHx+X79T/LcyFyx8unx+FnsV4YaP30ifprX9fbZe/HZM2gLjJp72fjzQb/rL43L+b7/9T+Vj1DP72D8239q/EsPx7+xAePf5dPGeOf33xtYdyfii+P94ieH8ZMB8d86Zfw/f+krbw6q6/4y4kr0j380VrXT3Ky2d3bfXmsurdZX6xu12uLC4vx7196tVfMcdfUgU/20v79/9dWT+j89IP7UM/r/9VP2/1f//eRHXz0h/je/1v/f//UT4mdz4jdOGX9p+jcDl+/O4q/073/xnMH9v3rK+Pf/urtyyocCAEPQ3tldX2o06lsOhnaQ3bu9AM24cAd3PjXvavY/4Cxe53Pn2NSyRybgvD2+6MtuCQAAAAAAAAAAAAAAMMgw/uCp7D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwcf0vAAD//1XP1xw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendfile(r0, r1, 0x0, 0x10c6a) 1.497784141s ago: executing program 8 (id=4079): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x8000) 1.329419082s ago: executing program 0 (id=4081): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r1, 0xc0145608, &(0x7f0000000600)) 1.301616878s ago: executing program 0 (id=4082): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x3, 0xfffff01c}, {0x6, 0xfd, 0x0, 0x2}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) 1.261809687s ago: executing program 8 (id=4083): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000240)={[{@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_lower}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@fat=@errors_continue}, {@fat=@check_strict}, {@utf8}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@rodir}]}, 0x3, 0x27b, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 676.086558ms ago: executing program 2 (id=4085): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) close_range(r0, r0, 0x0) 653.409353ms ago: executing program 2 (id=4086): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/223) 573.836492ms ago: executing program 2 (id=4087): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19) 477.045566ms ago: executing program 2 (id=4088): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 397.535534ms ago: executing program 2 (id=4089): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) 361.783093ms ago: executing program 8 (id=4090): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)='h', 0x1}, {&(0x7f0000000100)="94e8b61290b09f4081b1fbd7f88d55c90648e33742", 0x15}, {&(0x7f0000000280)="23f1ba3f7901b9aef8f17a3fe44793588d1217ce7244304adc45c1710ac3498beeb8f90e6b940743d05da72227c38bc6eded07a6826a659ab372c17f9b5e4e0d0ae59f7497efb93762a9bc1f4fac50270ed7", 0x52}, {&(0x7f0000000540)="094c6fe2f387c3ba5a608776bfac8b6acf94691b9467fed7a5325313611e5d0a755c2bbe644e60735e7aaceda8ef6e5dc9ab036eff941889a2f98c81e760a9e4097047f13a7b66173aa0bc22b8f713a6f1301a7368b5d34e18e9d274d4464c4f383840911a11d56234e89c50989ce14848437fa148c70fe98a5b6107d9ed4e25cd5efa7879d88711d0f44a1ac54301471cd09c6402b15a20c57d325ab768bc99", 0xa0}, {&(0x7f0000000600)="3aaf575f87ac1528689769acc03dcd576eae313625e1aecff713aab17d186f4ef82064e1bc23f07897ed31b8af4c486ad9bee0c06fa8030a80444421609b5dadd3a6706f5a8679e1f13016e4237b6fbc8bd1ed97ab53f2b67dcc71b3306eaf98d9a140dabf730cf57e752d11dc0742ba3c2ba6bce97b6924d36c847dcf9d2d9b9568071f989fdc53d20f85a954dd1e48710f6b36a1b489ec8ad48b54062898fdeb41fa1e77b14ab710350f8b910bbf93f4ebd007c2fe538bc7cac9fc220eb888ca4bb56105cdc043da64d98f2e94568ec7b2bae3940ca6926cc169f8f54e8009246c05741cc55156360d7ff3d8b908e5f93c25", 0xf3}], 0x5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x8) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/241, 0xf1}], 0x1, &(0x7f0000000400)=""/16, 0x10}, 0x40) 336.20456ms ago: executing program 5 (id=4091): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r1, 0xc0145608, &(0x7f0000000600)) 224.090556ms ago: executing program 8 (id=4092): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x8000) 190.353924ms ago: executing program 5 (id=4093): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0}, 0x94) 141.047616ms ago: executing program 0 (id=4094): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x200802, &(0x7f00000003c0)) 71.793963ms ago: executing program 8 (id=4095): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0) 27.119834ms ago: executing program 2 (id=4096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x3c, r1, 0x205, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x84}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x80) 0s ago: executing program 5 (id=4097): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19) kernel console output (not intermixed with test programs): ctive [ 510.719787][T14287] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.723050][T16560] tipc: Disabling bearer [ 510.724461][T16560] tipc: Left network mode [ 510.726755][T14287] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.730364][T17009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.736987][T14287] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.743278][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.755141][T14287] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.762232][T14287] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 510.783752][T17009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.924737][T17089] FAULT_INJECTION: forcing a failure. [ 510.924737][T17089] name fail_futex, interval 1, probability 0, space 0, times 0 [ 510.934751][T17089] CPU: 1 PID: 17089 Comm: syz.4.3487 Not tainted syzkaller #0 [ 510.936222][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 510.938275][T17089] Call trace: [ 510.938919][T17089] dump_backtrace+0x1c4/0x1f0 [ 510.939831][T17089] show_stack+0x2c/0x3c [ 510.940644][T17089] __dump_stack+0x30/0x40 [ 510.941525][T17089] dump_stack_lvl+0xf4/0x15c [ 510.942461][T17089] dump_stack+0x1c/0x5c [ 510.943328][T17089] should_fail_ex+0x3cc/0x524 [ 510.944264][T17089] should_fail+0x14/0x24 [ 510.945149][T17089] get_futex_key+0x904/0xfb0 [ 510.946117][T17089] futex_wake+0x10c/0x458 [ 510.947037][T17089] do_futex+0x2c4/0x340 [ 510.947871][T17089] __arm64_sys_futex+0x390/0x414 [ 510.948893][T17089] invoke_syscall+0x98/0x290 [ 510.949952][T17089] el0_svc_common+0x13c/0x258 [ 510.950945][T17089] do_el0_svc+0x5c/0x134 [ 510.951845][T17089] el0_svc+0x58/0x128 [ 510.952653][T17089] el0t_64_sync_handler+0x84/0xf0 [ 510.953700][T17089] el0t_64_sync+0x18c/0x190 [ 511.069075][ T4332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.072065][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.073863][ T4332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.075493][ T4332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.079612][ T4332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 511.081136][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.124715][T17095] loop4: detected capacity change from 0 to 8192 [ 511.194472][T17095] loop4: AHDI p1 p2 p3 [ 511.195446][T17095] loop4: p1 size 16383 extends beyond EOD, truncated [ 511.198436][T17009] device hsr_slave_0 entered promiscuous mode [ 511.236698][T17009] device hsr_slave_1 entered promiscuous mode [ 511.249870][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3489'. [ 511.259799][T17009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.261220][T17009] Cannot create hsr debugfs directory [ 511.263215][T14844] udevd[14844]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 511.785809][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 511.795143][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 511.797146][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 511.799902][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 511.803081][ T4332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 511.804606][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.016236][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 512.163641][T17096] chnl_net:caif_netlink_parms(): no params data found [ 512.218161][T17151] FAULT_INJECTION: forcing a failure. [ 512.218161][T17151] name failslab, interval 1, probability 0, space 0, times 0 [ 512.220491][T17151] CPU: 1 PID: 17151 Comm: syz.2.3494 Not tainted syzkaller #0 [ 512.221738][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 512.223374][T17151] Call trace: [ 512.223925][T17151] dump_backtrace+0x1c4/0x1f0 [ 512.224702][T17151] show_stack+0x2c/0x3c [ 512.225396][T17151] __dump_stack+0x30/0x40 [ 512.226181][T17151] dump_stack_lvl+0xf4/0x15c [ 512.227068][T17151] dump_stack+0x1c/0x5c [ 512.227887][T17151] should_fail_ex+0x3cc/0x524 [ 512.228800][T17151] __should_failslab+0xc0/0x11c [ 512.229782][T17151] should_failslab+0x10/0x28 [ 512.230719][T17151] kmem_cache_alloc+0x88/0x310 [ 512.231703][T17151] __proc_create+0x30c/0x718 [ 512.232630][T17151] proc_mkdir+0x44/0x100 [ 512.233462][T17151] cache_register_net+0x25c/0x48c [ 512.234502][T17151] nfsd_idmap_init+0x164/0x1d4 [ 512.235489][T17151] nfsd_init_net+0x60/0x1f4 [ 512.236387][T17151] ops_init+0x2b0/0x53c [ 512.237215][T17151] setup_net+0x494/0xb6c [ 512.238039][T17151] copy_net_ns+0x2b8/0x578 [ 512.238863][T17151] create_new_namespaces+0x30c/0x604 [ 512.239864][T17151] unshare_nsproxy_namespaces+0x108/0x160 [ 512.240994][T17151] ksys_unshare+0x3f0/0x70c [ 512.241861][T17151] __arm64_sys_unshare+0x3c/0x50 [ 512.242817][T17151] invoke_syscall+0x98/0x290 [ 512.243729][T17151] el0_svc_common+0x13c/0x258 [ 512.244659][T17151] do_el0_svc+0x5c/0x134 [ 512.245482][T17151] el0_svc+0x58/0x128 [ 512.246226][T17151] el0t_64_sync_handler+0x84/0xf0 [ 512.247172][T17151] el0t_64_sync+0x18c/0x190 [ 512.564788][T17096] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.568497][T17096] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.570565][T17096] device bridge_slave_0 entered promiscuous mode [ 512.573322][T17096] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.574703][T17096] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.576640][T17096] device bridge_slave_1 entered promiscuous mode [ 512.583699][T17096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.589582][T17096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.657717][T17096] team0: Port device team_slave_0 added [ 512.660685][T17096] team0: Port device team_slave_1 added [ 512.685906][T17096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.694271][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.700623][T17096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.704792][T17130] chnl_net:caif_netlink_parms(): no params data found [ 512.761725][T17096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.779669][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.784457][T17096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.801513][T17177] loop2: detected capacity change from 0 to 8192 [ 512.838258][T17177] loop2: AHDI p1 p2 p3 [ 512.839267][T17177] loop2: p1 size 16383 extends beyond EOD, truncated [ 513.126355][T13386] Bluetooth: hci0: command 0x0409 tx timeout [ 513.555516][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.557239][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.559004][T17130] device bridge_slave_0 entered promiscuous mode [ 513.627550][T17096] device hsr_slave_0 entered promiscuous mode [ 513.680211][T17096] device hsr_slave_1 entered promiscuous mode [ 513.877170][T13386] Bluetooth: hci2: command 0x0409 tx timeout [ 513.946302][T17096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.948004][T17096] Cannot create hsr debugfs directory [ 514.086229][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 514.233615][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.235143][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.238313][T17130] device bridge_slave_1 entered promiscuous mode [ 514.256748][T17009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 514.285031][T14844] udevd[14844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 514.360690][T17009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 514.396080][T17009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 514.453397][T16560] device hsr_slave_0 left promiscuous mode [ 514.486953][T16560] device hsr_slave_1 left promiscuous mode [ 514.566984][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.568420][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.570207][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.571617][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.573137][T16560] device bridge_slave_1 left promiscuous mode [ 514.574334][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.606696][T16560] device bridge_slave_0 left promiscuous mode [ 514.607882][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.786481][T16560] device veth1_macvtap left promiscuous mode [ 514.787641][T16560] device veth0_macvtap left promiscuous mode [ 514.788814][T16560] device veth1_vlan left promiscuous mode [ 514.789955][T16560] device veth0_vlan left promiscuous mode [ 515.216190][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 515.926208][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 516.166206][T13386] Bluetooth: hci3: command 0x040f tx timeout [ 517.199052][T16560] team0 (unregistering): Port device team_slave_1 removed [ 517.286214][T13386] Bluetooth: hci0: command 0x040f tx timeout [ 517.377682][T16560] team0 (unregistering): Port device team_slave_0 removed [ 517.587312][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.786657][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.006183][T13386] Bluetooth: hci2: command 0x040f tx timeout [ 518.246463][T13386] Bluetooth: hci3: command 0x0419 tx timeout [ 519.328361][T16560] bond0 (unregistering): Released all slaves [ 519.366337][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 519.621570][T17009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 519.659354][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.668336][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.680470][T17130] team0: Port device team_slave_0 added [ 519.682966][T17130] team0: Port device team_slave_1 added [ 519.690515][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.691806][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.702572][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.711920][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.713061][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.718872][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.818656][T17130] device hsr_slave_0 entered promiscuous mode [ 519.846550][T17130] device hsr_slave_1 entered promiscuous mode [ 519.886313][T17130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.887712][T17130] Cannot create hsr debugfs directory [ 519.990730][T17009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.011455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.013199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.021701][T17009] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.024467][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.034450][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.036695][T16661] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.038064][T16661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.041464][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.049205][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.051118][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.052631][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.053794][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.056085][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 520.064204][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.086326][T13386] Bluetooth: hci2: command 0x0419 tx timeout [ 520.133702][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.141152][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.143214][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.149533][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.152500][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.154581][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 520.163510][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.178390][T17009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.180636][T17009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.221065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 520.222792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.304567][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.306019][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.313724][T17009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.479966][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 520.481863][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.491592][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.493443][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.496524][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.498076][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.503498][T17009] device veth0_vlan entered promiscuous mode [ 520.511703][T17009] device veth1_vlan entered promiscuous mode [ 520.519377][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 520.521161][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 520.527202][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.529049][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.548922][T17009] device veth0_macvtap entered promiscuous mode [ 520.552533][T17009] device veth1_macvtap entered promiscuous mode [ 520.561492][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.563433][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.565312][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.570234][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.572097][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.573906][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.575616][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.579558][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.582243][T17009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.052043][T16560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.054047][T16560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.058330][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 521.060148][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 521.061783][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.063564][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 521.130636][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.132696][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.134367][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.140156][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.142052][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.144049][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.145832][T17009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.148187][T17009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.151261][T17009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.188286][T16560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.190084][T16560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.192567][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 521.194351][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.198383][T17009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.199990][T17009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.201523][T17009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.203129][T17009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.369434][T16560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.371359][T16560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.532438][T16560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.534265][T16560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.624924][T16661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.627157][T16661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.629268][T16661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.643680][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.645171][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.651950][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.739563][T16560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.741473][T16560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.882477][T16560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.889484][T16560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.199352][T16560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.201452][T16560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.237856][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'. [ 522.272151][T16560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.274051][T16560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.354262][T17096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 522.360222][T17304] FAULT_INJECTION: forcing a failure. [ 522.360222][T17304] name failslab, interval 1, probability 0, space 0, times 0 [ 522.363204][T17304] CPU: 1 PID: 17304 Comm: syz.0.3506 Not tainted syzkaller #0 [ 522.364433][T17304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 522.366160][T17304] Call trace: [ 522.366816][T17304] dump_backtrace+0x1c4/0x1f0 [ 522.367771][T17304] show_stack+0x2c/0x3c [ 522.368596][T17304] __dump_stack+0x30/0x40 [ 522.369451][T17304] dump_stack_lvl+0xf4/0x15c [ 522.370324][T17304] dump_stack+0x1c/0x5c [ 522.371141][T17304] should_fail_ex+0x3cc/0x524 [ 522.372173][T17304] __should_failslab+0xc0/0x11c [ 522.373135][T17304] should_failslab+0x10/0x28 [ 522.374027][T17304] __kmem_cache_alloc_node+0x7c/0x318 [ 522.375070][T17304] __kmalloc_node+0xc8/0x184 [ 522.375960][T17304] kvmalloc_node+0x88/0x1d4 [ 522.376849][T17304] nf_hook_entries_grow+0x214/0x5a8 [ 522.377840][T17304] __nf_register_net_hook+0x244/0x7f0 [ 522.378882][T17304] nf_register_net_hook+0xc4/0x1a4 [ 522.379893][T17304] nf_register_net_hooks+0x58/0x1b8 [ 522.380893][T17304] apparmor_nf_register+0x2c/0x3c [ 522.381860][T17304] ops_init+0x2b0/0x53c [ 522.382668][T17304] setup_net+0x494/0xb6c [ 522.383518][T17304] copy_net_ns+0x2b8/0x578 [ 522.384386][T17304] create_new_namespaces+0x30c/0x604 [ 522.385425][T17304] unshare_nsproxy_namespaces+0x108/0x160 [ 522.386583][T17304] ksys_unshare+0x3f0/0x70c [ 522.387494][T17304] __arm64_sys_unshare+0x3c/0x50 [ 522.388480][T17304] invoke_syscall+0x98/0x290 [ 522.389395][T17304] el0_svc_common+0x13c/0x258 [ 522.390303][T17304] do_el0_svc+0x5c/0x134 [ 522.391121][T17304] el0_svc+0x58/0x128 [ 522.391885][T17304] el0t_64_sync_handler+0x84/0xf0 [ 522.392874][T17304] el0t_64_sync+0x18c/0x190 [ 522.397832][T17096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 522.448749][T17096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 522.498568][T17096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 522.560231][T17130] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 522.665276][T17130] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 522.709924][T16560] tipc: Disabling bearer [ 522.711230][T16560] tipc: Left network mode [ 522.712267][T17130] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 522.741493][T17324] Bluetooth: (null): Too short H5 packet [ 522.756515][T16560] tipc: Disabling bearer [ 522.766790][T16560] tipc: Left network mode [ 522.767823][T17130] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 523.631119][T17096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.652152][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.654112][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.707880][T17096] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.810417][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.838706][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.840805][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.842353][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.843627][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.845129][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.853087][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.854870][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.856187][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.858749][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.860694][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.862664][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.865723][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.868744][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.870630][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.872572][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.874302][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.972434][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.973928][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.975839][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.978033][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.979845][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.991307][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.993361][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.129868][T17096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.134138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.135965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.141691][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.142930][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.144506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.162187][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.164233][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.165796][T16603] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.167239][T16603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.169994][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.172144][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.174162][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.181825][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.183902][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.185810][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.188496][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.190396][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.270612][T17130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.272889][T17130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.276043][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.278045][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.279667][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.355212][T17444] FAULT_INJECTION: forcing a failure. [ 524.355212][T17444] name failslab, interval 1, probability 0, space 0, times 0 [ 524.393063][T17444] CPU: 0 PID: 17444 Comm: syz.4.3521 Not tainted syzkaller #0 [ 524.394544][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 524.396591][T17444] Call trace: [ 524.397312][T17444] dump_backtrace+0x1c4/0x1f0 [ 524.398318][T17444] show_stack+0x2c/0x3c [ 524.399138][T17444] __dump_stack+0x30/0x40 [ 524.399997][T17444] dump_stack_lvl+0xf4/0x15c [ 524.400880][T17444] dump_stack+0x1c/0x5c [ 524.401715][T17444] should_fail_ex+0x3cc/0x524 [ 524.402647][T17444] __should_failslab+0xc0/0x11c [ 524.403605][T17444] should_failslab+0x10/0x28 [ 524.404521][T17444] kmem_cache_alloc+0x88/0x310 [ 524.405464][T17444] __alloc_file+0x30/0x234 [ 524.406335][T17444] alloc_empty_file+0xa0/0x184 [ 524.407252][T17444] alloc_file+0x64/0x564 [ 524.408069][T17444] alloc_file_pseudo+0x16c/0x1f4 [ 524.409076][T17444] anon_inode_getfd+0xe8/0x1a8 [ 524.410056][T17444] __arm64_sys_fsopen+0x254/0x2d4 [ 524.411024][T17444] invoke_syscall+0x98/0x290 [ 524.411930][T17444] el0_svc_common+0x13c/0x258 [ 524.412813][T17444] do_el0_svc+0x5c/0x134 [ 524.413672][T17444] el0_svc+0x58/0x128 [ 524.414509][T17444] el0t_64_sync_handler+0x84/0xf0 [ 524.415528][T17444] el0t_64_sync+0x18c/0x190 [ 524.512010][T17458] loop4: detected capacity change from 0 to 1024 [ 524.514659][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.523320][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.880560][T17458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 524.960417][T17096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.979027][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.980711][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.989608][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.344207][T15068] EXT4-fs (loop4): unmounting filesystem. [ 525.394775][T17512] loop4: detected capacity change from 0 to 1024 [ 525.419076][T17512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 525.427323][T17512] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 525.460090][T15068] EXT4-fs (loop4): unmounting filesystem. [ 525.934941][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.937071][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.978974][T17544] FAULT_INJECTION: forcing a failure. [ 525.978974][T17544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.981880][T17544] CPU: 1 PID: 17544 Comm: syz.2.3533 Not tainted syzkaller #0 [ 525.983219][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 525.985190][T17544] Call trace: [ 525.985841][T17544] dump_backtrace+0x1c4/0x1f0 [ 525.986734][T17544] show_stack+0x2c/0x3c [ 525.987524][T17544] __dump_stack+0x30/0x40 [ 525.988372][T17544] dump_stack_lvl+0xf4/0x15c [ 525.989273][T17544] dump_stack+0x1c/0x5c [ 525.990095][T17544] should_fail_ex+0x3cc/0x524 [ 525.991055][T17544] should_fail+0x14/0x24 [ 525.991904][T17544] should_fail_usercopy+0x20/0x30 [ 525.992860][T17544] dm_ctl_ioctl+0x110/0xf1c [ 525.993746][T17544] __arm64_sys_ioctl+0x14c/0x1c8 [ 525.994719][T17544] invoke_syscall+0x98/0x290 [ 525.995636][T17544] el0_svc_common+0x13c/0x258 [ 525.996590][T17544] do_el0_svc+0x5c/0x134 [ 525.997460][T17544] el0_svc+0x58/0x128 [ 525.998237][T17544] el0t_64_sync_handler+0x84/0xf0 [ 525.999209][T17544] el0t_64_sync+0x18c/0x190 [ 526.045448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.047603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.068730][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.070795][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.072892][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.077224][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.079078][T17096] device veth0_vlan entered promiscuous mode [ 526.363017][T17096] device veth1_vlan entered promiscuous mode [ 526.377534][T17130] device veth0_vlan entered promiscuous mode [ 526.380511][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 526.382573][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 526.384271][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.388343][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.391420][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.395540][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.451928][T17130] device veth1_vlan entered promiscuous mode [ 526.465262][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 526.466996][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 526.468564][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.470274][T16603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.479396][T14576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.481376][T14576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.484552][T17130] device veth0_macvtap entered promiscuous mode [ 526.699119][T17130] device veth1_macvtap entered promiscuous mode [ 526.712311][T17096] device veth0_macvtap entered promiscuous mode [ 526.716941][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.719070][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.720877][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.722717][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.729354][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.731904][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.733712][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.736479][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.738180][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.739997][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.749231][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.751563][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.753887][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.755452][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.757128][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.758746][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.807902][T17096] device veth1_macvtap entered promiscuous mode [ 526.815395][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.817366][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.821158][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.823071][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.824964][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.826940][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.828738][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.831436][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.833194][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.835122][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.837767][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.839378][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.842058][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.843879][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.845652][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.847385][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.849112][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.851514][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.853310][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.855037][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.856891][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.858670][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.861481][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.864344][T17096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.865764][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.867403][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.869063][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.871395][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.873387][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.119909][T17130] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.121581][T17130] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.123896][T17130] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.125592][T17130] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.130360][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.133131][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.134781][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.136722][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.138601][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.140493][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.142980][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.144818][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.146520][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.148266][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.149993][T17096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.154028][T17096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.156510][T17096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.158249][T17532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.160020][T17532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.230827][T16560] device hsr_slave_0 left promiscuous mode [ 527.281256][T16560] device hsr_slave_1 left promiscuous mode [ 527.336291][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.337785][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.339563][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.340842][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.342436][T16560] device bridge_slave_1 left promiscuous mode [ 527.343571][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.356109][T16560] device bridge_slave_0 left promiscuous mode [ 527.357232][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.397010][T16560] device hsr_slave_0 left promiscuous mode [ 527.424212][T16560] device hsr_slave_1 left promiscuous mode [ 527.491746][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.493320][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.494983][T16560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.496321][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.497905][T16560] device bridge_slave_1 left promiscuous mode [ 527.499049][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.521079][T16560] device bridge_slave_0 left promiscuous mode [ 527.522341][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.685777][T16560] device veth1_macvtap left promiscuous mode [ 527.686867][T16560] device veth0_macvtap left promiscuous mode [ 527.689099][T16560] device veth1_vlan left promiscuous mode [ 527.690115][T16560] device veth0_vlan left promiscuous mode [ 527.831578][T16560] device veth1_macvtap left promiscuous mode [ 527.832749][T16560] device veth0_macvtap left promiscuous mode [ 527.833834][T16560] device veth1_vlan left promiscuous mode [ 527.834866][T16560] device veth0_vlan left promiscuous mode [ 530.156872][T16560] team0 (unregistering): Port device team_slave_1 removed [ 530.318109][T16560] team0 (unregistering): Port device team_slave_0 removed [ 530.511703][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.736275][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.214282][T16560] bond0 (unregistering): Released all slaves [ 534.874477][T16560] team0 (unregistering): Port device team_slave_1 removed [ 535.059399][T16560] team0 (unregistering): Port device team_slave_0 removed [ 535.244153][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.470353][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.916954][T16560] bond0 (unregistering): Released all slaves [ 537.205962][T17096] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.207736][T17096] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.209404][T17096] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.211029][T17096] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.238385][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.239890][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.255306][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 537.286645][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.288195][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.291241][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 537.296895][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.298262][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.299766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 537.314210][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.315727][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.317319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 537.393161][T17665] Bluetooth: (null): Too short H5 packet [ 537.435701][T17669] fuse: Bad value for 'fd' [ 537.775410][T17675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3537'. [ 538.244179][T17694] loop4: detected capacity change from 0 to 128 [ 538.367589][T17694] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 538.722436][T17694] EXT4-fs (loop4): shut down requested (2) [ 538.723939][T17694] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 538.905469][T17728] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 538.908245][T17728] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 538.912951][T17728] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 538.916390][T17728] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 539.127136][T17730] loop5: detected capacity change from 0 to 2048 [ 539.627696][T17730] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 539.764948][T17729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.766744][T17729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.781051][T15068] EXT4-fs (loop4): unmounting filesystem. [ 539.839169][T17738] Bluetooth: (null): Too short H5 packet [ 539.895217][ T4332] Bluetooth: hci1: link tx timeout [ 539.896741][ T4332] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 539.901713][ T4332] Bluetooth: hci1: link tx timeout [ 539.902837][ T4332] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.549274][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 540.549283][ T27] audit: type=1326 audit(524828.833:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17784 comm="syz.2.3564" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 540.556526][ T27] audit: type=1326 audit(524828.843:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17784 comm="syz.2.3564" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 540.572075][ T27] audit: type=1326 audit(524828.843:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17784 comm="syz.2.3564" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 540.586171][ T27] audit: type=1326 audit(524828.843:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17784 comm="syz.2.3564" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 540.594968][ T27] audit: type=1326 audit(524828.843:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17784 comm="syz.2.3564" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 540.933220][T17823] Bluetooth: (null): Too short H5 packet [ 541.906606][T17096] EXT4-fs (loop5): unmounting filesystem. [ 541.928906][ T4332] Bluetooth: hci1: command 0x0406 tx timeout [ 541.932547][T16560] tipc: Disabling bearer [ 541.934778][T16560] tipc: Disabling bearer [ 541.935700][T16560] tipc: Left network mode [ 542.648657][T17914] loop5: detected capacity change from 0 to 128 [ 542.655291][T17914] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 542.678569][T17914] EXT4-fs (loop5): shut down requested (2) [ 542.684664][T17914] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 542.888212][T17934] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 542.890868][T17934] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 542.894359][T17934] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 542.897962][T17934] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 543.590446][T17096] EXT4-fs (loop5): unmounting filesystem. [ 544.235527][T16560] batman_adv: batadv0: Interface deactivated: gretap1 [ 544.365259][T16560] batman_adv: batadv0: Removing interface: gretap1 [ 544.739213][T18007] loop9: detected capacity change from 0 to 128 [ 544.796140][T18007] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 544.812069][T18003] EXT4-fs (loop9): shut down requested (2) [ 544.813711][T18003] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 544.980057][T18026] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 544.982178][T18026] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 544.984357][T18026] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 544.986492][T18026] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 545.564169][T17130] EXT4-fs (loop9): unmounting filesystem. [ 545.567355][T18036] loop2: detected capacity change from 0 to 512 [ 545.568911][T18036] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 545.585100][T18038] device syzkaller0 left promiscuous mode [ 547.139913][T18097] loop2: detected capacity change from 0 to 128 [ 547.234786][T18097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 547.261464][T18097] EXT4-fs (loop2): shut down requested (2) [ 547.265298][T18097] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 547.478042][T18105] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 547.481328][T18105] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 547.485563][T18105] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 547.490532][T18105] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 547.664492][T16560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.666973][T16560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.668763][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.764721][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.820912][T16560] bond2 (unregistering): Released all slaves [ 547.836893][T16560] bond1 (unregistering): Released all slaves [ 547.937271][T18112] loop0: detected capacity change from 0 to 2048 [ 548.205771][T13391] EXT4-fs (loop2): unmounting filesystem. [ 548.290737][T18112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 548.964730][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 549.155020][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 549.157464][ T24] usb 1-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 549.159684][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 549.161856][ T24] usb 1-1: too many endpoints for config 1 interface 2 altsetting 205: 164, using maximum allowed: 30 [ 549.164143][ T24] usb 1-1: config 1 interface 2 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 164 [ 549.166654][ T24] usb 1-1: config 1 interface 2 has no altsetting 0 [ 549.169368][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 549.171264][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.172857][ T24] usb 1-1: Product: syz [ 549.174053][ T24] usb 1-1: SerialNumber: syz [ 550.662955][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 550.670065][T17009] EXT4-fs (loop0): unmounting filesystem. [ 550.696400][ T24] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 550.704196][ T24] usb 1-1: USB disconnect, device number 7 [ 550.708467][T16560] team0 (unregistering): Port device team_slave_1 removed [ 550.894007][T16560] team0 (unregistering): Port device team_slave_0 removed [ 550.933312][T17704] udevd[17704]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.082068][T16560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.290447][T16560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.715375][T16560] bond0 (unregistering): Released all slaves [ 552.949621][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3647'. [ 553.037519][T18152] loop5: detected capacity change from 0 to 128 [ 553.047322][T18156] loop2: detected capacity change from 0 to 128 [ 553.058164][T18156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 553.067731][T18152] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 553.124564][T18152] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 553.171737][T18156] EXT4-fs (loop2): shut down requested (2) [ 553.192027][T18152] fscrypt: loop5: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 553.197391][T18156] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 553.412246][T18172] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 553.572589][T17096] EXT4-fs (loop5): unmounting filesystem. [ 553.611737][T18178] loop0: detected capacity change from 0 to 2048 [ 553.651597][T18178] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 553.770177][T17009] EXT4-fs (loop0): unmounting filesystem. [ 553.806906][T18195] loop0: detected capacity change from 0 to 128 [ 553.820379][T18195] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 554.141379][T18195] System zones: 1-3, 19-19, 35-36 [ 554.142922][T18195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 554.164105][T13391] EXT4-fs (loop2): unmounting filesystem. [ 554.271713][T18209] random: crng reseeded on system resumption [ 554.286898][T18209] Restarting kernel threads ... done. [ 554.442518][T18213] loop4: detected capacity change from 0 to 2048 [ 554.738948][T18213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 554.998776][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.001406][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.131155][T17009] EXT4-fs (loop0): unmounting filesystem. [ 555.244458][T18241] loop0: detected capacity change from 0 to 128 [ 555.259455][T18241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 555.587517][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.588915][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 555.626931][T18241] fscrypt: loop0: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 555.705002][T17009] EXT4-fs (loop0): unmounting filesystem. [ 555.800723][T18259] FAULT_INJECTION: forcing a failure. [ 555.800723][T18259] name failslab, interval 1, probability 0, space 0, times 0 [ 555.803396][T18259] CPU: 0 PID: 18259 Comm: syz.0.3670 Not tainted syzkaller #0 [ 555.804710][T18259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 555.806597][T18259] Call trace: [ 555.807219][T18259] dump_backtrace+0x1c4/0x1f0 [ 555.808133][T18259] show_stack+0x2c/0x3c [ 555.808942][T18259] __dump_stack+0x30/0x40 [ 555.809774][T18259] dump_stack_lvl+0xf4/0x15c [ 555.810677][T18259] dump_stack+0x1c/0x5c [ 555.811506][T18259] should_fail_ex+0x3cc/0x524 [ 555.812426][T18259] __should_failslab+0xc0/0x11c [ 555.813387][T18259] should_failslab+0x10/0x28 [ 555.814305][T18259] kmem_cache_alloc+0x88/0x310 [ 555.815233][T18259] fib6_add_1+0x94c/0x126c [ 555.816059][T18259] fib6_add+0x180/0x34e8 [ 555.816874][T18259] ip6_ins_rt+0xc4/0x12c [ 555.817670][T18259] __ipv6_dev_ac_inc+0x598/0x7e8 [ 555.818586][T18259] ipv6_sock_ac_join+0x3f8/0x5d8 [ 555.819533][T18259] do_ipv6_setsockopt+0x1974/0x3174 [ 555.820541][T18259] ipv6_setsockopt+0x6c/0x1a0 [ 555.821466][T18259] udpv6_setsockopt+0xa8/0xc0 [ 555.822319][T18259] sock_common_setsockopt+0xb0/0xcc [ 555.823267][T18259] __sys_setsockopt+0x2fc/0x50c [ 555.824214][T18259] __arm64_sys_setsockopt+0xc0/0xdc [ 555.825231][T18259] invoke_syscall+0x98/0x290 [ 555.826144][T18259] el0_svc_common+0x13c/0x258 [ 555.827076][T18259] do_el0_svc+0x5c/0x134 [ 555.827916][T18259] el0_svc+0x58/0x128 [ 555.828701][T18259] el0t_64_sync_handler+0x84/0xf0 [ 555.829692][T18259] el0t_64_sync+0x18c/0x190 [ 556.271702][T18271] overlayfs: upper fs does not support file handles, falling back to index=off. [ 556.524366][T18294] loop2: detected capacity change from 0 to 128 [ 556.548806][T18294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 556.550534][T18294] System zones: 1-3, 19-19, 35-36 [ 556.562148][T18294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 556.727164][T13391] EXT4-fs (loop2): unmounting filesystem. [ 556.785476][T18316] loop2: detected capacity change from 0 to 128 [ 556.796223][T18316] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 556.835764][T18316] fscrypt: loop2: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 556.876464][T13391] EXT4-fs (loop2): unmounting filesystem. [ 557.041474][T18344] loop9: detected capacity change from 0 to 128 [ 557.118570][T17130] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 557.122494][T17130] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 557.237274][T15068] EXT4-fs (loop4): unmounting filesystem. [ 558.313282][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 558.317701][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 558.319751][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.321732][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.323536][ T4332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 558.326626][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.456100][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3698'. [ 558.555556][ T7454] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.645443][ T7454] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.724650][ T7454] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.728947][T18392] chnl_net:caif_netlink_parms(): no params data found [ 558.756349][T18392] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.757768][T18392] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.759397][T18392] device bridge_slave_0 entered promiscuous mode [ 558.761559][T18392] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.762899][T18392] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.764568][T18392] device bridge_slave_1 entered promiscuous mode [ 558.804160][ T7454] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.823932][T18392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.826838][T18392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.836188][T18392] team0: Port device team_slave_0 added [ 558.840040][T18392] team0: Port device team_slave_1 added [ 558.846586][T18392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.847822][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.852823][T18392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.855326][T18392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.856594][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.861271][T18392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.903828][T18392] device hsr_slave_0 entered promiscuous mode [ 558.932285][T18392] device hsr_slave_1 entered promiscuous mode [ 558.962032][T18392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.963449][T18392] Cannot create hsr debugfs directory [ 559.561962][T18465] loop2: detected capacity change from 0 to 2048 [ 560.197046][T18465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 560.497171][T18465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.499868][T18465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.558065][T13386] Bluetooth: hci2: command 0x0409 tx timeout [ 560.625049][T18473] vivid-000: disconnect [ 560.646213][T18472] vivid-000: reconnect [ 560.878052][T18458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3709'. [ 560.880390][T18464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3709'. [ 562.206817][T18392] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 562.240615][T13391] EXT4-fs (loop2): unmounting filesystem. [ 562.313370][T18392] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 562.373254][T18392] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 562.764545][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 562.786320][T18392] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 563.084341][T18392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.093198][T18392] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.094748][T17532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 563.096614][T17532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 563.100086][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 563.103034][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 563.106152][T18468] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.107703][T18468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.111346][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 563.256645][ T3901] kernel write not supported for file /input/mice (pid: 3901 comm: kworker/1:3) [ 563.412892][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 563.415021][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 563.416861][T18468] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.418356][T18468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.425516][T18471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 563.444335][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 563.524277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 563.527979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 563.532317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 563.551871][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 563.555525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 564.232521][ T7454] device hsr_slave_0 left promiscuous mode [ 564.265423][ T7454] device hsr_slave_1 left promiscuous mode [ 564.384957][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.386483][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.388157][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.389704][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.391284][ T7454] device bridge_slave_1 left promiscuous mode [ 564.394686][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.435947][ T7454] device bridge_slave_0 left promiscuous mode [ 564.437367][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.565751][ T7454] device veth1_macvtap left promiscuous mode [ 564.566954][ T7454] device veth0_macvtap left promiscuous mode [ 564.568173][ T7454] device veth1_vlan left promiscuous mode [ 564.569308][ T7454] device veth0_vlan left promiscuous mode [ 564.833736][T13386] Bluetooth: hci2: command 0x040f tx timeout [ 564.995112][T18617] FAULT_INJECTION: forcing a failure. [ 564.995112][T18617] name failslab, interval 1, probability 0, space 0, times 0 [ 564.997931][T18617] CPU: 0 PID: 18617 Comm: syz.2.3743 Not tainted syzkaller #0 [ 564.999374][T18617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 565.001439][T18617] Call trace: [ 565.002088][T18617] dump_backtrace+0x1c4/0x1f0 [ 565.003044][T18617] show_stack+0x2c/0x3c [ 565.003817][T18617] __dump_stack+0x30/0x40 [ 565.004637][T18617] dump_stack_lvl+0xf4/0x15c [ 565.005539][T18617] dump_stack+0x1c/0x5c [ 565.006342][T18617] should_fail_ex+0x3cc/0x524 [ 565.007259][T18617] __should_failslab+0xc0/0x11c [ 565.008250][T18617] should_failslab+0x10/0x28 [ 565.009122][T18617] slab_pre_alloc_hook+0x6c/0x31c [ 565.010085][T18617] kmem_cache_alloc_lru+0x60/0x284 [ 565.011055][T18617] new_inode_pseudo+0xdc/0x1cc [ 565.011944][T18617] alloc_anon_inode+0x28/0x2c4 [ 565.012843][T18617] __anon_inode_getfile+0x138/0x300 [ 565.013885][T18617] anon_inode_getfile_secure+0x4c/0x64 [ 565.014944][T18617] io_uring_create+0x728/0xb34 [ 565.015849][T18617] __arm64_sys_io_uring_setup+0x2a4/0x2e8 [ 565.016998][T18617] invoke_syscall+0x98/0x290 [ 565.017872][T18617] el0_svc_common+0x13c/0x258 [ 565.018728][T18617] do_el0_svc+0x5c/0x134 [ 565.019509][T18617] el0_svc+0x58/0x128 [ 565.020249][T18617] el0t_64_sync_handler+0x84/0xf0 [ 565.021218][T18617] el0t_64_sync+0x18c/0x190 [ 565.022068][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.564710][T18626] loop2: detected capacity change from 0 to 128 [ 565.596120][T18626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 565.607508][T18626] EXT4-fs (loop2): shut down requested (2) [ 565.615081][T18626] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 565.679342][T18626] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 565.715564][T13391] EXT4-fs (loop2): unmounting filesystem. [ 565.912454][T18633] loop2: detected capacity change from 0 to 1024 [ 565.918282][T18633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 565.959462][T18633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 566.909299][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 567.144004][ T7454] team0 (unregistering): Port device team_slave_1 removed [ 567.319785][ T7454] team0 (unregistering): Port device team_slave_0 removed [ 567.500376][ T7454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.697558][ T7454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.148743][ T7454] bond0 (unregistering): Released all slaves [ 569.466599][T18392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 569.468416][T18392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.472184][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 569.474822][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.481665][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.487781][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.489763][T18619] bridge0: port 3(syz_tun) entered blocking state [ 569.491080][T18619] bridge0: port 3(syz_tun) entered disabled state [ 569.492697][T18619] device syz_tun entered promiscuous mode [ 569.502407][T18619] bridge0: port 3(syz_tun) entered blocking state [ 569.503714][T18619] bridge0: port 3(syz_tun) entered forwarding state [ 569.519051][T18468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 569.607852][T12968] kernel write not supported for file /input/mice (pid: 12968 comm: kworker/0:8) [ 569.689460][T13391] EXT4-fs (loop2): unmounting filesystem. [ 570.023068][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 570.024760][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.135511][T18392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.516749][T18685] loop5: detected capacity change from 0 to 128 [ 570.545084][T18685] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 570.597649][T18685] EXT4-fs (loop5): shut down requested (2) [ 570.599100][T18685] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 570.679695][T18685] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 570.717997][T17096] EXT4-fs (loop5): unmounting filesystem. [ 570.818928][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 570.824100][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.886020][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 570.888115][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.890399][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.944136][T18713] 9pnet_fd: Insufficient options for proto=fd [ 570.952627][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.956391][T18392] device veth0_vlan entered promiscuous mode [ 570.978343][T18392] device veth1_vlan entered promiscuous mode [ 571.051147][T18723] loop4: detected capacity change from 0 to 128 [ 571.055712][T18723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 571.062330][T18723] EXT4-fs (loop4): shut down requested (2) [ 571.063564][T18723] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 571.127288][T18731] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 571.427540][T15068] EXT4-fs (loop4): unmounting filesystem. [ 571.613567][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 571.615491][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 571.740008][T18392] device veth0_macvtap entered promiscuous mode [ 571.742556][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.753002][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.763508][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 571.771774][T18392] device veth1_macvtap entered promiscuous mode [ 572.180556][T18774] 9pnet_fd: Insufficient options for proto=fd [ 572.201939][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.224354][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.226110][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.232336][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.234159][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.236669][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.248179][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.268770][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.272630][T18783] loop5: detected capacity change from 0 to 128 [ 572.280585][T18392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.287149][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 572.297819][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.298408][T18783] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 572.304085][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.335057][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.337030][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.339829][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.341733][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.343479][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.345368][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.347002][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.348903][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.351875][T18392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.353179][T17096] EXT4-fs (loop5): unmounting filesystem. [ 572.361384][T18471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.365805][T18471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.396678][T18392] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.406575][T18392] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.408200][T18392] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.421252][T18392] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.868800][T18817] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 573.179305][T18813] 9pnet_fd: Insufficient options for proto=fd [ 573.258602][T18822] loop4: detected capacity change from 0 to 128 [ 573.271969][T18824] loop0: detected capacity change from 0 to 256 [ 573.283473][T18822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 573.287606][T17532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.290306][T17532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.313661][T18133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 573.361492][T17532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.363158][T17532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.364847][T17532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 573.463586][T15068] EXT4-fs (loop4): unmounting filesystem. [ 573.527755][T18842] fuse: Bad value for 'fd' [ 573.534053][ T27] audit: type=1326 audit(524861.981:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18843 comm="syz.0.3798" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x0 [ 573.634487][T18858] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 574.055847][ T27] audit: type=1326 audit(524862.502:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.061836][ T27] audit: type=1326 audit(524862.512:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.078650][ T27] audit: type=1326 audit(524862.522:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.092293][ T27] audit: type=1326 audit(524862.522:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.111233][ T27] audit: type=1326 audit(524862.522:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.118146][ T27] audit: type=1326 audit(524862.522:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.123193][ T27] audit: type=1326 audit(524862.522:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.129099][ T27] audit: type=1326 audit(524862.522:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.134014][ T27] audit: type=1326 audit(524862.522:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.5.3807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff98579368 code=0x7ffc0000 [ 574.164785][T18886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.253915][T18891] fuse: Bad value for 'fd' [ 574.763538][T18925] Injecting memory failure for pfn 0x1513d6 at process virtual address 0x20000000 [ 574.767828][T18929] loop8: detected capacity change from 0 to 128 [ 574.785761][T18929] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 574.788105][T18925] Memory failure: 0x1513d6: recovery action for dirty LRU page: Recovered [ 574.789859][T18925] Injecting memory failure for pfn 0x210db1 at process virtual address 0x20001000 [ 574.827804][T18925] Memory failure: 0x210db1: recovery action for reserved kernel page: Ignored [ 574.840284][T18392] EXT4-fs (loop8): unmounting filesystem. [ 575.850371][T18979] loop8: detected capacity change from 0 to 128 [ 575.878185][T18979] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 575.882444][T18982] loop2: detected capacity change from 0 to 2048 [ 575.950978][T18392] EXT4-fs (loop8): unmounting filesystem. [ 576.158023][T18982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 576.532213][T13391] EXT4-fs (loop2): unmounting filesystem. [ 576.666077][T19029] loop0: detected capacity change from 0 to 128 [ 576.685119][T19029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 576.848355][T19050] loop8: detected capacity change from 0 to 2048 [ 577.096599][T17009] EXT4-fs (loop0): unmounting filesystem. [ 577.103549][T19050] loop8: p1 p2 p3 p4 [ 577.103549][T19050] p1: [ 577.105197][T19050] loop8: p1 size 67110656 extends beyond EOD, truncated [ 577.107211][T19050] loop8: p3 size 134217728 extends beyond EOD, truncated [ 577.108610][T19050] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 577.110387][T19050] loop8: p5 size 67110656 extends beyond EOD, truncated [ 577.112180][T19050] loop8: p6 size 134217728 extends beyond EOD, truncated [ 577.234676][T19070] loop0: detected capacity change from 0 to 128 [ 577.246815][T19070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 577.257480][T19072] Injecting memory failure for pfn 0x15447e at process virtual address 0x20000000 [ 577.712797][T19072] Memory failure: 0x15447e: Sending SIGBUS to syz.5.3861:19063 due to hardware memory corruption [ 577.768712][T19072] Memory failure: 0x15447e: recovery action for dirty LRU page: Recovered [ 577.832481][T19087] loop4: detected capacity change from 0 to 128 [ 577.846775][T19087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 577.850987][T19092] FAULT_INJECTION: forcing a failure. [ 577.850987][T19092] name failslab, interval 1, probability 0, space 0, times 0 [ 577.874791][T19092] CPU: 0 PID: 19092 Comm: syz.5.3867 Not tainted syzkaller #0 [ 577.876168][T19092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 577.878085][T19092] Call trace: [ 577.878743][T19092] dump_backtrace+0x1c4/0x1f0 [ 577.879644][T19092] show_stack+0x2c/0x3c [ 577.880470][T19092] __dump_stack+0x30/0x40 [ 577.881320][T19092] dump_stack_lvl+0xf4/0x15c [ 577.882210][T19092] dump_stack+0x1c/0x5c [ 577.883041][T19092] should_fail_ex+0x3cc/0x524 [ 577.883993][T19092] __should_failslab+0xc0/0x11c [ 577.884972][T19092] should_failslab+0x10/0x28 [ 577.885887][T19092] slab_pre_alloc_hook+0x6c/0x31c [ 577.886900][T19092] kmem_cache_alloc_lru+0x60/0x284 [ 577.887934][T19092] sock_alloc_inode+0x2c/0xcc [ 577.888881][T19092] new_inode_pseudo+0x68/0x1cc [ 577.889760][T19092] __sock_create+0x138/0x8a8 [ 577.890590][T19092] p9_fd_create_unix+0x174/0x3a4 [ 577.891496][T19092] p9_client_create+0x6c0/0xdd8 [ 577.892378][T19092] v9fs_session_init+0x180/0x146c [ 577.893305][T19092] v9fs_mount+0xd4/0x9e8 [ 577.894110][T19092] legacy_get_tree+0xd8/0x174 [ 577.895060][T19092] vfs_get_tree+0x90/0x278 [ 577.895937][T19092] do_new_mount+0x228/0x804 [ 577.896810][T19092] path_mount+0x5ac/0xe6c [ 577.897628][T19092] __arm64_sys_mount+0x4a0/0x5a0 [ 577.898629][T19092] invoke_syscall+0x98/0x290 [ 577.899513][T19092] el0_svc_common+0x13c/0x258 [ 577.900396][T19092] do_el0_svc+0x5c/0x134 [ 577.901260][T19092] el0_svc+0x58/0x128 [ 577.902075][T19092] el0t_64_sync_handler+0x84/0xf0 [ 577.903041][T19092] el0t_64_sync+0x18c/0x190 [ 577.971248][T19092] socket: no more sockets [ 577.972240][T19092] 9pnet_fd: p9_fd_create_unix (19092): problem creating socket [ 577.975133][T15068] EXT4-fs (loop4): unmounting filesystem. [ 578.116075][T17009] EXT4-fs (loop0): unmounting filesystem. [ 579.846610][T19145] Injecting memory failure for pfn 0x155cb5 at process virtual address 0x20000000 [ 579.849855][T19145] Memory failure: 0x155cb5: Sending SIGBUS to syz.0.3877:19143 due to hardware memory corruption [ 579.853027][T19145] Memory failure: 0x155cb5: recovery action for dirty LRU page: Recovered [ 579.854832][T19145] Injecting memory failure for pfn 0x210db1 at process virtual address 0x20001000 [ 579.871443][T19145] Memory failure: 0x210db1: already hardware poisoned [ 580.156192][T19162] loop2: detected capacity change from 0 to 128 [ 580.180522][T19162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 580.310853][T13391] EXT4-fs (loop2): unmounting filesystem. [ 580.619168][T19184] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3884'. [ 580.637480][T19184] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3884'. [ 580.681899][T19186] loop5: detected capacity change from 0 to 256 [ 580.738733][T19190] loop4: detected capacity change from 0 to 128 [ 580.771159][T19190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 581.083808][T15068] EXT4-fs (loop4): unmounting filesystem. [ 581.696747][T19231] loop2: detected capacity change from 0 to 128 [ 581.716892][T19231] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 581.755808][T13391] EXT4-fs (loop2): unmounting filesystem. [ 581.907911][T19239] 9pnet_fd: p9_fd_create_unix (19239): problem connecting socket: ./proc: -111 [ 582.020389][ T24] kernel write not supported for file /input/mice (pid: 24 comm: kworker/1:1) [ 582.022549][ T27] audit: type=1326 audit(524870.481:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19246 comm="syz.8.3901" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f79368 code=0x7ffc0000 [ 582.042352][ T27] audit: type=1326 audit(524870.501:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19246 comm="syz.8.3901" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa2f79368 code=0x7ffc0000 [ 582.047347][ T27] audit: type=1326 audit(524870.501:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19246 comm="syz.8.3901" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f79368 code=0x7ffc0000 [ 582.053668][T19249] Injecting memory failure for pfn 0x14d6ae at process virtual address 0x20000000 [ 582.055864][T19249] Memory failure: 0x14d6ae: Sending SIGBUS to syz.2.3899:19245 due to hardware memory corruption [ 582.094757][T19249] Memory failure: 0x14d6ae: recovery action for dirty LRU page: Recovered [ 582.096410][T19249] Injecting memory failure for pfn 0x210db1 at process virtual address 0x20001000 [ 582.116188][T19249] Memory failure: 0x210db1: already hardware poisoned [ 582.233712][T19259] loop0: detected capacity change from 0 to 128 [ 582.254484][T19258] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3905'. [ 582.256290][T19258] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3905'. [ 582.268180][T19259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 582.344390][T17009] EXT4-fs (loop0): unmounting filesystem. [ 582.363722][T19264] bridge0: port 3(syz_tun) entered blocking state [ 582.364973][T19264] bridge0: port 3(syz_tun) entered disabled state [ 582.375875][T19264] device syz_tun entered promiscuous mode [ 582.377656][T19264] bridge0: port 3(syz_tun) entered blocking state [ 582.378927][T19264] bridge0: port 3(syz_tun) entered forwarding state [ 582.408415][T19264] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 582.440923][ T3939] loop8: p1 p2 p3 p4 [ 582.440923][ T3939] p1: [ 582.442404][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 582.453855][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 582.461293][T19271] loop0: detected capacity change from 0 to 128 [ 582.463330][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 582.467478][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 582.470216][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 582.473113][T19271] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 582.479559][T19274] FAULT_INJECTION: forcing a failure. [ 582.479559][T19274] name failslab, interval 1, probability 0, space 0, times 0 [ 582.495497][T17009] EXT4-fs (loop0): unmounting filesystem. [ 582.497904][T19274] CPU: 1 PID: 19274 Comm: syz.4.3911 Not tainted syzkaller #0 [ 582.499277][T19274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 582.501320][T19274] Call trace: [ 582.502008][T19274] dump_backtrace+0x1c4/0x1f0 [ 582.502973][T19274] show_stack+0x2c/0x3c [ 582.503799][T19274] __dump_stack+0x30/0x40 [ 582.504662][T19274] dump_stack_lvl+0xf4/0x15c [ 582.505570][T19274] dump_stack+0x1c/0x5c [ 582.506392][T19274] should_fail_ex+0x3cc/0x524 [ 582.507320][T19274] __should_failslab+0xc0/0x11c [ 582.508278][T19274] should_failslab+0x10/0x28 [ 582.509190][T19274] kmem_cache_alloc+0x88/0x310 [ 582.510122][T19274] security_inode_alloc+0x38/0x11c [ 582.511107][T19274] inode_init_always+0x6c8/0xb28 [ 582.512065][T19274] new_inode_pseudo+0x7c/0x1cc [ 582.512993][T19274] __sock_create+0x138/0x8a8 [ 582.513889][T19274] p9_fd_create_unix+0x174/0x3a4 [ 582.514859][T19274] p9_client_create+0x6c0/0xdd8 [ 582.515776][T19274] v9fs_session_init+0x180/0x146c [ 582.516768][T19274] v9fs_mount+0xd4/0x9e8 [ 582.517536][T19274] legacy_get_tree+0xd8/0x174 [ 582.518381][T19274] vfs_get_tree+0x90/0x278 [ 582.519179][T19274] do_new_mount+0x228/0x804 [ 582.519995][T19274] path_mount+0x5ac/0xe6c [ 582.520790][T19274] __arm64_sys_mount+0x4a0/0x5a0 [ 582.521901][T19274] invoke_syscall+0x98/0x290 [ 582.522943][T19274] el0_svc_common+0x13c/0x258 [ 582.523995][T19274] do_el0_svc+0x5c/0x134 [ 582.524912][T19274] el0_svc+0x58/0x128 [ 582.525743][T19274] el0t_64_sync_handler+0x84/0xf0 [ 582.526683][T19274] el0t_64_sync+0x18c/0x190 [ 582.527608][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.568227][ T3939] loop8: p1 p2 p3 p4 [ 582.568227][ T3939] p1: [ 582.572290][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 582.576177][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 582.584510][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 582.588712][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 582.591539][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 582.646740][T19274] socket: no more sockets [ 582.647576][T19274] 9pnet_fd: p9_fd_create_unix (19274): problem creating socket [ 583.057830][T19296] loop4: detected capacity change from 0 to 128 [ 583.093840][T19296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 583.188676][ T1517] kernel write not supported for file /input/mice (pid: 1517 comm: kworker/0:2) [ 583.229897][T15068] EXT4-fs (loop4): unmounting filesystem. [ 583.278232][T19309] FAULT_INJECTION: forcing a failure. [ 583.278232][T19309] name failslab, interval 1, probability 0, space 0, times 0 [ 583.286191][T19309] CPU: 1 PID: 19309 Comm: syz.4.3917 Not tainted syzkaller #0 [ 583.287634][T19309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 583.289843][T19309] Call trace: [ 583.290481][T19309] dump_backtrace+0x1c4/0x1f0 [ 583.291456][T19309] show_stack+0x2c/0x3c [ 583.292351][T19309] __dump_stack+0x30/0x40 [ 583.293281][T19309] dump_stack_lvl+0xf4/0x15c [ 583.294271][T19309] dump_stack+0x1c/0x5c [ 583.295207][T19309] should_fail_ex+0x3cc/0x524 [ 583.296163][T19309] __should_failslab+0xc0/0x11c [ 583.297187][T19309] should_failslab+0x10/0x28 [ 583.298143][T19309] __kmem_cache_alloc_node+0x7c/0x318 [ 583.299297][T19309] __kmalloc+0xc4/0x180 [ 583.300195][T19309] security_sk_alloc+0x54/0x140 [ 583.301159][T19309] sk_prot_alloc+0xe0/0x1e8 [ 583.302077][T19309] sk_alloc+0x44/0x3a0 [ 583.302901][T19309] unix_create1+0xd0/0x750 [ 583.303798][T19309] unix_create+0x148/0x1f4 [ 583.304667][T19309] __sock_create+0x448/0x8a8 [ 583.305578][T19309] p9_fd_create_unix+0x174/0x3a4 [ 583.306567][T19309] p9_client_create+0x6c0/0xdd8 [ 583.307517][T19309] v9fs_session_init+0x180/0x146c [ 583.308523][T19309] v9fs_mount+0xd4/0x9e8 [ 583.309330][T19309] legacy_get_tree+0xd8/0x174 [ 583.310222][T19309] vfs_get_tree+0x90/0x278 [ 583.311056][T19309] do_new_mount+0x228/0x804 [ 583.311892][T19309] path_mount+0x5ac/0xe6c [ 583.312701][T19309] __arm64_sys_mount+0x4a0/0x5a0 [ 583.313630][T19309] invoke_syscall+0x98/0x290 [ 583.314525][T19309] el0_svc_common+0x13c/0x258 [ 583.315398][T19309] do_el0_svc+0x5c/0x134 [ 583.316170][T19309] el0_svc+0x58/0x128 [ 583.316989][T19309] el0t_64_sync_handler+0x84/0xf0 [ 583.318014][T19309] el0t_64_sync+0x18c/0x190 [ 583.318918][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.418532][T19309] 9pnet_fd: p9_fd_create_unix (19309): problem creating socket [ 583.552274][T19318] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3920'. [ 583.554177][T19318] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3920'. [ 583.581577][T19326] loop4: detected capacity change from 0 to 128 [ 583.661213][T19326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 584.641694][T15068] EXT4-fs (loop4): unmounting filesystem. [ 584.663465][T19341] loop2: detected capacity change from 0 to 128 [ 584.713544][T19341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 584.744748][T19341] EXT4-fs (loop2): shut down requested (2) [ 584.768421][T19341] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 584.822450][ T4376] kernel write not supported for file /input/mice (pid: 4376 comm: kworker/1:6) [ 584.866959][T19349] FAULT_INJECTION: forcing a failure. [ 584.866959][T19349] name failslab, interval 1, probability 0, space 0, times 0 [ 584.887378][T13391] EXT4-fs (loop2): unmounting filesystem. [ 584.918471][T19349] CPU: 1 PID: 19349 Comm: syz.4.3927 Not tainted syzkaller #0 [ 584.920065][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 584.922236][T19349] Call trace: [ 584.922881][T19349] dump_backtrace+0x1c4/0x1f0 [ 584.923823][T19349] show_stack+0x2c/0x3c [ 584.924738][T19349] __dump_stack+0x30/0x40 [ 584.925603][T19349] dump_stack_lvl+0xf4/0x15c [ 584.926586][T19349] dump_stack+0x1c/0x5c [ 584.927447][T19349] should_fail_ex+0x3cc/0x524 [ 584.928429][T19349] __should_failslab+0xc0/0x11c [ 584.929457][T19349] should_failslab+0x10/0x28 [ 584.930360][T19349] __kmem_cache_alloc_node+0x7c/0x318 [ 584.931431][T19349] __kmalloc+0xc4/0x180 [ 584.932281][T19349] security_sk_alloc+0x54/0x140 [ 584.933247][T19349] sk_prot_alloc+0xe0/0x1e8 [ 584.934167][T19349] sk_alloc+0x44/0x3a0 [ 584.934978][T19349] unix_create1+0xd0/0x750 [ 584.935873][T19349] unix_create+0x148/0x1f4 [ 584.936728][T19349] __sock_create+0x448/0x8a8 [ 584.937613][T19349] p9_fd_create_unix+0x174/0x3a4 [ 584.938576][T19349] p9_client_create+0x6c0/0xdd8 [ 584.939569][T19349] v9fs_session_init+0x180/0x146c [ 584.940597][T19349] v9fs_mount+0xd4/0x9e8 [ 584.941473][T19349] legacy_get_tree+0xd8/0x174 [ 584.942420][T19349] vfs_get_tree+0x90/0x278 [ 584.943321][T19349] do_new_mount+0x228/0x804 [ 584.944247][T19349] path_mount+0x5ac/0xe6c [ 584.945097][T19349] __arm64_sys_mount+0x4a0/0x5a0 [ 584.946095][T19349] invoke_syscall+0x98/0x290 [ 584.946992][T19349] el0_svc_common+0x13c/0x258 [ 584.947883][T19349] do_el0_svc+0x5c/0x134 [ 584.948732][T19349] el0_svc+0x58/0x128 [ 584.949545][T19349] el0t_64_sync_handler+0x84/0xf0 [ 584.950522][T19349] el0t_64_sync+0x18c/0x190 [ 584.951417][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.959367][T19353] FAULT_INJECTION: forcing a failure. [ 584.959367][T19353] name failslab, interval 1, probability 0, space 0, times 0 [ 584.962679][T19353] CPU: 0 PID: 19353 Comm: syz.2.3931 Not tainted syzkaller #0 [ 584.963945][T19353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 584.965855][T19353] Call trace: [ 584.966506][T19353] dump_backtrace+0x1c4/0x1f0 [ 584.967397][T19353] show_stack+0x2c/0x3c [ 584.968437][T19353] __dump_stack+0x30/0x40 [ 584.969285][T19353] dump_stack_lvl+0xf4/0x15c [ 584.970182][T19353] dump_stack+0x1c/0x5c [ 584.971018][T19353] should_fail_ex+0x3cc/0x524 [ 584.971914][T19353] __should_failslab+0xc0/0x11c [ 584.972823][T19353] should_failslab+0x10/0x28 [ 584.973751][T19353] __kmem_cache_alloc_node+0x7c/0x318 [ 584.974979][T19353] __kmalloc+0xc4/0x180 [ 584.975848][T19353] security_sk_alloc+0x54/0x140 [ 584.976880][T19353] sk_prot_alloc+0xe0/0x1e8 [ 584.977812][T19353] sk_alloc+0x44/0x3a0 [ 584.978726][T19353] unix_create1+0xd0/0x750 [ 584.979580][T19353] unix_stream_connect+0x1b4/0xb80 [ 584.980668][T19353] p9_fd_create_unix+0x1d8/0x3a4 [ 584.981677][T19353] p9_client_create+0x6c0/0xdd8 [ 584.982603][T19353] v9fs_session_init+0x180/0x146c [ 584.983564][T19353] v9fs_mount+0xd4/0x9e8 [ 584.984505][T19353] legacy_get_tree+0xd8/0x174 [ 584.985468][T19353] vfs_get_tree+0x90/0x278 [ 584.986354][T19353] do_new_mount+0x228/0x804 [ 584.987214][T19353] path_mount+0x5ac/0xe6c [ 584.988057][T19353] __arm64_sys_mount+0x4a0/0x5a0 [ 584.989018][T19353] invoke_syscall+0x98/0x290 [ 584.989920][T19353] el0_svc_common+0x13c/0x258 [ 584.990796][T19353] do_el0_svc+0x5c/0x134 [ 584.991637][T19353] el0_svc+0x58/0x128 [ 584.992476][T19353] el0t_64_sync_handler+0x84/0xf0 [ 584.993521][T19353] el0t_64_sync+0x18c/0x190 [ 584.996030][T19353] 9pnet_fd: p9_fd_create_unix (19353): problem connecting socket: ./proc: -12 [ 585.017207][T19349] 9pnet_fd: p9_fd_create_unix (19349): problem creating socket [ 585.151199][T19362] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 585.260707][T19368] loop0: detected capacity change from 0 to 128 [ 585.282992][T19368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 585.645697][T17009] EXT4-fs (loop0): unmounting filesystem. [ 585.697878][T19385] FAULT_INJECTION: forcing a failure. [ 585.697878][T19385] name failslab, interval 1, probability 0, space 0, times 0 [ 585.700535][T19385] CPU: 1 PID: 19385 Comm: syz.0.3938 Not tainted syzkaller #0 [ 585.701896][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 585.703895][T19385] Call trace: [ 585.704562][T19385] dump_backtrace+0x1c4/0x1f0 [ 585.705524][T19385] show_stack+0x2c/0x3c [ 585.706334][T19385] __dump_stack+0x30/0x40 [ 585.707221][T19385] dump_stack_lvl+0xf4/0x15c [ 585.708154][T19385] dump_stack+0x1c/0x5c [ 585.708974][T19385] should_fail_ex+0x3cc/0x524 [ 585.709890][T19385] __should_failslab+0xc0/0x11c [ 585.710850][T19385] should_failslab+0x10/0x28 [ 585.711745][T19385] kmem_cache_alloc+0x88/0x310 [ 585.712657][T19385] __kernfs_new_node+0xec/0x5fc [ 585.713597][T19385] kernfs_new_node+0x120/0x230 [ 585.714509][T19385] __kernfs_create_file+0x60/0x2e0 [ 585.715499][T19385] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 585.716498][T19385] internal_create_group+0x3e8/0xb24 [ 585.717524][T19385] sysfs_create_groups+0x60/0x134 [ 585.718472][T19385] kobject_add_internal+0x5e4/0xb18 [ 585.719438][T19385] kobject_init_and_add+0x128/0x194 [ 585.720431][T19385] net_rx_queue_update_kobjects+0x184/0x420 [ 585.721595][T19385] netdev_register_kobject+0x1fc/0x2f4 [ 585.722657][T19385] register_netdevice+0xf28/0x1650 [ 585.723649][T19385] bond_newlink+0x50/0xa0 [ 585.724595][T19385] rtnl_newlink+0x10b4/0x1af0 [ 585.725666][T19385] rtnetlink_rcv_msg+0x694/0xcc4 [ 585.726777][T19385] netlink_rcv_skb+0x220/0x3ec [ 585.727826][T19385] rtnetlink_rcv+0x28/0x38 [ 585.728667][T19385] netlink_unicast+0x5fc/0x80c [ 585.729567][T19385] netlink_sendmsg+0x6f0/0x9d8 [ 585.730522][T19385] ____sys_sendmsg+0x588/0x90c [ 585.731462][T19385] __sys_sendmsg+0x288/0x374 [ 585.732411][T19385] __arm64_sys_sendmsg+0x80/0x94 [ 585.733422][T19385] invoke_syscall+0x98/0x290 [ 585.734348][T19385] el0_svc_common+0x13c/0x258 [ 585.735308][T19385] do_el0_svc+0x5c/0x134 [ 585.736165][T19385] el0_svc+0x58/0x128 [ 585.736944][T19385] el0t_64_sync_handler+0x84/0xf0 [ 585.737922][T19385] el0t_64_sync+0x18c/0x190 [ 585.738817][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.754692][T19385] kobject_add_internal failed for rx-12 (error: -12 parent: queues) [ 585.758059][T19385] bond1 (unregistered): Released all slaves [ 585.961286][T19398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3941'. [ 585.964336][T19398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3941'. [ 586.004247][T13386] Bluetooth: hci1: command 0x0406 tx timeout [ 586.057269][T19406] 9pnet_fd: Insufficient options for proto=fd [ 586.098311][T19408] FAULT_INJECTION: forcing a failure. [ 586.098311][T19408] name failslab, interval 1, probability 0, space 0, times 0 [ 586.100618][T19408] CPU: 0 PID: 19408 Comm: syz.0.3943 Not tainted syzkaller #0 [ 586.101895][T19408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 586.103688][T19408] Call trace: [ 586.104333][T19408] dump_backtrace+0x1c4/0x1f0 [ 586.105319][T19408] show_stack+0x2c/0x3c [ 586.106192][T19408] __dump_stack+0x30/0x40 [ 586.107106][T19408] dump_stack_lvl+0xf4/0x15c [ 586.108075][T19408] dump_stack+0x1c/0x5c [ 586.108952][T19408] should_fail_ex+0x3cc/0x524 [ 586.109943][T19408] __should_failslab+0xc0/0x11c [ 586.110919][T19408] should_failslab+0x10/0x28 [ 586.111816][T19408] __kmem_cache_alloc_node+0x7c/0x318 [ 586.112904][T19408] __kmalloc+0xc4/0x180 [ 586.113688][T19408] security_sk_alloc+0x54/0x140 [ 586.114652][T19408] sk_prot_alloc+0xe0/0x1e8 [ 586.115572][T19408] sk_alloc+0x44/0x3a0 [ 586.116395][T19408] unix_create1+0xd0/0x750 [ 586.117218][T19408] unix_create+0x148/0x1f4 [ 586.118190][T19408] __sock_create+0x448/0x8a8 [ 586.119140][T19408] p9_fd_create_unix+0x174/0x3a4 [ 586.120151][T19408] p9_client_create+0x6c0/0xdd8 [ 586.121152][T19408] v9fs_session_init+0x180/0x146c [ 586.122231][T19408] v9fs_mount+0xd4/0x9e8 [ 586.123097][T19408] legacy_get_tree+0xd8/0x174 [ 586.124063][T19408] vfs_get_tree+0x90/0x278 [ 586.124943][T19408] do_new_mount+0x228/0x804 [ 586.125865][T19408] path_mount+0x5ac/0xe6c [ 586.126718][T19408] __arm64_sys_mount+0x4a0/0x5a0 [ 586.127736][T19408] invoke_syscall+0x98/0x290 [ 586.128655][T19408] el0_svc_common+0x13c/0x258 [ 586.129617][T19408] do_el0_svc+0x5c/0x134 [ 586.130460][T19408] el0_svc+0x58/0x128 [ 586.131262][T19408] el0t_64_sync_handler+0x84/0xf0 [ 586.132255][T19408] el0t_64_sync+0x18c/0x190 [ 586.197059][T19417] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 586.214300][T19408] 9pnet_fd: p9_fd_create_unix (19408): problem creating socket [ 586.241402][T19420] loop2: detected capacity change from 0 to 128 [ 586.265836][T19420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 586.337925][T19427] loop0: detected capacity change from 0 to 256 [ 586.368056][T13391] EXT4-fs (loop2): unmounting filesystem. [ 586.442144][T19431] FAULT_INJECTION: forcing a failure. [ 586.442144][T19431] name failslab, interval 1, probability 0, space 0, times 0 [ 586.465436][T19431] CPU: 0 PID: 19431 Comm: syz.2.3952 Not tainted syzkaller #0 [ 586.466722][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 586.468712][T19431] Call trace: [ 586.469322][T19431] dump_backtrace+0x1c4/0x1f0 [ 586.470228][T19431] show_stack+0x2c/0x3c [ 586.471014][T19431] __dump_stack+0x30/0x40 [ 586.471798][T19431] dump_stack_lvl+0xf4/0x15c [ 586.472656][T19431] dump_stack+0x1c/0x5c [ 586.473346][T19431] should_fail_ex+0x3cc/0x524 [ 586.474222][T19431] __should_failslab+0xc0/0x11c [ 586.475235][T19431] should_failslab+0x10/0x28 [ 586.476169][T19431] kmem_cache_alloc+0x88/0x310 [ 586.477145][T19431] __kernfs_new_node+0xec/0x5fc [ 586.478114][T19431] kernfs_new_node+0x120/0x230 [ 586.479049][T19431] __kernfs_create_file+0x60/0x2e0 [ 586.480030][T19431] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 586.481100][T19431] internal_create_group+0x3e8/0xb24 [ 586.482148][T19431] sysfs_create_groups+0x60/0x134 [ 586.483253][T19431] kobject_add_internal+0x5e4/0xb18 [ 586.484386][T19431] kobject_init_and_add+0x128/0x194 [ 586.485392][T19431] net_rx_queue_update_kobjects+0x184/0x420 [ 586.486538][T19431] netdev_register_kobject+0x1fc/0x2f4 [ 586.487679][T19431] register_netdevice+0xf28/0x1650 [ 586.488745][T19431] bond_newlink+0x50/0xa0 [ 586.489636][T19431] rtnl_newlink+0x10b4/0x1af0 [ 586.490603][T19431] rtnetlink_rcv_msg+0x694/0xcc4 [ 586.491576][T19431] netlink_rcv_skb+0x220/0x3ec [ 586.492549][T19431] rtnetlink_rcv+0x28/0x38 [ 586.493420][T19431] netlink_unicast+0x5fc/0x80c [ 586.494345][T19431] netlink_sendmsg+0x6f0/0x9d8 [ 586.495293][T19431] ____sys_sendmsg+0x588/0x90c [ 586.496257][T19431] __sys_sendmsg+0x288/0x374 [ 586.497155][T19431] __arm64_sys_sendmsg+0x80/0x94 [ 586.498118][T19431] invoke_syscall+0x98/0x290 [ 586.499032][T19431] el0_svc_common+0x13c/0x258 [ 586.499903][T19431] do_el0_svc+0x5c/0x134 [ 586.500704][T19431] el0_svc+0x58/0x128 [ 586.501481][T19431] el0t_64_sync_handler+0x84/0xf0 [ 586.502475][T19431] el0t_64_sync+0x18c/0x190 [ 586.544924][T19431] kobject_add_internal failed for rx-12 (error: -12 parent: queues) [ 586.547812][T19431] bond1 (unregistered): Released all slaves [ 586.583687][ T3939] loop8: p1 p2 p3 p4 [ 586.583687][ T3939] p1: [ 586.585857][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 586.589800][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 586.602998][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 586.615574][T15068] bridge0: port 3(syz_tun) entered disabled state [ 586.617243][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 586.620553][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 586.914365][T19447] 9pnet_fd: Insufficient options for proto=fd [ 586.945702][T15068] device syz_tun left promiscuous mode [ 586.946992][T15068] bridge0: port 3(syz_tun) entered disabled state [ 586.974435][ T3939] loop8: p1 p2 p3 p4 [ 586.974435][ T3939] p1: [ 586.976281][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 586.983322][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 586.989161][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 586.992080][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 587.003733][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 587.018402][T19458] FAULT_INJECTION: forcing a failure. [ 587.018402][T19458] name failslab, interval 1, probability 0, space 0, times 0 [ 587.020602][T19458] CPU: 1 PID: 19458 Comm: syz.0.3961 Not tainted syzkaller #0 [ 587.021859][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 587.023603][T19458] Call trace: [ 587.024222][T19458] dump_backtrace+0x1c4/0x1f0 [ 587.025036][T19458] show_stack+0x2c/0x3c [ 587.025765][T19458] __dump_stack+0x30/0x40 [ 587.026582][T19458] dump_stack_lvl+0xf4/0x15c [ 587.027426][T19458] dump_stack+0x1c/0x5c [ 587.028194][T19458] should_fail_ex+0x3cc/0x524 [ 587.029070][T19458] __should_failslab+0xc0/0x11c [ 587.029990][T19458] should_failslab+0x10/0x28 [ 587.030881][T19458] kmem_cache_alloc_node+0x8c/0x344 [ 587.031884][T19458] __alloc_skb+0x128/0x728 [ 587.032709][T19458] sock_wmalloc+0xac/0x130 [ 587.033542][T19458] unix_stream_connect+0x1e0/0xb80 [ 587.034471][T19458] p9_fd_create_unix+0x1d8/0x3a4 [ 587.035419][T19458] p9_client_create+0x6c0/0xdd8 [ 587.036397][T19458] v9fs_session_init+0x180/0x146c [ 587.037394][T19458] v9fs_mount+0xd4/0x9e8 [ 587.038222][T19458] legacy_get_tree+0xd8/0x174 [ 587.039156][T19458] vfs_get_tree+0x90/0x278 [ 587.040064][T19458] do_new_mount+0x228/0x804 [ 587.040989][T19458] path_mount+0x5ac/0xe6c [ 587.041817][T19458] __arm64_sys_mount+0x4a0/0x5a0 [ 587.042809][T19458] invoke_syscall+0x98/0x290 [ 587.043745][T19458] el0_svc_common+0x13c/0x258 [ 587.044692][T19458] do_el0_svc+0x5c/0x134 [ 587.045521][T19458] el0_svc+0x58/0x128 [ 587.046334][T19458] el0t_64_sync_handler+0x84/0xf0 [ 587.047378][T19458] el0t_64_sync+0x18c/0x190 [ 587.115421][T19458] 9pnet_fd: p9_fd_create_unix (19458): problem connecting socket: ./proc: -12 [ 587.580586][T19472] loop5: detected capacity change from 0 to 128 [ 587.596827][T19472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 587.689001][T17096] EXT4-fs (loop5): unmounting filesystem. [ 588.069377][T13386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.072098][T13386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.076348][T13386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.078882][T13386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.081406][T13386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 588.087849][T18598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.089733][T18598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.093427][T13386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.112648][ T3939] loop8: p1 p2 p3 p4 [ 588.112648][ T3939] p1: [ 588.121205][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 588.130120][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 588.140005][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 588.147618][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 588.156401][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 588.763815][T18598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.766203][T18598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.837985][T19550] FAULT_INJECTION: forcing a failure. [ 588.837985][T19550] name failslab, interval 1, probability 0, space 0, times 0 [ 588.840242][T19550] CPU: 1 PID: 19550 Comm: syz.2.3978 Not tainted syzkaller #0 [ 588.841683][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 588.843647][T19550] Call trace: [ 588.844314][T19550] dump_backtrace+0x1c4/0x1f0 [ 588.845276][T19550] show_stack+0x2c/0x3c [ 588.846108][T19550] __dump_stack+0x30/0x40 [ 588.846991][T19550] dump_stack_lvl+0xf4/0x15c [ 588.847910][T19550] dump_stack+0x1c/0x5c [ 588.848718][T19550] should_fail_ex+0x3cc/0x524 [ 588.849624][T19550] __should_failslab+0xc0/0x11c [ 588.850588][T19550] should_failslab+0x10/0x28 [ 588.851483][T19550] __kmem_cache_alloc_node+0x7c/0x318 [ 588.852509][T19550] __kmalloc+0xc4/0x180 [ 588.853313][T19550] security_sk_alloc+0x54/0x140 [ 588.854243][T19550] sk_prot_alloc+0xe0/0x1e8 [ 588.855090][T19550] sk_alloc+0x44/0x3a0 [ 588.855881][T19550] unix_create1+0xd0/0x750 [ 588.856703][T19550] unix_stream_connect+0x1b4/0xb80 [ 588.857657][T19550] p9_fd_create_unix+0x1d8/0x3a4 [ 588.858616][T19550] p9_client_create+0x6c0/0xdd8 [ 588.859534][T19550] v9fs_session_init+0x180/0x146c [ 588.860502][T19550] v9fs_mount+0xd4/0x9e8 [ 588.861314][T19550] legacy_get_tree+0xd8/0x174 [ 588.862185][T19550] vfs_get_tree+0x90/0x278 [ 588.863034][T19550] do_new_mount+0x228/0x804 [ 588.863883][T19550] path_mount+0x5ac/0xe6c [ 588.864687][T19550] __arm64_sys_mount+0x4a0/0x5a0 [ 588.865593][T19550] invoke_syscall+0x98/0x290 [ 588.866444][T19550] el0_svc_common+0x13c/0x258 [ 588.867378][T19550] do_el0_svc+0x5c/0x134 [ 588.868167][T19550] el0_svc+0x58/0x128 [ 588.868937][T19550] el0t_64_sync_handler+0x84/0xf0 [ 588.869914][T19550] el0t_64_sync+0x18c/0x190 [ 588.870870][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.958505][T19550] 9pnet_fd: p9_fd_create_unix (19550): problem connecting socket: ./proc: -12 [ 589.363655][T18598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.372115][T18598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.456444][T19571] loop0: detected capacity change from 0 to 128 [ 589.467763][T19571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 589.558387][T17009] EXT4-fs (loop0): unmounting filesystem. [ 589.567772][T18598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.569615][T18598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.599841][T19507] chnl_net:caif_netlink_parms(): no params data found [ 589.905945][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'. [ 590.105314][T19597] bridge0: port 3(syz_tun) entered blocking state [ 590.106589][T19597] bridge0: port 3(syz_tun) entered disabled state [ 590.115877][T19597] device syz_tun entered promiscuous mode [ 590.120066][T19597] bridge0: port 3(syz_tun) entered blocking state [ 590.121328][T19597] bridge0: port 3(syz_tun) entered forwarding state [ 590.173241][T13386] Bluetooth: hci1: command 0x0409 tx timeout [ 590.185089][T19597] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 590.244948][T19507] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.251257][T19507] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.258930][T19507] device bridge_slave_0 entered promiscuous mode [ 590.280216][T19507] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.287549][T19507] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.289239][T19507] device bridge_slave_1 entered promiscuous mode [ 590.373949][T19608] FAULT_INJECTION: forcing a failure. [ 590.373949][T19608] name failslab, interval 1, probability 0, space 0, times 0 [ 590.383425][T19608] CPU: 0 PID: 19608 Comm: syz.5.3997 Not tainted syzkaller #0 [ 590.384885][T19608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 590.386747][T19608] Call trace: [ 590.387350][T19608] dump_backtrace+0x1c4/0x1f0 [ 590.388258][T19608] show_stack+0x2c/0x3c [ 590.389071][T19608] __dump_stack+0x30/0x40 [ 590.389904][T19608] dump_stack_lvl+0xf4/0x15c [ 590.390815][T19608] dump_stack+0x1c/0x5c [ 590.391575][T19608] should_fail_ex+0x3cc/0x524 [ 590.392426][T19608] __should_failslab+0xc0/0x11c [ 590.393348][T19608] should_failslab+0x10/0x28 [ 590.394220][T19608] kmem_cache_alloc_node+0x8c/0x344 [ 590.395231][T19608] __alloc_skb+0x128/0x728 [ 590.396083][T19608] sock_wmalloc+0xac/0x130 [ 590.396975][T19608] unix_stream_connect+0x1e0/0xb80 [ 590.398021][T19608] p9_fd_create_unix+0x1d8/0x3a4 [ 590.398993][T19608] p9_client_create+0x6c0/0xdd8 [ 590.399973][T19608] v9fs_session_init+0x180/0x146c [ 590.401003][T19608] v9fs_mount+0xd4/0x9e8 [ 590.401868][T19608] legacy_get_tree+0xd8/0x174 [ 590.402797][T19608] vfs_get_tree+0x90/0x278 [ 590.403646][T19608] do_new_mount+0x228/0x804 [ 590.404516][T19608] path_mount+0x5ac/0xe6c [ 590.405309][T19608] __arm64_sys_mount+0x4a0/0x5a0 [ 590.406204][T19608] invoke_syscall+0x98/0x290 [ 590.407063][T19608] el0_svc_common+0x13c/0x258 [ 590.407936][T19608] do_el0_svc+0x5c/0x134 [ 590.408721][T19608] el0_svc+0x58/0x128 [ 590.409475][T19608] el0t_64_sync_handler+0x84/0xf0 [ 590.410421][T19608] el0t_64_sync+0x18c/0x190 [ 590.428776][ T3939] loop8: p1 p2 p3 p4 [ 590.428776][ T3939] p1: [ 590.430373][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 590.432301][T19507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.445640][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 590.447882][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 590.453664][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 590.453990][T19507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.457516][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 590.500194][T19608] 9pnet_fd: p9_fd_create_unix (19608): problem connecting socket: ./proc: -12 [ 590.510280][T18598] tipc: Disabling bearer [ 590.511694][T18598] tipc: Left network mode [ 590.524056][ T3939] loop8: p1 p2 p3 p4 [ 590.524056][ T3939] p1: [ 590.525625][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 590.526518][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 590.528982][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 590.567814][T19507] team0: Port device team_slave_0 added [ 590.578847][T19507] team0: Port device team_slave_1 added [ 590.596325][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 590.608655][T19507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.610171][T19507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.619232][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 590.626188][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 590.652454][T19507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.669142][T19507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.670411][T19507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.787202][T19507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.846619][ T3939] loop8: p1 p2 p3 p4 [ 590.846619][ T3939] p1: [ 590.851728][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 590.855764][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 590.864702][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 590.940579][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 590.945310][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 590.981264][T19640] FAULT_INJECTION: forcing a failure. [ 590.981264][T19640] name failslab, interval 1, probability 0, space 0, times 0 [ 590.984196][T19640] CPU: 0 PID: 19640 Comm: syz.5.4004 Not tainted syzkaller #0 [ 590.985469][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 590.987022][T19640] Call trace: [ 590.987530][T19640] dump_backtrace+0x1c4/0x1f0 [ 590.988283][T19640] show_stack+0x2c/0x3c [ 590.988992][T19640] __dump_stack+0x30/0x40 [ 590.989749][T19640] dump_stack_lvl+0xf4/0x15c [ 590.990542][T19640] dump_stack+0x1c/0x5c [ 590.991275][T19640] should_fail_ex+0x3cc/0x524 [ 590.992186][T19640] __should_failslab+0xc0/0x11c [ 590.993161][T19640] should_failslab+0x10/0x28 [ 590.994046][T19640] __kmem_cache_alloc_node+0x7c/0x318 [ 590.995025][T19640] __kmalloc+0xc4/0x180 [ 590.995809][T19640] security_sk_alloc+0x54/0x140 [ 590.996735][T19640] sk_prot_alloc+0xe0/0x1e8 [ 590.997650][T19640] sk_alloc+0x44/0x3a0 [ 590.998475][T19640] unix_create1+0xd0/0x750 [ 590.999384][T19640] unix_create+0x148/0x1f4 [ 591.000255][T19640] __sock_create+0x448/0x8a8 [ 591.001176][T19640] p9_fd_create_unix+0x174/0x3a4 [ 591.002107][T19640] p9_client_create+0x6c0/0xdd8 [ 591.002998][T19640] v9fs_session_init+0x180/0x146c [ 591.003941][T19640] v9fs_mount+0xd4/0x9e8 [ 591.004773][T19640] legacy_get_tree+0xd8/0x174 [ 591.005695][T19640] vfs_get_tree+0x90/0x278 [ 591.006560][T19640] do_new_mount+0x228/0x804 [ 591.007467][T19640] path_mount+0x5ac/0xe6c [ 591.008335][T19640] __arm64_sys_mount+0x4a0/0x5a0 [ 591.009283][T19640] invoke_syscall+0x98/0x290 [ 591.010161][T19640] el0_svc_common+0x13c/0x258 [ 591.011064][T19640] do_el0_svc+0x5c/0x134 [ 591.011924][T19640] el0_svc+0x58/0x128 [ 591.012730][T19640] el0t_64_sync_handler+0x84/0xf0 [ 591.013752][T19640] el0t_64_sync+0x18c/0x190 [ 591.115074][T19640] 9pnet_fd: p9_fd_create_unix (19640): problem creating socket [ 591.326972][T19654] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 591.342560][T19507] device hsr_slave_0 entered promiscuous mode [ 591.371894][T19507] device hsr_slave_1 entered promiscuous mode [ 591.392691][T19507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.397573][T19507] Cannot create hsr debugfs directory [ 591.488290][T19667] loop5: detected capacity change from 0 to 256 [ 592.057709][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4012'. [ 592.227133][T19691] 9pnet_fd: p9_fd_create_unix (19691): problem connecting socket: ./proc: -111 [ 592.241066][T13386] Bluetooth: hci1: command 0x041b tx timeout [ 592.334345][ T3939] loop8: p1 p2 p3 p4 [ 592.334345][ T3939] p1: [ 592.335989][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 592.337818][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 592.339340][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 592.341207][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 592.342775][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 592.432152][ T3939] loop8: p1 p2 p3 p4 [ 592.432152][ T3939] p1: [ 592.434048][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 592.435980][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 592.437920][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 592.440042][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 592.452675][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 592.633465][ T3939] loop8: p1 p2 p3 p4 [ 592.633465][ T3939] p1: [ 592.635240][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 592.637412][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 592.639147][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 592.642360][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 592.645211][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 592.703355][T19731] 9pnet_fd: p9_fd_create_unix (19731): problem connecting socket: ./proc: -111 [ 592.794019][T19738] loop0: detected capacity change from 0 to 128 [ 592.813208][T19738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 592.889531][T19748] loop5: detected capacity change from 0 to 128 [ 592.898709][T19748] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 592.907762][T17009] EXT4-fs (loop0): unmounting filesystem. [ 593.232687][T17096] EXT4-fs (loop5): unmounting filesystem. [ 593.235474][ T3939] loop8: p1 p2 p3 p4 [ 593.235474][ T3939] p1: [ 593.237412][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 593.246414][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 593.248091][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 593.261491][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 593.263026][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 593.311394][T19774] 9pnet_fd: p9_fd_create_unix (19774): problem connecting socket: ./proc: -111 [ 593.355516][ T3939] loop8: p1 p2 p3 p4 [ 593.355516][ T3939] p1: [ 593.356277][T19778] loop2: detected capacity change from 0 to 128 [ 593.357292][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 593.360361][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 593.361599][T19778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 593.362241][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 593.365165][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 593.366767][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 593.383394][T13391] EXT4-fs (loop2): unmounting filesystem. [ 593.484467][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 593.608513][T19788] loop5: detected capacity change from 0 to 128 [ 593.677013][T19788] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 593.746175][T17096] EXT4-fs (loop5): unmounting filesystem. [ 594.029345][T19804] loop2: detected capacity change from 0 to 128 [ 594.039203][T19803] 9pnet_fd: p9_fd_create_unix (19803): problem connecting socket: ./proc: -111 [ 594.104112][T19804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 594.142937][T13391] EXT4-fs (loop2): unmounting filesystem. [ 594.253298][T19817] loop2: detected capacity change from 0 to 128 [ 594.284870][T19817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 594.320048][T13386] Bluetooth: hci1: command 0x040f tx timeout [ 594.348723][T13391] EXT4-fs (loop2): unmounting filesystem. [ 594.794268][T19839] 9pnet_fd: p9_fd_create_unix (19839): problem connecting socket: ./proc: -111 [ 594.862227][T19841] loop2: detected capacity change from 0 to 128 [ 594.926640][T19841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 594.967830][T13391] EXT4-fs (loop2): unmounting filesystem. [ 595.319238][T19854] loop2: detected capacity change from 0 to 128 [ 595.323408][T19854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 595.327625][T19854] EXT4-fs (loop2): shut down requested (2) [ 595.352060][T13391] EXT4-fs (loop2): unmounting filesystem. [ 595.825247][ T3939] loop8: p1 p2 p3 p4 [ 595.825247][ T3939] p1: [ 595.827075][ T3939] loop8: p1 size 67110656 extends beyond EOD, truncated [ 595.834204][ T3939] loop8: p3 size 134217728 extends beyond EOD, truncated [ 595.836925][ T3939] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 595.842399][ T3939] loop8: p5 size 67110656 extends beyond EOD, truncated [ 595.846058][ T3939] loop8: p6 size 134217728 extends beyond EOD, truncated [ 596.399298][T13386] Bluetooth: hci1: command 0x0419 tx timeout [ 596.439393][ T27] audit: type=1326 audit(524884.908:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.451463][ T27] audit: type=1326 audit(524884.918:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.465636][ T27] audit: type=1326 audit(524884.928:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.480466][ T27] audit: type=1326 audit(524884.928:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.505158][ T27] audit: type=1326 audit(524884.928:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.515591][ T27] audit: type=1326 audit(524884.928:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.527105][ T27] audit: type=1326 audit(524884.928:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.536947][ T27] audit: type=1326 audit(524884.928:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.4086" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f79368 code=0x7ffc0000 [ 596.538682][T19896] loop2: detected capacity change from 0 to 128 [ 596.563204][T19896] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 596.572860][T19896] EXT4-fs (loop2): shut down requested (2) [ 596.610192][T13391] EXT4-fs (loop2): unmounting filesystem. [ 597.126298][T19917] [ 597.126827][T19917] ====================================================== [ 597.128052][T19917] WARNING: possible circular locking dependency detected [ 597.129306][T19917] syzkaller #0 Not tainted [ 597.130166][T19917] ------------------------------------------------------ [ 597.131532][T19917] syz.8.4095/19917 is trying to acquire lock: [ 597.132712][T19917] ffff800016f54cb0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x78/0x488 [ 597.134967][T19917] [ 597.134967][T19917] but task is already holding lock: [ 597.136405][T19917] ffff0000fde26ee0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_symlink+0x310/0xee0 [ 597.138478][T19917] [ 597.138478][T19917] which lock already depends on the new lock. [ 597.138478][T19917] [ 597.140513][T19917] [ 597.140513][T19917] the existing dependency chain (in reverse order) is: [ 597.142180][T19917] [ 597.142180][T19917] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{3:3}: [ 597.143965][T19917] down_write+0x5c/0x88 [ 597.144922][T19917] configfs_depend_item_unlocked+0x128/0x41c [ 597.146234][T19917] usbg_make_tpg+0x1c4/0x4ac [ 597.147230][T19917] target_fabric_make_tpg+0x98/0x518 [ 597.148360][T19917] configfs_mkdir+0x3e0/0x884 [ 597.149354][T19917] vfs_mkdir+0x314/0x4d8 [ 597.150282][T19917] do_mkdirat+0x1b8/0x3ec [ 597.151245][T19917] __arm64_sys_mkdirat+0x90/0xa8 [ 597.152301][T19921] loop5: detected capacity change from 0 to 128 [ 597.153519][T19917] invoke_syscall+0x98/0x290 [ 597.154532][T19917] el0_svc_common+0x13c/0x258 [ 597.155504][T19917] do_el0_svc+0x5c/0x134 [ 597.156460][T19917] el0_svc+0x58/0x128 [ 597.157377][T19917] el0t_64_sync_handler+0x84/0xf0 [ 597.158458][T19917] el0t_64_sync+0x18c/0x190 [ 597.159454][T19917] [ 597.159454][T19917] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 597.161218][T19917] __mutex_lock_common+0x1a0/0x1f3c [ 597.162451][T19917] mutex_lock_nested+0x38/0x44 [ 597.163484][T19917] tcm_alloc_inst+0x6c/0x190 [ 597.164474][T19917] usb_get_function_instance+0xe8/0x2dc [ 597.165634][T19917] function_make+0x108/0x2f8 [ 597.166629][T19917] configfs_mkdir+0x3e0/0x884 [ 597.167625][T19917] vfs_mkdir+0x314/0x4d8 [ 597.168537][T19917] do_mkdirat+0x1b8/0x3ec [ 597.169490][T19917] __arm64_sys_mkdirat+0x90/0xa8 [ 597.170608][T19917] invoke_syscall+0x98/0x290 [ 597.171630][T19917] el0_svc_common+0x13c/0x258 [ 597.172693][T19917] do_el0_svc+0x5c/0x134 [ 597.173645][T19917] el0_svc+0x58/0x128 [ 597.174501][T19917] el0t_64_sync_handler+0x84/0xf0 [ 597.175578][T19917] el0t_64_sync+0x18c/0x190 [ 597.176530][T19917] [ 597.176530][T19917] -> #1 (func_lock){+.+.}-{3:3}: [ 597.177917][T19917] __mutex_lock_common+0x1a0/0x1f3c [ 597.179048][T19917] mutex_lock_nested+0x38/0x44 [ 597.180097][T19917] usb_get_function_instance+0x3c/0x2dc [ 597.181324][T19917] function_make+0x108/0x2f8 [ 597.182319][T19917] configfs_mkdir+0x3e0/0x884 [ 597.183326][T19917] vfs_mkdir+0x314/0x4d8 [ 597.183866][T19921] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 597.184251][T19917] do_mkdirat+0x1b8/0x3ec [ 597.186716][T19917] __arm64_sys_mkdirat+0x90/0xa8 [ 597.187779][T19917] invoke_syscall+0x98/0x290 [ 597.187942][T19921] EXT4-fs (loop5): shut down requested (2) [ 597.188753][T19917] el0_svc_common+0x13c/0x258 [ 597.190746][T19917] do_el0_svc+0x5c/0x134 [ 597.191669][T19917] el0_svc+0x58/0x128 [ 597.192517][T19917] el0t_64_sync_handler+0x84/0xf0 [ 597.193587][T19917] el0t_64_sync+0x18c/0x190 [ 597.194578][T19917] [ 597.194578][T19917] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 597.196191][T19917] __lock_acquire+0x2808/0x6634 [ 597.197224][T19917] lock_acquire+0x20c/0x638 [ 597.198192][T19917] __mutex_lock_common+0x1a0/0x1f3c [ 597.199323][T19917] mutex_lock_nested+0x38/0x44 [ 597.200410][T19917] uvcg_streaming_header_allow_link+0x78/0x488 [ 597.201784][T19917] configfs_symlink+0x468/0xee0 [ 597.202877][T19917] vfs_symlink+0x238/0x3b0 [ 597.203878][T19917] do_symlinkat+0x178/0x35c [ 597.204821][T19917] __arm64_sys_symlinkat+0xa4/0xbc [ 597.205966][T19917] invoke_syscall+0x98/0x290 [ 597.206914][T19917] el0_svc_common+0x13c/0x258 [ 597.207905][T19917] do_el0_svc+0x5c/0x134 [ 597.208846][T19917] el0_svc+0x58/0x128 [ 597.209738][T19917] el0t_64_sync_handler+0x84/0xf0 [ 597.210854][T19917] el0t_64_sync+0x18c/0x190 [ 597.211813][T19917] [ 597.211813][T19917] other info that might help us debug this: [ 597.211813][T19917] [ 597.213703][T19917] Chain exists of: [ 597.213703][T19917] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 597.213703][T19917] [ 597.216561][T19917] Possible unsafe locking scenario: [ 597.216561][T19917] [ 597.217966][T19917] CPU0 CPU1 [ 597.218980][T19917] ---- ---- [ 597.219989][T19917] lock(&sb->s_type->i_mutex_key#24); [ 597.221070][T19917] lock(tpg_instances_lock); [ 597.222550][T19917] lock(&sb->s_type->i_mutex_key#24); [ 597.224183][T19917] lock(gadget_subsys.su_mutex); [ 597.225172][T19917] [ 597.225172][T19917] *** DEADLOCK *** [ 597.225172][T19917] [ 597.226764][T19917] 2 locks held by syz.8.4095/19917: [ 597.227761][T19917] #0: ffff0000c69fa460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 597.229608][T19917] #1: ffff0000fde26ee0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_symlink+0x310/0xee0 [ 597.231860][T19917] [ 597.231860][T19917] stack backtrace: [ 597.233005][T19917] CPU: 0 PID: 19917 Comm: syz.8.4095 Not tainted syzkaller #0 [ 597.234439][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 597.236273][T19917] Call trace: [ 597.236937][T19917] dump_backtrace+0x1c4/0x1f0 [ 597.237811][T19917] show_stack+0x2c/0x3c [ 597.238576][T19917] __dump_stack+0x30/0x40 [ 597.239404][T19917] dump_stack_lvl+0xf4/0x15c [ 597.240291][T19917] dump_stack+0x1c/0x5c [ 597.241095][T19917] print_circular_bug+0x148/0x1b0 [ 597.242083][T19917] check_noncircular+0x264/0x2f8 [ 597.243028][T19917] __lock_acquire+0x2808/0x6634 [ 597.244085][T19917] lock_acquire+0x20c/0x638 [ 597.244983][T19917] __mutex_lock_common+0x1a0/0x1f3c [ 597.245994][T19917] mutex_lock_nested+0x38/0x44 [ 597.246914][T19917] uvcg_streaming_header_allow_link+0x78/0x488 [ 597.248098][T19917] configfs_symlink+0x468/0xee0 [ 597.249025][T19917] vfs_symlink+0x238/0x3b0 [ 597.249836][T19917] do_symlinkat+0x178/0x35c [ 597.250676][T19917] __arm64_sys_symlinkat+0xa4/0xbc [ 597.251670][T19917] invoke_syscall+0x98/0x290 [ 597.252565][T19917] el0_svc_common+0x13c/0x258 [ 597.253508][T19917] do_el0_svc+0x5c/0x134 [ 597.254377][T19917] el0_svc+0x58/0x128 [ 597.255164][T19917] el0t_64_sync_handler+0x84/0xf0 [ 597.256129][T19917] el0t_64_sync+0x18c/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.284693][T17096] EXT4-fs (loop5): unmounting filesystem. [ 597.391367][T18859] udevd[18859]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 597.395421][T19111] udevd[19111]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 597.398456][T19102] udevd[19102]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 597.398522][T19123] udevd[19123]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 597.403123][T19122] udevd[19122]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 597.420088][T19128] udevd[19128]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 597.441921][T19122] udevd[19122]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 597.443175][T18859] udevd[18859]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 597.445208][T19123] udevd[19123]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 597.446908][T19102] udevd[19102]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 597.549991][T17096] bridge0: port 3(syz_tun) entered disabled state [ 597.599836][T17096] device syz_tun left promiscuous mode [ 597.600887][T17096] bridge0: port 3(syz_tun) entered disabled state [ 597.652516][T18598] device hsr_slave_0 left promiscuous mode [ 597.690992][T18598] device hsr_slave_1 left promiscuous mode [ 597.789071][T18598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.790526][T18598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.792074][T18598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.793481][T18598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.795054][T18598] device bridge_slave_1 left promiscuous mode [ 597.796360][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.829418][T18598] device bridge_slave_0 left promiscuous mode [ 597.830603][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.000296][T18598] device veth1_macvtap left promiscuous mode [ 598.001433][T18598] device veth0_macvtap left promiscuous mode [ 598.002566][T18598] device veth1_vlan left promiscuous mode [ 598.003675][T18598] device veth0_vlan left promiscuous mode [ 600.320007][T18598] team0 (unregistering): Port device team_slave_1 removed [ 600.489253][T18598] team0 (unregistering): Port device team_slave_0 removed [ 600.658792][T18598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.858700][T18598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.368612][T18598] bond0 (unregistering): Released all slaves [ 602.710336][T13391] bridge0: port 3(syz_tun) entered disabled state [ 602.748974][T13391] device syz_tun left promiscuous mode [ 602.749994][T13391] bridge0: port 3(syz_tun) entered disabled state [ 602.799528][T19928] bridge0: port 3(syz_tun) entered disabled state [ 602.848406][T19928] device syz_tun left promiscuous mode [ 602.849447][T19928] bridge0: port 3(syz_tun) entered disabled state [ 604.937621][T18598] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.007865][T18598] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.099557][T18598] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.189303][T18598] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.358150][T18598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.360170][T18598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.448166][T18598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.450061][T18598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.549050][T18598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.550991][T18598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.638233][T18598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.640108][T18598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.809210][T18598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.898266][T18598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.997910][T18598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.068092][T18598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.208195][T18598] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.288195][T18598] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.347990][T18598] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.418096][T18598] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.877703][T18598] tipc: Disabling bearer [ 606.879025][T18598] tipc: Left network mode