last executing test programs: 25.1268233s ago: executing program 0 (id=20): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x4008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x240, 0x0) close(r2) socket(0x10, 0x803, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$rfkill(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) r5 = inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/power/pm_test\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)="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", 0xf8) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x6000854) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000980)='asymmetric\x00', 0x0, &(0x7f0000000f80)="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", 0x559, r6) 23.78466734s ago: executing program 0 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x2, 0x11}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, 0x0}) (async) socket$inet(0x2, 0x2, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, 0x0, 0x0) (async) r6 = accept(r4, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000540)="0011223344", 0x5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000580)="00112233445566778899", 0xa, 0x0, 0x0, 0x0) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000600)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000640)={[{0x8dd2, 0x9, 0x14, 0xff, 0x7, 0x2, 0x2, 0x2, 0x3, 0x7, 0x0, 0x9, 0xffffffff}, {0x1, 0x0, 0x81, 0x0, 0x2a, 0x36, 0x0, 0x40, 0xfa, 0x2, 0x5, 0xfe, 0x5}, {0x6, 0x1, 0x7f, 0x9, 0x7, 0x2, 0x7, 0x8, 0x1, 0x1, 0x5e, 0x5, 0x1}], 0x7}) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x4, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(r9, 0x0, 0x0) (async) lseek(r3, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x0, 0x0) 22.792406722s ago: executing program 0 (id=28): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtdblock0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/dir0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/dir0\x00', 0x200) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x89e1, &(0x7f0000000040)) 22.441971101s ago: executing program 0 (id=30): r0 = syz_create_resource$futex(&(0x7f0000000140)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1bf) r1 = syz_socket_connect_nvme_tcp() ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000840)={0x3, 0x69, 0x0, 0x7, 0x4, 0x0, [{0x1, 0xe, 0xffff, '\x00', 0x2008}, {0x7, 0xe, 0x10, '\x00', 0x1}, {0xc, 0xf, 0x818, '\x00', 0x3284}, {0x5, 0x2, 0x3, '\x00', 0x100}]}) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r2, &(0x7f0000000580)='0\x00', 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x11f) mount(&(0x7f00000006c0)=@filename='./dev/sda1\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000780)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000800)="ff", 0x582f5, 0xfb2200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x8000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='3', 0x4e) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0xfe33) r6 = syz_create_resource$futex(&(0x7f0000000180)=0x1) futex(r6, 0xb, 0x1, 0x0, r0, 0x403) futex(r6, 0xc, 0x1, 0x0, r0, 0x1) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='id_resolver\x00', 0x0, &(0x7f00000003c0)="666f6f23646e736572fea82f902f8ca5c3fc7d939f80b97c13726f723d3000a11909b98b6beb329196f9ebddff0700005588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc5f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f6039d64ee0ff01c12cc9bd4cf7002f85ec3af38c60ddd1ff558858553ed4e1ef37dc4f44b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f298765d2d3482f0c06cf6b", 0xc4, r7) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x8d359d9ef1088b39, &(0x7f0000000100)='@$^+$\x00') 21.426047241s ago: executing program 0 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000e4ffffff0100000008000a000200000006000200fbffffffb100070000000000080009000200000008001700", @ANYRES32, @ANYBLOB], 0x3c}}, 0x4000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x1, r2) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7, 0x2) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x4, "abacd211119c82a5ee767526aeb5ca414e84a5fa0f558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000480)={0x8, "b546ba08000000000000009c299681070000000b028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000004c0)={"e53a995582f97f2635b44039cbfab4fcb76336010400008af8765d9ac20f4331", r7, 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000500)={"d7e8a41c1e2b6cdb7fcc2bb77a939699ead6dd95e4cdf9f0e3a8134ee97d118b", r8}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000340)={0x2, @win={{0x2, 0x0, 0xfffffffe}, 0x7, 0x3, &(0x7f0000000440)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000008c0)={0x3c, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0xa0, 0x0, 0x0, @uid}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$FE_SET_FRONTEND(r9, 0x40246f4c, &(0x7f0000000000)={0x0, 0x2, @vsb={0xb}}) r11 = socket$netlink(0x10, 0x3, 0x0) write(r11, &(0x7f0000000580)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) r12 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$printer(r12, 0x0, &(0x7f00000007c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$hid(r12, 0x0, 0x0) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r13, 0x5b03, 0x0) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x18, '\x00', @buffer={"33e3ee7608f84e1f2aefa327ad62a29457acd30cefa08b8121fe4802d400", 0x20}, 0x7ff}, {0x3, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x2, @uvalue=0x2}, {0x2, @svalue=0x1}, {0x3, @svalue=0x89e}]}, 0x9}, {0x3d, '\x00', @data=0x2, 0x479a}]}) 20.6367984s ago: executing program 0 (id=39): socket$kcm(0xa, 0x2, 0x73) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc6c732fdf544049}, 0x40000) unshare(0x2c020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000003600)={0x40000000, 0x0, &(0x7f0000003640)={&(0x7f0000003680)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000036c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r2, &(0x7f0000003700)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003740)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000003840), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 20.252425852s ago: executing program 32 (id=39): socket$kcm(0xa, 0x2, 0x73) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc6c732fdf544049}, 0x40000) unshare(0x2c020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000003600)={0x40000000, 0x0, &(0x7f0000003640)={&(0x7f0000003680)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000036c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r2, &(0x7f0000003700)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003740)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000003840), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 18.432094508s ago: executing program 1 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1a7) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/mtrr\x00', 0x243, 0x14c) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fchdir(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x1) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'a', ' *:* ', 'rw\x00'}, 0x9) 16.7923195s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc) (async) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0xee01, 0x1000) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xff9e, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400000002010101000000000000000001000007100002800c00028005000100110000000f6c"], 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x10000) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) fchownat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x1000) (async) setrlimit(0x40000000000008, &(0x7f0000000280)) (async) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)={0x0, 0x200000}) (async) mlockall(0x1) (async) r0 = getpid() r1 = syz_open_dev$dri(&(0x7f0000000180), 0xa00000000000, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) r2 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000700)={0x5, 0x5}) (async) setns(r2, 0x24020000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000780)=0x4, 0x4) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000000040)={0xb, 0x0, 0x100000}, 0x20) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000740)={0x7}) chmod(&(0x7f0000000100)='./file0\x00', 0x228) lchown(&(0x7f0000000140)='.\x00', 0xee00, 0x0) (async) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'user.', '+@,\x00'}, 0x0, 0x0, 0x0) 15.681886256s ago: executing program 1 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) mknodat(r1, &(0x7f0000000400)='./file1\x00', 0x38, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r2 = syz_create_resource$binfmt(&(0x7f0000000340)='./sys/kernel/reboot/mode\x00') socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x9, 0xff, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}}, 0x8040) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000240)) r5 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) 15.468319181s ago: executing program 1 (id=61): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0x101, 0x4, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x100015e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x30d}}], 0x1, &(0x7f0000000340)={0x2e, 0x27, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) unshare(0x2c020400) r8 = msgget$private(0x0, 0x240) msgsnd(r8, &(0x7f0000000a80)={0x2, "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"}, 0xfd1, 0x0) msgrcv(0x0, &(0x7f0000001a80), 0xfffffcef, 0x0, 0x4800) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r9 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x32, &(0x7f0000000300)=0x1000000, 0x4) r11 = fsmount(r9, 0x1, 0x0) fchdir(r11) ioctl$VT_RESIZEX(r11, 0x560a, &(0x7f00000002c0)={0xaf5, 0x5ed9, 0x0, 0x8001, 0x4, 0x9}) readahead(r7, 0x2, 0x8) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1880) write$P9_RGETLOCK(r13, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r12, 0x0, r0, 0x0, 0x40010003, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 15.043946556s ago: executing program 1 (id=62): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f00000000c0)='./gadget\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000180)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x3000004, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x80000000, 0x100, 0x3) r2 = dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r3, 0x26, 0x0) syz_open_pts(r2, 0x200301) openat(0xffffffffffffff9c, 0x0, 0x800c4, 0xf7) 13.921510394s ago: executing program 1 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1a7) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/mtrr\x00', 0x243, 0x14c) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) fchdir(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x1) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'a', ' *:* ', 'rw\x00'}, 0x9) 11.735346538s ago: executing program 3 (id=69): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x1, @in={{0x2, 0x4e22, @broadcast}}, 0x2232, 0x8}, 0x90) ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f0000000100)={0x2, 0x0, 0x400}) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000000140)={0x1, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f00000001c0)={r1, 0x800b}, &(0x7f0000000200)=0x8) recvfrom$inet6(r0, &(0x7f0000000240)=""/190, 0xbe, 0x10101, &(0x7f0000000300)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x9}, 0x1c) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r1, 0x100000, 0x4, 0x8, 0x86d, 0x215c, 0x401, 0x4, {r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x0, 0x7, 0x6, 0x7fff, 0x80000000}}, &(0x7f0000000440)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r2, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000540)) fsetxattr(r0, &(0x7f0000000580)=@known='user.incfs.size\x00', &(0x7f00000005c0)='$\x00', 0x2, 0x1) (async) fsetxattr(r0, &(0x7f0000000580)=@known='user.incfs.size\x00', &(0x7f00000005c0)='$\x00', 0x2, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r1, 0x6}, 0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={r1, 0x6}, 0x8) timer_create(0x7, &(0x7f0000001680)={0x0, 0x20, 0x1, @thr={&(0x7f0000000640)="49fbc0ecd41acf", &(0x7f0000000680)="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"}}, &(0x7f00000016c0)) (async) timer_create(0x7, &(0x7f0000001680)={0x0, 0x20, 0x1, @thr={&(0x7f0000000640)="49fbc0ecd41acf", &(0x7f0000000680)="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"}}, &(0x7f00000016c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000001700)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, &(0x7f0000001740)) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x0, 0xc, 0x10, r0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001780)={r3, @in6={{0xa, 0x4e21, 0x139, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000}}, 0x6, 0x6, 0x6, 0xc0f, 0x4, 0x1c000000, 0x6}, 0x9c) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x80010, r0, 0xa6358000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001840)={{{@in=@remote, @in6=@private2}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000001940)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001840)={{{@in=@remote, @in6=@private2}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000001940)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r5, &(0x7f0000001980)={0xa, 0x4e22, 0x80, @private0}, 0x1c) (async) bind$inet6(r5, &(0x7f0000001980)={0xa, 0x4e22, 0x80, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000019c0)={r2, 0xce, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000019c0)={r2, 0xce, 0x20}, 0xc) semget(0x3, 0x5, 0x4c1) (async) r6 = semget(0x3, 0x5, 0x4c1) semtimedop(r6, &(0x7f0000001a00)=[{0x2, 0x6bf, 0x1000}, {0x2, 0x74c, 0x1000}, {0x1, 0x6, 0x1000}, {0x3, 0x49b0, 0x1000}, {0x4, 0x8, 0x1000}, {0x3, 0x5, 0x1000}, {0x0, 0x1, 0x1000}], 0x7, &(0x7f0000001a40)={0x0, 0x989680}) timer_getoverrun(r4) (async) timer_getoverrun(r4) r7 = accept$unix(r0, &(0x7f0000001a80)=@abs, &(0x7f0000001b00)=0x6e) connect$unix(r7, &(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$inet6(0xa, 0x800, 0x800) (async) socket$inet6(0xa, 0x800, 0x800) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) 11.101019175s ago: executing program 3 (id=70): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_clone(0x9020080, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x8, 0x800) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/devices/netdevsim0/new_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='4', 0x1) 10.30330351s ago: executing program 3 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r3, 0x401, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x804) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, &(0x7f0000000080)="2e0fa26636640f0966400f71e0b6c4c27d5a720066bad00466edc4a234a67e62c44109d098b95100003ef3420f1efa8fe0c462e9b6f4440f08", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000003139f513ebd7d5eab30009002dbd700000000000040000000c001a800800fc00", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4042814}, 0x84) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000180)="360f07ea5f29fea97e000f01c50fc7ab4800000066baf80cb846ae008def66bafc0c66ed650f01c3f22ef2f083b493002000006fc4c1c45c5b4c26262ef236670f2018ff6e00", 0x46}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000180)="360f07ea5f29fea97e000f01c50fc7ab4800000066baf80cb846ae008def66bafc0c66ed650f01c3f22ef2f083b493002000006fc4c1c45c5b4c26262ef236670f2018ff6e00", 0x46}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.652284075s ago: executing program 3 (id=75): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x244a00, 0xa4f0e05d7c4d0cc2) mkdirat(r0, &(0x7f0000000080)='./sys\x00', 0x1ff) setns(0xc9, 0x0) r1 = socket(0x21, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0/file0\x00') getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000200)) bind(r1, &(0x7f0000000180)=@generic={0x8, "ffff0000feff00"}, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="02c90010000c000500174208"], 0x15) connect$pppoe(r3, &(0x7f0000000740)={0x18, 0x0, {0x1, @empty, 'vcan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000780)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000800)) pwritev(r4, &(0x7f0000000840)=[{&(0x7f0000000880)="f65a", 0x2}], 0x1, 0x1, 0x8) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103802) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189c82) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x1000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x12c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x17]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x3, 0x0, 0x5, 0xed, 0x0, 0xfffff000, 0xf8, 0x7f]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfb09}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf90}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fe}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa82d}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe0000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x101}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffa}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x140, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) write(r5, &(0x7f0000000380)='2', 0x1) 8.675899239s ago: executing program 3 (id=78): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_clone(0x9020080, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x8, 0x800) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/devices/netdevsim0/new_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='4', 0x1) 8.24504758s ago: executing program 3 (id=80): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x200000, 0xb, "0062ba00096304001b2ec83b95f3e88ff600"}) r2 = syz_open_pts(r0, 0x20400) read(r2, &(0x7f00000002c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$video(&(0x7f0000000500), 0x10, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f00000005c0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000000000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2}) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f0000000740)={&(0x7f0000000640)=[{0x1, 0x0, 0x9, 0x9, 0x7fff, 0x2, 0x1, 0x3}, {0x1, 0x0, 0xb8d, 0x4, 0x10001, 0x0, 0x4, 0xdb}, {0x0, 0x0, 0x9, 0x7c, 0x0, 0x3, 0x100, 0x9}, {0x0, 0x0, 0x0, 0x4, 0xdc0, 0x3, 0x5, 0x3e}], 0x4, 0x38, 0x0, 0xf82}) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bind$bt_hci(r3, &(0x7f0000000480)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) process_madvise(r8, &(0x7f0000000440)=[{&(0x7f00000004c0)="cd0e", 0x2}], 0x10000000000001c6, 0x4, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x63feb6dd21e60ac9, 0x5c, 0xe9, 0xae, 0x8, 0x13d8, 0x10, 0xbcd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x9, 0x80, 0x1, "", [{{0x9, 0x4, 0x58, 0x80, 0x0, 0x36, 0xd8, 0x77, 0xfc}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x0}) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_ipt={0x50, 0x1, 0x0, 0x0, {{0x62}, {0xffffffffffffffd5, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x577d}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) write(r10, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x0, 0x24000080) 7.835472025s ago: executing program 33 (id=80): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x200000, 0xb, "0062ba00096304001b2ec83b95f3e88ff600"}) r2 = syz_open_pts(r0, 0x20400) read(r2, &(0x7f00000002c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$video(&(0x7f0000000500), 0x10, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f00000005c0)={0x3, "a8df7802997c0f0f26a793d1c00000000000000000000500", 0x2, 0x5, 0x1, 0x3200e0, 0x4000000, 0x2}) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f0000000740)={&(0x7f0000000640)=[{0x1, 0x0, 0x9, 0x9, 0x7fff, 0x2, 0x1, 0x3}, {0x1, 0x0, 0xb8d, 0x4, 0x10001, 0x0, 0x4, 0xdb}, {0x0, 0x0, 0x9, 0x7c, 0x0, 0x3, 0x100, 0x9}, {0x0, 0x0, 0x0, 0x4, 0xdc0, 0x3, 0x5, 0x3e}], 0x4, 0x38, 0x0, 0xf82}) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bind$bt_hci(r3, &(0x7f0000000480)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) process_madvise(r8, &(0x7f0000000440)=[{&(0x7f00000004c0)="cd0e", 0x2}], 0x10000000000001c6, 0x4, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x63feb6dd21e60ac9, 0x5c, 0xe9, 0xae, 0x8, 0x13d8, 0x10, 0xbcd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x9, 0x80, 0x1, "", [{{0x9, 0x4, 0x58, 0x80, 0x0, 0x36, 0xd8, 0x77, 0xfc}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x0}) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_ipt={0x50, 0x1, 0x0, 0x0, {{0x62}, {0xffffffffffffffd5, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x577d}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) write(r10, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x0, 0x24000080) 6.213151468s ago: executing program 4 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x20000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) write(r4, &(0x7f0000000100)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r4, &(0x7f00000001c0)="4c0000002c00010402000000000000000000000001000000000000000000ffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x20, &(0x7f0000000600)=[@in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000640)=0x10) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000680)={'nr0\x00', 0x8000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000440)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000480)={@local}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000004c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async, rerun: 32) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000540)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, 0x0) (async, rerun: 64) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000580)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0xfffffffffffffffc}) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000740)={0xc, {"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", 0x1000}}, 0x1006) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000001780)=0x8004, 0x4) (async) sendmsg$netlink(r9, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001840)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) (async) close(0x4) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0x4c, r2, 0x1, 0x70bd29, 0x8000002, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_open={0xf, 0x1, {0x848, {0x1, 0x4, [{0x48, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1b, 0x1}]}, @val={0x72, 0x6}, @void}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 5.352134939s ago: executing program 4 (id=87): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_clone(0x9020080, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x8, 0x800) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/devices/netdevsim0/new_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='4', 0x1) 5.113011083s ago: executing program 4 (id=88): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000140)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000000000916) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d00)={0x1, &(0x7f0000000d40)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r2, r3, &(0x7f0000000200)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000600)={&(0x7f0000000d80)=""/8192, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000002d80)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000002dc0)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000002e00)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002e80)={'veth0_to_team\x00', 0x0}) bind$xdp(r7, &(0x7f0000002ec0)={0x2c, 0x2, r9, 0x0, r7}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000002fc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x5c, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040801}, 0x4880) close_range(r1, 0xffffffffffffffff, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="58000200", @ANYRES16=r10, @ANYBLOB="040025bd7000ffdbdf251000000005001000090000000500110008000000050010000200000008000300", @ANYRES32=r11, @ANYBLOB="0c0006000100000001000000050011000700000008000300", @ANYRES32=r12, @ANYBLOB="0500110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x104}, 0x840) 4.785265854s ago: executing program 4 (id=89): syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000001044060f80400001020301090269000301032004080b00000105200909040000000101200009240101040c09000909040100000102200009040101010102200019050109400004e00408250100000af9ff0904020000010220010101022000090582090800f2090108250182309f0002"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000001044060f80400001020301090269000301032004080b00000105200909040000000101200009240101040c09000909040100000102200009040101010102200019050109400004e00408250100000af9ff0904020000010220010101022000090582090800f2090108250182309f0002"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) (async) 3.178590218s ago: executing program 2 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x11f) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000003c0)='./mnt\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) 2.936108316s ago: executing program 4 (id=93): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000e00)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002e40)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="12384df81526b87fb7010006000000406b1d010140000102030109026000030101e005090400000001ab0fea030000007b5a8f5e0100000a24010a000a000201020904010000010200000904010101010200000905010940000e00090725010c0a7f00090402000001020000090402010101"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000d40)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000d80)={'syzkaller1\x00', @link_local}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000180)={0x3, 0x0, '\x00', {0x0, @reserved}}) write$tun(r2, &(0x7f0000000dc0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0xf, 0xffffffffffff4aa5}}}}}}}, 0x3e) 2.625852953s ago: executing program 2 (id=94): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905825b57"], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_usb_connect$cdc_ecm(0x2, 0x66, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x6, 0xa0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "7b4f6c9e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x81, 0x7, 0x7}, [@acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0x8, 0x24, 0x7, 0xd1, 0x8, [0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x41}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x10, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0xfffffffffffffffe, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x0, 0x6, 0xe7}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0xaa, &(0x7f0000000200)=@string={0xaa, 0x3, "f1ca502bdd65cde0a797c93ba54eb62f76f9e020f0dec21353052418319f39ce487fa40c5d3cfa0c7873a886a4e7808ef575147fd4605f9101fa4d85993d45bf70b0126aecabe009ef31e2f088b1bca835cde9913ec0400232348ccdc59071bd8f6adc2b6216b3dbc4d50acfdbf7a7d5774cd91d8a76daedb237600ac232c6ddd198560be6f3f9e1f95e0b136ddee1cb773d880455d2a35c2579edb0d54d3075600dd41838ad38b9"}}]}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000080)={0x1}) 1.193294648s ago: executing program 2 (id=95): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_clone(0x9020080, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x8, 0x800) syz_clone3(0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket(0x10, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000280)=""/219) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/devices/netdevsim0/new_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='4', 0x1) 925.960437ms ago: executing program 2 (id=96): umount2(&(0x7f0000000000)='./file0\x00', 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x2, 0x74, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x2, @private1, 0xf8}, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x24) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1000, &(0x7f0000000380)={[{@redirect_dir_follow}, {@redirect_dir_nofollow}, {@uuid_off}, {@metacopy_off}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x100002, &(0x7f0000000500)={'trans=unix,', {[{@version_L}, {@cache_readahead}, {@ignoreqv}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x18aefcfd}}, {@cache_fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '(*@\'].&&\\-{]'}}, {@context={'context', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'nfs_export=on'}}, {@dont_hash}]}}) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x0, @none}, &(0x7f0000000640)=0xe, 0x0) fstat(r6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(r1, 0xfffffffffffffffd, &(0x7f0000000700)={'U-', 0x6}, 0x16, 0x3) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000740)={r4}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f00000007c0)={r9, 0x62, "f34cca2f2598be5e0f2803e85ae8b766e281a436323007686f6b960a5d626f5f1c6fe6c91ae912d57f455ca3738ce23f0697e6de60c989df278bab50f26d08f584d1628eb81e35b717d4020cee42cc4df4ebb077f3a04c1ee97256bfdbeb748fa6a3"}, &(0x7f0000000840)=0x6a) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r10, 0x89f6, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={@remote, 0x1, 0x0, 0x90, 0x0, [{@local}, {@empty}, {@private}, {@loopback}, {@broadcast}, {@local}, {@loopback}, {@multicast1}, {@multicast1}]}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in={{0x2, 0x4e21, @local}}, 0x7, 0xfff, 0x5, 0x2, 0x21, 0x62, 0x8}, 0x9c) pipe2$9p(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADLINK(r11, &(0x7f0000000a80)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r12 = syz_open_dev$ttys(0xc, 0x2, 0x0) quotactl_fd$Q_QUOTAON(r12, 0x0, r7, &(0x7f0000000ac0)='./file0\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x412081, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000b80)={r3, 0x6, 0x8, 0x101, 0x3, 0x3}, 0x14) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r13 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x800) recvmmsg$unix(r13, &(0x7f0000002180)=[{{&(0x7f0000000c40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000cc0)=""/158, 0x9e}, {&(0x7f0000000d80)=""/116, 0x74}, {&(0x7f0000000e00)=""/214, 0xd6}, {&(0x7f0000000f00)=""/76, 0x4c}, {&(0x7f0000000f80)=""/169, 0xa9}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x6, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x1, 0x40, &(0x7f00000021c0)={0x0, 0x989680}) 476.303698ms ago: executing program 2 (id=97): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='cpu.stat\x00', 0x0, 0x0) r3 = socket(0x27, 0x3, 0xe82c) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x1, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0x1, 0xfffffffffffffffb, 0x82a5, 0x2, 0x3ff}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000040) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 100.139203ms ago: executing program 2 (id=98): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 0s ago: executing program 4 (id=99): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000140)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) pselect6(0x40, &(0x7f0000000080)={0x3936, 0x7, 0x8, 0x9c, 0xab, 0x9, 0x200, 0x7fffffffffffffff}, &(0x7f0000000ac0)={0x4, 0x0, 0x5, 0x3, 0xff, 0x80, 0x6, 0x44}, &(0x7f0000000b00)={0x1ff, 0x8, 0xf1, 0x8, 0x4, 0x5, 0x155e, 0x5}, &(0x7f0000000b40)={0x77359400}, &(0x7f0000000bc0)={&(0x7f0000000b80)={[0xa4]}, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000540)='./file0\x00', 0x60840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x10, 0x9, 0x401d031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000640)=0x0) r3 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000680)={0x0, 0x4, 0x1, 0x3, 0x40000000}, &(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) syz_io_uring_modify_offsets$flags(r4, r1, 0x68, 0x1) syz_ublk_setup_queues(r0, r2, &(0x7f00000007c0)={0x0, 0xc0b9, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x40000, 0x1, 0x946, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6e, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x8000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001500010000000000000000000f000000080001009cc616d8080003"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 83.668866][ T5596] cgroup: Unknown subsys name 'net' [ 83.814979][ T5596] cgroup: Unknown subsys name 'cpuset' [ 83.824184][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.491658][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.929773][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.938183][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.938823][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.956068][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.957035][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.966566][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.973399][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.978171][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.012611][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.014438][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.014872][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.033918][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.036234][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.036734][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.037400][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.037902][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.040376][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.040649][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.041743][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.042019][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.884837][ T5613] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.888340][ T5606] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.889127][ T5613] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.913679][ T5613] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.967377][ T5610] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 89.068535][ T5611] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 89.275369][ T5613] infiniband rxe0: set active [ 89.277447][ T5613] infiniband rxe0: added rxe_eth0 [ 89.303100][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.305501][ T5613] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 89.305538][ T5613] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 89.305574][ T5613] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 89.384471][ T5613] RDS/IB: rxe0: added [ 89.384887][ T5613] smc: adding ib device rxe0 with port count 1 [ 89.384990][ T5613] smc: ib device rxe0 port 1 has no pnetid [ 89.415555][ T992] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.435147][ T5613] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.766936][ T5613] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.923054][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.923817][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.924280][ T5606] bridge_slave_0: entered allmulticast mode [ 89.926348][ T5606] bridge_slave_0: entered promiscuous mode [ 89.986290][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.986405][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.986561][ T5606] bridge_slave_1: entered allmulticast mode [ 89.990253][ T5606] bridge_slave_1: entered promiscuous mode [ 90.021680][ T5615] Bluetooth: hci0: command tx timeout [ 90.101755][ T5615] Bluetooth: hci3: command tx timeout [ 90.101902][ T5615] Bluetooth: hci2: command tx timeout [ 90.102005][ T5615] Bluetooth: hci1: command tx timeout [ 90.158898][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.158985][ T5613] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.179844][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.199272][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.199700][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.199840][ T5610] bridge_slave_0: entered allmulticast mode [ 90.208069][ T5610] bridge_slave_0: entered promiscuous mode [ 90.254705][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.255195][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.255351][ T5610] bridge_slave_1: entered allmulticast mode [ 90.257454][ T5610] bridge_slave_1: entered promiscuous mode [ 90.347213][ T5606] team0: Port device team_slave_0 added [ 90.375702][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.385350][ T5606] team0: Port device team_slave_1 added [ 90.432797][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.480576][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.480769][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.495441][ T5611] bridge_slave_0: entered allmulticast mode [ 90.497336][ T5611] bridge_slave_0: entered promiscuous mode [ 90.523779][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.523795][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.523818][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.525609][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.526193][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.526618][ T5611] bridge_slave_1: entered allmulticast mode [ 90.528476][ T5611] bridge_slave_1: entered promiscuous mode [ 90.580242][ T5610] team0: Port device team_slave_0 added [ 90.581916][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.581930][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.581957][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.652776][ T5610] team0: Port device team_slave_1 added [ 90.675985][ T5613] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.703815][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.750783][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.782698][ T5606] hsr_slave_0: entered promiscuous mode [ 90.783960][ T5606] hsr_slave_1: entered promiscuous mode [ 90.785796][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.785810][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.785838][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.826814][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.826864][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.826939][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.938359][ T5611] team0: Port device team_slave_0 added [ 90.986565][ T5611] team0: Port device team_slave_1 added [ 91.055013][ T5610] hsr_slave_0: entered promiscuous mode [ 91.055781][ T5610] hsr_slave_1: entered promiscuous mode [ 91.056337][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 91.056414][ T5610] Cannot create hsr debugfs directory [ 91.116542][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.116560][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.116583][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.185968][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.185985][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.186008][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.401176][ T5611] hsr_slave_0: entered promiscuous mode [ 91.402061][ T5611] hsr_slave_1: entered promiscuous mode [ 91.402831][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 91.402851][ T5611] Cannot create hsr debugfs directory [ 91.613632][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.619285][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.653636][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.659416][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.660332][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.683004][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.716374][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.719449][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.901204][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.901312][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.901461][ T5613] bridge_slave_0: entered allmulticast mode [ 91.903859][ T5613] bridge_slave_0: entered promiscuous mode [ 91.911991][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.926131][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.928481][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.928599][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.928722][ T5613] bridge_slave_1: entered allmulticast mode [ 91.952148][ T5613] bridge_slave_1: entered promiscuous mode [ 91.968148][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.984790][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.016128][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.016976][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.026648][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.034394][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.038631][ T51] cfg80211: failed to load regulatory.db [ 92.063681][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.078985][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.102973][ T5615] Bluetooth: hci0: command tx timeout [ 92.137908][ T5613] team0: Port device team_slave_0 added [ 92.154688][ T5613] team0: Port device team_slave_1 added [ 92.181697][ T5615] Bluetooth: hci2: command tx timeout [ 92.181719][ T55] Bluetooth: hci1: command tx timeout [ 92.181733][ T5615] Bluetooth: hci3: command tx timeout [ 92.229358][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.229374][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.229397][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.280033][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.280050][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.280074][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.334853][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.338086][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.339292][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.346222][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.370605][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.380141][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.403619][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.406707][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.452002][ T5613] hsr_slave_0: entered promiscuous mode [ 92.452888][ T5613] hsr_slave_1: entered promiscuous mode [ 92.453441][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 92.453461][ T5613] Cannot create hsr debugfs directory [ 92.548358][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.665481][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.717280][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.717436][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.753878][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.753960][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.793467][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.840619][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.850792][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.854947][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.867178][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.884814][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.887960][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.905666][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.909436][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.942612][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.949974][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.989293][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.989407][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.027988][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.045548][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.045663][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.081340][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.081462][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.127380][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.127499][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.395521][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.442128][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.476623][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.476827][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.508035][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.508145][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.996331][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.150394][ T5606] veth0_vlan: entered promiscuous mode [ 94.182301][ T55] Bluetooth: hci0: command tx timeout [ 94.207006][ T5606] veth1_vlan: entered promiscuous mode [ 94.261117][ T55] Bluetooth: hci1: command tx timeout [ 94.273283][ T55] Bluetooth: hci3: command tx timeout [ 94.273318][ T55] Bluetooth: hci2: command tx timeout [ 94.338990][ T5606] veth0_macvtap: entered promiscuous mode [ 94.369735][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.375626][ T5606] veth1_macvtap: entered promiscuous mode [ 94.428261][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.460473][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.482903][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.609755][ T5611] veth0_vlan: entered promiscuous mode [ 94.633606][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.635410][ T1014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.636883][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.636930][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.705678][ T5611] veth1_vlan: entered promiscuous mode [ 94.776905][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.776936][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.779070][ T5610] veth0_vlan: entered promiscuous mode [ 94.814818][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.853568][ T5610] veth1_vlan: entered promiscuous mode [ 94.878168][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.878190][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.936704][ T5611] veth0_macvtap: entered promiscuous mode [ 94.962185][ T5611] veth1_macvtap: entered promiscuous mode [ 95.007328][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.020185][ T5610] veth0_macvtap: entered promiscuous mode [ 95.048628][ T5610] veth1_macvtap: entered promiscuous mode [ 95.065935][ T5613] veth0_vlan: entered promiscuous mode [ 95.090269][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.120366][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.120922][ T5613] veth1_vlan: entered promiscuous mode [ 95.149943][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.167114][ T5763] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.208698][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.397078][ T5613] veth0_macvtap: entered promiscuous mode [ 95.410978][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.410999][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.431822][ T5613] veth1_macvtap: entered promiscuous mode [ 95.498096][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.498117][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.516444][ T1268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518364][ T1014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518475][ T1014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518580][ T1014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518678][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518784][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518888][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518986][ T1014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.609938][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.619573][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.619595][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.651440][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.728426][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.728449][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.872251][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.873248][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.873266][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.874181][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.874342][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.874701][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.046973][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.046995][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.145294][ T5781] sg_write: data in/out 671708/136 bytes for SCSI command 0x0-- guessing data in; [ 96.145294][ T5781] program syz.2.8 not setting count and/or reply_len properly [ 96.198033][ T5777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.261182][ T5614] Bluetooth: hci0: command tx timeout [ 96.332737][ T5790] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 96.342102][ T5615] Bluetooth: hci1: command tx timeout [ 96.343347][ T55] Bluetooth: hci3: command tx timeout [ 96.343478][ T5614] Bluetooth: hci2: command tx timeout [ 96.631198][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.781228][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 96.786182][ T9] usb 1-1: New USB device found: idVendor=5bfe, idProduct=a243, bcdDevice=3a.07 [ 96.790346][ T9] usb 1-1: config 14 has an invalid interface number: 199 but max is 0 [ 96.790368][ T9] usb 1-1: config 14 has no interface number 0 [ 96.839328][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.839359][ T9] usb 1-1: Product: syz [ 96.839375][ T9] usb 1-1: Manufacturer: syz [ 96.839391][ T9] usb 1-1: SerialNumber: syz [ 96.892699][ T5699] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.043707][ T5699] usb 4-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 97.048082][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.048111][ T5699] usb 4-1: Product: syz [ 97.048127][ T5699] usb 4-1: Manufacturer: syz [ 97.048153][ T5699] usb 4-1: SerialNumber: syz [ 97.085666][ T5699] usb 4-1: config 0 descriptor?? [ 97.123052][ T5699] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 97.652129][ T5699] gspca_sunplus: reg_r err -110 [ 97.694921][ T1268] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.887364][ T5699] usb 4-1: USB disconnect, device number 2 [ 98.400745][ T5847] FAULT_INJECTION: forcing a failure. [ 98.400745][ T5847] name failslab, interval 1, probability 0, space 0, times 1 [ 98.400792][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(full) [ 98.400818][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.400843][ T5847] Call Trace: [ 98.400856][ T5847] [ 98.400865][ T5847] dump_stack_lvl+0xe8/0x150 [ 98.400913][ T5847] should_fail_ex+0x3eb/0x540 [ 98.400951][ T5847] should_failslab+0xa8/0x100 [ 98.400975][ T5847] __kmalloc_noprof+0xf9/0x710 [ 98.401006][ T5847] ? rcu_is_watching+0x16/0xb0 [ 98.401033][ T5847] ? tomoyo_realpath_from_path+0xef/0x640 [ 98.401069][ T5847] ? tomoyo_realpath_from_path+0xef/0x640 [ 98.401115][ T5847] tomoyo_realpath_from_path+0xef/0x640 [ 98.401163][ T5847] ? tomoyo_path_number_perm+0x219/0x5f0 [ 98.401194][ T5847] tomoyo_path_number_perm+0x246/0x5f0 [ 98.401229][ T5847] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.401305][ T5847] ? __pfx_current_check_access_path+0x10/0x10 [ 98.401341][ T5847] ? d_splice_alias_ops+0x11c/0x440 [ 98.401365][ T5847] ? d_splice_alias+0x12/0x30 [ 98.401398][ T5847] ? lookup_one_qstr_excl+0x1d4/0x360 [ 98.401441][ T5847] tomoyo_path_mkdir+0xb0/0xf0 [ 98.401465][ T5847] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 98.401492][ T5847] ? __pfx_filename_create+0x10/0x10 [ 98.401522][ T5847] security_path_mkdir+0x169/0x350 [ 98.401561][ T5847] filename_mkdirat+0x200/0x510 [ 98.401586][ T5847] ? __might_fault+0xaf/0x130 [ 98.401635][ T5847] ? __pfx_filename_mkdirat+0x10/0x10 [ 98.401666][ T5847] ? do_getname+0x151/0x250 [ 98.401698][ T5847] __se_sys_mkdirat+0x35/0x150 [ 98.401727][ T5847] do_syscall_64+0x166/0x520 [ 98.401758][ T5847] ? trace_irq_disable+0x3b/0x140 [ 98.401783][ T5847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.401806][ T5847] ? clear_bhb_loop+0x70/0xc0 [ 98.401834][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.401857][ T5847] RIP: 0033:0x7f706539e559 [ 98.401896][ T5847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.401916][ T5847] RSP: 002b:00007f706626f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 98.401948][ T5847] RAX: ffffffffffffffda RBX: 00007f7065625fa0 RCX: 00007f706539e559 [ 98.401966][ T5847] RDX: 00000000000001ff RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 98.401983][ T5847] RBP: 00007f7065435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 98.401999][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.402012][ T5847] R13: 00007f7065626038 R14: 00007f7065625fa0 R15: 00007ffd55978368 [ 98.402050][ T5847] [ 98.546254][ T5847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.850124][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.850153][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.954591][ T5855] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 98.973445][ T5699] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.121243][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 99.123697][ T5699] usb 3-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 99.128835][ T5699] usb 3-1: config 245 has an invalid interface number: 214 but max is 0 [ 99.128906][ T5699] usb 3-1: config 245 has no interface number 0 [ 99.128980][ T5699] usb 3-1: config 245 interface 214 has no altsetting 0 [ 99.148901][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.148973][ T5699] usb 3-1: Product: syz [ 99.149008][ T5699] usb 3-1: Manufacturer: syz [ 99.149049][ T5699] usb 3-1: SerialNumber: syz [ 99.276412][ T5790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.321080][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.398844][ T5699] f81534a_ctrl 3-1:245.214: probe with driver f81534a_ctrl failed with error -71 [ 99.433835][ T5699] usb 3-1: USB disconnect, device number 2 [ 99.473049][ T32] usb 2-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=1.00 [ 99.475281][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.475383][ T32] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 99.475428][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.527350][ T9] cdc_acm 1-1:14.199: invalid descriptor buffer length [ 99.550214][ T9] usb 1-1: USB disconnect, device number 2 [ 99.627122][ T32] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 99.715166][ T5864] syzkaller0: entered promiscuous mode [ 99.715219][ T5864] syzkaller0: entered allmulticast mode [ 99.812794][ T5866] X.509: Couldn't decode AuthKeyIdentifier [ 99.901737][ T5694] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.052611][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 100.053416][ T5694] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=4c.9c [ 100.054539][ T5694] usb 4-1: config 91 has an invalid interface number: 231 but max is 0 [ 100.054565][ T5694] usb 4-1: config 91 has no interface number 0 [ 100.054596][ T5694] usb 4-1: config 91 interface 231 has no altsetting 0 [ 100.111806][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.111848][ T5694] usb 4-1: Product: syz [ 100.111864][ T5694] usb 4-1: Manufacturer: syz [ 100.111879][ T5694] usb 4-1: SerialNumber: syz [ 100.115473][ T32] usb 2-1: USB disconnect, device number 2 [ 101.155139][ T5896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 101.215389][ T5896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 101.369863][ T5895] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 101.545523][ T5904] loop0: detected capacity change from 0 to 4096 [ 101.868316][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.158745][ T5925] MTD: Couldn't look up 'mtdblock0': -2 [ 102.496373][ T33] audit: type=1800 audit(1792323757.547:2): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.30" name="file2" dev="sda1" ino=2043 res=0 errno=-22 [ 102.749439][ T5694] gspca_main: spca501-2.14.0 probing 0000:0000 [ 102.750832][ T5694] gspca_spca501: reg write: error -71 [ 102.765718][ T5694] spca501 4-1:91.231: Reg write failed for 0x02,0x0f,0x05 [ 102.765817][ T5694] spca501 4-1:91.231: probe with driver spca501 failed with error -22 [ 102.788740][ T5694] usb 4-1: USB disconnect, device number 3 [ 102.821114][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.953246][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.971930][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 102.972689][ T9] usb 3-1: New USB device found: idVendor=5bfe, idProduct=a243, bcdDevice=3a.07 [ 102.972964][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.975442][ T9] usb 3-1: config 14 has an invalid interface number: 199 but max is 0 [ 102.975468][ T9] usb 3-1: config 14 has no interface number 0 [ 102.979528][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.979553][ T9] usb 3-1: Product: syz [ 102.979569][ T9] usb 3-1: Manufacturer: syz [ 102.979584][ T9] usb 3-1: SerialNumber: syz [ 103.284370][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.284423][ T5613] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #1262: comm syz-executor: Directory block failed checksum [ 103.287222][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.287253][ T5613] EXT4-fs error (device sda1): ext4_empty_dir:3087: inode #1262: comm syz-executor: Directory block failed checksum [ 103.298977][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.299067][ T5613] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #1262: comm syz-executor: Directory block failed checksum [ 103.299890][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.299955][ T5613] EXT4-fs error (device sda1): ext4_empty_dir:3087: inode #1262: comm syz-executor: Directory block failed checksum [ 103.307883][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.309751][ T5613] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #1262: comm syz-executor: Directory block failed checksum [ 103.313954][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.314017][ T5613] EXT4-fs error (device sda1): ext4_empty_dir:3087: inode #1262: comm syz-executor: Directory block failed checksum [ 103.319767][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.319847][ T5613] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #1262: comm syz-executor: Directory block failed checksum [ 103.324355][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.324444][ T5613] EXT4-fs error (device sda1): ext4_empty_dir:3087: inode #1262: comm syz-executor: Directory block failed checksum [ 103.327300][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.327368][ T5613] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #1262: comm syz-executor: Directory block failed checksum [ 103.328698][ T5613] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 103.328845][ T5613] EXT4-fs error (device sda1): ext4_empty_dir:3087: inode #1262: comm syz-executor: Directory block failed checksum [ 103.853412][ T5976] loop0: detected capacity change from 0 to 4096 [ 104.095980][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.136632][ T5982] netlink: 6 bytes leftover after parsing attributes in process `syz.3.38'. [ 104.254435][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.375346][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.560331][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.651172][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651287][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651378][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651494][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651567][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651640][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651715][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651791][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651874][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.651959][ T5992] binder: BINDER_SET_CONTEXT_MGR already set [ 104.652371][ T5994] binder: Write failure EINVAL in pid:40 [ 104.652548][ T5994] binder: Write failure EINVAL in pid:40 [ 104.652676][ T5994] binder: Write failure EINVAL in pid:40 [ 104.652798][ T5994] binder: Write failure EINVAL in pid:40 [ 104.652895][ T5994] binder: Write failure EINVAL in pid:40 [ 104.653023][ T5994] binder: Write failure EINVAL in pid:40 [ 104.653150][ T5994] binder: Write failure EINVAL in pid:40 [ 104.653273][ T5994] binder: Write failure EINVAL in pid:40 [ 104.653397][ T5994] binder: Write failure EINVAL in pid:40 [ 104.653528][ T5994] binder: Write failure EINVAL in pid:40 [ 104.796172][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.896405][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.899554][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.901502][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.902622][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.916511][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.100726][ T12] bridge_slave_1: left allmulticast mode [ 105.100767][ T12] bridge_slave_1: left promiscuous mode [ 105.117703][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.158540][ T12] bridge_slave_0: left allmulticast mode [ 105.158599][ T12] bridge_slave_0: left promiscuous mode [ 105.159536][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.304008][ T5928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.549483][ T9] cdc_acm 3-1:14.199: invalid descriptor buffer length [ 105.592965][ T9] usb 3-1: USB disconnect, device number 3 [ 105.609595][ T6012] loop7: detected capacity change from 0 to 16384 [ 105.661497][ T992] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.754110][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.757452][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.758840][ T12] bond0 (unregistering): Released all slaves [ 105.789634][ T6015] loop7: detected capacity change from 16384 to 0 [ 105.824307][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 105.825410][ T992] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.827538][ T992] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.827568][ T992] usb 4-1: config 0 has no interface number 0 [ 105.848337][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.848419][ T992] usb 4-1: Product: syz [ 105.848459][ T992] usb 4-1: Manufacturer: syz [ 105.848505][ T992] usb 4-1: SerialNumber: syz [ 105.905250][ T992] usb 4-1: config 0 descriptor?? [ 105.957039][ T992] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 106.157927][ T992] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 106.190414][ T992] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 106.586030][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.620447][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.639401][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.640211][ T32] usb 4-1: USB disconnect, device number 4 [ 106.672807][ T992] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.804812][ T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.845093][ T992] usb 2-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 106.865927][ T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.867868][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.867890][ T992] usb 2-1: Product: syz [ 106.867904][ T992] usb 2-1: Manufacturer: syz [ 106.867918][ T992] usb 2-1: SerialNumber: syz [ 106.882814][ T32] quatech2 4-1:0.51: device disconnected [ 106.981468][ T5614] Bluetooth: hci2: command tx timeout [ 107.035824][ T992] usb 2-1: config 0 descriptor?? [ 107.098054][ T992] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 107.099455][ T5999] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.255373][ T992] gspca_sunplus: reg_r err -71 [ 107.268616][ T992] usb 2-1: USB disconnect, device number 3 [ 107.292417][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 107.462108][ T6054] Zero length message leads to an empty skb [ 107.544724][ T12] hsr_slave_0: left promiscuous mode [ 107.549993][ T12] hsr_slave_1: left promiscuous mode [ 107.563312][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.563349][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.581953][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.581977][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.618071][ T12] veth1_macvtap: left promiscuous mode [ 107.618126][ T12] veth0_macvtap: left promiscuous mode [ 107.618244][ T12] veth1_vlan: left promiscuous mode [ 107.618329][ T12] veth0_vlan: left promiscuous mode [ 108.083502][ T6075] capability: warning: `syz.1.57' uses deprecated v2 capabilities in a way that may be insecure [ 108.091855][ T5341] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.132302][ T6072] sd 0:0:1:0: PR command failed: 1026 [ 108.132365][ T6072] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 108.132409][ T6072] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 108.251317][ T5341] usb 4-1: Using ep0 maxpacket: 8 [ 108.255838][ T5341] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.255891][ T5341] usb 4-1: New USB device found: idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 108.258228][ T5341] usb 4-1: config 2 has an invalid interface number: 232 but max is 0 [ 108.258255][ T5341] usb 4-1: config 2 has no interface number 0 [ 108.259250][ T5341] usb 4-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.259279][ T5341] usb 4-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.259306][ T5341] usb 4-1: config 2 interface 232 has no altsetting 0 [ 108.335543][ T5341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.335581][ T5341] usb 4-1: Product: syz [ 108.335597][ T5341] usb 4-1: Manufacturer: syz [ 108.335612][ T5341] usb 4-1: SerialNumber: syz [ 108.507656][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.605528][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.858553][ T6087] process 'syz.2.58' launched './file0' with NULL argv: empty string added [ 108.876342][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 109.062159][ T5614] Bluetooth: hci2: command tx timeout [ 109.343251][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.746853][ T6106] gadgetfs: bound to dummy_udc driver [ 109.981794][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 109.982036][ C0] gadgetfs: connected [ 109.982431][ T10] gadgetfs: disconnected [ 110.110983][ T32] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 110.121895][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.122340][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.122945][ T5999] bridge_slave_0: entered allmulticast mode [ 110.128610][ T5999] bridge_slave_0: entered promiscuous mode [ 110.136890][ C0] gadgetfs: connected [ 110.158358][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.158637][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.159024][ T5999] bridge_slave_1: entered allmulticast mode [ 110.173362][ T5999] bridge_slave_1: entered promiscuous mode [ 110.193619][ T10] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 110.194053][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 110.194090][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.232236][ C0] gadgetfs: configuration #1 [ 110.273100][ T32] usb 3-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 110.289501][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 110.289538][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 60661, setting to 64 [ 110.289570][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 110.289796][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 255, setting to 64 [ 110.313980][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.314009][ T32] usb 3-1: Product: syz [ 110.314025][ T32] usb 3-1: Manufacturer: syz [ 110.314040][ T32] usb 3-1: SerialNumber: syz [ 110.373996][ T32] usb 3-1: config 0 descriptor?? [ 110.445658][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.468576][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.626320][ T5999] team0: Port device team_slave_0 added [ 110.662142][ T5999] team0: Port device team_slave_1 added [ 110.798390][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.800613][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.801701][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.802132][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.807003][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.810605][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.818522][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.823300][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.827821][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.867219][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.869066][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.869761][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.873176][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.877580][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.881471][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.884261][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.888748][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.892403][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.895824][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.900766][ T32] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 110.901283][ T32] input input5: Timeout waiting for response from device. [ 110.956094][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.956113][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.956141][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.983275][ T32] usb 3-1: USB disconnect, device number 4 [ 111.012389][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.012433][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.012514][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.141061][ T5614] Bluetooth: hci2: command tx timeout [ 111.283041][ T5341] usb 4-1: USB disconnect, device number 5 [ 111.336768][ T5999] hsr_slave_0: entered promiscuous mode [ 111.347991][ T5999] hsr_slave_1: entered promiscuous mode [ 111.367905][ T5999] debugfs: 'hsr0' already exists in 'hsr' [ 111.367929][ T5999] Cannot create hsr debugfs directory [ 111.425213][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.745805][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 112.297260][ T5999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.331145][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.332118][ T5999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.379305][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.388162][ T5999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.419716][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.433912][ T5999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.465010][ T5999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.838209][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.919306][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.966111][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.966219][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.046189][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.046315][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.175845][ T6166] FAULT_INJECTION: forcing a failure. [ 113.175845][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 113.175895][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT(full) [ 113.175927][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.175946][ T6166] Call Trace: [ 113.175956][ T6166] [ 113.175965][ T6166] dump_stack_lvl+0xe8/0x150 [ 113.176020][ T6166] should_fail_ex+0x3eb/0x540 [ 113.176060][ T6166] should_failslab+0xa8/0x100 [ 113.176094][ T6166] __kmalloc_noprof+0xf9/0x710 [ 113.176128][ T6166] ? vhost_dev_set_owner+0x316/0xb00 [ 113.176160][ T6166] ? vhost_dev_set_owner+0x316/0xb00 [ 113.176200][ T6166] vhost_dev_set_owner+0x316/0xb00 [ 113.176251][ T6166] vhost_net_ioctl+0x8ff/0x17e0 [ 113.176296][ T6166] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 113.176352][ T6166] ? bpf_lsm_file_ioctl+0x9/0x20 [ 113.176376][ T6166] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 113.176409][ T6166] __se_sys_ioctl+0xfc/0x170 [ 113.176438][ T6166] do_syscall_64+0x166/0x520 [ 113.176470][ T6166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.176495][ T6166] ? clear_bhb_loop+0x70/0xc0 [ 113.176524][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.176547][ T6166] RIP: 0033:0x7ff0dd19e559 [ 113.176575][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.176594][ T6166] RSP: 002b:00007ff0de086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.176623][ T6166] RAX: ffffffffffffffda RBX: 00007ff0dd425fa0 RCX: 00007ff0dd19e559 [ 113.176641][ T6166] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004 [ 113.176656][ T6166] RBP: 00007ff0dd235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 113.176670][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.176691][ T6166] R13: 00007ff0dd426038 R14: 00007ff0dd425fa0 R15: 00007ffd9426ff28 [ 113.176729][ T6166] [ 113.233951][ T5614] Bluetooth: hci2: command tx timeout [ 113.933881][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 114.828927][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.202243][ T6212] ======================================================= [ 115.202243][ T6212] WARNING: The mand mount option has been deprecated and [ 115.202243][ T6212] and is ignored by this kernel. Remove the mand [ 115.202243][ T6212] option from the mount to silence this warning. [ 115.202243][ T6212] ======================================================= [ 115.513359][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 115.787020][ T5999] veth0_vlan: entered promiscuous mode [ 115.822999][ T5999] veth1_vlan: entered promiscuous mode [ 115.982533][ T5999] veth0_macvtap: entered promiscuous mode [ 116.007949][ T5999] veth1_macvtap: entered promiscuous mode [ 116.112922][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.156123][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.222206][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.341467][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.342344][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.354269][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.680302][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.800629][ T6235] netlink: 72 bytes leftover after parsing attributes in process `syz.2.79'. [ 116.886418][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.935826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.935863][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.077800][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.116912][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.129721][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.135814][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.145611][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.146609][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.305002][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.337764][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.337786][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.787787][ T53] bridge_slave_1: left allmulticast mode [ 117.787816][ T53] bridge_slave_1: left promiscuous mode [ 117.788049][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.840152][ T53] bridge_slave_0: left allmulticast mode [ 117.840181][ T53] bridge_slave_0: left promiscuous mode [ 117.840448][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.627072][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.650299][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.671256][ T53] bond0 (unregistering): Released all slaves [ 119.221866][ T55] Bluetooth: hci3: command tx timeout [ 119.273304][ T6239] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.704477][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 119.965745][ T6265] FAULT_INJECTION: forcing a failure. [ 119.965745][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 119.965779][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) [ 119.965806][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.965820][ T6265] Call Trace: [ 119.965829][ T6265] [ 119.965839][ T6265] dump_stack_lvl+0xe8/0x150 [ 119.965877][ T6265] should_fail_ex+0x3eb/0x540 [ 119.965922][ T6265] should_failslab+0xa8/0x100 [ 119.965948][ T6265] ? fdb_create+0x197/0x1270 [ 119.965970][ T6265] kmem_cache_alloc_noprof+0x9c/0x600 [ 119.966005][ T6265] ? __wake_up_common_lock+0x195/0x1f0 [ 119.966038][ T6265] ? fdb_create+0x197/0x1270 [ 119.966067][ T6265] fdb_create+0x197/0x1270 [ 119.966092][ T6265] ? lock_acquire+0x115/0x350 [ 119.966115][ T6265] ? br_fdb_find+0x82/0x210 [ 119.966154][ T6265] ? __pfx_fdb_create+0x10/0x10 [ 119.966176][ T6265] ? br_fdb_find+0x82/0x210 [ 119.966210][ T6265] ? br_fdb_find+0x82/0x210 [ 119.966251][ T6265] fdb_add_local+0x121/0x250 [ 119.966290][ T6265] br_fdb_changeaddr+0x348/0x4b0 [ 119.966335][ T6265] br_device_event+0x693/0x9b0 [ 119.966367][ T6265] ? net_generic+0x1e/0x240 [ 119.966400][ T6265] ? __pfx_br_device_event+0x10/0x10 [ 119.966435][ T6265] ? tee_netdev_event+0x436/0x450 [ 119.966462][ T6265] ? nft_offload_netdev_event+0x25d/0x3e0 [ 119.966506][ T6265] notifier_call_chain+0x1a5/0x3d0 [ 119.966552][ T6265] call_netdevice_notifiers+0x90/0xd0 [ 119.966580][ T6265] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 119.966608][ T6265] ? __pfx___mutex_lock+0x10/0x10 [ 119.966639][ T6265] ? full_name_hash+0x92/0xe0 [ 119.966671][ T6265] ? dev_ifsioc+0x645/0x1360 [ 119.966702][ T6265] ? netdev_need_ops_lock+0xbe/0xf0 [ 119.966736][ T6265] dev_ifsioc+0x65a/0x1360 [ 119.966769][ T6265] ? dev_load+0x21/0x1f0 [ 119.966802][ T6265] dev_ioctl+0x7b4/0x1150 [ 119.966838][ T6265] sock_do_ioctl+0x23e/0x320 [ 119.966865][ T6265] ? __pfx_sock_do_ioctl+0x10/0x10 [ 119.966887][ T6265] ? do_futex+0x3e7/0x4e0 [ 119.966937][ T6265] sock_ioctl+0x57a/0x7e0 [ 119.966960][ T6265] ? __fget_files+0x2a/0x420 [ 119.966994][ T6265] ? __pfx_sock_ioctl+0x10/0x10 [ 119.967017][ T6265] ? __fget_files+0x2a/0x420 [ 119.967050][ T6265] ? __fget_files+0x2a/0x420 [ 119.967087][ T6265] ? bpf_lsm_file_ioctl+0x9/0x20 [ 119.967111][ T6265] ? __pfx_sock_ioctl+0x10/0x10 [ 119.967133][ T6265] __se_sys_ioctl+0xfc/0x170 [ 119.967161][ T6265] do_syscall_64+0x166/0x520 [ 119.967192][ T6265] ? trace_irq_disable+0x3b/0x140 [ 119.967217][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.967241][ T6265] ? clear_bhb_loop+0x70/0xc0 [ 119.967270][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.967294][ T6265] RIP: 0033:0x7ff0dd19e559 [ 119.967316][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.967335][ T6265] RSP: 002b:00007ff0de086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.967361][ T6265] RAX: ffffffffffffffda RBX: 00007ff0dd425fa0 RCX: 00007ff0dd19e559 [ 119.967378][ T6265] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 000000000000000e [ 119.967393][ T6265] RBP: 00007ff0dd235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 119.967407][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.967421][ T6265] R13: 00007ff0dd426038 R14: 00007ff0dd425fa0 R15: 00007ffd9426ff28 [ 119.967459][ T6265] [ 120.462402][ T32] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 120.623092][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.625216][ T32] usb 5-1: not running at top speed; connect to a high speed hub [ 120.625252][ T32] usb 5-1: New USB device found: idVendor=0644, idProduct=800f, bcdDevice=0.40 [ 120.626256][ T32] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.626278][ T32] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.652589][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.652664][ T32] usb 5-1: Product: syz [ 120.652714][ T32] usb 5-1: Manufacturer: syz [ 120.652757][ T32] usb 5-1: SerialNumber: syz [ 121.012237][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.012864][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.087609][ T32] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 121.143717][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 121.301540][ T55] Bluetooth: hci3: command tx timeout [ 121.592765][ T32] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 121.652594][ T32] usb 5-1: selecting invalid altsetting 1 [ 121.652619][ T32] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 121.661705][ T32] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 121.679670][ T32] usb 5-1: USB disconnect, device number 2 [ 121.868428][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.900776][ T53] hsr_slave_0: left promiscuous mode [ 121.918042][ T53] hsr_slave_1: left promiscuous mode [ 121.926229][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.926295][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.943107][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.943130][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.017367][ T53] veth1_macvtap: left promiscuous mode [ 122.017408][ T53] veth0_macvtap: left promiscuous mode [ 122.017615][ T53] veth1_vlan: left promiscuous mode [ 122.017688][ T53] veth0_vlan: left promiscuous mode [ 122.212120][ T5341] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.262981][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.279499][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.361646][ T5341] usb 5-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.362785][ T5341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.362838][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.368234][ T5341] usb 5-1: config 0 descriptor?? [ 122.409921][ T5341] pwc: Askey VC010 type 2 USB webcam detected. [ 122.481979][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.652884][ T32] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 122.655199][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.655248][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.660806][ T32] usb 3-1: config 0 descriptor?? [ 122.822809][ T5341] pwc: recv_control_msg error -32 req 02 val 2b00 [ 122.825609][ T5341] pwc: recv_control_msg error -32 req 02 val 2700 [ 122.849257][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.875435][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.877962][ T5341] pwc: recv_control_msg error -32 req 02 val 2c00 [ 122.901317][ T32] ath6kl: Failed to submit usb control message: -71 [ 122.901373][ T32] ath6kl: unable to send the bmi data to the device: -71 [ 122.901391][ T32] ath6kl: Unable to send get target info: -71 [ 122.928138][ T32] ath6kl: Failed to init ath6kl core: -71 [ 122.964545][ T32] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 123.001645][ T32] usb 3-1: USB disconnect, device number 5 [ 123.140065][ T6347] syz.4.93 uses obsolete (PF_INET,SOCK_PACKET) [ 123.266515][ T53] team0 (unregistering): Port device team_slave_1 removed [ 123.325191][ T53] team0 (unregistering): Port device team_slave_0 removed [ 123.383990][ T55] Bluetooth: hci3: command tx timeout [ 123.911866][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 124.032123][ T5341] pwc: recv_control_msg error -71 req 04 val 1300 [ 124.034148][ T5341] pwc: recv_control_msg error -71 req 04 val 1400 [ 124.036859][ T5341] pwc: recv_control_msg error -71 req 02 val 2000 [ 124.039696][ T5341] pwc: recv_control_msg error -71 req 02 val 2100 [ 124.084841][ T5341] pwc: recv_control_msg error -71 req 04 val 1500 [ 124.086504][ T5341] pwc: recv_control_msg error -71 req 02 val 2500 [ 124.087280][ T5341] pwc: recv_control_msg error -71 req 02 val 2400 [ 124.087744][ T5341] pwc: recv_control_msg error -71 req 02 val 2600 [ 124.088190][ T5341] pwc: recv_control_msg error -71 req 02 val 2900 [ 124.088620][ T5341] pwc: recv_control_msg error -71 req 02 val 2800 [ 124.089251][ T5341] pwc: recv_control_msg error -71 req 04 val 1100 [ 124.089681][ T5341] pwc: recv_control_msg error -71 req 04 val 1200 [ 124.156550][ T5341] pwc: Registered as video103. [ 124.176447][ T5341] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 124.199148][ T5341] usb 5-1: USB disconnect, device number 3 [ 124.748824][ T6112] gadgetfs: suspended from state 3 [ 124.750591][ T32] usb 1-1: USB disconnect, device number 3 [ 124.756279][ T6112] gadgetfs: disconnected [ 124.771563][ T5606] ================================================================== [ 124.771579][ T5606] BUG: KASAN: slab-use-after-free in __mutex_lock+0x14e/0x15a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.771613][ T5606] Read of size 8 at addr ffff88807b3a3058 by task syz-executor/5606 [ 124.771630][ T5606] [ 124.771641][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 124.771663][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.771676][ T5606] Call Trace: [ 124.771683][ T5606] [ 124.771691][ T5606] dump_stack_lvl+0xe8/0x150 [ 124.771720][ T5606] print_address_description+0x55/0x1e0 [ 124.771750][ T5606] ? __mutex_lock+0x14e/0x15a0 [ 124.771777][ T5606] print_report+0x58/0x70 [ 124.771809][ T5606] kasan_report+0x117/0x150 [ 124.771833][ T5606] ? __mutex_lock+0x14e/0x15a0 [ 124.771867][ T5606] __mutex_lock+0x14e/0x15a0 [ 124.771900][ T5606] ? seqcount_lockdep_reader_access+0xea/0x100 [ 124.771933][ T5606] ? ep_open+0x4e/0x270 [ 124.771957][ T5606] ? __pfx___mutex_lock+0x10/0x10 [ 124.771984][ T5606] ? apparmor_file_open+0x523/0x6c0 [ 124.772015][ T5606] ? __pfx_apparmor_file_open+0x10/0x10 [ 124.772043][ T5606] ep_open+0x4e/0x270 [ 124.772065][ T5606] ? do_dentry_open+0x7ff/0x1360 [ 124.772098][ T5606] ? __pfx_ep_open+0x10/0x10 [ 124.772120][ T5606] do_dentry_open+0x80e/0x1360 [ 124.772151][ T5606] vfs_open_consume+0x4a/0x350 [ 124.772175][ T5606] ? path_openat+0x16e1/0x20f0 [ 124.772196][ T5606] path_openat+0x16fc/0x20f0 [ 124.772226][ T5606] do_file_open+0x23e/0x4a0 [ 124.772251][ T5606] ? __pfx_do_file_open+0x10/0x10 [ 124.772283][ T5606] ? _raw_spin_unlock+0x28/0x50 [ 124.772307][ T5606] ? alloc_fd+0x6af/0x760 [ 124.772340][ T5606] do_sys_openat2+0x115/0x200 [ 124.772368][ T5606] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.772397][ T5606] ? __se_sys_unlink+0xc2/0x140 ** replaying previous printk message ** [ 124.772397][ T5606] ? __se_sys_unlink+0xc2/0x140 [ 124.772420][ T5606] ? kmem_cache_free+0x182/0x650 [ 124.772453][ T5606] __x64_sys_openat+0x138/0x170 [ 124.772482][ T5606] do_syscall_64+0x166/0x520 [ 124.772510][ T5606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.772532][ T5606] ? clear_bhb_loop+0x70/0xc0 [ 124.772556][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.772578][ T5606] RIP: 0033:0x7fa91455ed8e [ 124.772598][ T5606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.772615][ T5606] RSP: 002b:00007fffddecff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.772639][ T5606] RAX: ffffffffffffffda RBX: 0000555581bc2500 RCX: 00007fa91455ed8e [ 124.772655][ T5606] RDX: 0000000000000000 RSI: 00007fffdded00b0 RDI: ffffffffffffff9c [ 124.772670][ T5606] RBP: 00007fffdded00b0 R08: 0000000000000000 R09: 0000000000000000 [ 124.772684][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdded11a0 [ 124.772698][ T5606] R13: 00007fa914634efb R14: 0000555581bc24e8 R15: 0000000000000006 [ 124.772723][ T5606] [ 124.772730][ T5606] [ 124.772744][ T5606] Allocated by task 6106: [ 124.772754][ T5606] kasan_save_track+0x3e/0x80 [ 124.772784][ T5606] __kasan_kmalloc+0x93/0xb0 [ 124.772801][ T5606] __kmalloc_cache_noprof+0x31c/0x600 [ 124.772829][ T5606] gadgetfs_bind+0x277/0xad0 [ 124.772848][ T5606] gadget_bind_driver+0x2ca/0x9e0 [ 124.772878][ T5606] really_probe+0x254/0xae0 [ 124.772903][ T5606] __driver_probe_device+0x1e8/0x360 [ 124.772927][ T5606] driver_probe_device+0x4f/0x240 [ 124.772951][ T5606] __driver_attach+0x339/0x600 [ 124.772976][ T5606] bus_for_each_dev+0x23b/0x2c0 [ 124.773005][ T5606] bus_add_driver+0x38f/0x6e0 [ 124.773036][ T5606] driver_register+0x23a/0x320 [ 124.773062][ T5606] usb_gadget_register_driver_owner+0xf9/0x270 [ 124.773099][ T5606] dev_config+0xe3c/0x12a0 [ 124.773117][ T5606] vfs_write+0x296/0xba0 [ 124.773145][ T5606] ksys_write+0x150/0x270 [ 124.773173][ T5606] do_syscall_64+0x166/0x520 [ 124.773198][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.773218][ T5606] [ 124.773223][ T5606] Freed by task 6112: [ 124.773232][ T5606] kasan_save_track+0x3e/0x80 [ 124.773262][ T5606] kasan_save_free_info+0x40/0x50 [ 124.773286][ T5606] __kasan_slab_free+0x5c/0x80 [ 124.773303][ T5606] kfree+0x1c5/0x650 [ 124.773325][ T5606] destroy_ep_files+0x29f/0x330 [ 124.773345][ T5606] gadgetfs_unbind+0x109/0x2b0 [ 124.773364][ T5606] gadget_unbind_driver+0x1cb/0x410 [ 124.773394][ T5606] device_release_driver_internal+0x48b/0x880 [ 124.773419][ T5606] driver_detach+0x1f3/0x2d0 [ 124.773442][ T5606] bus_remove_driver+0x226/0x320 [ 124.773471][ T5606] usb_gadget_unregister_driver+0x4e/0x70 [ 124.773500][ T5606] dev_release+0x83/0x200 [ 124.773518][ T5606] __fput+0x408/0xa40 [ 124.773541][ T5606] fput_close_sync+0x11f/0x240 [ 124.773566][ T5606] filp_close_sync+0x6e/0xa0 [ 124.773591][ T5606] put_files_struct+0x230/0x3c0 [ 124.773617][ T5606] do_exit+0x6f0/0x2360 [ 124.773642][ T5606] do_group_exit+0x22d/0x2f0 [ 124.773669][ T5606] get_signal+0x1216/0x12c0 [ 124.773687][ T5606] arch_do_signal_or_restart+0xbb/0x860 [ 124.773714][ T5606] irqentry_exit+0x348/0x9b0 [ 124.773739][ T5606] asm_exc_page_fault+0x26/0x30 [ 124.773758][ T5606] [ 124.773762][ T5606] The buggy address belongs to the object at ffff88807b3a3000 [ 124.773762][ T5606] which belongs to the cache kmalloc-512 of size 512 [ 124.773779][ T5606] The buggy address is located 88 bytes inside of [ 124.773779][ T5606] freed 512-byte region [ffff88807b3a3000, ffff88807b3a3200) [ 124.773805][ T5606] [ 124.773810][ T5606] The buggy address belongs to the physical page: [ 124.773826][ T5606] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b3a0 [ 124.773845][ T5606] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 124.773862][ T5606] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 124.773887][ T5606] page_type: f5(slab) [ 124.773906][ T5606] raw: 00fff00000000040 ffff88813ff27c80 dead000000000100 dead000000000122 [ 124.773924][ T5606] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 124.773943][ T5606] head: 00fff00000000040 ffff88813ff27c80 dead000000000100 dead000000000122 [ 124.773962][ T5606] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 124.773981][ T5606] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 124.773999][ T5606] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 124.774010][ T5606] page dumped because: kasan: bad access detected [ 124.774027][ T5606] page_owner tracks the page as allocated [ 124.774035][ T5606] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5350, tgid 5350 (S50sshd), ts 58674688438 [ 124.774078][ T5606] post_alloc_hook+0x1f9/0x250 [ 124.774105][ T5606] get_page_from_freelist+0x220f/0x2280 [ 124.774134][ T5606] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 124.774164][ T5606] allocate_slab+0x7d/0x5e0 [ 124.774184][ T5606] refill_objects+0x2d5/0x350 [ 124.774205][ T5606] __pcs_replace_empty_main+0x2c8/0x6c0 [ 124.774226][ T5606] __kmalloc_noprof+0x476/0x710 [ 124.774253][ T5606] tomoyo_init_log+0x1a6b/0x1f60 [ 124.774282][ T5606] tomoyo_supervisor+0x35f/0x1550 [ 124.774313][ T5606] tomoyo_path_permission+0x262/0x3b0 [ 124.774338][ T5606] tomoyo_path_perm+0x3f3/0x560 [ 124.774361][ T5606] security_inode_getattr+0x12b/0x310 [ 124.774380][ T5606] vfs_getattr+0x23/0x70 [ 124.774403][ T5606] vfs_statx_path+0x2b/0x230 [ 124.774430][ T5606] vfs_statx+0x12e/0x200 [ 124.774453][ T5606] vfs_fstatat+0x11b/0x170 [ 124.774475][ T5606] page last free pid 5351 tgid 5351 ts 58571898596 stack trace: [ 124.774489][ T5606] __free_frozen_pages+0xc97/0xd90 [ 124.774514][ T5606] stack_depot_save_flags+0x41e/0x7f0 [ 124.774542][ T5606] kasan_save_track+0x4f/0x80 [ 124.774571][ T5606] __kasan_kmalloc+0x93/0xb0 [ 124.774588][ T5606] __kmalloc_cache_noprof+0x31c/0x600 [ 124.774617][ T5606] kmem_cache_free+0x156/0x650 [ 124.774644][ T5606] mempool_free+0xec/0x130 [ 124.774667][ T5606] bio_endio+0x3f/0xac0 [ 124.774688][ T5606] blk_update_request+0x57b/0xe50 [ 124.774712][ T5606] scsi_end_request+0x77/0x820 [ 124.774742][ T5606] scsi_io_completion+0x133/0x360 [ 124.774773][ T5606] blk_done_softirq+0x10a/0x160 [ 124.774794][ T5606] handle_softirqs+0x265/0x8d0 [ 124.774814][ T5606] do_softirq+0x77/0xd0 [ 124.774832][ T5606] __local_bh_enable_ip+0x100/0x140 [ 124.774852][ T5606] __sha256_update+0xef/0x150 [ 124.774882][ T5606] [ 124.774887][ T5606] Memory state around the buggy address: [ 124.774898][ T5606] ffff88807b3a2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.774912][ T5606] ffff88807b3a2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.774926][ T5606] >ffff88807b3a3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.774937][ T5606] ^ [ 124.774948][ T5606] ffff88807b3a3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.774962][ T5606] ffff88807b3a3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.774973][ T5606] ================================================================== [ 124.972845][ T5606] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.678365][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 125.687842][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.697917][ T5606] Call Trace: [ 125.701220][ T5606] [ 125.704170][ T5606] vpanic+0x26f/0x710 [ 125.708183][ T5606] panic+0xc5/0xd0 [ 125.711929][ T5606] ? __pfx_panic+0x10/0x10 [ 125.716377][ T5606] ? preempt_schedule_thunk+0x16/0x40 [ 125.721772][ T5606] ? __mutex_lock+0x14e/0x15a0 [ 125.726589][ T5606] ? preempt_schedule_thunk+0x16/0x40 [ 125.731983][ T5606] ? __mutex_lock+0x14e/0x15a0 [ 125.736773][ T5606] check_panic_on_warn+0x89/0xb0 [ 125.741758][ T5606] ? __mutex_lock+0x14e/0x15a0 [ 125.746551][ T5606] end_report+0x73/0x170 [ 125.750817][ T5606] ? __mutex_lock+0x14e/0x15a0 [ 125.755617][ T5606] kasan_report+0x128/0x150 [ 125.760140][ T5606] ? __mutex_lock+0x14e/0x15a0 [ 125.764940][ T5606] __mutex_lock+0x14e/0x15a0 [ 125.769567][ T5606] ? seqcount_lockdep_reader_access+0xea/0x100 [ 125.775750][ T5606] ? ep_open+0x4e/0x270 [ 125.779928][ T5606] ? __pfx___mutex_lock+0x10/0x10 [ 125.785081][ T5606] ? apparmor_file_open+0x523/0x6c0 [ 125.790332][ T5606] ? __pfx_apparmor_file_open+0x10/0x10 [ 125.795903][ T5606] ep_open+0x4e/0x270 [ 125.799909][ T5606] ? do_dentry_open+0x7ff/0x1360 [ 125.804955][ T5606] ? __pfx_ep_open+0x10/0x10 [ 125.809572][ T5606] do_dentry_open+0x80e/0x1360 [ 125.814370][ T5606] vfs_open_consume+0x4a/0x350 [ 125.819168][ T5606] ? path_openat+0x16e1/0x20f0 [ 125.823955][ T5606] path_openat+0x16fc/0x20f0 [ 125.828580][ T5606] do_file_open+0x23e/0x4a0 [ 125.833111][ T5606] ? __pfx_do_file_open+0x10/0x10 [ 125.838166][ T5606] ? _raw_spin_unlock+0x28/0x50 [ 125.843036][ T5606] ? alloc_fd+0x6af/0x760 [ 125.847400][ T5606] do_sys_openat2+0x115/0x200 [ 125.852111][ T5606] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.857347][ T5606] ? __se_sys_unlink+0xc2/0x140 [ 125.862220][ T5606] ? kmem_cache_free+0x182/0x650 [ 125.867187][ T5606] __x64_sys_openat+0x138/0x170 [ 125.872063][ T5606] do_syscall_64+0x166/0x520 [ 125.876701][ T5606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.882788][ T5606] ? clear_bhb_loop+0x70/0xc0 [ 125.887508][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.893422][ T5606] RIP: 0033:0x7fa91455ed8e [ 125.897866][ T5606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.917492][ T5606] RSP: 002b:00007fffddecff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.925942][ T5606] RAX: ffffffffffffffda RBX: 0000555581bc2500 RCX: 00007fa91455ed8e [ 125.933931][ T5606] RDX: 0000000000000000 RSI: 00007fffdded00b0 RDI: ffffffffffffff9c [ 125.941928][ T5606] RBP: 00007fffdded00b0 R08: 0000000000000000 R09: 0000000000000000 [ 125.949926][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdded11a0 [ 125.957922][ T5606] R13: 00007fa914634efb R14: 0000555581bc24e8 R15: 0000000000000006 [ 125.965928][ T5606] [ 125.969153][ T5606] Kernel Offset: disabled [ 125.973493][ T5606] Rebooting in 86400 seconds..