last executing test programs: 2m44.794891966s ago: executing program 0 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x10002, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x6000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf6, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000740)=""/125, 0x7d) getdents(r4, 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="710000000000000007fffffffff000000100000000000000010000800000000002"], 0x0, 0x0, 0x0, 0x0}) 2m44.283145996s ago: executing program 0 (id=442): inotify_init() pselect6(0x0, 0x0, &(0x7f0000000240)={0x2, 0x1, 0x0, 0xa0, 0x8, 0xed40, 0x3, 0x80000001}, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) creat(&(0x7f0000000100)='./file0\x00', 0xc2) r0 = timerfd_create(0x1, 0x80000) r1 = epoll_create(0x5) unshare(0x20000400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000200)=0xd) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m42.576189792s ago: executing program 0 (id=449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20000001}}, 0x8003, 0xbffc, 0x80e655, 0x2, 0x24, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x5, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m41.179810028s ago: executing program 0 (id=453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2m40.683423374s ago: executing program 0 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0x6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 2m39.801163885s ago: executing program 0 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1', 0x1) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 2m24.692384515s ago: executing program 32 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='1', 0x1) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 17.536986159s ago: executing program 4 (id=1052): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2d516fba, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x3fd) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) close(0x3) 15.719041606s ago: executing program 4 (id=1059): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0xfffffffc, r3}, 0x10) 14.337291045s ago: executing program 4 (id=1063): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f00000000c0)=ANY=[], 0x2, 0x18a, &(0x7f00000001c0)="$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") setpgid(r4, r4) setpgid(0x0, r4) open_tree(r2, &(0x7f0000000040)='./file1\x00', 0x80100) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 13.217843738s ago: executing program 4 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000", 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) 12.796472714s ago: executing program 4 (id=1069): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600d16f000000000000df251c7c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048015}, 0x10) 10.589718518s ago: executing program 4 (id=1075): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xca880) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10.309902364s ago: executing program 33 (id=1075): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xca880) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.529346411s ago: executing program 2 (id=1086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2000000c}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r5, 0x8}, {r4, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) close_range(r0, 0xffffffffffffffff, 0x0) 6.526687429s ago: executing program 2 (id=1090): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$eJzs3Au0j9XWMPA511oPm6R/klvWXPPhn1wWSZJLQi5JkiRJbgkJSZKQ3HJLQhJyT3IPyS12cr/fck+SI0mSkNyS9Q2d3s95T+d9O+93+j7fOHv+xljjv+Z+njn/a+25x36e5z/G3t91GFy5bpUKtZkZ/iX415fuAJACAP0A4DoAiACgeJbiWS4fz6Cx+7/2JuLP9ci0q70CcTVJ/9M26X/aJv1P26T/aZv0P22T/qdt0v+0TfovRFq2dXrO62Wk3SGf/6dlcv3/N3K48Jiv1he+seP/IEX6n7ZJ/9M26X/aJv1P26T/aZv0/99f+f/mmPQ/bZP+C5GWXe3Pn2Vc3XG1f/6EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQN58IVBgD+Y3611yWEEEIIIYQQQog/T0h/tVcghBBCCCGEEEKI//sQFGgwEEE6SA8pkAEywjWQCa6FzHAdJOB6yAI3QFa4EbJBdsgBOSEX3AS5wQKBA4YY8kBeSMLNkA9ugfxQAApCIfBQGIrArVAUboNicDsUhzugBNwJJaEUlIYycBeUhbuhHJSHCnAPVIRKUBmqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DevA41IcG0BAaQeP/o/yXoAu8DF2hG3SHHtATXoFe0Bv6QF/oB69Cf3gNBsDrMBAGwWB4A4bAmzAU3oJhMBxGwNswEkbBaBgDY2EcjId3YAK8CxPhPZgEk2EKTIVpMB1mwPswE2bBbPgA5sCHMBfmwXxYAAvhI1gEiyEVPoYl8AkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFT2EbbIcdsBN2wW7YA5/BXvgc9sEXsB++/B/mn/27/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIW5MTcSEjIy5sE8mMQk5sN8mB/zY0EsiB49FsEiWBRvw2JYDItjcSyBJbAklsJSWAbLYFksi+WwHFbAClgRK2JlrIz34r14H1bDalgdq2MNrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rY0NsiI2xMTbBJtgUm2JzbI4tsAW2xJbYGltjG2yDbbEttsN22B7bYwfsgB2xE3bCl/AlfBlfxm5YUfXAntgTe2Ev7IN9sS++iv3xNXwNX8eBOAgH4xv4Br6JQ/EMDsPhOAJHYFk1CkfjGGQ1DsfjeJyAE3AiTsRJOBkn41SchtNxBs7AmTgLZ+EHOAc/xA9xHs7DBbgQF+IiXIypmIpL8CwuxWW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BT/FT3I7bcSfuxN24Gz/Dz/Bz/BwH4n7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+fwHF7AC3gRX8j1TZ3dBdYNBHWZUUalU+lUikpRGVVGlUllUplVZpVQCZVFZVHlACCbyqZyqBwql8qlcqvcihQpVrHKo/KkAIDKp/Kp/Cq/KqgKKq+8KqKKqKKqqCqmiqni6g5VQt2pSqpSqpkvo8qosqq5L6fKqwqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqqHVC3VA/vgI+pyZ+qqQVhPDcb6qoFqqBqpN/EJ1UQNxaaqmWqunlLDcRi2VE18a/WMaqNGY1v1nBqDz6v2ahx2UC+qjqqT6qxeUl1UU99VdVOTsIfqqaZiL9Vb9VF91UyspC53rLJ6XQ1Ug9Rg9YZagG+qoeotNUwNVyPU22qkGqVGqzFqrBqnxqt31AT1rpqo3lOT1GQ1RU1V09R0NUO9r2aqWWq2+kDNUR+quWqemq8WqIXqI7VILVap6mO1RH2ilqplarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqT9U2tV3tUDvVLrVb7VGfqb3qc7VPfaH2qy/VAfUXdVB9pQ6pr9Vh9Y06or5VR9V36pj6Xh1XP6gT6qQ6pX5Up9VP6ow6q86p8+qC+lldVL+oSyoo0KiV1troSKfT6XWKzqAz6mt0Jn2tzqyv0wl9vc6ib9BZ9Y06m86uc+icOpe+SefWVpN2mnWs8+i8Oqlv1vn0LTq/LqAL6kLa68K6iL5VF9W36WL6dl1c36FL6Dt1SV1Kl9Zl9F26rL5bl9PldQV9j66oK+nKuoq+V1fV9+lq+n5dXT+ga+gHdU39kK6lH9a19SO6jn5U19WP6Xr6cV1fN9ANdSPdWD+hm+gndVPdTDfXT+kW+mndUrfSrfUzuo1+VrfVz+l2+nndXr+gO+gXdUfdSXfWv+hLOuiuupvurnvonvoV3Uv31n10X91Pv6r769f0AP26HqgH6cH6DT1Ev6mH6rf0MD1cj9Bv65F6lB6tx+ixepwer9/RE/S7eqJ+T0/Sk/UUPVVP09N1n98qzf67/B6/XXX/Nv/df5A/4Nd336K36k/1Nr1d79A79S69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf00YAA+pg+ro/rE/qkPq9/1Kf1T/qMPqvP6vP6gr6gL/72PQCDRhltjIlMOpPepJgMJqO5xmQy15rM5jqTMNebLOYGk9XcaLKZ7CaHyWlymZtMbmMNGWfYxCaPyWuS5maTz9xi8psCpqApZLwpbIqYW//l/D9aX2PT2DQxTUxT09Q0N81NC9PCtDQtTWvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQ2nU0X08V0NV1Nd9Pd9DSvmF6mt+lj+pp+5lXT3/Q3A8wAM9AMNIPNYDPEDDFDzVAzzAwzI8wIM9KMNKPNaDPWjDXjzXgzwUwwE81EM8lMMlPMFDPNTDMzzAwz08w0s81sM8fMMXPNXDPfzDcLzUKzyCwyqSbVLDFLzFKzzCwzK8wKs8qsMmvMGrPOrDMbzAazyWwyS81Ws9VsM9vMDrPD7DK7zB6zx+w1e80+s8/sN/vNAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXOsx3Fz3JwwJ8wpc8qcNqfNGXPGnDPnzAVzwVw0F80lc+nybV+kIhWZyETponRRSpQSZYwyRpmiTFHmKHOUiBJRlihLlDW6McoWZY9yRDmjXNFNUe7IRhS5iKM4yhPljZLRzVG+6JYof1QgKhgVinxUOCoS3RoVjW6LikW3R8WjO6IS0Z1RyahUVDoqE90VlY3ujspF5aMK0T1RxahSVDmqEt0bVY3ui6pF90fVoweiGtGDUc3ooahW9HBUO3okqhM9GtWNHovqRY9H9aMGUcOoUdT4T60fwpnsT/qutpvtbnvYnvYV28v2tn1sX9vPvmr729fsAPu6HWgH2cH2DTvEvmmH2rfsMDvcjrBv25F2lB1tx9ixdpwdb9+xE+y7dqJ9z06yk+0UO9VOs9PtDPu+nWln2dn2AzvHfmjn2nl2vl1gF9qP7CK72Kbaj+0S+4ldapfZ5XaFXWlXnb8ewK616+x6u8FutJvsZrvFbrWf2m12u91hd9pddrfdYz+ze+3ndp/9wu63X9oD9i/2oP3KHrJf28P2G3vEfmuP2u/sMfu9PW5/sCfsSXvK/mhP25/sGXvWnrPn7QX7s71of7GXbLh8c3/58k6GDKWjdJRCKZSRMlImykSZKTMlKEFZKAtlpayUjbJRDspBuSgX5abcdBkTUx7KQ0lKUj7KR/kpPxWkguTJUxEqQkWpKBWjYlScilMJKkElqSSVptJ0F91Fd9PdVJ7K0z10D1WiSlSFqlBVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSQGlJjakxNqAk1pabUnJpTC2pBLakltabW1IbaUFtqS+2oHbWn9tSBOlBH6kidqTN1oS7UlbpSd+pOPakn9aJe1If6UD/qR/2pPw2gATSQBtJgGkxDaAgNpaE0jIbTCHqbRtIoGk1jaCyNo/E0nibQBJpIE2kSTaIpNIWm0TSaQTNoJs2k2TSb5tAcmktzaT7Np4W0kBbRIkqlVFpCS2gpLaXltJxW0kpaTatpLa2l9bSeNtJG2kybaSttpW20jXbQDtpFu2gP7aG9tJf20T7aT/vpAB2gg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaBTdIpO02k6Q2foHJ2jC/QzXaRf6BIFSnEKMrprXCZ3rcvsrnMpLoP72ziHy+lyuZtcbmddNpf9P8XknMvvCriCrpDzrrAr4m79XVzSlXKlXRl3lyvr7nblfhdXdfe5au5+V9094Kq4e3+L0/8a13APupruMVfLPe5quwaujmvk6rrHXD33uKvvGriGrpFr4Z52LV0r19o949q4Z38XL3KL3Vq3zq13G9xe97k75867o+47d8H97Lq6bq6fe9X1d6+5Ae51N9AN+l08wr3tRrpRbrQb48a6cb+Lp7ipbpqb7ma4991MN+t38UL3kZvjUt1cN8/Ndwt+jS+vKdV97Ja4T9xSt8wtdyvcSrfKrXZr/vdaV7hNbrPb4va4z9w2t93tcDvdLrf71/jyPva5L9x+96U74r51B91X7pA75g67b36NL+/vmPveHXc/uBPupDvlfnSn3U/ujDv76/4v7/1H94u75IIDRlas2XDE6Tg9p3AGzsjXcCa+ljPzdZzg6zkL38BZ+UbOxtk5B+fkXHwT52bLxI6ZY87DeTnJN3M+voXzcwEuyIXYc2EuwrdyUb6Ni/HtXJzv4BJ8J5fkUlyay/BdXJbv5nJcnivwPVyRK3FlrsL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOvx41yfG3BDbsSN+Qluwk9yU27GzfkpbsFPc0tuxa35GW7Dz3Jbfo7b8fPcnl/gDvwid+RO3Jlf4i78Mnflbtyde3BPfoV7cW/uw325H7/K/fk1HsCv80AexIP5DR7Cb/JQfouH8XAewW/zSB7Fo3kMj+VxPJ7f4bMLW+W4fK83iSfzFJ7K03g6z+D3eSbP4tn8Ac/hD3kuz+P5vIAX8ke8iBdzKn/MS/gTXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xbeyp/yNt7OO3gn7+LdvIc/4738Oe/jL3g/f8kH+C98kL/iQ/w1H+Zv+Ah/y0f5Oz7G3/Nx/oFP8Ek+xT/yaf6Jz/BZPsfn+QL/zBf5F77EgSHGWMU6NnEUp4vTxylxhjhjfE2cKb42zhxfFyfi6+Ms8Q1x1vjGOFucPc4R54xzxTfFuWMbU+xijuM4T5w3TsY3x/niW+L8cYG4YFwo9nHhuEh8a1w0vi0uFt8eF4/viEvEd8Yl41LxYw+Uie+Ky8Z3x+Xi8nGF+J64YlwprhxXie+Nq8b3xdXi++Pq8QNxsfjBuGb8UFwrfjiuHT8S14kfjevGj8X14sfj+nGDuGHcKG4cPxE3iZ+Mm8bN4ubxU3GL+Om4Zdwqbh0/E7eJn/3D493jHnHP+JX4lTiE+/X85ILkwuRHyUXJxcnU5MfJJclPkkuTy5LLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSIVRJDx698tobH/l0Pr1P8Rl8Rn+Nz+Sv9Zn9dT7hr/dZ/A0+q7/RZ/PZfQ6f0+fyN/nc3nryzrOPfR6f1yf9zT6fv8Xn9wV8QV/Ie1/YF/GNfGPf2DfxT/qmvplv7p/yT/mn/dO+lW/ln/Ft/LO+rX/Ot/PP+/b+Bf+Cf9F39J18Z/+S7+Jf9l19N9/dd/c9fU/fy/fyfXwf38/38/19fz/AD/AD/UA/2A/2Q/wQP9QP9cP8MD/Cj/Aj/Ug/2o/2Y/1YP96P9xP8BD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/Zz8s/xc/1cP9/P9wv9Qr/IL/KpPtUv8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/z2/wOv8Pv8rv8Hr/H7/V7/T6/z+/3+/0Bf8Af9Af9If+1P+y/8Uf8t/6o/84f89/74/4Hf8Kf9Kf8j/60/8mf8Wf9OX/eX/A/+4v+F3/JBz8+8U5iQuLdxMTEe4lJicmJKYmpiWmJ6YkZifcTMxOzErMTHyTmJD5MzE3MS8xPLEgsTHyUWJRYnEhNfJxYkvgksTSxLLE8sSKxMrEqEcJN2+KQJ+QNyXBzyBduCflDgVAwFAo+FA5Fwq2haLgtFAu3h+LhjlAi3BlKhlKhdHg81A8NQsPQKDQOT4Qm4cnQNDQLzcNToUV4OrQMrULr8ExoE54NbcNzoV14PrQPL4QO4cXQMXQKncNLoUt4OXQN3UL30CP0DK+EXqF36BP6hn7h1dA/vBYGhNfDwDAoDA5vhCHhzTA0vBWGheFhRHg7jAyjwugwJowN48L48E6YEN4NE8N7YVKYHKaEqWFamB5mhPfDzDArzA4fhDnhwzA3zAvzw4KwMHwUFoXFITV8HJaET8LSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBp2Ba2hx1hZ9gVdoc94bOwN3we9oUvwv7wZTgQ/hIOhq/CofB1OBy+CUfCt+Fo+C4cC9+H4+GHcCKcDKfCj+F0+CmcCWfDuXA+XAg/h4vhl3BJ/mZNCCGEEOKfov/geI9/8DX127isJwBcuz3n4b+vuTHbX+e9Va4WCQB4pluHR/5jVKzYvXv3385dqiHKOw8AElfy08GVeBk0//W1GRT9h+vrrTpd4D+on7wDIOOVyr/KCFfqPw2toRnc9l/Uf+KpEYtKxOey/Df15wHkz3slJwNcia/UL/Zf1M/e5A/Wn+Gr8QBN/yYnE1yJr9QvAk/Cs9D6P50phBBCCCGEEEL8VW9Vut0fPT9ffj7PZa7kpIcr8ZXnz3/8fC6EEEIIIYQQQoir7/lOnVs90bp1s3b/5GSbBvinT04zk3L/fyxDJjL50yZX+zeTEEIIIYQQ4s925ab/aq9ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIu/5f/Duxq71HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4mr7XwEAAP//7d019A==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x303, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x4, 0x8, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 6.002132224s ago: executing program 2 (id=1091): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_open_dev$vim2m(0x0, 0x7f, 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.574781374s ago: executing program 1 (id=1094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1000c00, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$eJzsmb9v00AUx793cZykAiQWBqQKJCpRpNaxHUBdGMo/AFLLj25UxEUF0yDXQ1sJQcTCwp/Bv8DQiYGNjRUGQEJiICNiQofu/GJfSeKmCmHp+0g5f/3u+e69F98bEjAMc2z5+uXn51fXl1YXAJyozqFG9u+Vwkda/p/qJD6+frd16um+NaUE+ZL/2zFD2JhdriDtL6KUsifn6LoKmetbkLhE+g4EPNL3IHEbgKD7tZPZ9SEE1sjWaZCII+9+J25vbMaRr4dAD6EeWvb+DoBeV6ANoE7xCWt+e3fv0XocR4kRsrBUVX+f5KDP0UVZ8RzA6S1LXLPqp6O4+/JFV9/3a+Nb9QsgEZBuQWCF9BJq8DxPvwJZSaz8zzrF+pWR+eei/Qs4kL+O6dBsb1QnL5YWLjJxerHMeWGiveTh6ZQJF8A/yHRcoc/kWM6qYb7iZ39Ndf9fqNMXwrI0tNAHOrec6e2/H3zq2zQDOz/dlEE9e2Dqw0xhyc/r0HVm27/F4MouPTN096J/6pZ70epPDpy8fzTTx0+a27t7i5s6yAfRVhi2rvqXff9K2DS9ORtL+l/d9KcZa/3qCF9XuNhZT9Mk2AHSJMjvw2y0Ou7Km84P84w0/U9i/kK2hn5VTNq14XsI+khz1Wq+MjJ4hmEYhmEYhmEYhmEYhmGYI3EOwvwKSn9UKaXwPJtRNuFNY/sTAAD//75SS7o=") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a000600000002"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) r5 = syz_open_dev$mouse(&(0x7f0000000800), 0x3b77, 0x109202) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000400)=""/225, &(0x7f0000000500)=0xe1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r5, 0x1, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, r0, 0x2e, 0x8, 0x0, @void, @value=r0, @void, @void, r6}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20100, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.955635373s ago: executing program 2 (id=1096): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r0, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) 4.17783003s ago: executing program 1 (id=1097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000940)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x0, &(0x7f0000000900)}, 0x8}], 0x4c, 0x100, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) 3.14881363s ago: executing program 3 (id=1101): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.601041396s ago: executing program 5 (id=1102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='source', 0x0, r1) 2.583383371s ago: executing program 3 (id=1103): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.242173522s ago: executing program 1 (id=1104): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x0) 2.12720915s ago: executing program 1 (id=1105): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x0) 2.087569979s ago: executing program 3 (id=1106): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x0) sendto$x25(r3, 0x0, 0x0, 0x4004804, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf00, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.755907419s ago: executing program 1 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) 1.75061593s ago: executing program 5 (id=1108): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) unshare(0x2040400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000005c0)) 1.535418013s ago: executing program 3 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.183938046s ago: executing program 1 (id=1110): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xffffd8ef}, 0x10000000000001) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) eventfd2(0xe5c, 0x80000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 1.079609472s ago: executing program 2 (id=1111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 996.725239ms ago: executing program 5 (id=1112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) 834.318233ms ago: executing program 3 (id=1113): r0 = open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, &(0x7f0000001300)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) finit_module(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 629.56072ms ago: executing program 5 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 373.7599ms ago: executing program 5 (id=1115): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) fanotify_init(0x200, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000007000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 136.275249ms ago: executing program 3 (id=1116): socket$unix(0x1, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x220000, 0x80) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) r1 = semget$private(0x0, 0x4, 0x36d) semctl$SETVAL(r1, 0x3, 0x10, 0x0) syz_clone(0x30b04311, 0x0, 0x0, 0x0, 0x0, 0x0) 82.817974ms ago: executing program 5 (id=1117): socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=1118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002800)=""/4113, 0x1011}, {&(0x7f0000000900)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000400)=""/98, 0x62}], 0x6}, 0x12100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x60}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) kernel console output (not intermixed with test programs): __pfx_inet6_sendmsg+0x10/0x10 [ 178.568838][ T7002] sock_sendmsg_nosec+0x90/0x180 [ 178.568873][ T7002] __sys_sendto+0x408/0x5a0 [ 178.568900][ T7002] ? __pfx___sys_sendto+0x10/0x10 [ 178.568952][ T7002] ? rcu_is_watching+0x16/0xb0 [ 178.568993][ T7002] __x64_sys_sendto+0xde/0x100 [ 178.569020][ T7002] do_syscall_64+0x166/0x520 [ 178.569053][ T7002] ? trace_irq_disable+0x3b/0x140 [ 178.569084][ T7002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.569106][ T7002] ? clear_bhb_loop+0x70/0xc0 [ 178.569132][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.569153][ T7002] RIP: 0033:0x7fa3d699e159 [ 178.569175][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.569194][ T7002] RSP: 002b:00007fa3d77b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 178.569224][ T7002] RAX: ffffffffffffffda RBX: 00007fa3d6c25fa0 RCX: 00007fa3d699e159 [ 178.569240][ T7002] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 178.569255][ T7002] RBP: 00007fa3d6a3506b R08: 0000200000000340 R09: 000000000000001c [ 178.569271][ T7002] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000000 [ 178.569285][ T7002] R13: 00007fa3d6c26038 R14: 00007fa3d6c25fa0 R15: 00007ffca7b95648 [ 178.569320][ T7002] [ 179.371493][ T7018] FAULT_INJECTION: forcing a failure. [ 179.371493][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 179.371531][ T7018] CPU: 1 UID: 0 PID: 7018 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(full) [ 179.371557][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.371571][ T7018] Call Trace: [ 179.371581][ T7018] [ 179.371590][ T7018] dump_stack_lvl+0xe8/0x150 [ 179.371645][ T7018] should_fail_ex+0x3eb/0x540 [ 179.371686][ T7018] should_failslab+0xa8/0x100 [ 179.371722][ T7018] ? fib6_add_1+0x996/0x13e0 [ 179.371758][ T7018] kmem_cache_alloc_noprof+0x9c/0x600 [ 179.371788][ T7018] ? fib6_add_1+0x996/0x13e0 [ 179.371830][ T7018] fib6_add_1+0x996/0x13e0 [ 179.371881][ T7018] fib6_add+0x35b/0x1a20 [ 179.371931][ T7018] ? __pfx_fib6_add+0x10/0x10 [ 179.371975][ T7018] ? ip6_route_add+0xc9/0x1b0 [ 179.372001][ T7018] ip6_route_add+0xde/0x1b0 [ 179.372027][ T7018] ipv6_route_ioctl+0x393/0x4e0 [ 179.372057][ T7018] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 179.372107][ T7018] ? __might_fault+0xaf/0x130 [ 179.372138][ T7018] inet6_ioctl+0x246/0x2e0 [ 179.372169][ T7018] ? __pfx_inet6_ioctl+0x10/0x10 [ 179.372196][ T7018] ? tomoyo_path_number_perm+0x219/0x5f0 [ 179.372242][ T7018] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.372284][ T7018] sock_do_ioctl+0x101/0x320 [ 179.372319][ T7018] ? __pfx_sock_do_ioctl+0x10/0x10 [ 179.372347][ T7018] ? do_futex+0x3e7/0x4e0 [ 179.372388][ T7018] sock_ioctl+0x57a/0x7e0 [ 179.372418][ T7018] ? __fget_files+0x2a/0x420 [ 179.372444][ T7018] ? __pfx_sock_ioctl+0x10/0x10 [ 179.372474][ T7018] ? __fget_files+0x2a/0x420 [ 179.372501][ T7018] ? __fget_files+0x2a/0x420 [ 179.372532][ T7018] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.372566][ T7018] ? __pfx_sock_ioctl+0x10/0x10 [ 179.372595][ T7018] __se_sys_ioctl+0xfc/0x170 [ 179.372642][ T7018] do_syscall_64+0x166/0x520 [ 179.372670][ T7018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.372694][ T7018] ? clear_bhb_loop+0x70/0xc0 [ 179.372722][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.372746][ T7018] RIP: 0033:0x7f1f4b59e159 [ 179.372767][ T7018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.372787][ T7018] RSP: 002b:00007f1f4c536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.372812][ T7018] RAX: ffffffffffffffda RBX: 00007f1f4b825fa0 RCX: 00007f1f4b59e159 [ 179.372830][ T7018] RDX: 0000200000000980 RSI: 000000000000890b RDI: 0000000000000005 [ 179.372846][ T7018] RBP: 00007f1f4b63506b R08: 0000000000000000 R09: 0000000000000000 [ 179.372860][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.372874][ T7018] R13: 00007f1f4b826038 R14: 00007f1f4b825fa0 R15: 00007fffef146448 [ 179.372911][ T7018] [ 180.655861][ T7021] syzkaller0: entered promiscuous mode [ 180.655885][ T7021] syzkaller0: entered allmulticast mode [ 180.846146][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'. [ 181.068958][ T7036] FAULT_INJECTION: forcing a failure. [ 181.068958][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 181.068994][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(full) [ 181.069020][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.069034][ T7036] Call Trace: [ 181.069044][ T7036] [ 181.069054][ T7036] dump_stack_lvl+0xe8/0x150 [ 181.069095][ T7036] should_fail_ex+0x3eb/0x540 [ 181.069136][ T7036] should_failslab+0xa8/0x100 [ 181.069171][ T7036] ? security_inode_alloc+0x39/0x310 [ 181.069197][ T7036] kmem_cache_alloc_noprof+0x9c/0x600 [ 181.069227][ T7036] ? security_inode_alloc+0x39/0x310 [ 181.069260][ T7036] security_inode_alloc+0x39/0x310 [ 181.069288][ T7036] inode_init_always_gfp+0x97e/0xd30 [ 181.069319][ T7036] ? __pfx_proc_alloc_inode+0x10/0x10 [ 181.069353][ T7036] alloc_inode+0x82/0x1b0 [ 181.069378][ T7036] new_inode+0x1f/0x170 [ 181.069410][ T7036] ? proc_pid_make_inode+0x19/0x130 [ 181.069438][ T7036] proc_pid_make_inode+0x21/0x130 [ 181.069465][ T7036] proc_fd_instantiate+0x54/0x2f0 [ 181.069493][ T7036] ? fput+0xa0/0xd0 [ 181.069527][ T7036] proc_lookupfd_common+0x13e/0x250 [ 181.069562][ T7036] ? d_lookup+0x1f/0xa0 [ 181.069590][ T7036] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 181.069619][ T7036] ? __pfx_proc_lookupfd_common+0x10/0x10 [ 181.069649][ T7036] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 181.069686][ T7036] lookup_open+0x9d7/0x1a40 [ 181.069748][ T7036] path_openat+0x673/0x1da0 [ 181.069802][ T7036] do_file_open+0x23e/0x4a0 [ 181.069840][ T7036] ? __pfx_do_file_open+0x10/0x10 [ 181.069884][ T7036] ? __pfx_kfree_link+0x10/0x10 [ 181.069923][ T7036] ? _raw_spin_unlock+0x28/0x50 [ 181.069944][ T7036] ? alloc_fd+0x6af/0x760 [ 181.069982][ T7036] do_sys_openat2+0x115/0x200 [ 181.070007][ T7036] ? __se_sys_futex+0x3a8/0x450 [ 181.070031][ T7036] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.070061][ T7036] ? rcu_is_watching+0x16/0xb0 [ 181.070102][ T7036] __x64_sys_openat+0x138/0x170 [ 181.070132][ T7036] do_syscall_64+0x166/0x520 [ 181.070157][ T7036] ? trace_irq_disable+0x3b/0x140 [ 181.070188][ T7036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.070212][ T7036] ? clear_bhb_loop+0x70/0xc0 [ 181.070240][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.070263][ T7036] RIP: 0033:0x7fa3d695e98e [ 181.070284][ T7036] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.070304][ T7036] RSP: 002b:00007fa3d77b1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.070329][ T7036] RAX: ffffffffffffffda RBX: 00007fa3d77b26c0 RCX: 00007fa3d695e98e [ 181.070347][ T7036] RDX: 0000000000000002 RSI: 00007fa3d77b1f90 RDI: ffffffffffffff9c [ 181.070363][ T7036] RBP: 00007fa3d6a3506b R08: 0000000000000000 R09: 0000000000000000 [ 181.070377][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.070391][ T7036] R13: 00007fa3d6c26038 R14: 00007fa3d6c25fa0 R15: 00007ffca7b95648 [ 181.070428][ T7036] [ 182.332074][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 185.460743][ T7096] jffs2: notice: (7096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.866483][ T7111] syz_tun: entered allmulticast mode [ 186.997296][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 187.044439][ T7113] bridge_slave_0: left allmulticast mode [ 187.044471][ T7113] bridge_slave_0: left promiscuous mode [ 187.044835][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.094786][ T7113] bridge_slave_1: left allmulticast mode [ 187.094815][ T7113] bridge_slave_1: left promiscuous mode [ 187.095063][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.143717][ T7113] bond0: (slave bond_slave_0): Releasing backup interface [ 187.158293][ T10] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 187.160176][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.160197][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 187.160216][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 187.160247][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.228974][ T7113] bond0: (slave bond_slave_1): Releasing backup interface [ 187.239311][ T10] usb 5-1: config 0 descriptor?? [ 187.336016][ T7113] team0: Port device team_slave_0 removed [ 187.358061][ T7113] team0: Port device team_slave_1 removed [ 187.363998][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.364065][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.391689][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.391717][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.424202][ T7113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.483135][ T7114] vlan0: entered promiscuous mode [ 187.522684][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.535886][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.569735][ T7114] team0: Port device vlan0 added [ 187.570011][ T7116] tipc: Started in network mode [ 187.570041][ T7116] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 187.570242][ T7116] tipc: Enabled bearer , priority 0 [ 187.603927][ T10] ath6kl: Failed to submit usb control message: -71 [ 187.603979][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 187.603996][ T10] ath6kl: Unable to send get target info: -71 [ 187.614068][ T10] ath6kl: Failed to init ath6kl core: -71 [ 187.645192][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 187.673434][ T10] usb 5-1: USB disconnect, device number 3 [ 188.690738][ T27] tipc: Node number set to 11578026 [ 188.797833][ T5732] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 189.091278][ T5732] usb 3-1: New USB device found: idVendor=17ef, idProduct=60b5, bcdDevice=0.00 [ 189.171089][ T5732] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 189.171322][ T5732] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.171713][ T5732] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.172384][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.317631][ T5732] usb 3-1: config 0 descriptor?? [ 189.355543][ T7141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.012668][ T5732] usbhid 3-1:0.0: can't add hid device: -71 [ 190.012784][ T5732] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.047082][ T5732] usb 3-1: USB disconnect, device number 5 [ 190.663738][ T7159] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 191.901547][ T7178] loop0: detected capacity change from 0 to 512 [ 191.906668][ T7178] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 192.014712][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.417'. [ 194.694816][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.694877][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.258377][ T27] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 195.390610][ T7199] loop0: detected capacity change from 0 to 32768 [ 195.415851][ T27] usb 3-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 195.426720][ T27] usb 3-1: config 9 interface 0 has no altsetting 0 [ 195.447715][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.447745][ T27] usb 3-1: Product: syz [ 195.447759][ T27] usb 3-1: Manufacturer: syz [ 195.447773][ T27] usb 3-1: SerialNumber: syz [ 195.509706][ T5827] IPVS: starting estimator thread 0... [ 195.561276][ T7199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.420 (7199) [ 195.617402][ T7208] IPVS: using max 27 ests per chain, 64800 per kthread [ 195.741208][ T7203] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 195.845651][ T7199] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.845688][ T7199] BTRFS info (device loop0): using sha256 checksum algorithm [ 195.875781][ T7212] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 195.941589][ T7203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.010550][ T7228] netlink: 'syz.2.421': attribute type 10 has an invalid length. [ 196.010600][ T7228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.421'. [ 196.041582][ T7210] bond5: (slave gretap2): making interface the new active one [ 196.045744][ T7210] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 196.056114][ T7213] dummy0: left promiscuous mode [ 196.163409][ T7199] BTRFS info (device loop0): enabling ssd optimizations [ 196.163443][ T7199] BTRFS info (device loop0): turning on async discard [ 196.163461][ T7199] BTRFS info (device loop0): enabling free space tree [ 196.216560][ T7213] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 196.246904][ T7228] dummy0: entered promiscuous mode [ 196.264072][ T7228] bond5: (slave dummy0): Releasing active interface [ 196.264106][ T7228] gretap2: entered promiscuous mode [ 196.352827][ T27] snd-usb-caiaq 3-1:9.0: can't set alt interface. [ 196.352854][ T27] usb 3-1: unable to init card! (ret=-5) [ 196.353251][ T27] snd-usb-caiaq 3-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 196.393583][ T27] usb 3-1: USB disconnect, device number 6 [ 197.549360][ T7241] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.706468][ T5609] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.795187][ T7241] tipc: Enabling of bearer rejected, already enabled [ 199.262147][ T7262] loop2: detected capacity change from 0 to 512 [ 199.737099][ T7262] ceph: No mds server is up or the cluster is laggy [ 200.329027][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 200.444624][ T7271] team1: entered promiscuous mode [ 200.444649][ T7271] team1: entered allmulticast mode [ 201.811975][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 201.812003][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 201.991657][ T7292] input: syz1 as /devices/virtual/input/input7 [ 202.254580][ T7296] netlink: 'syz.2.445': attribute type 2 has an invalid length. [ 202.254608][ T7296] netlink: 'syz.2.445': attribute type 2 has an invalid length. [ 204.954747][ T33] kauditd_printk_skb: 546 callbacks suppressed [ 204.954768][ T33] audit: type=1326 audit(1790365390.835:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.456" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f4b59e159 code=0x0 [ 206.141032][ T7363] loop1: detected capacity change from 0 to 2048 [ 206.272892][ T7363] loop1: p1 p3 [ 206.272892][ T7363] p1: [ 206.273089][ T7363] loop1: p1 size 16777216 extends beyond EOD, truncated [ 206.424750][ T7363] loop1: p3 start 3036741376 is beyond EOD, truncated [ 206.963653][ T5734] udevd[5734]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 207.047480][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 207.047611][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 207.047659][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 209.389846][ T7357] syz.0.461 (7357): drop_caches: 2 [ 209.505969][ T7393] kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 209.571262][ T5618] Bluetooth: hci2: unexpected subevent 0x0c length: 30 > 5 [ 209.612284][ T7393] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 209.616365][ T7393] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 209.625930][ T7393] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 209.633022][ T7393] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 209.677960][ T7393] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 209.678455][ T7393] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 209.715671][ T7393] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 209.726048][ T7393] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 209.767993][ T40] gretap2: left promiscuous mode [ 209.794070][ T7393] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 212.387116][ T7446] loop1: detected capacity change from 0 to 512 [ 212.420518][ T5749] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.463122][ T7446] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 212.569506][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 212.575709][ T5749] usb 3-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 212.598405][ T5749] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 212.598461][ T5749] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 212.598488][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 212.598516][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 212.598538][ T5749] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.600963][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.600991][ T5749] usb 3-1: Product: syz [ 212.601006][ T5749] usb 3-1: Manufacturer: syz [ 212.601022][ T5749] usb 3-1: SerialNumber: syz [ 212.694452][ T5749] usb 3-1: config 0 descriptor?? [ 212.972291][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.983618][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.180469][ T33] audit: type=1326 audit(1790365399.065:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d699e159 code=0x7ffc0000 [ 213.186876][ T33] audit: type=1326 audit(1790365399.065:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d699e159 code=0x7ffc0000 [ 213.187003][ T33] audit: type=1326 audit(1790365399.065:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d699e159 code=0x7ffc0000 [ 213.213697][ T33] audit: type=1326 audit(1790365399.075:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d699e159 code=0x7ffc0000 [ 213.213758][ T33] audit: type=1326 audit(1790365399.085:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa3d699e159 code=0x7ffc0000 [ 213.242128][ T33] audit: type=1326 audit(1790365399.125:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3d695e98e code=0x7ffc0000 [ 213.268552][ T33] audit: type=1326 audit(1790365399.145:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3d695e98e code=0x7ffc0000 [ 213.272680][ T33] audit: type=1326 audit(1790365399.155:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3d695e98e code=0x7ffc0000 [ 213.272739][ T33] audit: type=1326 audit(1790365399.155:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3d695e98e code=0x7ffc0000 [ 213.298830][ T33] audit: type=1326 audit(1790365399.165:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3d695e98e code=0x7ffc0000 [ 215.136749][ T5749] usb 3-1: USB disconnect, device number 7 [ 216.185101][ T7502] netlink: 'syz.3.493': attribute type 1 has an invalid length. [ 216.205813][ T7500] loop1: detected capacity change from 0 to 8 [ 216.330269][ T7502] bond1: entered promiscuous mode [ 216.330729][ T7502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.380994][ T7500] unable to read inode lookup table [ 216.444890][ T7506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.445318][ T7506] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 216.481514][ T7506] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 218.101570][ T7525] loop4: detected capacity change from 0 to 131072 [ 218.176292][ T7525] F2FS-fs (loop4): invalid crc value [ 218.262850][ T7525] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 218.278063][ T7525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 218.327741][ T33] kauditd_printk_skb: 220 callbacks suppressed [ 218.327776][ T33] audit: type=1800 audit(1790365404.215:1293): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.497" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 218.336591][ T7525] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 218.653400][ T7558] netlink: 'syz.1.504': attribute type 11 has an invalid length. [ 219.030506][ T7559] 8021q: adding VLAN 0 to HW filter on device eth0 [ 220.781065][ T33] audit: type=1800 audit(1790365406.665:1294): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.514" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0 [ 221.139313][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.154447][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.165686][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.182474][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.183779][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.377953][ T4925] Bluetooth: hci5: command tx timeout [ 223.587364][ T7624] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 223.587519][ T7624] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 223.587780][ T7624] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 223.590865][ T7624] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 223.633372][ T7624] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 223.635051][ T7624] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 223.636007][ T7624] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 223.636838][ T7624] kvm: requested 71238 ns i8254 timer period limited to 200000 ns [ 223.655686][ T7624] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 224.392034][ T7651] serio: Serial port ttynull [ 224.438486][ T4925] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 225.364053][ T7669] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 225.458741][ T4925] Bluetooth: hci5: command tx timeout [ 226.109388][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.109577][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.109738][ T7608] bridge_slave_0: entered allmulticast mode [ 226.115191][ T7608] bridge_slave_0: entered promiscuous mode [ 226.128850][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.129138][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.129580][ T7608] bridge_slave_1: entered allmulticast mode [ 226.139113][ T7608] bridge_slave_1: entered promiscuous mode [ 226.329131][ T7608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.332424][ T7608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.416962][ T7608] team0: Port device team_slave_0 added [ 226.427012][ T7608] team0: Port device team_slave_1 added [ 226.465360][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.465380][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.465437][ T7608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.512624][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.512643][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.512687][ T7608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.564690][ T7684] kvm: pic: non byte write [ 226.614845][ T7608] hsr_slave_0: entered promiscuous mode [ 226.615997][ T7608] hsr_slave_1: entered promiscuous mode [ 226.616804][ T7608] debugfs: 'hsr0' already exists in 'hsr' [ 226.616827][ T7608] Cannot create hsr debugfs directory [ 226.931045][ T7692] tipc: Failed to remove unknown binding: 66,0,0/11578026:3590906692/3590906694 [ 226.931081][ T7692] tipc: Failed to remove unknown binding: 66,0,0/11578026:3590906692/3590906693 [ 226.935588][ T7692] tipc: Failed to remove unknown binding: 66,0,0/11578026:3590906692/3590906694 [ 226.935616][ T7692] tipc: Failed to remove unknown binding: 66,0,0/11578026:3590906692/3590906693 [ 227.083211][ T7694] FAULT_INJECTION: forcing a failure. [ 227.083211][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 227.083249][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.3.538 Not tainted syzkaller #0 PREEMPT(full) [ 227.083286][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.083301][ T7694] Call Trace: [ 227.083310][ T7694] [ 227.083321][ T7694] dump_stack_lvl+0xe8/0x150 [ 227.083361][ T7694] should_fail_ex+0x3eb/0x540 [ 227.083403][ T7694] should_failslab+0xa8/0x100 [ 227.083440][ T7694] __kmalloc_cache_noprof+0x9e/0x600 [ 227.083469][ T7694] ? lock_acquire+0x115/0x350 [ 227.083498][ T7694] ? sctp_add_bind_addr+0x8c/0x370 [ 227.083529][ T7694] ? sctp_add_bind_addr+0x8c/0x370 [ 227.083568][ T7694] sctp_add_bind_addr+0x8c/0x370 [ 227.083606][ T7694] sctp_copy_local_addr_list+0x31a/0x4e0 [ 227.083643][ T7694] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 227.083678][ T7694] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 227.083713][ T7694] ? sctp_v6_is_any+0x64/0x80 [ 227.083749][ T7694] ? sctp_copy_one_addr+0x93/0x360 [ 227.083785][ T7694] sctp_bind_addr_copy+0xb3/0x3c0 [ 227.083819][ T7694] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 227.083852][ T7694] sctp_connect_new_asoc+0x2ff/0x6b0 [ 227.083880][ T7694] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 227.083910][ T7694] ? __ipv6_addr_type+0x59/0x2f0 [ 227.083939][ T7694] ? sctp_inet6_send_verify+0x6e/0x300 [ 227.083970][ T7694] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 227.083999][ T7694] __sctp_connect+0x5cb/0xdc0 [ 227.084037][ T7694] ? __pfx___sctp_connect+0x10/0x10 [ 227.084061][ T7694] ? security_sctp_bind_connect+0x7e/0x2c0 [ 227.084099][ T7694] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 227.084135][ T7694] sctp_getsockopt_connectx3+0x227/0x360 [ 227.084174][ T7694] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 227.084212][ T7694] ? sctp_getsockopt+0x12f/0xb90 [ 227.084239][ T7694] ? __local_bh_enable_ip+0xd6/0x140 [ 227.084285][ T7694] sctp_getsockopt+0x984/0xb90 [ 227.084310][ T7694] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 227.084346][ T7694] do_sock_getsockopt+0x4aa/0x640 [ 227.084379][ T7694] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 227.084425][ T7694] ? __fget_files+0x3a2/0x420 [ 227.084453][ T7694] ? __fget_files+0x2a/0x420 [ 227.084489][ T7694] __x64_sys_getsockopt+0x1a4/0x240 [ 227.084526][ T7694] do_syscall_64+0x166/0x520 [ 227.084552][ T7694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.084578][ T7694] ? clear_bhb_loop+0x70/0xc0 [ 227.084606][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.084630][ T7694] RIP: 0033:0x7f1f4b59e159 [ 227.084652][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.084672][ T7694] RSP: 002b:00007f1f4c536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 227.084699][ T7694] RAX: ffffffffffffffda RBX: 00007f1f4b825fa0 RCX: 00007f1f4b59e159 [ 227.084717][ T7694] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 227.084731][ T7694] RBP: 00007f1f4b63506b R08: 0000200000000180 R09: 0000000000000000 [ 227.084748][ T7694] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.084765][ T7694] R13: 00007f1f4b826038 R14: 00007f1f4b825fa0 R15: 00007fffef146448 [ 227.084801][ T7694] [ 227.537861][ T4925] Bluetooth: hci5: command tx timeout [ 227.849436][ T7608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.876682][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.886047][ T7608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.922900][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.942355][ T7608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.055193][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.065059][ T7608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.100906][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.114787][ T7719] FAULT_INJECTION: forcing a failure. [ 228.114787][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 228.114817][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.2.546 Not tainted syzkaller #0 PREEMPT(full) [ 228.114841][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.114854][ T7719] Call Trace: [ 228.114862][ T7719] [ 228.114870][ T7719] dump_stack_lvl+0xe8/0x150 [ 228.114905][ T7719] should_fail_ex+0x3eb/0x540 [ 228.114936][ T7719] should_failslab+0xa8/0x100 [ 228.114967][ T7719] __kmalloc_cache_noprof+0x9e/0x600 [ 228.114998][ T7719] ? fuse_get_tree+0x83/0x3b0 [ 228.115020][ T7719] ? fuse_get_tree+0x83/0x3b0 [ 228.115049][ T7719] fuse_get_tree+0x83/0x3b0 [ 228.115072][ T7719] vfs_get_tree+0x92/0x2a0 [ 228.115099][ T7719] do_new_mount+0x319/0xdc0 [ 228.115126][ T7719] ? __pfx_do_new_mount+0x10/0x10 [ 228.115186][ T7719] ? ns_capable+0x84/0xe0 [ 228.115216][ T7719] ? path_mount+0x647/0x1050 [ 228.115241][ T7719] ? user_path_at+0xd4/0x160 [ 228.115266][ T7719] __se_sys_mount+0x31d/0x420 [ 228.115292][ T7719] ? __pfx___se_sys_mount+0x10/0x10 [ 228.115318][ T7719] ? __x64_sys_mount+0x20/0xc0 [ 228.115341][ T7719] do_syscall_64+0x166/0x520 [ 228.115363][ T7719] ? trace_irq_disable+0x3b/0x140 [ 228.115392][ T7719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.115417][ T7719] ? clear_bhb_loop+0x70/0xc0 [ 228.115443][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.115461][ T7719] RIP: 0033:0x7fa3d699e159 [ 228.115481][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.115498][ T7719] RSP: 002b:00007fa3d77b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.115519][ T7719] RAX: ffffffffffffffda RBX: 00007fa3d6c25fa0 RCX: 00007fa3d699e159 [ 228.115533][ T7719] RDX: 0000200000000000 RSI: 0000200000002080 RDI: 0000000000000000 [ 228.115547][ T7719] RBP: 00007fa3d6a3506b R08: 0000200000000380 R09: 0000000000000000 [ 228.115563][ T7719] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.115581][ T7719] R13: 00007fa3d6c26038 R14: 00007fa3d6c25fa0 R15: 00007ffca7b95648 [ 228.115611][ T7719] [ 228.426579][ T7727] loop1: detected capacity change from 0 to 1024 [ 228.449654][ T7727] EXT4-fs (loop1): invalid inodes per group: 1 [ 228.556187][ T7717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.545'. [ 228.568346][ T7608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.685497][ T7608] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.747848][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.747962][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.789548][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.789670][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.628720][ T4925] Bluetooth: hci5: command tx timeout [ 230.248244][ T7608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.882213][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 231.940456][ T7800] loop2: detected capacity change from 0 to 1024 [ 231.959955][ T7800] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.091508][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.089697][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.369239][ T7608] veth0_vlan: entered promiscuous mode [ 233.404184][ T7608] veth1_vlan: entered promiscuous mode [ 233.495834][ T7608] veth0_macvtap: entered promiscuous mode [ 233.535791][ T7608] veth1_macvtap: entered promiscuous mode [ 233.583199][ T7608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.626403][ T7608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.701132][ T6310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.718434][ T5838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.718484][ T5838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.718521][ T5838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.943932][ T6311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.943958][ T6311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.263779][ T6310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.263802][ T6310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.332992][ T7841] FAULT_INJECTION: forcing a failure. [ 234.332992][ T7841] name failslab, interval 1, probability 0, space 0, times 0 [ 234.333029][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.4.564 Not tainted syzkaller #0 PREEMPT(full) [ 234.333057][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.333069][ T7841] Call Trace: [ 234.333079][ T7841] [ 234.333089][ T7841] dump_stack_lvl+0xe8/0x150 [ 234.333129][ T7841] should_fail_ex+0x3eb/0x540 [ 234.333171][ T7841] should_failslab+0xa8/0x100 [ 234.333214][ T7841] __kmalloc_noprof+0xf9/0x710 [ 234.333242][ T7841] ? rcu_is_watching+0x16/0xb0 [ 234.333277][ T7841] ? tomoyo_realpath_from_path+0xef/0x640 [ 234.333304][ T7841] ? tomoyo_realpath_from_path+0xef/0x640 [ 234.333335][ T7841] tomoyo_realpath_from_path+0xef/0x640 [ 234.333366][ T7841] ? get_mm_exe_file+0x1c/0x170 [ 234.333401][ T7841] tomoyo_get_exe+0x60/0x90 [ 234.333435][ T7841] tomoyo_write_control+0x802/0x13d0 [ 234.333470][ T7841] ? tomoyo_write_control+0x175/0x13d0 [ 234.333517][ T7841] ? __pfx_tomoyo_write_control+0x10/0x10 [ 234.333555][ T7841] ? __pfx_tomoyo_write+0x10/0x10 [ 234.333580][ T7841] vfs_write+0x296/0xba0 [ 234.333619][ T7841] ? __pfx_vfs_write+0x10/0x10 [ 234.333649][ T7841] ? __fget_files+0x2a/0x420 [ 234.333675][ T7841] ? __fget_files+0x3a2/0x420 [ 234.333708][ T7841] ? __fget_files+0x2a/0x420 [ 234.333739][ T7841] ? fdget+0x1ac/0x250 [ 234.333774][ T7841] ksys_write+0x150/0x270 [ 234.333805][ T7841] ? __pfx_ksys_write+0x10/0x10 [ 234.333847][ T7841] do_syscall_64+0x166/0x520 [ 234.333874][ T7841] ? trace_irq_disable+0x3b/0x140 [ 234.333904][ T7841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.333927][ T7841] ? clear_bhb_loop+0x70/0xc0 [ 234.333957][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.333977][ T7841] RIP: 0033:0x7f7d8919e159 [ 234.333998][ T7841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.334020][ T7841] RSP: 002b:00007f7d89ff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.334051][ T7841] RAX: ffffffffffffffda RBX: 00007f7d89425fa0 RCX: 00007f7d8919e159 [ 234.334069][ T7841] RDX: 0000000000000042 RSI: 0000200000000300 RDI: 0000000000000004 [ 234.334086][ T7841] RBP: 00007f7d8923506b R08: 0000000000000000 R09: 0000000000000000 [ 234.334099][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.334111][ T7841] R13: 00007f7d89426038 R14: 00007f7d89425fa0 R15: 00007ffe6c9a50a8 [ 234.334150][ T7841] [ 234.336181][ T7841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 234.595026][ T7844] loop3: detected capacity change from 0 to 8 [ 234.686527][ T7844] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 235.185301][ T7861] loop5: detected capacity change from 0 to 8 [ 235.186320][ T7861] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 235.253972][ T5734] udevd[5734]: incorrect cramfs checksum on /dev/loop5 [ 235.461250][ T5734] udevd[5734]: incorrect cramfs checksum on /dev/loop5 [ 235.561942][ T7875] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 235.561970][ T7875] netlink: 'syz.2.570': attribute type 4 has an invalid length. [ 235.561988][ T7875] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.570'. [ 235.601432][ T7876] VFS: file-max limit 0 reached [ 236.790796][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 236.946172][ T7897] loop4: detected capacity change from 0 to 256 [ 237.011820][ T7897] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 237.160510][ T7897] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 238.465775][ T7917] Device name cannot be null; rc = [-22] [ 241.479839][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 241.479878][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 242.547372][ T5732] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 242.728969][ T5732] usb 6-1: New USB device found: idVendor=056a, idProduct=00b2, bcdDevice=0.00 [ 242.733687][ T5732] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.733719][ T5732] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.733746][ T5732] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.733782][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.739359][ T5732] usb 6-1: config 0 descriptor?? [ 243.829095][ T5732] usb 6-1: string descriptor 0 read error: -71 [ 243.855538][ T5732] usbhid 6-1:0.0: can't add hid device: -71 [ 243.855650][ T5732] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 243.887052][ T5732] usb 6-1: USB disconnect, device number 2 [ 244.134960][ T8005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 245.227425][ T4938] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 245.379633][ T4938] usb 3-1: Using ep0 maxpacket: 16 [ 245.380360][ T4938] usb 3-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 245.385676][ T4938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.385705][ T4938] usb 3-1: Product: syz [ 245.385721][ T4938] usb 3-1: Manufacturer: syz [ 245.385738][ T4938] usb 3-1: SerialNumber: syz [ 245.435779][ T4938] usb 3-1: config 0 descriptor?? [ 245.448680][ T4938] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 245.452211][ T4938] usb 3-1: Detected FT-X [ 245.676345][ T4938] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 246.243514][ T4938] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 246.363956][ T58] usb 3-1: USB disconnect, device number 8 [ 246.579004][ T58] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 246.583166][ T58] ftdi_sio 3-1:0.0: device disconnected [ 246.970989][ T8038] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 247.131494][ T33] audit: type=1326 audit(1790365433.015:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.132507][ T33] audit: type=1326 audit(1790365433.015:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.134166][ T33] audit: type=1326 audit(1790365433.015:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.134218][ T33] audit: type=1326 audit(1790365433.015:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.134535][ T33] audit: type=1326 audit(1790365433.015:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.134685][ T33] audit: type=1326 audit(1790365433.015:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.135167][ T33] audit: type=1326 audit(1790365433.015:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.135311][ T33] audit: type=1326 audit(1790365433.015:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.135495][ T33] audit: type=1326 audit(1790365433.015:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.137473][ T33] audit: type=1326 audit(1790365433.015:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.5.630" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127f9e159 code=0x7ffc0000 [ 247.740431][ T8048] loop4: detected capacity change from 0 to 8 [ 247.942144][ T8053] FAULT_INJECTION: forcing a failure. [ 247.942144][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.942181][ T8053] CPU: 0 UID: 0 PID: 8053 Comm: syz.5.634 Not tainted syzkaller #0 PREEMPT(full) [ 247.942207][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.942222][ T8053] Call Trace: [ 247.942231][ T8053] [ 247.942241][ T8053] dump_stack_lvl+0xe8/0x150 [ 247.942280][ T8053] should_fail_ex+0x3eb/0x540 [ 247.942320][ T8053] _copy_to_user+0x31/0xb0 [ 247.942344][ T8053] ucma_query_route+0x8ee/0xb10 [ 247.942371][ T8053] ? aa_file_perm+0x4ed/0x15f0 [ 247.942395][ T8053] ? aa_file_perm+0x18b/0x15f0 [ 247.942419][ T8053] ? __pfx_ucma_query_route+0x10/0x10 [ 247.942471][ T8053] ? __might_fault+0xaf/0x130 [ 247.942499][ T8053] ucma_write+0x249/0x2f0 [ 247.942526][ T8053] ? __pfx_ucma_write+0x10/0x10 [ 247.942548][ T8053] ? security_file_permission+0x75/0x260 [ 247.942583][ T8053] ? rw_verify_area+0x203/0x4c0 [ 247.942613][ T8053] ? __pfx_ucma_write+0x10/0x10 [ 247.942636][ T8053] vfs_write+0x296/0xba0 [ 247.942675][ T8053] ? __pfx_vfs_write+0x10/0x10 [ 247.942707][ T8053] ? __fget_files+0x2a/0x420 [ 247.942732][ T8053] ? __fget_files+0x3a2/0x420 [ 247.942757][ T8053] ? __fget_files+0x2a/0x420 [ 247.942787][ T8053] ? fdget+0x1ac/0x250 [ 247.942820][ T8053] ksys_write+0x150/0x270 [ 247.942851][ T8053] ? __pfx_ksys_write+0x10/0x10 [ 247.942891][ T8053] do_syscall_64+0x166/0x520 [ 247.942917][ T8053] ? trace_irq_disable+0x3b/0x140 [ 247.942946][ T8053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.942970][ T8053] ? clear_bhb_loop+0x70/0xc0 [ 247.942998][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.943021][ T8053] RIP: 0033:0x7fc127f9e159 [ 247.943043][ T8053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.943063][ T8053] RSP: 002b:00007fc128e3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.943088][ T8053] RAX: ffffffffffffffda RBX: 00007fc128225fa0 RCX: 00007fc127f9e159 [ 247.943105][ T8053] RDX: 0000000000000018 RSI: 0000200000000900 RDI: 0000000000000004 [ 247.943119][ T8053] RBP: 00007fc12803506b R08: 0000000000000000 R09: 0000000000000000 [ 247.943133][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.943157][ T8053] R13: 00007fc128226038 R14: 00007fc128225fa0 R15: 00007ffcf7fe01c8 [ 247.943192][ T8053] [ 248.009767][ T4925] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 248.151125][ T4925] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 248.847938][ T8063] __vm_enough_memory: pid: 8063, comm: syz.4.637, bytes: 4503599627366400 not enough memory for the allocation [ 252.217960][ T33] kauditd_printk_skb: 43 callbacks suppressed [ 252.217985][ T33] audit: type=1800 audit(1790365438.085:1348): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name=08 dev="sda1" ino=2053 res=0 errno=0 [ 254.201228][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.291885][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.384128][ T8133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.519680][ T8135] syzkaller0: entered promiscuous mode [ 254.519699][ T8135] syzkaller0: entered allmulticast mode [ 256.099170][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.099233][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.314259][ T8168] kvm: pic: level sensitive irq not supported [ 256.320855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a8a2c00: rx timeout, send abort [ 256.324708][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a8a2c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 256.466126][ T8174] syzkaller0: entered promiscuous mode [ 256.466152][ T8174] syzkaller0: entered allmulticast mode [ 256.721314][ T8180] NILFS (nullb0): couldn't find nilfs on the device [ 261.286010][ T8228] netlink: 'syz.5.683': attribute type 4 has an invalid length. [ 261.289459][ T8228] netlink: 'syz.5.683': attribute type 4 has an invalid length. [ 262.532388][ T8249] bridge0: port 1(syz_tun) entered blocking state [ 262.532589][ T8249] bridge0: port 1(syz_tun) entered disabled state [ 262.532760][ T8249] syz_tun: entered allmulticast mode [ 262.661385][ T8252] netlink: 'syz.4.690': attribute type 49 has an invalid length. [ 263.092692][ T8265] 9p: Bad value for 'wfdno' [ 263.297343][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 263.431657][ T8274] syzkaller0: entered promiscuous mode [ 263.431682][ T8274] syzkaller0: entered allmulticast mode [ 263.464219][ T8274] tipc: Started in network mode [ 263.464254][ T8274] tipc: Node identity c2c1eba48348, cluster identity 4711 [ 263.468334][ T8274] tipc: Enabled bearer , priority 0 [ 263.506601][ T8273] tipc: Resetting bearer [ 263.704505][ T8281] Cannot find set identified by id 1 to match [ 263.709615][ T8273] tipc: Disabling bearer [ 264.420261][ T8293] 9p: Bad value for 'wfdno' [ 265.754366][ T8297] loop1: detected capacity change from 0 to 32768 [ 266.594918][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 266.749926][ T8309] loop2: detected capacity change from 0 to 32768 [ 266.807637][ T8309] [ 266.807637][ T8309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 266.807637][ T8309] [ 267.209754][ T8329] syzkaller0: entered promiscuous mode [ 267.209781][ T8329] syzkaller0: entered allmulticast mode [ 267.235156][ T8329] tipc: Enabled bearer , priority 0 [ 267.256985][ T8328] tipc: Resetting bearer [ 267.291085][ T8309] [ 267.291085][ T8309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.291085][ T8309] [ 267.291160][ T8309] [ 267.291160][ T8309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.291160][ T8309] [ 267.291202][ T8309] [ 267.291202][ T8309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.291202][ T8309] [ 267.291247][ T8309] [ 267.291247][ T8309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.291247][ T8309] [ 267.291287][ T8309] [ 267.291287][ T8309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.291287][ T8309] [ 267.442652][ T123] [ 267.442652][ T123] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.442652][ T123] [ 267.492757][ T8328] tipc: Disabling bearer [ 267.566137][ T8335] [ 267.566137][ T8335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.566137][ T8335] [ 267.566425][ T8335] [ 267.566425][ T8335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.566425][ T8335] [ 267.566443][ T8335] [ 267.566443][ T8335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.566443][ T8335] [ 267.566459][ T8335] [ 267.566459][ T8335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.566459][ T8335] [ 267.566475][ T8335] [ 267.566475][ T8335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.566475][ T8335] [ 267.635166][ T124] [ 267.635166][ T124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.635166][ T124] [ 267.839310][ T5611] [ 267.839310][ T5611] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.839310][ T5611] [ 267.871629][ T5611] [ 267.871629][ T5611] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.871629][ T5611] [ 267.994663][ T8342] futex_wake_op: syz.5.720 tries to shift op by 144; fix this program [ 268.017433][ T5749] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 268.070850][ T8344] lo: entered promiscuous mode [ 268.071804][ T8344] tunl0: entered promiscuous mode [ 268.090868][ T8344] gre0: entered promiscuous mode [ 268.166055][ T8344] gretap0: entered promiscuous mode [ 268.176629][ T5749] usb 5-1: Using ep0 maxpacket: 8 [ 268.183063][ T5749] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 268.185310][ T5749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 268.185350][ T5749] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 268.185391][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.185421][ T5749] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.185448][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.185476][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.185504][ T5749] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 268.185560][ T5749] usb 5-1: config 168 interface 0 has no altsetting 0 [ 268.186889][ T5749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 268.186927][ T5749] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 268.187001][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.187033][ T5749] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.187061][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.187089][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.251517][ T5749] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 268.251556][ T5749] usb 5-1: config 168 interface 0 has no altsetting 0 [ 268.303646][ T5749] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 268.303689][ T5749] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 268.303726][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.303752][ T5749] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.303777][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.303802][ T5749] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.303828][ T5749] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 268.303855][ T5749] usb 5-1: config 168 interface 0 has no altsetting 0 [ 268.461307][ T8344] erspan0: entered promiscuous mode [ 268.464643][ T5749] usb 5-1: string descriptor 0 read error: -22 [ 268.464782][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.488988][ T8344] ip_vti0: entered promiscuous mode [ 268.494300][ T8344] ip6_vti0: entered promiscuous mode [ 268.510539][ T8344] sit0: entered promiscuous mode [ 268.526904][ T5749] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 268.542125][ T8344] ip6tnl0: entered promiscuous mode [ 268.565570][ T8344] ip6gre0: entered promiscuous mode [ 268.588332][ T8344] ip6gretap0: entered promiscuous mode [ 268.624505][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.625169][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.626263][ T8344] bridge0: entered promiscuous mode [ 268.650571][ T8344] vcan0: entered promiscuous mode [ 268.663460][ T8344] bond0: entered promiscuous mode [ 268.663485][ T8344] bond_slave_0: entered promiscuous mode [ 268.663713][ T8344] bond_slave_1: entered promiscuous mode [ 268.692666][ T8344] dummy0: entered promiscuous mode [ 268.733105][ T8344] nlmon0: entered promiscuous mode [ 268.736714][ T8344] batadv0: entered promiscuous mode [ 268.766735][ T8344] vxcan0: entered promiscuous mode [ 268.773606][ T8344] vxcan1: entered promiscuous mode [ 268.775164][ T8344] veth0: entered promiscuous mode [ 268.790501][ T8344] veth1: entered promiscuous mode [ 268.804797][ T8344] wg0: entered promiscuous mode [ 268.824756][ T8344] wg1: entered promiscuous mode [ 268.844932][ T8344] wg2: entered promiscuous mode [ 268.853844][ T8344] veth0_to_bridge: entered promiscuous mode [ 268.891697][ T8344] veth1_to_bridge: entered promiscuous mode [ 268.974556][ T27] usb 5-1: USB disconnect, device number 4 [ 269.008105][ T8344] veth0_to_bond: entered promiscuous mode [ 269.068684][ T8342] futex_wake_op: syz.5.720 tries to shift op by 144; fix this program [ 269.167938][ T8344] veth1_to_bond: entered promiscuous mode [ 269.183823][ T8344] veth0_to_team: entered promiscuous mode [ 269.199210][ T8344] team_slave_0: entered promiscuous mode [ 269.215914][ T8344] veth1_to_team: entered promiscuous mode [ 269.236973][ T8344] team_slave_1: entered promiscuous mode [ 269.254257][ T8344] veth0_to_batadv: entered promiscuous mode [ 269.274804][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.274871][ T8344] batadv_slave_0: entered promiscuous mode [ 269.294110][ T8344] veth1_to_batadv: entered promiscuous mode [ 269.310962][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.311029][ T8344] batadv_slave_1: entered promiscuous mode [ 269.333379][ T8344] xfrm0: entered promiscuous mode [ 269.345875][ T8344] veth0_to_hsr: entered promiscuous mode [ 269.358709][ T8344] veth1_to_hsr: entered promiscuous mode [ 269.364948][ T8344] hsr0: entered promiscuous mode [ 269.379629][ T8344] veth1_virt_wifi: entered promiscuous mode [ 269.383115][ T8344] veth0_virt_wifi: entered promiscuous mode [ 269.402131][ T8344] virt_wifi0: entered promiscuous mode [ 269.443228][ T8344] vlan0: entered promiscuous mode [ 269.455744][ T8344] vlan1: entered promiscuous mode [ 269.472085][ T8344] macvlan0: entered promiscuous mode [ 269.485152][ T8344] macvlan1: entered promiscuous mode [ 269.500845][ T8344] ipvlan0: entered promiscuous mode [ 269.511459][ T8344] ipvlan1: entered promiscuous mode [ 269.559493][ T8344] macvtap0: entered promiscuous mode [ 269.573171][ T8344] macsec0: entered promiscuous mode [ 269.584441][ T8344] geneve0: entered promiscuous mode [ 269.600154][ T8357] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 269.610821][ T8357] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 269.622307][ T8344] geneve1: entered promiscuous mode [ 269.626632][ T8344] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 269.628050][ T8357] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 269.628918][ T8357] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 269.629397][ T8357] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 269.629982][ T8357] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 269.633038][ T8357] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 269.634267][ T8357] kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 269.635127][ T8357] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 269.658465][ T8357] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 269.752742][ T8344] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 269.793610][ T8344] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 269.810146][ T8344] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 269.865805][ T8344] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 269.921329][ T8344] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 269.943975][ T8344] netdevsim netdevsim10 eth0: entered promiscuous mode [ 270.066426][ T8348] team0: Device vlan0 failed to change mtu [ 270.077497][ T5838] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.077549][ T5838] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.077588][ T5838] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.077625][ T5838] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.077661][ T5838] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.724171][ T8380] loop4: detected capacity change from 0 to 1024 [ 273.336511][ T8387] loop3: detected capacity change from 0 to 256 [ 273.436435][ T8387] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 273.482051][ T33] audit: type=1800 audit(1790365459.365:1349): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.733" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 273.695789][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'. [ 274.710146][ T8404] ceph: No mds server is up or the cluster is laggy [ 275.716896][ T8424] loop3: detected capacity change from 0 to 1024 [ 275.764786][ T8424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.764889][ T8424] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.799763][ T8424] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.748: lblock 3 mapped to illegal pblock 3 (length 3) [ 275.805132][ T8424] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 275.805166][ T8424] EXT4-fs (loop3): This should not happen!! Data will be lost [ 275.805166][ T8424] [ 275.861127][ T8424] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.748: Freeing blocks not in datazone - block = 3, count = 1 [ 275.890246][ T8432] netlink: 'syz.5.750': attribute type 1 has an invalid length. [ 276.023841][ T5838] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 276.176387][ T5838] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 276.176425][ T5838] EXT4-fs (loop3): This should not happen!! Data will be lost [ 276.176425][ T5838] [ 276.204592][ T5608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.231886][ T4925] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 276.273036][ T8432] bond1: entered promiscuous mode [ 276.273431][ T8432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.325293][ T8435] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 276.325313][ T8435] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 276.325326][ T8435] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 276.960312][ T8451] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 277.096274][ T8454] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 280.865709][ T8503] loop1: detected capacity change from 0 to 256 [ 280.915962][ T8503] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 280.915992][ T8503] FAT-fs (loop1): Filesystem has been set read-only [ 282.078603][ T8521] affs: No valid root block on device nullb0 [ 284.523913][ T33] audit: type=1326 audit(1790365470.405:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7fd9e159 code=0x7ffc0000 [ 284.523973][ T33] audit: type=1326 audit(1790365470.405:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7fd9e159 code=0x7ffc0000 [ 284.524021][ T33] audit: type=1326 audit(1790365470.405:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7fd9e159 code=0x7ffc0000 [ 284.524189][ T33] audit: type=1326 audit(1790365470.405:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7fd9e159 code=0x7ffc0000 [ 284.525457][ T33] audit: type=1326 audit(1790365470.405:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faf7fd9e159 code=0x7ffc0000 [ 284.604808][ T33] audit: type=1326 audit(1790365470.465:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7fd9e159 code=0x7ffc0000 [ 284.604866][ T33] audit: type=1326 audit(1790365470.465:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faf7fd9dec2 code=0x7ffc0000 [ 284.630784][ T33] audit: type=1326 audit(1790365470.495:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faf7fd9df57 code=0x7ffc0000 [ 284.656665][ T33] audit: type=1326 audit(1790365470.495:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faf7fd5ae51 code=0x7ffc0000 [ 284.656723][ T33] audit: type=1326 audit(1790365470.515:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.788" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faf7fd9ef49 code=0x7ffc0000 [ 284.856370][ T8554] loop5: detected capacity change from 0 to 512 [ 285.127597][ T8559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.791'. [ 285.146794][ T8554] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.790: iget: bad i_size value: 38620345925642 [ 285.146834][ T8554] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.147168][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 285.147189][ C1] EXT4-fs (loop5): initial error at time 1790365471: ext4_orphan_get:1403: inode 15 [ 285.147220][ C1] EXT4-fs (loop5): last error at time 1790365471: ext4_orphan_get:1403: inode 15 [ 285.177044][ T8554] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.790: couldn't read orphan inode 15 (err -117) [ 285.177086][ T8554] loop5: lost filesystem error report for type 5 error -117 [ 285.249154][ T8554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.390789][ T8554] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.790: bg 0: block 5: invalid block bitmap [ 285.463431][ T8554] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 44 with error 28 [ 285.463470][ T8554] EXT4-fs (loop5): This should not happen!! Data will be lost [ 285.463470][ T8554] [ 285.463487][ T8554] EXT4-fs (loop5): Total free blocks count 0 [ 285.463503][ T8554] EXT4-fs (loop5): Free/Dirty block details [ 285.463527][ T8554] EXT4-fs (loop5): free_blocks=0 [ 285.463564][ T8554] EXT4-fs (loop5): dirty_blocks=48 [ 285.463578][ T8554] EXT4-fs (loop5): Block reservation details [ 285.463591][ T8554] EXT4-fs (loop5): i_reserved_data_blocks=48 [ 285.485911][ T8565] EXT4-fs (loop5): shut down requested (0) [ 285.562985][ T8567] netlink: 'syz.3.793': attribute type 4 has an invalid length. [ 285.582639][ T8567] netlink: 'syz.3.793': attribute type 4 has an invalid length. [ 286.244525][ T8579] syzkaller0: entered promiscuous mode [ 286.245460][ T8579] syzkaller0: entered allmulticast mode [ 287.987855][ T5749] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 288.141769][ T5749] usb 5-1: New USB device found: idVendor=17ef, idProduct=60b5, bcdDevice=0.00 [ 288.143217][ T5749] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 288.143251][ T5749] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.143279][ T5749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.143316][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.165364][ T5749] usb 5-1: config 0 descriptor?? [ 288.194608][ T8597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.308030][ T8608] netlink: 'syz.5.807': attribute type 8 has an invalid length. [ 289.810884][ T8612] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 290.338405][ T8617] loop2: detected capacity change from 0 to 4096 [ 290.343010][ T8617] EXT4-fs: Ignoring removed orlov option [ 290.370847][ T8617] EXT4-fs (loop2): Test dummy encryption mode enabled [ 290.371340][ T8617] EXT4-fs (loop2): stripe (182) is not aligned with cluster size (16), stripe is disabled [ 290.448035][ T8617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.344429][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.457583][ T8634] loop5: detected capacity change from 0 to 512 [ 291.532990][ T8634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.892187][ T8648] loop1: detected capacity change from 0 to 1024 [ 291.906945][ T8648] hfsplus: Unknown parameter '' [ 292.378208][ T8651] loop2: detected capacity change from 0 to 512 [ 292.403342][ T8651] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.491765][ T7608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.589319][ T8651] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.819: corrupted in-inode xattr: e_value size too large [ 292.589358][ T8651] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.595804][ T8651] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.819: couldn't read orphan inode 15 (err -117) [ 292.595844][ T8651] loop2: lost filesystem error report for type 5 error -117 [ 292.597191][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 292.597214][ C1] EXT4-fs (loop2): initial error at time 1790365478: ext4_iget_extra_inode:5210: inode 15 [ 292.597251][ C1] EXT4-fs (loop2): last error at time 1790365478: ext4_orphan_get:1408 [ 292.620322][ T8651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.032240][ T8661] lo: entered allmulticast mode [ 293.106597][ T8663] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 293.267389][ T8657] lo: left allmulticast mode [ 293.299468][ T5749] usbhid 5-1:0.0: can't add hid device: -32 [ 293.299582][ T5749] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 293.373055][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.624345][ T5749] usb 5-1: USB disconnect, device number 5 [ 293.903891][ T8678] loop1: detected capacity change from 0 to 1024 [ 293.962547][ T8678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.598243][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.985639][ T8696] FAULT_INJECTION: forcing a failure. [ 295.985639][ T8696] name failslab, interval 1, probability 0, space 0, times 0 [ 295.985678][ T8696] CPU: 0 UID: 0 PID: 8696 Comm: syz.1.831 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.985711][ T8696] Tainted: [L]=SOFTLOCKUP [ 295.985720][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.985734][ T8696] Call Trace: [ 295.985743][ T8696] [ 295.985754][ T8696] dump_stack_lvl+0xe8/0x150 [ 295.985794][ T8696] should_fail_ex+0x3eb/0x540 [ 295.985834][ T8696] should_failslab+0xa8/0x100 [ 295.985872][ T8696] __kvmalloc_node_noprof+0x171/0x820 [ 295.985905][ T8696] ? try_to_wake_up+0x8c5/0x14d0 [ 295.985936][ T8696] ? seq_read_iter+0x1ea/0xca0 [ 295.985969][ T8696] ? seq_read_iter+0x1ea/0xca0 [ 295.986011][ T8696] seq_read_iter+0x1ea/0xca0 [ 295.986054][ T8696] ? __pfx___mutex_trylock_common+0x10/0x10 [ 295.986094][ T8696] ? apparmor_file_permission+0x1fb/0x2b0 [ 295.986139][ T8696] proc_reg_read_iter+0x1b7/0x280 [ 295.986179][ T8696] vfs_read+0x595/0xa80 [ 295.986218][ T8696] ? __pfx_vfs_read+0x10/0x10 [ 295.986251][ T8696] ? __fget_files+0x3a2/0x420 [ 295.986278][ T8696] ? __fget_files+0x2a/0x420 [ 295.986309][ T8696] ? fdget+0x1ac/0x250 [ 295.986344][ T8696] ksys_read+0x150/0x270 [ 295.986376][ T8696] ? __pfx_ksys_read+0x10/0x10 [ 295.986419][ T8696] do_syscall_64+0x166/0x520 [ 295.986444][ T8696] ? trace_irq_disable+0x3b/0x140 [ 295.986476][ T8696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.986499][ T8696] ? clear_bhb_loop+0x70/0xc0 [ 295.986527][ T8696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.986550][ T8696] RIP: 0033:0x7faf7fd9e159 [ 295.986572][ T8696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.986593][ T8696] RSP: 002b:00007faf80cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.986618][ T8696] RAX: ffffffffffffffda RBX: 00007faf80025fa0 RCX: 00007faf7fd9e159 [ 295.986636][ T8696] RDX: 0000000000002020 RSI: 0000200000000200 RDI: 0000000000000003 [ 295.986650][ T8696] RBP: 00007faf7fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 295.986665][ T8696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.986680][ T8696] R13: 00007faf80026038 R14: 00007faf80025fa0 R15: 00007ffd18bbf728 [ 295.986717][ T8696] [ 296.671762][ T8717] netlink: 'syz.2.840': attribute type 4 has an invalid length. [ 296.725330][ T8715] netlink: 'syz.2.840': attribute type 4 has an invalid length. [ 299.542592][ T33] kauditd_printk_skb: 72 callbacks suppressed [ 299.542613][ T33] audit: type=1804 audit(1790365485.425:1432): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.853" name="/newroot/179/file0" dev="tmpfs" ino=962 res=1 errno=0 [ 299.543566][ T8754] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 299.543590][ T8754] ref_ctr increment failed for inode: 0x3c2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888028c53100 [ 299.656423][ T8754] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 299.656450][ T8754] ref_ctr decrement failed for inode: 0x3c2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888028c53100 [ 299.679780][ T8754] uprobe: syz.3.853:8754 failed to unregister, leaking uprobe [ 299.700436][ T8757] loop1: detected capacity change from 0 to 256 [ 299.726737][ T8757] exFAT-fs (loop1): error, The cluster chain has a loop [ 299.726763][ T8757] exFAT-fs (loop1): Filesystem has been set read-only [ 299.726776][ T8757] exFAT-fs (loop1): failed to count the number of clusters in root [ 299.726787][ T8757] exFAT-fs (loop1): failed to recognize exfat type [ 299.904043][ T8763] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 300.127769][ T5749] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 300.151792][ T8771] loop1: detected capacity change from 0 to 1024 [ 300.191137][ T8771] hfsplus: failed to load extents file [ 300.287198][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 300.307234][ T5749] usb 4-1: New USB device found: idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 300.353006][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.353035][ T5749] usb 4-1: Product: syz [ 300.353051][ T5749] usb 4-1: Manufacturer: syz [ 300.353068][ T5749] usb 4-1: SerialNumber: syz [ 300.431695][ T5749] usb 4-1: config 0 descriptor?? [ 300.549318][ T5749] usb 4-1: selecting invalid altsetting 1 [ 300.549340][ T5749] technisat-usb2: could not set alternate setting to 0 [ 300.827276][ T5749] technisat-usb2: firmware version: 0.0 [ 300.829153][ T5749] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 301.838576][ T5749] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.842199][ T5749] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 301.842264][ T5749] usb 4-1: media controller created [ 301.902434][ T5749] technisat-usb2: i2c-error: out failed 53 = -22 [ 301.902614][ T5749] dvb-usb: MAC address reading failed. [ 301.963521][ T5749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.057965][ T5749] DVB: Unable to find symbol stv090x_attach() [ 302.059993][ T5749] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 302.159816][ T5749] rc_core: IR keymap rc-technisat-usb2 not found [ 302.159838][ T5749] Registered IR keymap rc-empty [ 302.161328][ T5749] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 302.163613][ T5749] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 302.270525][ T5749] dvb-usb: schedule remote query interval to 100 msecs. [ 302.271287][ T5749] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 302.299064][ T5749] usb 4-1: USB disconnect, device number 3 [ 302.642641][ T8798] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 302.642672][ T8798] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 302.642702][ T8798] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 302.645398][ T8798] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 302.652917][ T8798] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 302.779059][ T5749] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 303.149103][ T8805] loop4: detected capacity change from 0 to 256 [ 303.867482][ T8821] syzkaller0: entered promiscuous mode [ 303.867507][ T8821] syzkaller0: entered allmulticast mode [ 305.080166][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 305.227963][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 305.228833][ T27] usb 6-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 305.244518][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.244598][ T27] usb 6-1: Product: syz [ 305.244641][ T27] usb 6-1: Manufacturer: syz [ 305.244681][ T27] usb 6-1: SerialNumber: syz [ 305.310675][ T27] r8152-cfgselector 6-1: Unknown version 0x0000 [ 305.310702][ T27] r8152-cfgselector 6-1: config 0 descriptor?? [ 305.802184][ T9] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 306.323658][ T9] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 306.477976][ T9] usb 3-1: New USB device found: idVendor=1e7d, idProduct=2e22, bcdDevice=0.00 [ 306.478585][ T9] usb 3-1: config 0 has no interfaces? [ 306.478621][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.484958][ T9] usb 3-1: config 0 descriptor?? [ 306.726616][ T27] usb 3-1: USB disconnect, device number 9 [ 307.337721][ T8891] loop5: detected capacity change from 0 to 256 [ 307.921297][ T8907] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=525274 (16808768 ns) > initial count (1048576 ns). Using initial count to start timer. [ 308.784264][ T8927] loop2: detected capacity change from 0 to 2048 [ 309.628556][ T8944] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.088477][ T33] audit: type=1800 audit(1790365495.975:1433): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.905" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 310.209015][ T8954] loop3: detected capacity change from 0 to 16 [ 310.331609][ T8954] erofs (device loop3): mounted with root inode @ nid 36. [ 310.388539][ T8954] erofs (device loop3): compressed inode (nid 89) is invalid in a plain filesystem [ 310.881891][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.4.913'. ** 210 printk messages dropped ** [ 312.960025][ T8962] FAULT_INJECTION: forcing a failure. [ 312.960025][ T8962] name failslab, interval 1, probability 0, space 0, times 0 [ 312.960053][ T8962] CPU: 0 UID: 0 PID: 8962 Comm: syz.4.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.960096][ T8962] Tainted: [L]=SOFTLOCKUP [ 312.960103][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.960125][ T8962] Call Trace: [ 312.960132][ T8962] [ 312.960140][ T8962] dump_stack_lvl+0xe8/0x150 [ 312.960169][ T8962] should_fail_ex+0x3eb/0x540 [ 312.960199][ T8962] should_failslab+0xa8/0x100 [ 312.960225][ T8962] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 312.960248][ T8962] ? __kthread_create_on_node+0x1b3/0x3d0 [ 312.960287][ T8962] ? __kthread_create_on_node+0x1b3/0x3d0 [ 312.960320][ T8962] kvasprintf+0xeb/0x1a0 [ 312.960348][ T8962] ? __pfx_kvasprintf+0x10/0x10 [ 312.960373][ T8962] ? __kmalloc_cache_noprof+0x148/0x600 [ 312.960392][ T8962] ? __kthread_create_on_node+0x115/0x3d0 [ 312.960408][ T8962] ? __kthread_create_on_node+0x115/0x3d0 [ 312.960430][ T8962] __kthread_create_on_node+0x1b3/0x3d0 [ 312.960449][ T8962] ? __pfx___kthread_create_on_node+0x10/0x10 [ 312.960476][ T8962] ? __pfx_cryptomgr_probe+0x10/0x10 [ 312.960503][ T8962] ? __pfx_cryptomgr_probe+0x10/0x10 [ 312.960529][ T8962] kthread_create_on_node+0xeb/0x140 [ 312.960551][ T8962] ? __pfx_kthread_create_on_node+0x10/0x10 [ 312.960569][ T8962] ? __kmalloc_cache_noprof+0x31c/0x600 [ 312.960590][ T8962] ? __kmalloc_cache_noprof+0x148/0x600 [ 312.960609][ T8962] ? cryptomgr_notify+0x85/0x920 [ 312.960634][ T8962] ? cryptomgr_notify+0x3fb/0x920 [ 312.960663][ T8962] cryptomgr_notify+0x75e/0x920 [ 312.960696][ T8962] notifier_call_chain+0x1a5/0x3d0 [ 312.960721][ T8962] blocking_notifier_call_chain+0x6a/0x90 [ 312.960743][ T8962] crypto_alg_mod_lookup+0x390/0x5d0 [ 312.960770][ T8962] crypto_alloc_tfm_node+0x135/0x3e0 [ 312.960801][ T8962] esp6_init_state+0x615/0x1220 [ 312.960818][ T8962] ? do_syscall_64+0x166/0x520 [ 312.960836][ T8962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.960861][ T8962] ? __pfx_esp6_init_state+0x10/0x10 [ 312.960893][ T8962] ? lock_acquire+0x115/0x350 [ 312.960922][ T8962] ? __xfrm_init_state+0x745/0x1320 [ 312.960951][ T8962] __xfrm_init_state+0x9dd/0x1320 [ 312.960976][ T8962] ? __xfrm_init_state+0x745/0x1320 [ 312.961003][ T8962] xfrm_add_sa+0x2f3f/0x40a0 [ 312.961034][ T8962] ? __pfx_xfrm_add_sa+0x10/0x10 [ 312.961056][ T8962] ? apparmor_capable+0x126/0x170 [ 312.961091][ T8962] ? __nla_parse+0x40/0x60 [ 312.961111][ T8962] xfrm_user_rcv_msg+0x7a8/0xf30 [ 312.961140][ T8962] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 312.961189][ T8962] ? __mutex_trylock_common+0x15f/0x270 [ 312.961217][ T8962] ? __pfx___mutex_trylock_common+0x10/0x10 [ 312.961244][ T8962] ? rcu_is_watching+0x16/0xb0 [ 312.961270][ T8962] ? trace_contention_end+0x3d/0x140 [ 312.961301][ T8962] netlink_rcv_skb+0x226/0x4a0 [ 312.961324][ T8962] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 312.961350][ T8962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.961383][ T8962] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.961404][ T8962] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.961428][ T8962] xfrm_netlink_rcv+0x79/0x90 [ 312.961452][ T8962] netlink_unicast+0x7bd/0x940 [ 312.961479][ T8962] netlink_sendmsg+0x7c3/0xae0 [ 312.961506][ T8962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.961534][ T8962] ? apparmor_socket_sendmsg+0x18b/0x360 [ 312.961575][ T8962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.961596][ T8962] sock_sendmsg_nosec+0x13a/0x180 [ 312.961620][ T8962] ____sys_sendmsg+0x54e/0x850 [ 312.961641][ T8962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.961666][ T8962] ? import_iovec+0x73/0xa0 [ 312.961684][ T8962] ___sys_sendmsg+0x2a5/0x360 [ 312.961700][ T8962] ? __lock_acquire+0x747/0x2de0 [ 312.961724][ T8962] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.961744][ T8962] ? futex_wait+0x2a2/0x390 [ 312.961785][ T8962] ? __fget_files+0x3a2/0x420 [ 312.961804][ T8962] ? __fget_files+0x2a/0x420 [ 312.961847][ T8962] __x64_sys_sendmsg+0x1b1/0x290 [ 312.961868][ T8962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.961902][ T8962] do_syscall_64+0x166/0x520 [ 312.961932][ T8962] ? trace_irq_disable+0x3b/0x140 [ 312.961953][ T8962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.961969][ T8962] ? clear_bhb_loop+0x70/0xc0 [ 312.961988][ T8962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.962023][ T8962] RIP: 0033:0x7f7d8919e159 [ 312.962039][ T8962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.962053][ T8962] RSP: 002b:00007f7d89ff0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.962132][ T8962] RAX: ffffffffffffffda RBX: 00007f7d89425fa0 RCX: 00007f7d8919e159 [ 312.962148][ T8962] RDX: 00000000200080d4 RSI: 0000200000000180 RDI: 0000000000000007 [ 312.962160][ T8962] RBP: 00007f7d8923506b R08: 0000000000000000 R09: 0000000000000000 [ 312.962171][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.962182][ T8962] R13: 00007f7d89426038 R14: 00007f7d89425fa0 R15: 00007ffe6c9a50a8 [ 312.962209][ T8962] [ 314.244468][ T8982] syz_tun: left allmulticast mode [ 314.244735][ T8982] bridge0: port 1(syz_tun) entered disabled state [ 314.273166][ T8987] loop2: detected capacity change from 0 to 512 [ 314.303490][ T8987] EXT4-fs warning (device loop2): read_mmp_block:110: Error -117 while reading MMP block 12 [ 314.316985][ T8982] bridge_slave_1: left allmulticast mode [ 314.318000][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.476292][ T8982] bond0: (slave bond_slave_0): Releasing backup interface [ 314.488293][ T950] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 314.563771][ T8982] bond0: (slave bond_slave_1): Releasing backup interface [ 314.609662][ T8982] team0: Port device team_slave_0 removed [ 314.620687][ T8982] team0: Port device team_slave_1 removed [ 314.625469][ T8982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.646540][ T8982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.656427][ T950] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 314.666803][ T950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.666842][ T950] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.666873][ T950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.706384][ T8982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 315.245319][ T8974] syz.3.917 (8974): drop_caches: 2 [ 316.578735][ T950] usb 2-1: USB disconnect, device number 6 [ 316.732176][ T5839] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow! [ 317.571209][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.337704][ T9041] loop4: detected capacity change from 0 to 1024 [ 318.356028][ T9041] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52061!=20869) [ 318.356132][ T9041] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 318.356148][ T9041] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 319.302339][ T9059] loop3: detected capacity change from 0 to 2048 [ 319.368069][ T9059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.642735][ T9081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.642751][ T9081] IPv6: NLM_F_CREATE should be set when creating new route [ 320.968572][ T9081] tipc: Resetting bearer [ 322.129205][ T5839] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.129238][ T5839] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.129265][ T5839] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.129312][ T5839] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.194116][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 323.150920][ T9117] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 323.432683][ T9121] vivid-000: disconnect [ 323.433405][ T9119] vivid-000: reconnect [ 323.598363][ T9117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.717634][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 323.804937][ T9129] bond1: (slave geneve2): making interface the new active one [ 323.827392][ T9138] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 323.827482][ T9138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.966'. [ 324.111731][ T9137] 9p: Bad value for 'rfdno' [ 324.174021][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 324.242562][ T9129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 324.498652][ T6311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.577429][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.577908][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.577954][ T5838] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.577996][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.126841][ T9133] dummy0: left promiscuous mode [ 325.127343][ T9133] bridge2: port 1(dummy0) entered blocking state [ 325.143419][ T9133] bridge2: port 1(dummy0) entered disabled state [ 325.143622][ T9133] dummy0: entered allmulticast mode [ 325.148926][ T9133] dummy0: entered promiscuous mode [ 325.530587][ T9138] bridge2: port 1(dummy0) entered blocking state [ 325.530709][ T9138] bridge2: port 1(dummy0) entered forwarding state [ 325.596154][ T9138] dummy0: left allmulticast mode [ 325.603546][ T9138] bridge2: port 1(dummy0) entered disabled state [ 327.182334][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 327.564537][ T9181] FAULT_INJECTION: forcing a failure. [ 327.564537][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 327.564578][ T9181] CPU: 1 UID: 0 PID: 9181 Comm: syz.1.981 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.564611][ T9181] Tainted: [L]=SOFTLOCKUP [ 327.564620][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.564634][ T9181] Call Trace: [ 327.564643][ T9181] [ 327.564654][ T9181] dump_stack_lvl+0xe8/0x150 [ 327.564695][ T9181] should_fail_ex+0x3eb/0x540 [ 327.564744][ T9181] should_failslab+0xa8/0x100 [ 327.564777][ T9181] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 327.564803][ T9181] ? kmem_cache_alloc_noprof+0x151/0x600 [ 327.564828][ T9181] ? __d_alloc+0x37/0x6f0 [ 327.564852][ T9181] ? __d_alloc+0x37/0x6f0 [ 327.564885][ T9181] __d_alloc+0x37/0x6f0 [ 327.564916][ T9181] d_alloc_pseudo+0x21/0xc0 [ 327.564944][ T9181] alloc_path_pseudo+0x107/0x220 [ 327.564970][ T9181] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 327.564992][ T9181] ? idr_alloc_u32+0x1f1/0x330 [ 327.565024][ T9181] alloc_file_pseudo+0xa8/0x1e0 [ 327.565052][ T9181] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 327.565086][ T9181] anon_inode_getfile+0xc5/0x1a0 [ 327.565112][ T9181] bpf_link_prime+0xfc/0x220 [ 327.565143][ T9181] bpf_xdp_link_attach+0x26d/0x990 [ 327.565169][ T9181] ? update_protect_slice+0x128/0x210 [ 327.565201][ T9181] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 327.565244][ T9181] ? __fget_files+0x2a/0x420 [ 327.565272][ T9181] ? attach_type_to_prog_type+0x52/0x4d0 [ 327.565296][ T9181] ? bpf_prog_attach_check_attach_type+0x3b3/0x570 [ 327.565341][ T9181] link_create+0x4cb/0x850 [ 327.565369][ T9181] __sys_bpf+0x760/0xd90 [ 327.565410][ T9181] ? __pfx___sys_bpf+0x10/0x10 [ 327.565446][ T9181] ? do_futex+0x3e7/0x4e0 [ 327.565508][ T9181] ? rcu_is_watching+0x16/0xb0 [ 327.565549][ T9181] __x64_sys_bpf+0xba/0xd0 [ 327.565582][ T9181] do_syscall_64+0x166/0x520 [ 327.565606][ T9181] ? trace_irq_disable+0x3b/0x140 [ 327.565637][ T9181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.565660][ T9181] ? clear_bhb_loop+0x70/0xc0 [ 327.565689][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.565712][ T9181] RIP: 0033:0x7faf7fd9e159 [ 327.565734][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.565753][ T9181] RSP: 002b:00007faf80cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.565777][ T9181] RAX: ffffffffffffffda RBX: 00007faf80025fa0 RCX: 00007faf7fd9e159 [ 327.565793][ T9181] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000001c [ 327.565808][ T9181] RBP: 00007faf7fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 327.565822][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.565836][ T9181] R13: 00007faf80026038 R14: 00007faf80025fa0 R15: 00007ffd18bbf728 [ 327.565871][ T9181] [ 331.406385][ T9220] loop2: detected capacity change from 0 to 512 [ 331.423989][ T9220] EXT4-fs (loop2): Test dummy encryption mode enabled [ 331.424014][ T9220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 331.424027][ T9220] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 332.016161][ T9208] bridge1: left promiscuous mode [ 332.016200][ T9208] bridge1: left allmulticast mode [ 332.020345][ T9208] team1: left promiscuous mode [ 332.020368][ T9208] team1: left allmulticast mode [ 332.110416][ T5840] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.120300][ T5840] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.120348][ T5840] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.120387][ T5840] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.870061][ T9233] loop4: detected capacity change from 0 to 8 [ 333.604235][ T9233] unable to read id index table [ 334.367268][ T4938] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 334.518701][ T4938] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 334.522172][ T4938] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 334.522224][ T4938] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 334.522247][ T4938] usb 6-1: config 0 interface 0 has no altsetting 0 [ 334.565934][ T4938] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 334.565964][ T4938] usb 6-1: Product: syz [ 334.565980][ T4938] usb 6-1: Manufacturer: syz [ 334.565994][ T4938] usb 6-1: SerialNumber: syz [ 334.613473][ T4938] usb 6-1: config 0 descriptor?? [ 334.633030][ T4938] hub 6-1:0.0: bad descriptor, ignoring hub [ 334.633060][ T4938] hub 6-1:0.0: probe with driver hub failed with error -5 [ 334.668714][ T4938] usb 6-1: selecting invalid altsetting 0 [ 334.717552][ T27] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 334.870687][ T27] usb 4-1: not running at top speed; connect to a high speed hub [ 334.870717][ T27] usb 4-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 334.871862][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.871935][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.951004][ T27] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 334.951101][ T27] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 335.039333][ T27] usb 6-1: USB disconnect, device number 4 [ 335.174267][ T5732] usb 4-1: USB disconnect, device number 4 [ 336.865990][ T9267] FAULT_INJECTION: forcing a failure. [ 336.865990][ T9267] name failslab, interval 1, probability 0, space 0, times 0 [ 336.866029][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.5.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.866062][ T9267] Tainted: [L]=SOFTLOCKUP [ 336.866072][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.866086][ T9267] Call Trace: [ 336.866095][ T9267] [ 336.866106][ T9267] dump_stack_lvl+0xe8/0x150 [ 336.866157][ T9267] should_fail_ex+0x3eb/0x540 [ 336.866196][ T9267] should_failslab+0xa8/0x100 [ 336.866234][ T9267] __kmalloc_cache_node_noprof+0xa5/0x620 [ 336.866274][ T9267] ? blkg_alloc+0xcc/0x8f0 [ 336.866305][ T9267] ? blkg_alloc+0xcc/0x8f0 [ 336.866343][ T9267] blkg_alloc+0xcc/0x8f0 [ 336.866379][ T9267] ? xas_store+0x9f5/0x17f0 [ 336.866414][ T9267] blkcg_init_disk+0x1ca/0x2e0 [ 336.866451][ T9267] ? __pfx_blkcg_init_disk+0x10/0x10 [ 336.866495][ T9267] ? do_raw_spin_unlock+0xf5/0x200 [ 336.866525][ T9267] __alloc_disk_node+0x312/0x600 [ 336.866558][ T9267] __blk_alloc_disk+0x105/0x1d0 [ 336.866590][ T9267] ? __pfx___blk_alloc_disk+0x10/0x10 [ 336.866647][ T9267] ? __raw_spin_lock_init+0x45/0x100 [ 336.866674][ T9267] dm_create+0x476/0xf70 [ 336.866724][ T9267] dev_create+0x1f7/0x400 [ 336.866760][ T9267] ? __pfx_dev_create+0x10/0x10 [ 336.866788][ T9267] ? __might_fault+0xaf/0x130 [ 336.866819][ T9267] dm_ctl_ioctl+0x9ec/0xe10 [ 336.866859][ T9267] ? __pfx_dev_create+0x10/0x10 [ 336.866890][ T9267] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 336.866953][ T9267] ? __fget_files+0x2a/0x420 [ 336.866986][ T9267] ? bpf_lsm_file_ioctl+0x9/0x20 [ 336.867032][ T9267] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 336.867062][ T9267] __se_sys_ioctl+0xfc/0x170 [ 336.867098][ T9267] do_syscall_64+0x166/0x520 [ 336.867121][ T9267] ? trace_irq_disable+0x3b/0x140 [ 336.867151][ T9267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.867175][ T9267] ? clear_bhb_loop+0x70/0xc0 [ 336.867202][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.867225][ T9267] RIP: 0033:0x7fc127f9e159 [ 336.867247][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.867277][ T9267] RSP: 002b:00007fc128e3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.867301][ T9267] RAX: ffffffffffffffda RBX: 00007fc128225fa0 RCX: 00007fc127f9e159 [ 336.867319][ T9267] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 336.867335][ T9267] RBP: 00007fc12803506b R08: 0000000000000000 R09: 0000000000000000 [ 336.867350][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.867365][ T9267] R13: 00007fc128226038 R14: 00007fc128225fa0 R15: 00007ffcf7fe01c8 [ 336.867397][ T9267] [ 337.627194][ T4938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 337.653314][ T4925] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 337.653336][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.653359][ T4925] Tainted: [L]=SOFTLOCKUP [ 337.653365][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.653377][ T4925] Workqueue: hci5 hci_rx_work [ 337.653405][ T4925] Call Trace: [ 337.653412][ T4925] [ 337.653420][ T4925] dump_stack_lvl+0xe8/0x150 [ 337.653447][ T4925] sysfs_create_dir_ns+0x271/0x2a0 [ 337.653472][ T4925] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 337.653497][ T4925] ? do_raw_spin_unlock+0xf5/0x200 [ 337.653519][ T4925] kobject_add_internal+0x622/0xcd0 [ 337.653548][ T4925] kobject_add+0x163/0x240 [ 337.653574][ T4925] ? __pfx_kobject_add+0x10/0x10 [ 337.653600][ T4925] ? get_device_parent+0x366/0x3a0 [ 337.653622][ T4925] device_add+0x3fa/0xb80 [ 337.653643][ T4925] hci_conn_add_sysfs+0xd5/0x210 [ 337.653669][ T4925] le_conn_complete_evt+0x10b2/0x17a0 [ 337.653694][ T4925] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 337.653714][ T4925] ? __mutex_unlock_slowpath+0x731/0x900 [ 337.653737][ T4925] ? skb_pull_data+0xf0/0x200 [ 337.653761][ T4925] hci_le_conn_complete_evt+0x187/0x470 [ 337.653785][ T4925] hci_event_packet+0x67a/0xf10 [ 337.653816][ T4925] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 337.653832][ T4925] ? __pfx_hci_event_packet+0x10/0x10 [ 337.653860][ T4925] ? kcov_remote_start+0x523/0x7e0 [ 337.653884][ T4925] ? hci_send_to_monitor+0xdf/0x600 [ 337.653907][ T4925] hci_rx_work+0x2b4/0x1110 [ 337.653936][ T4925] ? process_scheduled_works+0x97a/0x1630 [ 337.653962][ T4925] process_scheduled_works+0xc3d/0x1630 [ 337.654010][ T4925] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.654040][ T4925] ? assign_work+0x3cf/0x5d0 [ 337.654068][ T4925] worker_thread+0xa47/0xfb0 [ 337.654114][ T4925] kthread+0x38b/0x480 [ 337.654133][ T4925] ? __pfx_worker_thread+0x10/0x10 [ 337.654157][ T4925] ? __pfx_kthread+0x10/0x10 [ 337.654177][ T4925] ret_from_fork+0x514/0xb70 [ 337.654195][ T4925] ? __pfx_ret_from_fork+0x10/0x10 [ 337.654211][ T4925] ? __switch_to+0xc78/0x1410 [ 337.654236][ T4925] ? __pfx_kthread+0x10/0x10 [ 337.654256][ T4925] ret_from_fork_asm+0x1a/0x30 [ 337.654300][ T4925] [ 337.654319][ T4925] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 337.654346][ T4925] Bluetooth: hci5: failed to register connection device [ 337.859325][ T4938] usb 4-1: Using ep0 maxpacket: 32 [ 337.870729][ T4938] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 337.882251][ T4938] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 337.882282][ T4938] usb 4-1: config 0 has no interface number 0 [ 337.883875][ T9284] loop1: detected capacity change from 0 to 256 [ 337.970835][ T4938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.970866][ T4938] usb 4-1: Product: syz [ 337.970882][ T4938] usb 4-1: Manufacturer: syz [ 337.970898][ T4938] usb 4-1: SerialNumber: syz [ 337.995552][ T4938] usb 4-1: config 0 descriptor?? [ 338.033416][ T9284] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 338.152545][ T9289] loop2: detected capacity change from 0 to 512 [ 338.225971][ T9289] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 338.226008][ T9289] FAT-fs (loop2): Filesystem has been set read-only [ 338.595304][ T9293] loop4: detected capacity change from 0 to 4096 [ 338.642890][ T9293] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 339.760329][ T9293] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 339.760462][ T9293] ntfs3(loop4): Failed to load $Extend (-22). [ 339.760482][ T9293] ntfs3(loop4): Failed to initialize $Extend. [ 340.017720][ T9299] comedi comedi1: Minor 0 could not be opened [ 340.084783][ T4938] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 340.084820][ T4938] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 340.086173][ T4938] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 340.086622][ T4938] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 340.141068][ T4938] usb 4-1: USB disconnect, device number 5 [ 340.141207][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 340.288266][ T9] usb 5-1: New USB device found: idVendor=046d, idProduct=c08a, bcdDevice=0.40 [ 340.290896][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 439, setting to 64 [ 340.290932][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 340.293957][ T9] usb 5-1: string descriptor 0 read error: -22 [ 340.294088][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.314885][ T9293] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 340.536559][ T9293] ntfs3(loop4): ino=5, "/" indx_read_ra [ 340.616981][ T9317] xt_hashlimit: size too large, truncated to 1048576 [ 340.660857][ T9318] ntfs3(loop4): ino=5, "/" indx_read_ra [ 340.703058][ T9318] ntfs3(loop4): ino=5, "/" indx_read_ra [ 340.726674][ T6313] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 340.757241][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 340.867221][ T9318] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 340.867259][ T9318] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 340.908181][ T27] usb 6-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 340.912210][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.912240][ T27] usb 6-1: Product: syz [ 340.912258][ T27] usb 6-1: Manufacturer: syz [ 340.912274][ T27] usb 6-1: SerialNumber: syz [ 340.951412][ T27] usb 6-1: config 0 descriptor?? [ 340.963801][ T27] ch341 6-1:0.0: ch341-uart converter detected [ 341.087251][ T58] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 341.160644][ T27] usb 6-1: failed to receive control message: -32 [ 341.160708][ T27] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 341.220584][ T9313] bridge_slave_0: left allmulticast mode [ 341.220614][ T9313] bridge_slave_0: left promiscuous mode [ 341.220914][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.227071][ T9313] bridge_slave_1: left allmulticast mode [ 341.233570][ T9313] bridge_slave_1: left promiscuous mode [ 341.233810][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.276314][ T58] usb 4-1: New USB device found: idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 341.287120][ T58] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 341.287150][ T58] usb 4-1: config 0 has no interface number 0 [ 341.287196][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.317799][ T58] usb 4-1: config 0 descriptor?? [ 341.323683][ T58] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 341.325189][ T9313] bond0: (slave bond_slave_0): Releasing backup interface [ 341.365010][ T9313] bond0: (slave bond_slave_1): Releasing backup interface [ 341.385818][ T9313] team0: Port device team_slave_0 removed [ 341.403651][ T9313] team0: Port device team_slave_1 removed [ 341.405013][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.405035][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.405412][ T9326] loop2: detected capacity change from 0 to 8192 [ 341.421149][ T9313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.421176][ T9313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.454214][ T9313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 341.485087][ T9321] orangefs_mount: mount request failed with -4 [ 341.684334][ T27] usb 6-1: USB disconnect, device number 5 [ 341.722071][ T27] ch341 6-1:0.0: device disconnected [ 341.980210][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 341.980324][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 342.010142][ T9] usb 5-1: USB disconnect, device number 6 [ 342.031762][ T9334] loop1: detected capacity change from 0 to 256 [ 342.066853][ T9334] FAT-fs (loop1): bogus number of FAT sectors [ 342.066879][ T9334] FAT-fs (loop1): Can't find a valid FAT filesystem [ 342.095860][ T9332] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 342.228902][ T58] gspca_cpia1: usb_control_msg 02, error -71 [ 342.229355][ T58] gspca_cpia1: usb_control_msg 05, error -71 [ 342.229722][ T58] gspca_cpia1: usb_control_msg 04, error -71 [ 342.229814][ T58] cpia1 4-1:0.32: probe with driver cpia1 failed with error -71 [ 342.234043][ T58] usb 4-1: USB disconnect, device number 6 [ 342.575752][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 342.575781][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 342.925532][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81710f22 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 342.925607][ C0] Call Trace: [ 342.925619][ C0] [ 342.925635][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 342.925678][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 342.925708][ C0] ? sched_clock_cpu+0x74/0x440 [ 342.925742][ C0] mce_cpu_restart+0x11a/0x2c0 [ 342.925767][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 342.925787][ C0] __flush_smp_call_function_queue+0x35d/0xc50 [ 342.925815][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 342.925838][ C0] __sysvec_call_function_single+0x9a/0x3d0 [ 342.925866][ C0] sysvec_call_function_single+0x9e/0xc0 [ 342.925884][ C0] [ 342.925891][ C0] [ 342.925899][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 342.925918][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 342.925941][ C0] Code: af f2 11 00 00 00 00 eb b5 e8 fb 1c 47 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 93 67 f2 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 47 d9 [ 342.925956][ C0] RSP: 0018:ffffc9000e08ee58 EFLAGS: 00000282 [ 342.925974][ C0] RAX: 299542c224731100 RBX: 0000000000000206 RCX: 8000000000000001 [ 342.925987][ C0] RDX: ffffc9000f742000 RSI: ffffffff8e6a1508 RDI: ffffffff8c6dd480 [ 342.926000][ C0] RBP: ffff888028612b68 R08: ffff88801d89ea6f R09: 1ffff11003b13d4d [ 342.926014][ C0] R10: dffffc0000000000 R11: ffffed1003b13d4e R12: 0000000000000003 [ 342.926027][ C0] R13: 0000000000000003 R14: ffffffff8ed5c2a0 R15: ffff888028611f40 [ 342.926055][ C0] ? page_table_check_clear+0x1d0/0x590 [ 342.926081][ C0] page_table_check_clear+0x530/0x590 [ 342.926106][ C0] ? page_table_check_clear+0x1d0/0x590 [ 342.926134][ C0] __zap_vma_range+0x3a12/0x4f70 [ 342.926195][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 342.926245][ C0] ? mas_find+0x6d6/0xcb0 [ 342.926271][ C0] unmap_vmas+0x38b/0x550 [ 342.926299][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 342.926318][ C0] ? mas_prev_slot+0xb76/0xbf0 [ 342.926353][ C0] ? tlb_gather_mmu+0x22e/0x2f0 [ 342.926376][ C0] unmap_region+0x208/0x330 [ 342.926400][ C0] ? __pfx_unmap_region+0x10/0x10 [ 342.926435][ C0] ? __mas_set_range+0x11a/0x3a0 [ 342.926460][ C0] ? mmap_region+0xcbe/0x2c30 [ 342.926487][ C0] mmap_region+0xcef/0x2c30 [ 342.926523][ C0] ? __lock_acquire+0x747/0x2de0 [ 342.926549][ C0] ? __pfx_mmap_region+0x10/0x10 [ 342.926580][ C0] ? lock_acquire+0x115/0x350 [ 342.926607][ C0] ? lock_acquire+0x115/0x350 [ 342.926642][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 342.926659][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 342.926682][ C0] ? unwind_get_return_address+0x4d/0x90 [ 342.926703][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 342.926776][ C0] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 342.926827][ C0] ? mm_get_unmapped_area+0xd3/0x100 [ 342.926854][ C0] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 342.926887][ C0] ? cap_mmap_addr+0xaa/0xf0 [ 342.926922][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 342.926954][ C0] ? security_mmap_addr+0x71/0x240 [ 342.926997][ C0] do_mmap+0xe0a/0x1300 [ 342.927042][ C0] ? __pfx_do_mmap+0x10/0x10 [ 342.927087][ C0] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 342.927113][ C0] ? down_write_killable+0x179/0x230 [ 342.927147][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 342.927178][ C0] ? apparmor_mmap_file+0x1cc/0x390 [ 342.927208][ C0] ? security_mmap_file+0x4df/0xa20 [ 342.927246][ C0] vm_mmap_pgoff+0x272/0x4e0 [ 342.927283][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 342.927320][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 342.927356][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 342.927383][ C0] do_syscall_64+0x166/0x520 [ 342.927410][ C0] ? trace_irq_disable+0x3b/0x140 [ 342.927440][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.927472][ C0] ? clear_bhb_loop+0x70/0xc0 [ 342.927500][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.927524][ C0] RIP: 0033:0x7fa3d699e159 [ 342.927547][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.927566][ C0] RSP: 002b:00007fa3d7791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 342.927591][ C0] RAX: ffffffffffffffda RBX: 00007fa3d6c26090 RCX: 00007fa3d699e159 [ 342.927609][ C0] RDX: 0000000003000007 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 342.927651][ C0] RBP: 00007fa3d6a3506b R08: 0000000000000004 R09: 0000000000000000 [ 342.927667][ C0] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000000 [ 342.927682][ C0] R13: 00007fa3d6c26128 R14: 00007fa3d6c26090 R15: 00007ffca7b95648 [ 342.927719][ C0] [ 343.409193][ T9354] loop3: detected capacity change from 0 to 512 [ 343.488394][ T9354] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1037: bad orphan inode 15 [ 343.488445][ T9354] loop3: lost filesystem error report for type 5 error -117 [ 343.497159][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 343.497185][ C1] EXT4-fs (loop3): initial error at time 1790365529: ext4_orphan_get:1429 [ 343.497211][ C1] EXT4-fs (loop3): last error at time 1790365529: ext4_orphan_get:1429 [ 343.553127][ T9354] ext4_test_bit(bit=14, block=5) = 0 [ 343.559005][ T9354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.607254][ T9359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 343.611301][ T9354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 343.712987][ T9360] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.1037: reserved inode found cleared - inode=1 [ 343.799909][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 343.892106][ T9354] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 344.138976][ T5608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.917365][ T4925] Bluetooth: hci5: command 0x0406 tx timeout [ 347.276402][ T9399] loop1: detected capacity change from 0 to 40427 [ 347.294759][ T9399] F2FS-fs (loop1): invalid crc value [ 347.423301][ T9399] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 347.436378][ T9399] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 347.436411][ T9399] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 347.436497][ T9399] F2FS-fs (loop1): Start checkpoint disabled! [ 347.463698][ T9399] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 347.477303][ T58] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 347.479394][ T9399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 347.979451][ T9406] bridge3: entered promiscuous mode [ 349.288153][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.288211][ T58] usb 3-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=0.40 [ 349.288252][ T58] usb 3-1: no configurations [ 349.288267][ T58] usb 3-1: can't read configurations, error -22 [ 351.120628][ T9447] loop4: detected capacity change from 0 to 64 [ 353.304976][ T9470] FAULT_INJECTION: forcing a failure. [ 353.304976][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 353.305051][ T9470] CPU: 1 UID: 0 PID: 9470 Comm: syz.1.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.305085][ T9470] Tainted: [L]=SOFTLOCKUP [ 353.305094][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.305110][ T9470] Call Trace: [ 353.305214][ T9470] [ 353.305287][ T9470] dump_stack_lvl+0xe8/0x150 [ 353.305479][ T9470] should_fail_ex+0x3eb/0x540 [ 353.305611][ T9470] should_failslab+0xa8/0x100 [ 353.305678][ T9470] ? __anon_vma_prepare+0xbe/0x4a0 [ 353.305746][ T9470] kmem_cache_alloc_noprof+0x9c/0x600 [ 353.305778][ T9470] ? __anon_vma_prepare+0xbe/0x4a0 [ 353.305811][ T9470] __anon_vma_prepare+0xbe/0x4a0 [ 353.305837][ T9470] ? vma_has_anon_rmap+0x95/0x270 [ 353.305875][ T9470] do_pte_missing+0x2f81/0x3570 [ 353.305924][ T9470] handle_mm_fault+0x1a53/0x3750 [ 353.305962][ T9470] ? mt_find+0x186/0x630 [ 353.306081][ T9470] ? handle_mm_fault+0xf1/0x3750 [ 353.306131][ T9470] ? __pfx_handle_mm_fault+0x10/0x10 [ 353.306198][ T9470] __get_user_pages+0x1669/0x26e0 [ 353.306268][ T9470] get_user_pages_remote+0x305/0xb90 [ 353.306312][ T9470] ? __pfx_get_user_pages_remote+0x10/0x10 [ 353.306350][ T9470] ? mmap_read_lock_maybe_expand+0xd7/0x3b0 [ 353.306383][ T9470] copy_string_kernel+0x2f9/0x5f0 [ 353.306442][ T9470] ? __pfx_copy_string_kernel+0x10/0x10 [ 353.306477][ T9470] ? alloc_bprm+0x57d/0x640 [ 353.306512][ T9470] do_execveat_common+0x7fb/0xbd0 [ 353.306552][ T9470] ? do_getname+0x151/0x250 [ 353.306580][ T9470] __x64_sys_execve+0x97/0xc0 [ 353.306615][ T9470] do_syscall_64+0x166/0x520 [ 353.306679][ T9470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.306726][ T9470] ? clear_bhb_loop+0x70/0xc0 [ 353.306756][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.306781][ T9470] RIP: 0033:0x7faf7fd9e159 [ 353.306834][ T9470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.306856][ T9470] RSP: 002b:00007faf80cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 353.306910][ T9470] RAX: ffffffffffffffda RBX: 00007faf80025fa0 RCX: 00007faf7fd9e159 [ 353.306929][ T9470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 353.306944][ T9470] RBP: 00007faf7fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 353.306960][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.306975][ T9470] R13: 00007faf80026038 R14: 00007faf80025fa0 R15: 00007ffd18bbf728 [ 353.307012][ T9470] [ 354.418361][ T4938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 354.567419][ T4938] usb 4-1: Using ep0 maxpacket: 32 [ 354.568222][ T4938] usb 4-1: New USB device found: idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 354.569412][ T4938] usb 4-1: config 164 has an invalid interface number: 195 but max is 0 [ 354.569439][ T4938] usb 4-1: config 164 has no interface number 0 [ 354.569469][ T4938] usb 4-1: config 164 interface 195 has no altsetting 0 [ 354.575108][ T4938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.575138][ T4938] usb 4-1: Product: syz [ 354.575156][ T4938] usb 4-1: Manufacturer: syz [ 354.575172][ T4938] usb 4-1: SerialNumber: syz [ 354.713626][ T9485] loop5: detected capacity change from 0 to 512 [ 354.789916][ T9485] EXT4-fs: Mount option(s) incompatible with ext3 [ 355.213015][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.230213][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.245792][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.256331][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.277543][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.612021][ T4938] usb 4-1: USB disconnect, device number 7 [ 356.820979][ T9513] loop1: detected capacity change from 0 to 8 [ 357.377355][ T4925] Bluetooth: hci2: command tx timeout [ 358.024976][ T5839] bond0 (unregistering): Released all slaves [ 358.779129][ T9548] loop2: detected capacity change from 0 to 256 [ 358.810131][ T9548] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 358.896906][ T9548] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 359.130369][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 359.457610][ T4925] Bluetooth: hci2: command tx timeout [ 360.031172][ T9577] loop1: detected capacity change from 0 to 16 [ 360.052608][ T9577] erofs (device loop1): algorithm 1 isn't enabled on this kernel [ 361.304099][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.304215][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.304418][ T9491] bridge_slave_0: entered allmulticast mode [ 361.327975][ T9491] bridge_slave_0: entered promiscuous mode [ 361.354822][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.354954][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.355161][ T9491] bridge_slave_1: entered allmulticast mode [ 361.378911][ T9491] bridge_slave_1: entered promiscuous mode [ 361.547222][ T4925] Bluetooth: hci2: command tx timeout [ 361.761369][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.783250][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.152193][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 362.365684][ T9491] team0: Port device team_slave_0 added [ 362.367255][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 362.391445][ T9491] team0: Port device team_slave_1 added [ 362.518416][ T9612] hsr_slave_0: left promiscuous mode [ 362.519963][ T9612] hsr_slave_1: left promiscuous mode [ 362.642137][ T9615] loop3: detected capacity change from 0 to 512 [ 362.644229][ T9615] EXT4-fs (loop3): Test dummy encryption mode enabled [ 362.644259][ T9615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.644278][ T9615] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 362.686281][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.686299][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.686323][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.743548][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.743567][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.743598][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.044937][ T9616] ceph: No mds server is up or the cluster is laggy [ 363.045744][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 363.046165][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 363.286209][ T9491] hsr_slave_0: entered promiscuous mode [ 363.287469][ T9491] hsr_slave_1: entered promiscuous mode [ 363.646503][ T4925] Bluetooth: hci2: command tx timeout [ 364.064078][ T9639] team0: Port device bridge1 removed [ 364.095852][ T9639] team0: Mode changed to "roundrobin" [ 364.129836][ T9639] vlan0: entered promiscuous mode [ 364.140378][ T9639] tipc: Enabled bearer , priority 0 [ 364.689371][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 364.941433][ T9491] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 364.990406][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.992548][ T9491] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.019431][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.020975][ T9491] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.073214][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.076641][ T9491] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.126923][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.257797][ T9] tipc: Node number set to 1099557796 [ 365.441967][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.506531][ T9491] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.537432][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.537494][ T34] INFO: task syz.0.461:7355 blocked for more than 143 seconds. [ 365.537517][ T34] Tainted: G L syzkaller #0 [ 365.537530][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.537542][ T34] task:syz.0.461 state:D [ 365.537543][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.537584][ ** replaying previous printk message ** [ 365.537584][ T34] stack:27088 pid:7355 tgid:7353 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 365.537610][ T34] Call Trace: [ 365.537618][ T34] [ 365.537634][ T34] __schedule+0x1b47/0x5c60 [ 365.537762][ T34] ? __pfx___schedule+0x10/0x10 [ 365.537798][ T34] ? schedule+0x90/0x2b0 [ 365.537825][ T34] schedule+0x164/0x2b0 [ 365.537851][ T34] schedule_preempt_disabled+0x13/0x30 [ 365.537886][ T34] __mutex_lock+0x7c4/0x15a0 [ 365.537917][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 365.537977][ T34] ? write_threads+0x3b1/0x610 [ 365.538073][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 365.538097][ T34] ? simple_strntoull+0x114/0x190 [ 365.538173][ T34] ? qword_get+0x5ad/0x650 [ 365.538286][ T34] write_threads+0x3b1/0x610 [ 365.538314][ T34] ? __pfx_write_threads+0x10/0x10 [ 365.538358][ T34] ? _copy_from_user+0x94/0xb0 [ 365.538427][ T34] ? simple_transaction_get+0x12d/0x160 [ 365.538466][ T34] nfsctl_transaction_write+0x10f/0x160 [ 365.538493][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 365.538519][ T34] vfs_write+0x296/0xba0 [ 365.538555][ T34] ? __pfx_vfs_write+0x10/0x10 [ 365.538585][ T34] ? __fget_files+0x2a/0x420 [ 365.538616][ T34] ? __fget_files+0x3a2/0x420 [ 365.538641][ T34] ? __fget_files+0x2a/0x420 [ 365.538689][ T34] ? fdget+0x1ac/0x250 [ 365.538722][ T34] ksys_write+0x150/0x270 [ 365.538754][ T34] ? __pfx_ksys_write+0x10/0x10 [ 365.538794][ T34] do_syscall_64+0x166/0x520 [ 365.538911][ T34] ? trace_irq_disable+0x3b/0x140 [ 365.538968][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.538993][ T34] ? clear_bhb_loop+0x70/0xc0 [ 365.539021][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.539045][ T34] RIP: 0033:0x7fb85939e159 [ 365.539066][ T34] RSP: 002b:00007fb85a2dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.539092][ T34] RAX: ffffffffffffffda RBX: 00007fb859626090 RCX: 00007fb85939e159 [ 365.539109][ T34] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 365.539124][ T34] RBP: 00007fb85943506b R08: 0000000000000000 R09: 0000000000000000 [ 365.539147][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.539162][ T34] R13: 00007fb859626128 R14: 00007fb859626090 R15: 00007ffd1a56ded8 [ 365.539199][ T34] [ 365.539236][ T34] [ 365.539236][ T34] Showing all locks held in the system: [ 365.539250][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 365.539361][ T34] #0: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 365.539551][ T34] locks held by getty/5366: 2, on CPU#0: [ 365.539568][ T34] #0: ffff8880357030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 365.539756][ T34] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 365.539832][ T34] locks held by kworker/1:4/5732: 3, last CPU#1: [ 365.539849][ T34] #0: ffff88801b06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.541214][ T34] #1: ffffc90004927c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.541287][ T34] #2: ffff88807d9a2258 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 365.541442][ T34] locks held by kworker/u8:23/5838: 3, last CPU#0: [ 365.541460][ T34] #0: ffff88801b0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.541523][ T34] #1: ffffc90004e5fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.541882][ T34] #2: ffffffff902512a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 365.542016][ T34] locks held by syz.0.461/7354: 3, on CPU#1: [ 365.542033][ T34] #0: ffff88807a0c67f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 365.542089][ T34] #1: ffff8880257d0460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 365.542230][ T34] #2: ffffffff8f09f8e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 365.542286][ T34] locks held by syz.0.461/7355: 3, on CPU#1: [ 365.542301][ T34] #0: ffff88802a8e37b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 365.543338][ T34] #1: ffff8880257d0460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 365.543405][ T34] #2: ffffffff8f09f8e0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 365.543462][ T34] locks held by syz-executor/9491: 1, on CPU#1: [ 365.543478][ T34] #0: ffffffff902512a0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 365.543636][ T34] locks held by syz.1.1110/9650: 2, last CPU#0: [ 365.543653][ T34] #0: ffff888020ee00a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x2e6/0xab0 [ 365.543794][ T34] #1: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 365.543857][ T34] locks held by syz.5.1117/9676: 2, last CPU#1: [ 365.543873][ T34] #0: ffff88807aefa0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x350/0x1bb0 [ 365.543982][ T34] #1: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.544054][ T34] locks held by syz.3.1116/9682: 2, last CPU#0: [ 365.544071][ T34] #0: ffff88803109e460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xb41/0x10f0 [ 365.544165][ T34] #1: ffff8880675908a0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 365.544237][ T34] locks held by dhcpcd-run-hook/9689: 2, last CPU#0: [ 365.544254][ T34] #0: ffff88802e7472a0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 365.544312][ T34] #1: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: unlink_anon_vmas+0x119/0x720 [ 365.560364][ T34] [ 365.560388][ T34] ============================================= [ 365.560388][ T34] [ 365.560429][ T34] NMI backtrace for cpu 0 [ 365.560481][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 365.560555][ T34] Tainted: [L]=SOFTLOCKUP [ 365.560577][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.560610][ T34] Call Trace: [ 365.560649][ T34] [ 365.560672][ T34] dump_stack_lvl+0xe8/0x150 [ 365.560773][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 365.560876][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 365.560972][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 365.561068][ T34] sys_info+0x135/0x170 [ 365.561146][ T34] watchdog+0x1058/0x10d0 [ 365.561240][ T34] ? watchdog+0x209/0x10d0 [ 365.561333][ T34] kthread+0x38b/0x480 [ 365.561403][ T34] ? __pfx_watchdog+0x10/0x10 [ 365.561467][ T34] ? __pfx_kthread+0x10/0x10 [ 365.561538][ T34] ret_from_fork+0x514/0xb70 [ 365.561648][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 365.561701][ T34] ? __switch_to+0xc78/0x1410 [ 365.561806][ T34] ? __pfx_kthread+0x10/0x10 [ 365.561878][ T34] ret_from_fork_asm+0x1a/0x30 [ 365.562009][ T34] [ 365.562073][ T34] Sending NMI from CPU 0 to CPUs 1: [ 365.562201][ C1] NMI backtrace for cpu 1 [ 365.562217][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.562242][ C1] Tainted: [L]=SOFTLOCKUP [ 365.562249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.562260][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 365.562326][ C1] Code: e8 be 46 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 37 c2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 365.562342][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 365.562359][ C1] RAX: 1ffffffff35aad00 RBX: 00000000000003fd RCX: 0000000000000000 [ 365.562372][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 365.562384][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 365.562396][ C1] R10: dffffc0000000000 R11: ffffffff85788d30 R12: dffffc0000000000 [ 365.562410][ C1] R13: 0000000000000000 R14: ffffffff9ad56f80 R15: 0000000000000000 [ 365.562423][ C1] FS: 0000000000000000(0000) GS:ffff888124db7000(0000) knlGS:0000000000000000 [ 365.562438][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.562451][ C1] CR2: 0000559cdfd17950 CR3: 00000000742f2000 CR4: 00000000003526f0 [ 365.562468][ C1] Call Trace: [ 365.562476][ C1] [ 365.562485][ C1] wait_for_lsr+0x184/0x2f0 [ 365.562543][ C1] __serial8250_console_fifo_write+0x346/0x3e0 [ 365.562595][ C1] serial8250_console_write+0xaa1/0x1200 [ 365.562613][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 365.562666][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 365.562684][ C1] ? __schedule+0x1b5d/0x5c60 [ 365.562711][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 365.562756][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 365.562784][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 365.562817][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 365.562870][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 365.562897][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 365.562920][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 365.562948][ C1] ? __kthread_parkme+0x71/0x1f0 [ 365.562966][ C1] ? __kthread_parkme+0x199/0x1f0 [ 365.562988][ C1] kthread+0x38b/0x480 [ 365.563008][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 365.563031][ C1] ? __pfx_kthread+0x10/0x10 [ 365.563052][ C1] ret_from_fork+0x514/0xb70 [ 365.563071][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 365.563088][ C1] ? __switch_to+0xc78/0x1410 [ 365.563115][ C1] ? __pfx_kthread+0x10/0x10 [ 365.563142][ C1] ret_from_fork_asm+0x1a/0x30 [ 365.563179][ C1] [ 365.593398][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 366.513664][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 366.524479][ T34] Tainted: [L]=SOFTLOCKUP [ 366.528830][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.538919][ T34] Call Trace: [ 366.542229][ T34] [ 366.545219][ T34] vpanic+0x26f/0x710 [ 366.549262][ T34] panic+0xc5/0xd0 [ 366.553021][ T34] ? __pfx_panic+0x10/0x10 [ 366.557475][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 366.562987][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 366.568402][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 366.574617][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 366.580810][ T34] watchdog+0x10cc/0x10d0 [ 366.585180][ T34] ? watchdog+0x209/0x10d0 [ 366.589637][ T34] kthread+0x38b/0x480 [ 366.593751][ T34] ? __pfx_watchdog+0x10/0x10 [ 366.598463][ T34] ? __pfx_kthread+0x10/0x10 [ 366.603087][ T34] ret_from_fork+0x514/0xb70 [ 366.607799][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 366.612948][ T34] ? __switch_to+0xc78/0x1410 [ 366.617674][ T34] ? __pfx_kthread+0x10/0x10 [ 366.622294][ T34] ret_from_fork_asm+0x1a/0x30 [ 366.627106][ T34] [ 366.630740][ T34] Kernel Offset: disabled [ 366.635076][ T34] Rebooting in 86400 seconds..