last executing test programs: 4m25.416199798s ago: executing program 32 (id=108): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe0300000705810200020007050202"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000140)={0x0, 0xc, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) 3m58.467998971s ago: executing program 33 (id=251): r0 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 3m49.15388729s ago: executing program 34 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) 3m42.660547787s ago: executing program 5 (id=253): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @private1, 0x10001}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 3m41.624174326s ago: executing program 5 (id=307): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x8000000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 3m41.375316898s ago: executing program 5 (id=310): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$eJzs3c1qE1EYBuDPWtvYjd0J4mLEjaug3sEgFcQBITILXTlQ3TSiTDejq1yBO/EevBCvwqvoqrtIM0OnP9aNbU7beR4I85KXge9ASLI4J3l3/+PO9qfdD99//YjRKIuViFnsR2wepM6N7rqyyGtx1CwAgKtmMqny1DNwseo6r25FxPqppvyZZCAAAAAAAAAAAAD+m/3/ADA89v9ff3WdVxvd97fj7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0tmfz+/M//FIPR8AcP58/gPA8Lx+8/ZlXhRbkywbRezNmrIp22vbP39RbD3OFjb7u/aaprx52D9p+6wr7z749nkRNrr+6fG+u38tHj1s+4Pu2aviRL8e20tYPwAAAAAAAAAAAAAAAAAAAFwG4+zQX8/3j8dn9W068vsAJ87vr8a91aUtAwAAAAAAAAAAAAAAAAAAAK603S9fd6rp9H3dh9+nnhlMyC7HGMsIt89+AQhCNU38xgQAAAAAAAAAAAAAAAAAAAPUH/pNPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApNP////FhdRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuhz8BAAD//2OqXbs=") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x800000, 0x0, 0x0, r2}]) socket$kcm(0x2, 0x3, 0x2) 3m40.726941328s ago: executing program 5 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x81) fsync(r0) 3m39.62508776s ago: executing program 5 (id=318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 3m39.1980533s ago: executing program 35 (id=318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 3m21.094241925s ago: executing program 4 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m20.899306235s ago: executing program 4 (id=408): open(0x0, 0x149442, 0x40) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) 3m20.557925621s ago: executing program 4 (id=410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r2, {0x3}, {0xe, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x1, 0x7, 0x2, 0x7, 0x5, [{0x5, 0x1, 0x8, 0xd8}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x5c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m20.314153842s ago: executing program 4 (id=412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x5}) write(r0, &(0x7f0000000300)='.', 0x1) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x3}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) 3m19.105083869s ago: executing program 4 (id=420): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010f40)="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", 0x2000, &(0x7f00000149c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x22800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000003300)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) 3m18.709643047s ago: executing program 4 (id=424): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c5", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) 3m3.498113456s ago: executing program 36 (id=424): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c5", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) 2m49.261754908s ago: executing program 7 (id=568): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xfffdffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r5, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) syz_fuse_handle_req(r0, &(0x7f0000006c40)="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", 0x2000, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={0x90, 0x0, 0xff, {0x6, 0x0, 0x742, 0x0, 0x400000ad, 0x4, {0x5, 0x9bd, 0x7fffffffffffffff, 0x8000, 0x4, 0x3, 0x10001, 0x2c06, 0x1d4, 0x4000, 0x7f, 0x0, r3, 0x3, 0x109465}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m46.992791685s ago: executing program 7 (id=578): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) 2m46.338687676s ago: executing program 7 (id=579): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2f3, 0x0, 0x0) syz_usb_disconnect(r0) 2m43.018970693s ago: executing program 7 (id=595): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) unlink(&(0x7f0000000240)='./file1\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1801) 2m41.098012583s ago: executing program 7 (id=605): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000c}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4080) 2m40.277072742s ago: executing program 7 (id=608): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) open(0x0, 0x20000, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10000, 0x0) 2m39.90367164s ago: executing program 37 (id=608): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) open(0x0, 0x20000, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10000, 0x0) 2m16.104568723s ago: executing program 6 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./trace\x00', 0x16c) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='1', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x2c}}, 0x0) 2m15.102642421s ago: executing program 6 (id=701): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) 2m13.518315486s ago: executing program 6 (id=705): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 2m12.257796585s ago: executing program 6 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126) 2m11.808798046s ago: executing program 6 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m10.932520178s ago: executing program 6 (id=713): socket(0x2, 0x80805, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) close(0x4) 2m9.745540054s ago: executing program 38 (id=713): socket(0x2, 0x80805, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) close(0x4) 2m4.164873417s ago: executing program 9 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m1.526923672s ago: executing program 9 (id=746): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x2000, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc0, 0x100, @void}}}}}}}}, 0x0) 2m0.92249852s ago: executing program 9 (id=749): setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 2m0.452831882s ago: executing program 9 (id=753): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3) 2m0.016365193s ago: executing program 9 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m59.65611851s ago: executing program 9 (id=757): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x21) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xacc2, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8004, 0x0, 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m44.449131428s ago: executing program 39 (id=757): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x21) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xacc2, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8004, 0x0, 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m10.906742622s ago: executing program 3 (id=974): timer_create(0x9, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 1m10.168450717s ago: executing program 3 (id=977): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r3}, 0x8) 1m9.588911424s ago: executing program 3 (id=981): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) sendmsg$sock(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r4, 0x4b35, 0x8) splice(r0, 0x0, r3, 0x0, 0x84ffe8, 0x8) 1m8.657900108s ago: executing program 3 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) 1m8.321897624s ago: executing program 3 (id=990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x200000004, 0x2, 0xe98, 0xc, 0xd, 0x7f, 0x44233, 0x9, 0x10000008001, 0x941, 0xfffffffffffffffa, 0x1005, 0x0, 0x5, 0x5, 0xfffffdfffffffffd], 0xfec00000, 0xa0300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.945646982s ago: executing program 3 (id=993): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1m7.34570425s ago: executing program 40 (id=993): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 4.312585836s ago: executing program 2 (id=1355): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) pipe2(&(0x7f0000000300), 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff}) 3.831229989s ago: executing program 2 (id=1349): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 3.556202892s ago: executing program 2 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4, 0x5, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 3.200605299s ago: executing program 2 (id=1357): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) 2.407177376s ago: executing program 2 (id=1364): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe8110f4c, 0xd, 0xfffc, 0xf, 0x2, 0x0, 0x0, 0x40, 0x6}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.406990146s ago: executing program 8 (id=1365): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 2.297042731s ago: executing program 1 (id=1366): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}, {0x0, 0x0, 0x3, 0x0, @time}], 0x38) 2.10531131s ago: executing program 1 (id=1367): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) close(0x3) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.015028134s ago: executing program 0 (id=1368): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.892668671s ago: executing program 1 (id=1369): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x11000a0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb0, 0x0, 0xfffffffffffffffb, [{{0x5, 0x2, 0x100000388, 0x231, 0x1, 0x1003, {0x5, 0x3, 0x43, 0x1, 0x17, 0x0, 0x400, 0x6, 0x80, 0x1000, 0x7, r2, r3, 0xe, 0x3}}, {0x6, 0x9, 0x1, 0x7, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 1.868451971s ago: executing program 0 (id=1370): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00000df000/0x2000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) 1.656948591s ago: executing program 0 (id=1371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 1.589007825s ago: executing program 1 (id=1372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03710005994eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea683a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b8f9fffffff1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f200"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.399529934s ago: executing program 0 (id=1373): socket$inet_tcp(0x2, 0x1, 0x0) creat(0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0xfffffffe, 0x4) mq_unlink(&(0x7f00000000c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=\x01\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04q\xd1v\xbc\xfe\xac\xf7\xfa\xef\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xadqI\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb6(\xf6\x1c\x83\xb1[\x84\x10a_\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x82\xeb\x9enOOr\x00\xb2\x01\x1f:Z\xb8\x00;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00') 1.341371497s ago: executing program 8 (id=1374): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r0, r5, 0x8f5, 0x0) write$cgroup_devices(r5, 0x0, 0x8) write(r2, 0x0, 0x0) 1.105746797s ago: executing program 2 (id=1375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) 829.46893ms ago: executing program 8 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x2, 0x6, 0x7fffffff, 0x80000000, 0x0, [{0x4, 0x8, 0x5, '\x00', 0x5}, {0xe, 0x4, 0xfb, '\x00', 0x8}, {0x6, 0x0, 0x6}, {0x0, 0x40, 0x6, '\x00', 0x9}, {0x1, 0x9d, 0x4, '\x00', 0x2}, {0x15, 0x1, 0x8, '\x00', 0xf}, {0x7, 0x3, 0x8, '\x00', 0xa}, {0x7, 0x1, 0xd, '\x00', 0x3}, {0x8, 0x4b, 0xf, '\x00', 0x9}, {0x1, 0x2, 0x3, '\x00', 0x3}, {0x8, 0x9, 0xc, '\x00', 0x8}, {0x0, 0x9, 0x4}, {0xfa, 0x8, 0x3, '\x00', 0x2}, {0xc0, 0x7, 0x1, '\x00', 0xa0}, {0x2, 0x1, 0x7, '\x00', 0x6}, {0xb, 0x8, 0x9, '\x00', 0x15}, {0x4, 0x4, 0x25, '\x00', 0x80}, {0x9, 0xf, 0xc, '\x00', 0xc}, {0x3, 0x1, 0x4}, {0x80, 0xe9, 0xbf, '\x00', 0xf7}, {0x2, 0x81, 0x60, '\x00', 0x2}, {0xa, 0xfc, 0x6, '\x00', 0xc}, {0x84, 0x3, 0x7, '\x00', 0x6}, {0xa, 0x4, 0xd, '\x00', 0xe}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x5, 0x90, 0xd}}) 473.039937ms ago: executing program 8 (id=1377): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000d00)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0xfd, 0x1e6, &(0x7f0000000880)="$eJzsVc2KE0EQ/rrT2Rl/kD17Nbh70WRnQXwD9wF8AEN2XBdn/dkZ0A0BRw/m4kF8iYBP4UHUuwcRwUtyUNBDPAYkUt01kx5syRg8ROgPkvrqt2umprtvpffTAMDP6aCHTWgInMUnIaAAbAljm20Y+YPlnPFFGX2H7S9ZTlimJ/33z4hI9G93kyQ+Tk+WECGAZTEVUiuoPnn3pGoR+FeVVySQgNOVNcxL/t31vGIJXDGc6668BoT6c7jkSgW/1gnmT73WuJv4kys0W8gxFONyzstBACJNTlna/McX9Zt3k7X9Emwi/yorBc80vfZY4rtWPkwHPSI3+BQj2775FVtCx5Dy2oo5r4AcEA3MyzrKjBpbANrZ0b22Qv/S4VH3ID6I70TR7pXO2zM88rjTvnmYxI/OWUtIIgolaJ+estqk4X9e+HNYEFZrhNOAsHPp/C0O5+0LdhadxYtcu4aJeFXWCNhGr+I6LoK+3wc5uSO2tnS1p6F+wD0INKBAz7mjKivOMEGoHZd7d5P9IQQER3ZGUJB4UzTQhGRPNLaU3avl4w9Ztlju6f8QI9bHLIu7q7iTlK7wjbXtHNjAw26WHevLy7DSFpW2aLNcWfKqxW1YnBitAB4eHh4eHh4e/wl+BQAA//8OMkKH") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec773000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 472.689667ms ago: executing program 1 (id=1378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) 344.877323ms ago: executing program 0 (id=1379): socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 291.427626ms ago: executing program 8 (id=1380): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x105a02, 0x0) 12.884439ms ago: executing program 0 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x98, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 12.208379ms ago: executing program 1 (id=1382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0x8ce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0xfffffffc, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x5, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0xffffff4b, 0x7, 0x66c53844, 0xb7, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x9b4c, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x101, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc5, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x2, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x0, 0x6, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x2, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x405, 0x8, 0x9, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x5, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x80000000, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x4, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0x5, 0x7f, 0x864, 0xfb, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x2000004, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x10000000, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[], 0x1aa) 0s ago: executing program 8 (id=1383): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pause() r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) open(&(0x7f00000003c0)='./file0\x00', 0x100, 0x143) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) kernel console output (not intermixed with test programs): usb_control_msg returned -71 [ 169.792578][ T42] usb 7-1: USB disconnect, device number 5 [ 170.836838][ T7791] loop6: detected capacity change from 0 to 1024 [ 171.075402][ T7791] hfsplus: request for non-existent node 33554434 in B*Tree [ 171.083032][ T7791] hfsplus: request for non-existent node 33554434 in B*Tree [ 171.215668][ T5613] hfsplus: request for non-existent node 33554434 in B*Tree [ 171.248097][ T5613] hfsplus: request for non-existent node 33554434 in B*Tree [ 171.342585][ T1002] hfsplus: request for non-existent node 33554434 in B*Tree [ 171.378334][ T1002] hfsplus: request for non-existent node 33554434 in B*Tree [ 171.931351][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 171.949210][ T7825] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.959002][ T7825] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.968448][ T7825] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.978680][ T7825] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.045798][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 172.069740][ T7825] Zero length message leads to an empty skb [ 172.331945][ T7836] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 172.807937][ T5828] kernel write not supported for file /gssd/clntXX/gssd (pid: 5828 comm: kworker/1:6) [ 173.624797][ T5796] IPVS: starting estimator thread 0... [ 173.642750][ T7868] lo speed is unknown, defaulting to 1000 [ 173.746140][ T7872] IPVS: using max 22 ests per chain, 52800 per kthread [ 176.419589][ T7941] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 177.374769][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.385702][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.399221][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.430187][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.444900][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.455181][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.467604][ T7772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.791609][ T7772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.864832][ T7976] overlay: ./file0/file1 is not a directory [ 177.872998][ T7963] lo speed is unknown, defaulting to 1000 [ 177.948041][ T7772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.176042][ T7772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.733161][ T8004] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 179.533613][ T5773] Bluetooth: hci1: command tx timeout [ 179.687387][ T7963] chnl_net:caif_netlink_parms(): no params data found [ 180.041166][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.083634][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.132566][ T7963] bridge_slave_0: entered allmulticast mode [ 180.168759][ T7963] bridge_slave_0: entered promiscuous mode [ 180.394714][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.422972][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.470741][ T7963] bridge_slave_1: entered allmulticast mode [ 180.515437][ T7963] bridge_slave_1: entered promiscuous mode [ 180.591475][ T8053] netlink: 'syz.7.520': attribute type 1 has an invalid length. [ 180.693485][ T8053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.780126][ T8055] bond1: (slave dummy0): making interface the new active one [ 180.839146][ T8055] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 181.354904][ T8060] bond1 (unregistering): (slave dummy0): Releasing active interface [ 181.376897][ T8060] bond1 (unregistering): Released all slaves [ 181.613640][ T5773] Bluetooth: hci1: command tx timeout [ 181.759580][ T7963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.907357][ T7963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.932168][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.524'. [ 182.139860][ T7963] team0: Port device team_slave_0 added [ 182.169747][ T7963] team0: Port device team_slave_1 added [ 182.341317][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.383483][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.543455][ T7963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.581995][ T7772] hsr_slave_0: left promiscuous mode [ 182.591080][ T7772] hsr_slave_1: left promiscuous mode [ 182.603193][ T7772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.614419][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.634314][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.654148][ T7772] bridge_slave_1: left allmulticast mode [ 182.661071][ T7772] bridge_slave_1: left promiscuous mode [ 182.684525][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.723080][ T7772] bridge_slave_0: left allmulticast mode [ 182.735832][ T7772] bridge_slave_0: left promiscuous mode [ 182.747434][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.779658][ T7772] veth1_macvtap: left promiscuous mode [ 182.788967][ T7772] veth0_macvtap: left promiscuous mode [ 182.794997][ T7772] veth1_vlan: left promiscuous mode [ 182.800929][ T7772] veth0_vlan: left promiscuous mode [ 182.911656][ T7772] infiniband sz1: set down [ 183.693967][ T5773] Bluetooth: hci1: command tx timeout [ 183.792208][ T7772] team0 (unregistering): Port device team_slave_1 removed [ 183.901595][ T7772] team0 (unregistering): Port device team_slave_0 removed [ 184.039564][ T7772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.143755][ T7772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.982218][ T7772] bond0 (unregistering): Released all slaves [ 185.180979][ T59] smc: removing ib device sz1 [ 185.202073][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.243399][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.290759][ T7963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.330589][ T8095] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 185.362382][ T8095] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 185.401543][ T8095] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.530'. [ 185.447085][ T8117] loop6: detected capacity change from 0 to 1024 [ 185.484866][ T8096] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 185.496115][ T8096] netlink: 'syz.0.530': attribute type 4 has an invalid length. [ 185.520456][ T8096] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.530'. [ 185.521994][ T8119] loop7: detected capacity change from 0 to 512 [ 185.571029][ T5828] lo speed is unknown, defaulting to 1000 [ 185.613044][ T8119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.724490][ T8119] EXT4-fs (loop7): 1 truncate cleaned up [ 185.731924][ T8119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.773630][ T5773] Bluetooth: hci1: command tx timeout [ 185.855722][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 185.855738][ T27] audit: type=1800 audit(1789410225.516:56): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.539" name="file0" dev="overlay" ino=863 res=0 errno=0 [ 185.939553][ T27] audit: type=1804 audit(1789410225.516:57): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.539" name="/newroot/153/bus/file0" dev="overlay" ino=863 res=1 errno=0 [ 186.067679][ T7963] hsr_slave_0: entered promiscuous mode [ 186.130819][ T7963] hsr_slave_1: entered promiscuous mode [ 186.158206][ T7963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.193476][ T7963] Cannot create hsr debugfs directory [ 186.319544][ T7151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.120540][ T8136] loop6: detected capacity change from 0 to 256 [ 187.201819][ T8136] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 187.283262][ T8143] netlink: 136 bytes leftover after parsing attributes in process `syz.7.547'. [ 187.323512][ T7963] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 187.357012][ T7963] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 187.422952][ T7963] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 187.481698][ T7963] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 187.720578][ T8151] x_tables: unsorted underflow at hook 1 [ 187.746858][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.789053][ T8153] loop6: detected capacity change from 0 to 1024 [ 187.805120][ T7963] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.848970][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.856300][ T7772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.918232][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.925638][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.592161][ T7963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.476326][ T7963] veth0_vlan: entered promiscuous mode [ 189.479707][ T27] audit: type=1800 audit(1789410229.136:58): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.562" name="c_srate" dev="configfs" ino=19386 res=0 errno=0 [ 189.495325][ T7963] veth1_vlan: entered promiscuous mode [ 189.564346][ T8172] loop7: detected capacity change from 0 to 40427 [ 189.674185][ T7963] veth0_macvtap: entered promiscuous mode [ 189.694979][ T8172] F2FS-fs (loop7): invalid crc value [ 189.709217][ T7963] veth1_macvtap: entered promiscuous mode [ 189.724682][ T8172] F2FS-fs (loop7): Found nat_bits in checkpoint [ 189.752627][ T8190] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.563'. [ 189.808955][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.843540][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.880932][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.900170][ T8172] F2FS-fs (loop7): Start checkpoint disabled! [ 189.908305][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.935186][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.946761][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.958232][ T8172] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 189.996017][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.024657][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.062806][ T8172] bio_check_eod: 10 callbacks suppressed [ 190.062825][ T8172] syz.7.557: attempt to access beyond end of device [ 190.062825][ T8172] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 190.075409][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.138842][ T8172] syz.7.557: attempt to access beyond end of device [ 190.138842][ T8172] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.160018][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.199348][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.226330][ T8202] loop6: detected capacity change from 0 to 256 [ 190.231908][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.255205][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.278813][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.312179][ T8202] FAT-fs (loop6): Directory bread(block 64) failed [ 190.334404][ T8202] FAT-fs (loop6): Directory bread(block 65) failed [ 190.341148][ T8202] FAT-fs (loop6): Directory bread(block 66) failed [ 190.352932][ T7963] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.374574][ T7963] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.383664][ T8202] FAT-fs (loop6): Directory bread(block 67) failed [ 190.403369][ T7963] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.403744][ T8202] FAT-fs (loop6): Directory bread(block 68) failed [ 190.419812][ T7963] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.431696][ T8202] FAT-fs (loop6): Directory bread(block 69) failed [ 190.438813][ T8202] FAT-fs (loop6): Directory bread(block 70) failed [ 190.445976][ T8202] FAT-fs (loop6): Directory bread(block 71) failed [ 190.452892][ T8202] FAT-fs (loop6): Directory bread(block 72) failed [ 190.458759][ T1002] kworker/u4:5: attempt to access beyond end of device [ 190.458759][ T1002] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 190.467919][ T8202] FAT-fs (loop6): Directory bread(block 73) failed [ 190.529560][ T1002] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 190.568669][ T1002] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 190.664196][ T7775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.672076][ T7775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.762180][ T7764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.825441][ T7764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.201933][ T5828] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 191.277505][ T5828] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.922869][ T8210] loop0: detected capacity change from 0 to 32768 [ 191.973470][ T8210] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.571 (8210) [ 192.059786][ T8210] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.090620][ T8210] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 192.109064][ T8210] BTRFS info (device loop0): use zlib compression, level 3 [ 192.127407][ T8210] BTRFS info (device loop0): using free space tree [ 192.219626][ T8210] BTRFS info (device loop0): enabling ssd optimizations [ 192.245875][ T8210] BTRFS info (device loop0): auto enabling async discard [ 192.345094][ T8210] loop0: detected capacity change from 32768 to 64 [ 192.483768][ T7768] kworker/u4:12: attempt to access beyond end of device [ 192.483768][ T7768] loop0: rw=2049, sector=10448, nr_sectors = 16 limit=64 [ 192.535241][ T7768] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 192.602643][ T8259] FAULT_INJECTION: forcing a failure. [ 192.602643][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 192.616320][ T8259] CPU: 0 PID: 8259 Comm: syz.7.578 Not tainted syzkaller #0 [ 192.623653][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.633735][ T8259] Call Trace: [ 192.637039][ T8259] [ 192.639998][ T8259] dump_stack_lvl+0x18c/0x250 [ 192.644711][ T8259] ? show_regs_print_info+0x20/0x20 [ 192.649934][ T8259] ? load_image+0x420/0x420 [ 192.654462][ T8259] ? __might_sleep+0xe0/0xe0 [ 192.659075][ T8259] ? __lock_acquire+0x7d80/0x7d80 [ 192.664109][ T8259] ? rcu_is_watching+0x15/0xb0 [ 192.668884][ T8259] should_fail_ex+0x394/0x4c0 [ 192.673572][ T8259] should_failslab+0x9/0x20 [ 192.678100][ T8259] slab_pre_alloc_hook+0x59/0x300 [ 192.683139][ T8259] ? device_add+0xb6/0xc40 [ 192.687571][ T8259] __kmem_cache_alloc_node+0x53/0x250 [ 192.692963][ T8259] ? device_add+0xb6/0xc40 [ 192.697386][ T8259] kmalloc_trace+0x2a/0xe0 [ 192.701831][ T8259] device_add+0xb6/0xc40 [ 192.706075][ T8259] ? netdev_register_kobject+0x252/0x320 [ 192.711712][ T8259] netdev_register_kobject+0x188/0x320 [ 192.717204][ T8259] register_netdevice+0x12aa/0x1ba0 [ 192.722422][ T8259] ? netif_stacked_transfer_operstate+0x210/0x210 [ 192.728842][ T8259] ? dev_addr_mod+0x2c8/0x3c0 [ 192.733535][ T8259] ? tun_net_initialize+0x158/0x480 [ 192.738734][ T8259] ? tun_not_capable+0x1f0/0x1f0 [ 192.743676][ T8259] ? alloc_netdev_mqs+0xc23/0x1040 [ 192.748796][ T8259] tun_set_iff+0x82b/0xea0 [ 192.753220][ T8259] __tun_chr_ioctl+0x7e0/0x2070 [ 192.758084][ T8259] ? tun_flow_create+0x310/0x310 [ 192.763041][ T8259] ? bpf_lsm_file_ioctl+0x9/0x10 [ 192.767983][ T8259] ? security_file_ioctl+0x80/0xa0 [ 192.773126][ T8259] ? tun_chr_poll+0x630/0x630 [ 192.777825][ T8259] __se_sys_ioctl+0xfd/0x170 [ 192.782431][ T8259] do_syscall_64+0x55/0xb0 [ 192.786857][ T8259] ? clear_bhb_loop+0x40/0x90 [ 192.791538][ T8259] ? clear_bhb_loop+0x40/0x90 [ 192.796218][ T8259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.802138][ T8259] RIP: 0033:0x7fd700d9e159 [ 192.806554][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.826689][ T8259] RSP: 002b:00007fd701d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.835107][ T8259] RAX: ffffffffffffffda RBX: 00007fd701025fa0 RCX: 00007fd700d9e159 [ 192.843079][ T8259] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 192.851048][ T8259] RBP: 00007fd700e3503b R08: 0000000000000000 R09: 0000000000000000 [ 192.859019][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.866995][ T8259] R13: 00007fd701026038 R14: 00007fd701025fa0 R15: 00007fff8cbff698 [ 192.874980][ T8259] [ 192.928408][ T8210] syz.0.571: attempt to access beyond end of device [ 192.928408][ T8210] loop0: rw=6145, sector=10456, nr_sectors = 8 limit=64 [ 192.954053][ T8210] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 192.974853][ T8210] syz.0.571: attempt to access beyond end of device [ 192.974853][ T8210] loop0: rw=6145, sector=10448, nr_sectors = 8 limit=64 [ 192.988819][ T8210] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 193.017480][ T8210] BTRFS error (device loop0: state AL): Transaction aborted (error -5) [ 193.032272][ T8210] BTRFS: error (device loop0: state AL) in free_log_tree:3319: errno=-5 IO failure [ 193.072927][ T8210] BTRFS info (device loop0: state EAL): forced readonly [ 193.091699][ T8210] BTRFS: error (device loop0: state EAL) in free_log_tree:3319: errno=-5 IO failure [ 193.132033][ T8210] BTRFS warning (device loop0: state EAL): Skipping commit of aborted transaction. [ 193.162439][ T8210] BTRFS: error (device loop0: state EAL) in cleanup_transaction:2022: errno=-5 IO failure [ 193.305108][ T5769] BTRFS info (device loop0: state EAL): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 193.352040][ T5773] Bluetooth: hci0: link tx timeout [ 193.357886][ T5773] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.380019][ T5781] Bluetooth: hci0: link tx timeout [ 193.386494][ T5781] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.403672][ T5781] Bluetooth: hci0: link tx timeout [ 193.408971][ T5781] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.114072][ T8290] loop0: detected capacity change from 0 to 512 [ 194.124273][ T8290] EXT4-fs: Ignoring removed oldalloc option [ 194.170334][ T8292] loop6: detected capacity change from 0 to 256 [ 194.361712][ T8292] FAT-fs (loop6): Directory bread(block 64) failed [ 194.368727][ T8292] FAT-fs (loop6): Directory bread(block 65) failed [ 194.375828][ T8292] FAT-fs (loop6): Directory bread(block 66) failed [ 194.382570][ T8292] FAT-fs (loop6): Directory bread(block 67) failed [ 194.389661][ T8292] FAT-fs (loop6): Directory bread(block 68) failed [ 194.396905][ T8292] FAT-fs (loop6): Directory bread(block 69) failed [ 194.403969][ T8292] FAT-fs (loop6): Directory bread(block 70) failed [ 194.410763][ T8292] FAT-fs (loop6): Directory bread(block 71) failed [ 194.418254][ T8292] FAT-fs (loop6): Directory bread(block 72) failed [ 194.426617][ T8292] FAT-fs (loop6): Directory bread(block 73) failed [ 194.649283][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.670513][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.904661][ T8290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.210799][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.454126][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 196.577947][ T8319] loop7: detected capacity change from 0 to 512 [ 196.638506][ T8323] loop8: detected capacity change from 0 to 1024 [ 196.639018][ T8319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.778943][ T8319] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.009742][ T8330] loop0: detected capacity change from 0 to 128 [ 197.031245][ T8330] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 197.124968][ T8331] loop7: detected capacity change from 512 to 0 [ 197.153209][ T7770] loop: Write error at byte offset 9223372036854781951, length 2048. [ 197.231858][ T7770] loop: Write error at byte offset 9223372036854831103, length 2048. [ 197.240056][ C0] I/O error, dev loop7, sector 12 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 197.240099][ C0] Buffer I/O error on dev loop7, logical block 3, lost sync page write [ 197.258705][ T8332] EXT4-fs error (device loop7): ext4_handle_dirty_dirblock:440: inode #2: block 3: comm syz.7.595: IO error syncing itable block [ 197.260873][ T8332] syz.7.595: attempt to access beyond end of device [ 197.260873][ T8332] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 197.386240][ T8332] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 197.420010][ T8332] EXT4-fs (loop7): I/O error while writing superblock [ 197.433732][ C0] I/O error, dev loop7, sector 108 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 197.443498][ C0] Buffer I/O error on dev loop7, logical block 27, lost sync page write [ 197.452790][ T8319] EXT4-fs error (device loop7): ext4_ext_insert_extent:2206: inode #16: block 27: comm syz.7.595: IO error syncing itable block [ 197.474192][ T8319] EXT4-fs (loop7): previous I/O error to superblock detected [ 197.487030][ T8332] EXT4-fs error (device loop7) in ext4_delete_entry:2802: IO failure [ 197.495453][ T8319] syz.7.595: attempt to access beyond end of device [ 197.495453][ T8319] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 197.516873][ T8341] loop0: detected capacity change from 0 to 64 [ 197.554033][ T8319] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 197.590501][ T8319] EXT4-fs (loop7): I/O error while writing superblock [ 197.608213][ T8332] EXT4-fs (loop7): previous I/O error to superblock detected [ 197.636198][ T8319] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.595: Error while async write back metadata [ 197.643120][ T8332] syz.7.595: attempt to access beyond end of device [ 197.643120][ T8332] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 197.708241][ T8332] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 197.727171][ T8332] EXT4-fs (loop7): I/O error while writing superblock [ 197.727828][ T8319] EXT4-fs (loop7): previous I/O error to superblock detected [ 197.736299][ T8334] EXT4-fs error (device loop7): ext4_lookup:1860: inode #12: comm syz.7.595: iget: bad i_size value: 2533274857506816 [ 197.789316][ T8319] syz.7.595: attempt to access beyond end of device [ 197.789316][ T8319] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 197.803929][ T8319] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 197.816556][ T8334] EXT4-fs (loop7): previous I/O error to superblock detected [ 197.828502][ T8334] syz.7.595: attempt to access beyond end of device [ 197.828502][ T8334] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 197.848698][ T8334] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 197.849570][ T7770] kworker/u4:13: attempt to access beyond end of device [ 197.849570][ T7770] loop0: rw=1, sector=2320, nr_sectors = 1 limit=64 [ 197.859549][ T8319] EXT4-fs (loop7): I/O error while writing superblock [ 197.880576][ T8334] EXT4-fs (loop7): I/O error while writing superblock [ 197.882083][ T7770] Buffer I/O error on dev loop0, logical block 2320, lost async page write [ 197.889253][ T8319] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.595: Error while async write back metadata [ 197.902956][ T7770] kworker/u4:13: attempt to access beyond end of device [ 197.902956][ T7770] loop0: rw=1, sector=2321, nr_sectors = 1 limit=64 [ 197.910116][ T8319] syz.7.595: attempt to access beyond end of device [ 197.910116][ T8319] loop7: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 197.930035][ T7770] Buffer I/O error on dev loop0, logical block 2321, lost async page write [ 197.936376][ T8319] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 197.950667][ T7770] kworker/u4:13: attempt to access beyond end of device [ 197.950667][ T7770] loop0: rw=1, sector=2322, nr_sectors = 1 limit=64 [ 197.953949][ T8319] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.595: Error while async write back metadata [ 197.979468][ T5808] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 197.987506][ T7770] kworker/u4:13: attempt to access beyond end of device [ 197.987506][ T7770] loop0: rw=1, sector=2323, nr_sectors = 1 limit=64 [ 197.989231][ T8319] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.595: Error while async write back metadata [ 198.001173][ T5613] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 198.019709][ T8319] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.595: Error while async write back metadata [ 198.037326][ T8319] EXT4-fs error (device loop7): ext4_check_bdev_write_error:225: comm syz.7.595: Error while async write back metadata [ 198.053093][ T8319] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 38) [ 198.081968][ T8319] Buffer I/O error on device loop7, logical block 38 [ 198.089392][ T8319] Buffer I/O error on device loop7, logical block 39 [ 198.113140][ T8319] Buffer I/O error on device loop7, logical block 40 [ 198.119885][ T8319] Buffer I/O error on device loop7, logical block 41 [ 198.149400][ T8319] Buffer I/O error on device loop7, logical block 42 [ 198.162924][ T8319] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 20) [ 198.175255][ T5808] usb 7-1: Using ep0 maxpacket: 8 [ 198.191886][ T8319] Buffer I/O error on device loop7, logical block 20 [ 198.198923][ T5808] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 198.207680][ T5808] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.215587][ T5613] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 198.230737][ T5808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.230891][ T5613] usb 9-1: can't read configurations, error -61 [ 198.243539][ T5808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.263602][ T8319] Buffer I/O error on device loop7, logical block 21 [ 198.270340][ T8319] Buffer I/O error on device loop7, logical block 22 [ 198.277761][ T5808] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.292213][ T8319] Buffer I/O error on device loop7, logical block 23 [ 198.299541][ T8319] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 44) [ 198.310981][ T5808] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.320641][ T8319] Buffer I/O error on device loop7, logical block 44 [ 198.334335][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.342961][ T8319] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 24) [ 198.361988][ T8319] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 48) [ 198.419318][ T7151] EXT4-fs warning (device loop7): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 198.433611][ T5613] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 198.478074][ T7151] EXT4-fs warning (device loop7): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 198.501063][ T8356] loop0: detected capacity change from 0 to 4096 [ 198.513112][ T7151] EXT4-fs warning (device loop7): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 198.554056][ T7151] EXT4-fs warning (device loop7): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 198.581316][ T5808] usb 7-1: usb_control_msg returned -32 [ 198.587408][ T5808] usbtmc 7-1:16.0: can't read capabilities [ 198.598473][ T7151] EXT4-fs warning (device loop7): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 198.636417][ T5613] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 198.648812][ T5613] usb 9-1: can't read configurations, error -61 [ 198.688218][ T5613] usb usb9-port1: attempt power cycle [ 198.997901][ T8346] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 198.998184][ T5810] usb 7-1: USB disconnect, device number 6 [ 199.123503][ T5613] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 199.166256][ T5613] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 199.174552][ T5613] usb 9-1: can't read configurations, error -61 [ 199.318590][ T7772] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.354045][ T5613] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 199.425952][ T5613] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 199.443442][ T5613] usb 9-1: can't read configurations, error -61 [ 199.452455][ T7772] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.464361][ T5613] usb usb9-port1: unable to enumerate USB device [ 199.591157][ T7772] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.728182][ T7772] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.203737][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.227777][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.238807][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.251830][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.259674][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.268994][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.978623][ T8413] loop6: detected capacity change from 0 to 8 [ 201.036356][ T5761] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.250582][ T8423] loop6: detected capacity change from 0 to 512 [ 201.276017][ T8423] EXT4-fs: Ignoring removed oldalloc option [ 201.315224][ T8423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 201.444301][ T8423] EXT4-fs (loop6): 1 orphan inode deleted [ 201.463414][ T8423] EXT4-fs (loop6): 1 truncate cleaned up [ 201.501777][ T8423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.780383][ T6970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.333593][ T5773] Bluetooth: hci2: command tx timeout [ 202.489146][ T8396] chnl_net:caif_netlink_parms(): no params data found [ 202.545926][ T8462] loop0: detected capacity change from 0 to 64 [ 202.682087][ T8462] hfs: get root inode failed [ 202.930474][ T8467] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 203.016342][ T8467] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 203.183651][ T7772] hsr_slave_0: left promiscuous mode [ 203.196742][ T7772] hsr_slave_1: left promiscuous mode [ 203.222086][ T7772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.231068][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.255202][ T7772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.264112][ T7772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.272646][ T7772] bridge_slave_1: left allmulticast mode [ 203.279248][ T7772] bridge_slave_1: left promiscuous mode [ 203.286207][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.306768][ T7772] bridge_slave_0: left allmulticast mode [ 203.317938][ T7772] bridge_slave_0: left promiscuous mode [ 203.324462][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.429806][ T7772] veth1_macvtap: left promiscuous mode [ 203.435695][ T7772] veth0_macvtap: left promiscuous mode [ 203.442021][ T7772] veth1_vlan: left promiscuous mode [ 203.447686][ T7772] veth0_vlan: left promiscuous mode [ 204.031967][ T27] audit: type=1800 audit(1789410243.696:59): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.631" name="use" dev="configfs" ino=21143 res=0 errno=0 [ 204.422092][ T5773] Bluetooth: hci2: command tx timeout [ 204.500212][ T5808] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 204.571583][ T7772] team0 (unregistering): Port device team_slave_1 removed [ 204.631457][ T7772] team0 (unregistering): Port device team_slave_0 removed [ 204.690517][ T7772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.695379][ T5808] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 204.715816][ T5808] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 204.729243][ T5808] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 204.746316][ T5808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.757453][ T5808] usb 9-1: Product: syz [ 204.761745][ T5808] usb 9-1: Manufacturer: syz [ 204.767690][ T5808] usb 9-1: SerialNumber: syz [ 204.792438][ T7772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.012091][ T5808] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 205.254806][ C1] usblp0: nonzero read bulk status received: -71 [ 205.271944][ T5808] usb 9-1: USB disconnect, device number 6 [ 205.343898][ T7772] bond0 (unregistering): Released all slaves [ 205.479723][ T8478] tipc: Started in network mode [ 205.485618][ C0] hrtimer: interrupt took 627054 ns [ 205.492589][ T8478] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 205.501623][ T8478] tipc: Enabled bearer , priority 27 [ 205.528636][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.634'. [ 205.723185][ T8499] 8021q: adding VLAN 0 to HW filter on device team1 [ 205.819574][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.880915][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.923818][ T5810] usblp0: removed [ 205.929107][ T8396] bridge_slave_0: entered allmulticast mode [ 205.973528][ T8396] bridge_slave_0: entered promiscuous mode [ 206.021801][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.079855][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.109767][ T8396] bridge_slave_1: entered allmulticast mode [ 206.162223][ T8396] bridge_slave_1: entered promiscuous mode [ 206.182064][ T8529] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 206.195854][ T8529] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 206.266379][ T8522] netlink: 'syz.6.636': attribute type 1 has an invalid length. [ 206.410710][ T8522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.474213][ T8530] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 206.493655][ T5773] Bluetooth: hci2: command tx timeout [ 206.509099][ T8532] bond1: entered allmulticast mode [ 206.533375][ T8532] syz_tun: entered allmulticast mode [ 206.618875][ T8361] tipc: Node number set to 9480874 [ 206.676207][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.742755][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.855654][ T8546] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551615ÿÿ [ 206.961298][ T8396] team0: Port device team_slave_0 added [ 207.013084][ T8545] pimreg: entered allmulticast mode [ 207.052705][ T8548] pimreg: left allmulticast mode [ 207.148933][ T8542] xt_socket: unknown flags 0xc [ 207.189328][ T8396] team0: Port device team_slave_1 added [ 207.264165][ T7772] IPVS: stop unused estimator thread 0... [ 207.281355][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.644'. [ 207.307643][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.324489][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.393368][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.436525][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.456150][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.509267][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.675133][ T8396] hsr_slave_0: entered promiscuous mode [ 207.689977][ T8396] hsr_slave_1: entered promiscuous mode [ 208.542673][ T8568] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 208.573548][ T5773] Bluetooth: hci2: command tx timeout [ 208.612778][ T8568] batman_adv: batadv0: Adding interface: gretap1 [ 208.633450][ T8568] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.753602][ T8568] batman_adv: batadv0: Interface activated: gretap1 [ 208.793472][ T8396] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 208.829366][ T8396] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 208.881719][ T8574] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 208.883403][ T8396] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 208.895132][ T8574] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 208.987179][ T8396] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 209.378252][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.466800][ T8396] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.523876][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.532365][ T7775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.590173][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.597555][ T7764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.832285][ T8396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.932234][ T8596] loop0: detected capacity change from 0 to 128 [ 209.994422][ T8596] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.024536][ T8596] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.644020][ T27] audit: type=1326 audit(1789410250.306:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.6.655" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fa359e159 code=0x0 [ 210.692791][ T8396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.105656][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.636815][ T8631] tipc: Started in network mode [ 211.675382][ T8631] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 211.728296][ T8631] tipc: Enabled bearer , priority 27 [ 211.786608][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 212.822005][ T8396] veth0_vlan: entered promiscuous mode [ 212.896777][ T8361] tipc: Node number set to 9480874 [ 212.950366][ T8396] veth1_vlan: entered promiscuous mode [ 212.992731][ T8661] loop6: detected capacity change from 0 to 128 [ 213.115464][ T8661] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.169262][ T8661] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.188557][ T8396] veth0_macvtap: entered promiscuous mode [ 213.280290][ T8396] veth1_macvtap: entered promiscuous mode [ 213.381542][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.447036][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.493254][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.543678][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.583693][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.617995][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.670439][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.752723][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.794725][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.856599][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.903461][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.939034][ T8670] loop0: detected capacity change from 0 to 1024 [ 213.947562][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.019697][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.054526][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.092550][ T8671] Bluetooth: MGMT ver 1.22 [ 214.228068][ T8396] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.303633][ T8396] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.367299][ T8396] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.398269][ T6970] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.412978][ T8396] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.029406][ T8657] loop8: detected capacity change from 0 to 40427 [ 215.218373][ T7772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.288190][ T7772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.326462][ T8657] F2FS-fs (loop8): invalid crc value [ 215.374689][ T8657] F2FS-fs (loop8): Found nat_bits in checkpoint [ 215.614007][ T7764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.730051][ T8709] FAULT_INJECTION: forcing a failure. [ 215.730051][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 215.754067][ T7764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.869230][ T8709] CPU: 1 PID: 8709 Comm: syz.6.669 Not tainted syzkaller #0 [ 215.876594][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.886944][ T8709] Call Trace: [ 215.890247][ T8709] [ 215.893194][ T8709] dump_stack_lvl+0x18c/0x250 [ 215.897914][ T8709] ? show_regs_print_info+0x20/0x20 [ 215.903154][ T8709] ? load_image+0x420/0x420 [ 215.907686][ T8709] ? __might_sleep+0xe0/0xe0 [ 215.912304][ T8709] ? __lock_acquire+0x7d80/0x7d80 [ 215.917362][ T8709] should_fail_ex+0x394/0x4c0 [ 215.922076][ T8709] should_failslab+0x9/0x20 [ 215.926610][ T8709] slab_pre_alloc_hook+0x59/0x300 [ 215.931687][ T8709] kmem_cache_alloc+0x5a/0x2c0 [ 215.936515][ T8709] ? mempool_init_node+0x1e9/0x480 [ 215.941672][ T8709] ? mempool_free+0x320/0x320 [ 215.946564][ T8709] mempool_init_node+0x1e9/0x480 [ 215.951542][ T8709] ? mempool_alloc_slab+0x60/0x60 [ 215.956593][ T8709] ? mempool_free+0x320/0x320 [ 215.961301][ T8709] mempool_create+0x81/0xc0 [ 215.965831][ T8709] ceph_osdc_init+0x4ee/0x8c0 [ 215.970543][ T8709] ceph_create_client+0x246/0x300 [ 215.975616][ T8709] ceph_get_tree+0x1ca/0x1800 [ 215.980340][ T8709] ? bpf_lsm_capable+0x9/0x10 [ 215.985118][ T8709] ? security_capable+0x89/0xb0 [ 215.990011][ T8709] vfs_get_tree+0x8c/0x280 [ 215.994541][ T8709] vfs_cmd_create+0xe3/0x230 [ 215.999165][ T8709] __se_sys_fsconfig+0x70a/0x850 [ 216.004147][ T8709] ? __x64_sys_fsconfig+0xc0/0xc0 [ 216.009238][ T8709] ? lockdep_hardirqs_on+0x98/0x150 [ 216.014456][ T8709] ? __x64_sys_fsconfig+0x20/0xc0 [ 216.019512][ T8709] do_syscall_64+0x55/0xb0 [ 216.023956][ T8709] ? clear_bhb_loop+0x40/0x90 [ 216.028665][ T8709] ? clear_bhb_loop+0x40/0x90 [ 216.033389][ T8709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.039310][ T8709] RIP: 0033:0x7f5fa359e159 [ 216.043922][ T8709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.063655][ T8709] RSP: 002b:00007f5fa441d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 216.072096][ T8709] RAX: ffffffffffffffda RBX: 00007f5fa3825fa0 RCX: 00007f5fa359e159 [ 216.080094][ T8709] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 216.088087][ T8709] RBP: 00007f5fa363503b R08: 0000000000000000 R09: 0000000000000000 [ 216.096084][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.104093][ T8709] R13: 00007f5fa3826038 R14: 00007f5fa3825fa0 R15: 00007ffd16e17008 [ 216.112134][ T8709] [ 216.465992][ T8657] F2FS-fs (loop8): Start checkpoint disabled! [ 218.273028][ T8736] loop9: detected capacity change from 0 to 128 [ 218.376109][ T8736] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.376364][ T8739] loop8: detected capacity change from 0 to 512 [ 218.460677][ T8736] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.546029][ T8739] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.560990][ T5613] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 218.698563][ T8739] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.920137][ T5613] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 218.938804][ T8739] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 218.993701][ T5613] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 219.046593][ T5613] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 219.105720][ T5613] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 219.147966][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.197328][ T7963] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.209248][ T5613] usb 7-1: Product: syz [ 219.249081][ T5613] usb 7-1: Manufacturer: syz [ 219.283613][ T5613] usb 7-1: SerialNumber: syz [ 219.344071][ T8735] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 219.374897][ T8735] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 219.450936][ T5613] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 219.520040][ T5613] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 219.556263][ T5613] usbserial_generic 7-1:1.0: generic converter detected [ 219.570489][ T5613] usb 7-1: generic converter now attached to ttyUSB0 [ 219.596758][ T8761] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 219.611731][ T8761] batman_adv: batadv0: Adding interface: gretap1 [ 219.619039][ T8761] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.713693][ T8761] batman_adv: batadv0: Interface activated: gretap1 [ 219.736175][ T8761] batadv0: mtu less than device minimum [ 219.745630][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.760120][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.774509][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.788752][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.803121][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.817413][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.832422][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.846637][ T8396] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.846743][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.870652][ T8761] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 220.018960][ T8765] kvm: kvm [8758]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 220.236123][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 220.247942][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 220.257513][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 220.269259][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 220.278727][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 220.318235][ T42] usb 7-1: USB disconnect, device number 7 [ 220.449606][ T42] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 220.536301][ T42] usbserial_generic 7-1:1.0: device disconnected [ 220.564903][ T8769] loop9: detected capacity change from 0 to 1024 [ 220.608431][ T8769] ext4: Unknown parameter 'nouser_xattr' [ 224.801476][ T8820] loop8: detected capacity change from 0 to 32768 [ 224.925747][ T8820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.695 (8820) [ 225.103510][ T8820] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.201575][ T8820] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 225.294914][ T8820] BTRFS info (device loop8): using free space tree [ 225.689646][ T8820] BTRFS info (device loop8): enabling ssd optimizations [ 225.718348][ T8820] BTRFS info (device loop8): auto enabling async discard [ 226.440374][ T8883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 226.574765][ T8883] batman_adv: batadv0: Adding interface: gretap1 [ 226.587519][ T8883] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.793514][ T8883] batman_adv: batadv0: Interface activated: gretap1 [ 227.254695][ T7963] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.484514][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 227.758306][ T42] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.834603][ T42] usb 10-1: config 0 has no interfaces? [ 227.873621][ T42] usb 10-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 227.960216][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.015422][ T42] usb 10-1: config 0 descriptor?? [ 228.286406][ T6970] bond1: (slave syz_tun): Releasing backup interface [ 228.365058][ T6970] syz_tun (unregistering): left allmulticast mode [ 228.788617][ T42] usb 10-1: USB disconnect, device number 2 [ 230.416781][ T8929] loop8: detected capacity change from 0 to 16 [ 230.455449][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 230.529329][ T8929] erofs: (device loop8): mounted with root inode @ nid 36. [ 230.705869][ T8929] bio_check_eod: 221 callbacks suppressed [ 230.705889][ T8929] syz.8.719: attempt to access beyond end of device [ 230.705889][ T8929] loop8: rw=0, sector=824, nr_sectors = 8 limit=16 [ 230.883870][ T8929] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 19 of nid 36 [ 231.884021][ T8952] netlink: 'syz.0.726': attribute type 1 has an invalid length. [ 231.977998][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.004666][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.015080][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.021755][ T8952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.036099][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.061519][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.071933][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.569346][ T8961] bond1: (slave geneve2): making interface the new active one [ 232.667447][ T8961] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 232.847889][ T8961] syz.0.726 (8961) used greatest stack depth: 19512 bytes left [ 233.932976][ T8983] loop9: detected capacity change from 0 to 256 [ 234.010623][ T8983] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.123904][ T8983] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 234.173753][ T5773] Bluetooth: hci0: command tx timeout [ 234.212186][ T8956] chnl_net:caif_netlink_parms(): no params data found [ 234.266927][ T8983] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 234.373642][ T8983] exFAT-fs (loop9): failed to load alloc-bitmap [ 234.411187][ T8983] exFAT-fs (loop9): failed to recognize exfat type [ 234.677611][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.687062][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.696192][ T8956] bridge_slave_0: entered allmulticast mode [ 234.705518][ T8956] bridge_slave_0: entered promiscuous mode [ 234.717700][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.726115][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.735879][ T8956] bridge_slave_1: entered allmulticast mode [ 234.747109][ T8956] bridge_slave_1: entered promiscuous mode [ 234.986206][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.051003][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.377067][ T8956] team0: Port device team_slave_0 added [ 235.456797][ T8956] team0: Port device team_slave_1 added [ 235.727706][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.775489][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.943642][ T8956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.019381][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.047780][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.144822][ T8956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.257270][ T5773] Bluetooth: hci0: command tx timeout [ 236.507503][ T8956] hsr_slave_0: entered promiscuous mode [ 236.545144][ T8956] hsr_slave_1: entered promiscuous mode [ 236.582112][ T8956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.623594][ T8956] Cannot create hsr debugfs directory [ 236.986735][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.741'. [ 237.266204][ T9027] vlan2: entered allmulticast mode [ 237.271967][ T9027] bond1: entered allmulticast mode [ 238.334847][ T5773] Bluetooth: hci0: command tx timeout [ 238.887047][ T9048] netlink: 11575 bytes leftover after parsing attributes in process `syz.9.749'. [ 240.413801][ T5773] Bluetooth: hci0: command tx timeout [ 241.182493][ T8956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.208839][ T8956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.251546][ T8956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.325527][ T8956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.826610][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.004779][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.098957][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.106973][ T7770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.214819][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.222835][ T7768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.422865][ T8956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.708506][ T8956] veth0_vlan: entered promiscuous mode [ 243.781011][ T8956] veth1_vlan: entered promiscuous mode [ 243.949684][ T8956] veth0_macvtap: entered promiscuous mode [ 243.988212][ T8956] veth1_macvtap: entered promiscuous mode [ 244.090479][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.151973][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.205043][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.273811][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.331720][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.374674][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.425601][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.477997][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.535690][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.604178][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.663431][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.710137][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.773788][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.823753][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.860177][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.913462][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.943515][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.966254][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.081621][ T8956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.163613][ T8956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.193727][ T8956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.240901][ T8956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.714444][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.748457][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.912506][ T9158] netlink: 11575 bytes leftover after parsing attributes in process `syz.8.775'. [ 245.937858][ T7768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.973388][ T7768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.802739][ T9232] bridge0: port 3(syz_tun) entered blocking state [ 250.840210][ T9232] bridge0: port 3(syz_tun) entered disabled state [ 250.872958][ T9232] syz_tun: entered allmulticast mode [ 250.934108][ T9232] syz_tun: entered promiscuous mode [ 250.952687][ T9232] bridge0: port 3(syz_tun) entered blocking state [ 250.960853][ T9232] bridge0: port 3(syz_tun) entered forwarding state [ 251.626298][ T9240] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 251.635673][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'. [ 251.654857][ T9240] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.665815][ T9240] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.028709][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.043803][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.264124][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.279955][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.316976][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.327526][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.337880][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.392779][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.614768][ T9317] loop3: detected capacity change from 0 to 512 [ 258.660412][ T9317] EXT4-fs: Ignoring removed bh option [ 258.743501][ T9317] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 258.762474][ T9297] chnl_net:caif_netlink_parms(): no params data found [ 258.878865][ T9317] EXT4-fs (loop3): 1 truncate cleaned up [ 258.919207][ T9317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.236590][ T9317] EXT4-fs error (device loop3): ext4_lookup:1860: inode #12: comm syz.3.807: unexpected EA_INODE flag [ 259.287468][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.317007][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.383508][ T9297] bridge_slave_0: entered allmulticast mode [ 259.392394][ T9297] bridge_slave_0: entered promiscuous mode [ 259.453612][ T5781] Bluetooth: hci2: command tx timeout [ 259.482608][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.568754][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.577168][ T9297] bridge_slave_1: entered allmulticast mode [ 259.604214][ T9297] bridge_slave_1: entered promiscuous mode [ 259.626997][ T8956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.793650][ T9332] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 259.897532][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.931502][ T9338] loop3: detected capacity change from 0 to 164 [ 259.948654][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c533c00: rx timeout, send abort [ 259.958123][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.808'. [ 260.206396][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.464978][ T9297] team0: Port device team_slave_0 added [ 260.498070][ T9297] team0: Port device team_slave_1 added [ 260.715995][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.742508][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.884276][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.939478][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.983420][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.103495][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.357365][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.8.820'. [ 261.371272][ T9297] hsr_slave_0: entered promiscuous mode [ 261.394184][ T9297] hsr_slave_1: entered promiscuous mode [ 261.414007][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.430981][ T9297] Cannot create hsr debugfs directory [ 261.551456][ T5781] Bluetooth: hci2: command tx timeout [ 263.613416][ T5781] Bluetooth: hci2: command tx timeout [ 264.910331][ T9297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.021031][ T9297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.093820][ T9297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.145450][ T9297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.347935][ T27] audit: type=1326 audit(1789410305.006:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 265.451656][ T27] audit: type=1326 audit(1789410305.006:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 265.594855][ T27] audit: type=1326 audit(1789410305.026:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 265.648951][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.677284][ T27] audit: type=1326 audit(1789410305.026:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 265.707001][ T5781] Bluetooth: hci2: command tx timeout [ 265.758336][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.790033][ T9448] netlink: 'syz.0.840': attribute type 11 has an invalid length. [ 265.800633][ T27] audit: type=1326 audit(1789410305.076:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 265.834844][ T27] audit: type=1326 audit(1789410305.076:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 265.896567][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.904664][ T7768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.938255][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.946232][ T7768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.987544][ T27] audit: type=1326 audit(1789410305.076:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 266.033098][ T27] audit: type=1326 audit(1789410305.076:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 266.199956][ T27] audit: type=1326 audit(1789410305.076:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 266.298000][ T27] audit: type=1326 audit(1789410305.076:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.0.838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f48e659e159 code=0x7ffc0000 [ 267.317527][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.484025][ T9481] bridge0: port 3(syz_tun) entered disabled state [ 268.544939][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.553783][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.658566][ T9481] batman_adv: batadv0: Interface deactivated: dummy0 [ 269.014927][ T9481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.054794][ T9481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.390521][ T9481] tipc: Resetting bearer [ 269.531826][ T9481] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.541365][ T9481] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.550443][ T9481] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.560630][ T9481] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.606262][ T9481] batman_adv: batadv0: Interface deactivated: gretap1 [ 269.665933][ T9481] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.689695][ T9481] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.700322][ T9481] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.711295][ T9481] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.802286][ T9522] net_ratelimit: 10 callbacks suppressed [ 269.802302][ T9522] ip_tables: iptables: counters copy to user failed while replacing table [ 269.951005][ T9297] veth0_vlan: entered promiscuous mode [ 269.999578][ T9297] veth1_vlan: entered promiscuous mode [ 271.218234][ T9297] veth0_macvtap: entered promiscuous mode [ 271.307489][ T9297] veth1_macvtap: entered promiscuous mode [ 271.386767][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.453710][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.513040][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.546650][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.569984][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.588227][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.609516][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.621748][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.683284][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.790648][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.826175][ T9554] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 271.852977][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.873897][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.897047][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.922169][ T9554] CIFS: Attempting to mount //127.0.0.1/share [ 271.938270][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.975941][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.997849][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.022942][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.057642][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.081376][ T9297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.123529][ T9297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.160398][ T9297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.193476][ T9297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.314201][ T9540] loop3: detected capacity change from 0 to 32768 [ 272.429328][ T9540] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 272.443126][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.452332][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.597478][ T7777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.633381][ T7777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.656875][ T9554] CIFS: VFS: Error connecting to socket. Aborting operation. [ 272.681055][ T9554] CIFS: VFS: cifs_mount failed w/return code = -4 [ 272.740270][ T9540] XFS (loop3): Ending clean mount [ 273.156482][ T5808] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 273.194228][ T5808] XFS (loop3): Unmount and run xfs_repair [ 273.221062][ T5808] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 273.254964][ T5808] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 273.265454][ T5808] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 273.275357][ T5808] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 273.285510][ T5808] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 273.304204][ T5808] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 273.343765][ T5808] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.372513][ T5808] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.403805][ T5808] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 273.443983][ T9540] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 273.545447][ T9540] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 273.639026][ T9540] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 274.076594][ T8956] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 275.235477][ T9629] capability: warning: `syz.2.893' uses 32-bit capabilities (legacy support in use) [ 276.788597][ T9670] xt_connbytes: Forcing CT accounting to be enabled [ 276.890079][ T9670] Cannot find set identified by id 0 to match [ 280.017815][ T9732] loop2: detected capacity change from 0 to 32768 [ 280.052087][ T9732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.917 (9732) [ 280.116368][ T9732] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.163894][ T9732] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 280.212130][ T9732] BTRFS info (device loop2): setting nodatacow, compression disabled [ 280.242501][ T9732] BTRFS info (device loop2): disabling tree log [ 280.261697][ T9732] BTRFS info (device loop2): max_inline at 0 [ 280.285176][ T9732] BTRFS info (device loop2): using free space tree [ 280.545872][ T9732] BTRFS info (device loop2): auto enabling async discard [ 282.485546][ T9297] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.607958][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.8.941'. [ 284.935562][ T9864] loop2: detected capacity change from 0 to 256 [ 285.261946][ T5810] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 285.507004][ T5810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.536983][ T5810] usb 3-1: config 29 has an invalid interface number: 42 but max is 0 [ 285.563504][ T5810] usb 3-1: config 29 has an invalid interface descriptor of length 4, skipping [ 285.593474][ T5810] usb 3-1: config 29 has an invalid descriptor of length 92, skipping remainder of the config [ 285.635668][ T5810] usb 3-1: config 29 has no interface number 0 [ 285.641937][ T5810] usb 3-1: config 29 interface 42 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.713671][ T5810] usb 3-1: config 29 interface 42 has no altsetting 0 [ 285.738060][ T5810] usb 3-1: New USB device found, idVendor=0738, idProduct=86ab, bcdDevice=f3.13 [ 285.770053][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.797116][ T5810] usb 3-1: Product: syz [ 285.811629][ T5810] usb 3-1: Manufacturer: syz [ 285.826409][ T5810] usb 3-1: SerialNumber: syz [ 286.191321][ T5810] usb 3-1: USB disconnect, device number 7 [ 286.493763][ T5781] Bluetooth: hci3: command 0x0419 tx timeout [ 286.615146][ T9904] wg2: entered allmulticast mode [ 286.972094][ T9919] overlayfs: failed to clone upperpath [ 287.371606][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.962'. [ 288.411221][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.8.973'. [ 288.429155][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.8.973'. [ 288.743495][ T9993] FAULT_INJECTION: forcing a failure. [ 288.743495][ T9993] name failslab, interval 1, probability 0, space 0, times 0 [ 288.816298][ T9993] CPU: 0 PID: 9993 Comm: syz.3.974 Not tainted syzkaller #0 [ 288.823657][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.833758][ T9993] Call Trace: [ 288.837086][ T9993] [ 288.840041][ T9993] dump_stack_lvl+0x18c/0x250 [ 288.844763][ T9993] ? show_regs_print_info+0x20/0x20 [ 288.850004][ T9993] ? load_image+0x420/0x420 [ 288.854543][ T9993] ? __might_sleep+0xe0/0xe0 [ 288.859173][ T9993] ? __lock_acquire+0x7d80/0x7d80 [ 288.864232][ T9993] should_fail_ex+0x394/0x4c0 [ 288.868959][ T9993] should_failslab+0x9/0x20 [ 288.873503][ T9993] slab_pre_alloc_hook+0x59/0x300 [ 288.878557][ T9993] ? __kernfs_new_node+0xaa/0x7f0 [ 288.883602][ T9993] ? rcu_is_watching+0x15/0xb0 [ 288.888378][ T9993] kmem_cache_alloc+0x5a/0x2c0 [ 288.893153][ T9993] ? __kernfs_new_node+0xe5/0x7f0 [ 288.898189][ T9993] __kernfs_new_node+0xe5/0x7f0 [ 288.903054][ T9993] ? kernfs_add_one+0x23b/0x6b0 [ 288.907962][ T9993] ? __lock_acquire+0x7d80/0x7d80 [ 288.912999][ T9993] ? down_write+0x16e/0x200 [ 288.917508][ T9993] ? kernfs_new_node+0x260/0x260 [ 288.922456][ T9993] ? down_write+0x16e/0x200 [ 288.926971][ T9993] kernfs_new_node+0x14c/0x260 [ 288.931756][ T9993] __kernfs_create_file+0x4b/0x2e0 [ 288.936965][ T9993] cgroup_addrm_files+0x810/0xd60 [ 288.942010][ T9993] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 288.948168][ T9993] ? mark_lock+0x94/0x320 [ 288.952535][ T9993] ? css_next_descendant_pre+0x17d/0x260 [ 288.958183][ T9993] css_populate_dir+0x2ad/0x380 [ 288.963039][ T9993] cgroup_mkdir+0xc65/0xe70 [ 288.967550][ T9993] ? css_task_iter_end+0x2c0/0x2c0 [ 288.972675][ T9993] ? kernfs_iop_permission+0x2c4/0x3b0 [ 288.978146][ T9993] ? css_task_iter_end+0x2c0/0x2c0 [ 288.983273][ T9993] kernfs_iop_mkdir+0x241/0x3e0 [ 288.988144][ T9993] vfs_mkdir+0x2a5/0x470 [ 288.992406][ T9993] do_mkdirat+0x1dc/0x450 [ 288.996739][ T9993] ? vfs_mkdir+0x470/0x470 [ 289.001165][ T9993] __x64_sys_mkdirat+0x89/0xa0 [ 289.005934][ T9993] do_syscall_64+0x55/0xb0 [ 289.010361][ T9993] ? clear_bhb_loop+0x40/0x90 [ 289.015056][ T9993] ? clear_bhb_loop+0x40/0x90 [ 289.019739][ T9993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.025645][ T9993] RIP: 0033:0x7f39a259e159 [ 289.030065][ T9993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.049674][ T9993] RSP: 002b:00007f39a3512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 289.058097][ T9993] RAX: ffffffffffffffda RBX: 00007f39a2825fa0 RCX: 00007f39a259e159 [ 289.066073][ T9993] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 289.074054][ T9993] RBP: 00007f39a263503b R08: 0000000000000000 R09: 0000000000000000 [ 289.082022][ T9993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.089995][ T9993] R13: 00007f39a2826038 R14: 00007f39a2825fa0 R15: 00007ffd32c9e978 [ 289.097984][ T9993] [ 289.193212][ T9993] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 [ 290.193662][ T9938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.212666][ T9938] nci: nci_start_poll: failed to set local general bytes [ 290.254877][ T9926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.521002][ T5774] IPVS: starting estimator thread 0... [ 290.635468][T10022] IPVS: using max 23 ests per chain, 55200 per kthread [ 291.539011][T10037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.875052][ T7770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.062439][ T7770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.269281][ T7770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.529406][ T7770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.303822][T10057] IPVS: Scheduler module ip_vs_ not found [ 293.529237][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.544729][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.556030][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.574567][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.603379][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.612818][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.623942][T10063] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1002'. [ 293.926838][ T8247] IPVS: starting estimator thread 0... [ 294.043797][T10076] IPVS: using max 22 ests per chain, 52800 per kthread [ 295.150619][T10101] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1011'. [ 295.364492][T10101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.423006][T10101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.493749][T10101] bond0 (unregistering): Released all slaves [ 295.694170][ T5773] Bluetooth: hci0: command tx timeout [ 295.888261][T10062] chnl_net:caif_netlink_parms(): no params data found [ 296.336985][T10133] loop2: detected capacity change from 0 to 512 [ 296.366958][T10133] EXT4-fs: Ignoring removed i_version option [ 296.457319][T10133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 296.559483][T10133] EXT4-fs (loop2): 1 truncate cleaned up [ 296.590730][T10133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.859157][T10133] EXT4-fs (loop2): pa ffff88802e8d4488: logic 2432, phys. 39, len 216 [ 296.869451][T10133] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5393: group 0, free 82, pa_free 215 [ 296.920792][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.946599][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.967271][T10062] bridge_slave_0: entered allmulticast mode [ 297.006286][T10062] bridge_slave_0: entered promiscuous mode [ 297.156799][ T9297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.166415][ T7770] hsr_slave_0: left promiscuous mode [ 297.260283][ T7770] hsr_slave_1: left promiscuous mode [ 297.354123][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.383477][ T7770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.412162][ T7770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.443904][ T7770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.494239][ T7770] bridge_slave_1: left allmulticast mode [ 297.499944][ T7770] bridge_slave_1: left promiscuous mode [ 297.543663][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.623845][ T7770] bridge_slave_0: left allmulticast mode [ 297.629557][ T7770] bridge_slave_0: left promiscuous mode [ 297.667382][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.773621][ T5773] Bluetooth: hci0: command tx timeout [ 297.908868][ T7770] veth1_macvtap: left promiscuous mode [ 297.928925][ T7770] veth0_macvtap: left promiscuous mode [ 297.966032][ T7770] veth1_vlan: left promiscuous mode [ 297.993922][ T7770] veth0_vlan: left promiscuous mode [ 298.594310][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 298.810971][ T8] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.871789][ T8] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.912955][ T8] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 298.937816][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.964987][ T8] usb 3-1: Product: syz [ 298.983551][ T8] usb 3-1: Manufacturer: syz [ 298.988216][ T8] usb 3-1: SerialNumber: syz [ 299.030552][ T8] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 299.077480][ T8] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 299.110240][ T8] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 299.853601][ T5773] Bluetooth: hci0: command tx timeout [ 300.512818][ T7770] team0 (unregistering): Port device team_slave_1 removed [ 300.623037][ T7770] team0 (unregistering): Port device team_slave_0 removed [ 300.781980][ T7770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.938309][ T7770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.221593][T10169] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 301.241255][ T5613] usb 3-1: USB disconnect, device number 8 [ 301.277319][ T5613] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 301.335039][ T5613] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 301.361724][ T5613] ti_usb_3410_5052 3-1:2.0: device disconnected [ 301.933557][ T5773] Bluetooth: hci0: command tx timeout [ 302.146214][ T7770] bond0 (unregistering): Released all slaves [ 302.301206][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.309033][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.317708][T10062] bridge_slave_1: entered allmulticast mode [ 302.326571][T10062] bridge_slave_1: entered promiscuous mode [ 302.508638][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.555754][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.745635][T10062] team0: Port device team_slave_0 added [ 302.795423][T10062] team0: Port device team_slave_1 added [ 303.009765][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.053682][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.157254][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.179155][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 303.229730][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.268280][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.335920][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.396776][ T5613] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 303.580362][T10062] hsr_slave_0: entered promiscuous mode [ 303.604032][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 303.621314][T10062] hsr_slave_1: entered promiscuous mode [ 303.651364][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.671140][T10062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.703939][T10062] Cannot create hsr debugfs directory [ 303.704048][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.769902][ T5613] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 303.791124][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.814654][ T5613] usb 3-1: config 0 descriptor?? [ 304.175211][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 304.248782][ T5613] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 304.266082][ T5613] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 304.442373][ T5613] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 304.645151][ T5613] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 304.847864][ T5613] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 305.266274][T10227] ft260 0003:0403:6030.0004: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 305.343121][T10278] 9pnet_fd: Insufficient options for proto=fd [ 305.386380][T10227] ft260 0003:0403:6030.0004: failed to reset I2C controller: -108 [ 305.407166][T10227] ft260 0003:0403:6030.0004: ft260_i2c_write: failed with -38 [ 305.648740][T10062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.671148][T10062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.691031][T10062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.725222][T10062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.017828][T10062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.085601][T10062] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.124701][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.131858][ T7770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.208582][ T5827] usb 3-1: USB disconnect, device number 9 [ 306.282088][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.289327][ T7770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.484639][T10062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.255110][T10062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.351856][T10324] overlayfs: failed to clone upperpath [ 307.550587][ T7761] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.018528][ T7761] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.238174][ T7761] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.076216][ T7761] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.114625][T10362] netlink: 15231 bytes leftover after parsing attributes in process `syz.8.1078'. [ 309.259270][T10062] veth0_vlan: entered promiscuous mode [ 309.327723][T10062] veth1_vlan: entered promiscuous mode [ 309.640379][T10062] veth0_macvtap: entered promiscuous mode [ 309.867854][T10062] veth1_macvtap: entered promiscuous mode [ 309.982374][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.026490][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.061573][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.102397][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.153542][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.180376][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.224540][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.281152][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.301483][T10062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.401922][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.418742][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.437799][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.449558][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.460692][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.472417][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.483534][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.495515][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.515859][T10062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.534131][T10398] veth0: entered promiscuous mode [ 310.545255][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 310.732671][T10403] bond0: (slave bond_slave_1): Releasing backup interface [ 310.808172][T10062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.818582][T10062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.830141][T10062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.841579][T10062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.868939][T10396] veth0: left promiscuous mode [ 311.208693][ T7761] batman_adv: batadv0: Interface deactivated: gretap1 [ 311.335312][T10417] kvm: user requested TSC rate below hardware speed [ 311.355549][ T7761] batman_adv: batadv0: Removing interface: gretap1 [ 311.376446][T10417] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 311.415265][T10417] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 311.578292][ T7768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.614631][ T7768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.746590][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1094'. [ 312.048133][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1095'. [ 312.215476][ T7775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.250804][ T7775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.484575][ T7761] hsr_slave_0: left promiscuous mode [ 312.533473][ T7761] hsr_slave_1: left promiscuous mode [ 312.598950][T10453] loop5: detected capacity change from 0 to 7 [ 312.611406][T10453] loop5: [ 312.615942][T10453] loop5: partition table partially beyond EOD, truncated [ 312.654207][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.695136][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.783924][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.791406][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.860017][ T7761] bridge_slave_1: left allmulticast mode [ 312.880037][ T7761] bridge_slave_1: left promiscuous mode [ 312.900446][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.024937][ T7761] bridge_slave_0: left allmulticast mode [ 313.043225][ T7761] bridge_slave_0: left promiscuous mode [ 313.076697][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.629877][ T7761] veth1_macvtap: left promiscuous mode [ 313.728764][ T7761] veth0_macvtap: left promiscuous mode [ 313.867042][ T7761] veth1_vlan: left promiscuous mode [ 313.965348][ T7761] veth0_vlan: left promiscuous mode [ 314.829689][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1108'. [ 315.013849][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 315.854285][ T7761] bond1 (unregistering): Released all slaves [ 315.995146][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 316.086370][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 317.460898][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.472490][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.722852][T10540] loop1: detected capacity change from 0 to 1024 [ 318.768301][T10540] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 318.806332][T10540] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 318.866821][T10540] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 318.925265][T10540] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #3: comm syz.1.1122: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 319.028686][T10540] EXT4-fs (loop1): no journal found [ 319.051301][T10540] EXT4-fs (loop1): can't get journal size [ 319.098147][T10540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.415416][T10062] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.522741][ T7761] team0 (unregistering): Port device team_slave_1 removed [ 319.813559][ T7761] team0 (unregistering): Port device team_slave_0 removed [ 319.983662][ T7761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.085235][ T7761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.379487][ T7761] bond0 (unregistering): Released all slaves [ 321.600629][T10552] loop1: detected capacity change from 0 to 32768 [ 321.614942][T10552] XFS: noikeep mount option is deprecated. [ 321.733584][T10552] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 321.786719][T10552] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 321.989993][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 321.990010][ T27] audit: type=1326 audit(1789410361.646:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.8.1129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa465b9e159 code=0x0 [ 322.215037][T10552] XFS (loop1): Ending clean mount [ 322.294647][T10552] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 322.340400][T10552] XFS (loop1): Unmount and run xfs_repair [ 322.393262][T10552] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 322.451579][T10552] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 322.503596][T10552] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 322.523088][ T7761] IPVS: stop unused estimator thread 0... [ 322.571788][T10552] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 322.651731][T10552] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 322.689427][T10552] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 322.731428][T10552] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 322.791798][T10552] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00 ......0w........ [ 322.848381][T10552] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 322.877803][T10552] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 322.949713][T10552] XFS (loop1): Failed to initialize disk quotas. [ 323.237048][T10586] netlink: 'syz.8.1133': attribute type 12 has an invalid length. [ 323.251702][T10586] netlink: 'syz.8.1133': attribute type 29 has an invalid length. [ 323.269558][T10586] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1133'. [ 323.292338][T10586] netlink: 'syz.8.1133': attribute type 1 has an invalid length. [ 323.334405][ T27] audit: type=1804 audit(1789410362.986:95): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1126" name="/newroot/11/bus/file1" dev="overlay" ino=9286 res=1 errno=0 [ 323.376630][T10586] netlink: 'syz.8.1133': attribute type 2 has an invalid length. [ 323.420790][T10586] netlink: 11 bytes leftover after parsing attributes in process `syz.8.1133'. [ 323.426670][ T27] audit: type=1804 audit(1789410363.016:96): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1126" name="/newroot/11/bus/file1" dev="overlay" ino=9286 res=1 errno=0 [ 323.484269][T10589] netlink: 'syz.8.1133': attribute type 12 has an invalid length. [ 323.523457][T10589] netlink: 'syz.8.1133': attribute type 29 has an invalid length. [ 323.563229][ T27] audit: type=1800 audit(1789410363.016:97): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1126" name="file1" dev="overlay" ino=9286 res=0 errno=0 [ 323.583433][T10589] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1133'. [ 323.596167][T10062] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 323.612395][T10589] netlink: 'syz.8.1133': attribute type 1 has an invalid length. [ 323.625671][T10589] netlink: 'syz.8.1133': attribute type 2 has an invalid length. [ 323.641446][T10589] netlink: 11 bytes leftover after parsing attributes in process `syz.8.1133'. [ 323.774705][T10596] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 325.011708][T10628] bridge_slave_0: left allmulticast mode [ 325.040571][T10628] bridge_slave_0: left promiscuous mode [ 325.047879][T10628] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.075229][T10628] bridge_slave_1: left allmulticast mode [ 325.087144][T10628] bridge_slave_1: left promiscuous mode [ 325.121305][T10628] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.182670][T10628] bond0: (slave bond_slave_0): Releasing backup interface [ 325.247891][T10628] bond0: (slave bond_slave_1): Releasing backup interface [ 325.440696][T10628] team0: Port device team_slave_0 removed [ 325.506240][T10628] team0: Port device team_slave_1 removed [ 325.545012][T10628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.575606][T10628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.615788][T10628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.655474][T10628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.772511][T10632] team0: Mode changed to "roundrobin" [ 326.164991][T10646] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 327.080078][ T5773] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 327.248805][T10680] FAULT_INJECTION: forcing a failure. [ 327.248805][T10680] name failslab, interval 1, probability 0, space 0, times 0 [ 327.263882][T10680] CPU: 1 PID: 10680 Comm: syz.1.1163 Not tainted syzkaller #0 [ 327.271386][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.281484][T10680] Call Trace: [ 327.285047][T10680] [ 327.288002][T10680] dump_stack_lvl+0x18c/0x250 [ 327.292725][T10680] ? show_regs_print_info+0x20/0x20 [ 327.297972][T10680] ? load_image+0x420/0x420 [ 327.302514][T10680] ? __might_sleep+0xe0/0xe0 [ 327.307145][T10680] ? __lock_acquire+0x7d80/0x7d80 [ 327.310393][T10685] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 327.312188][T10680] should_fail_ex+0x394/0x4c0 [ 327.332832][T10680] should_failslab+0x9/0x20 [ 327.337380][T10680] slab_pre_alloc_hook+0x59/0x300 [ 327.342463][T10680] kmem_cache_alloc+0x5a/0x2c0 [ 327.347270][T10680] ? vm_area_dup+0x27/0x270 [ 327.351919][T10680] vm_area_dup+0x27/0x270 [ 327.356284][T10680] __split_vma+0x1a8/0xc20 [ 327.360742][T10680] ? init_vma_prep+0x160/0x160 [ 327.365540][T10680] ? mmap_write_unlock+0x160/0x160 [ 327.370683][T10680] ? split_vma+0x8f/0x110 [ 327.375202][T10680] mlock_fixup+0x3ac/0x550 [ 327.379628][T10680] apply_vma_lock_flags+0x2a7/0x3c0 [ 327.385375][T10680] ? do_mlock+0x740/0x740 [ 327.389721][T10680] ? down_write_killable+0x181/0x230 [ 327.395220][T10680] do_mlock+0x4be/0x740 [ 327.399398][T10680] ? lru_gen_add_folio+0xe00/0xe00 [ 327.404533][T10680] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 327.410545][T10680] ? lock_chain_count+0x20/0x20 [ 327.415408][T10680] ? syscall_enter_from_user_mode+0x25/0x80 [ 327.421407][T10680] __x64_sys_mlock+0x60/0x70 [ 327.426490][T10680] do_syscall_64+0x55/0xb0 [ 327.430927][T10680] ? clear_bhb_loop+0x40/0x90 [ 327.435621][T10680] ? clear_bhb_loop+0x40/0x90 [ 327.440329][T10680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.446249][T10680] RIP: 0033:0x7fe89899e159 [ 327.450675][T10680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.470324][T10680] RSP: 002b:00007fe8998a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 327.478934][T10680] RAX: ffffffffffffffda RBX: 00007fe898c25fa0 RCX: 00007fe89899e159 [ 327.486916][T10680] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 327.494984][T10680] RBP: 00007fe898a3503b R08: 0000000000000000 R09: 0000000000000000 [ 327.502982][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.510967][T10680] R13: 00007fe898c26038 R14: 00007fe898c25fa0 R15: 00007ffddb7a82c8 [ 327.518999][T10680] [ 328.253536][ T5613] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 328.473144][ T5613] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 328.520028][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.557903][ T5613] usb 2-1: Product: syz [ 328.579579][ T5613] usb 2-1: Manufacturer: syz [ 328.607573][ T5613] usb 2-1: SerialNumber: syz [ 328.661878][ T5613] usb 2-1: config 0 descriptor?? [ 328.937802][ T5613] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.004529][T10706] loop2: detected capacity change from 0 to 512 [ 329.057754][T10706] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1168: iget: bad i_size value: 38620345925642 [ 329.167635][T10706] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1168: couldn't read orphan inode 15 (err -117) [ 329.260069][T10706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.416845][T10706] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 329.500628][T10706] EXT4-fs error (device loop2): ext4_setattr:5634: inode #18: comm syz.2.1168: mark_inode_dirty error [ 329.556596][T10706] EXT4-fs error (device loop2) in ext4_setattr:5695: Out of memory [ 329.701100][ T9297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.205559][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.213361][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.393889][ T5613] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 330.445996][ T5613] usb 2-1: USB disconnect, device number 3 [ 330.822318][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.872723][T10719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.324270][T10719] tipc: Resetting bearer [ 331.394148][T10719] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.416558][T10719] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.425656][T10719] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.434687][T10719] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.526150][T10719] batman_adv: batadv0: Interface deactivated: gretap1 [ 331.994869][T10765] loop2: detected capacity change from 0 to 8192 [ 332.047971][T10765] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.697810][T10791] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.715795][T10791] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.729218][T10791] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.740788][T10791] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.504096][T10833] loop1: detected capacity change from 0 to 512 [ 334.521829][T10833] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.569779][T10833] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.1196: corrupted in-inode xattr: e_value size too large [ 334.645433][T10833] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1196: couldn't read orphan inode 15 (err -117) [ 334.702718][T10833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.990091][T10062] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.477454][T10909] loop1: detected capacity change from 0 to 128 [ 337.099499][T10931] loop2: detected capacity change from 0 to 512 [ 337.112478][T10931] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.139326][T10931] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.1208: corrupted in-inode xattr: e_value size too large [ 337.176373][T10931] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1208: couldn't read orphan inode 15 (err -117) [ 337.197351][T10931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.357393][ T9297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.576373][T10983] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1222'. [ 339.559284][T10967] overlayfs: failed to resolve './file0': -2 [ 339.863783][ T5827] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 340.063386][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 340.075067][ T5827] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 340.093532][ T5827] usb 3-1: config 0 has no interface number 0 [ 340.099814][ T5827] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 340.143377][ T5827] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 340.184094][ T5827] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 340.202426][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.226953][ T5827] usb 3-1: Product: syz [ 340.231182][ T5827] usb 3-1: Manufacturer: syz [ 340.249453][ T5827] usb 3-1: SerialNumber: syz [ 340.286379][ T5827] usb 3-1: config 0 descriptor?? [ 340.324048][T11001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.352364][T11001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.599504][T11001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.627314][T11001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.204958][T11071] xt_connbytes: Forcing CT accounting to be enabled [ 342.212898][T11071] Cannot find set identified by id 0 to match [ 342.296246][ T5827] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 342.344509][ T5827] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 342.366759][ T5827] asix: probe of 3-1:0.34 failed with error -71 [ 342.399269][ T5827] usb 3-1: USB disconnect, device number 10 [ 342.622043][T11087] loop1: detected capacity change from 0 to 512 [ 342.675994][T11087] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1240: iget: bad i_size value: 38620345925642 [ 342.752065][T11087] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1240: couldn't read orphan inode 15 (err -117) [ 342.796263][T11087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.954367][T11087] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Out of memory [ 342.990802][T11087] EXT4-fs error (device loop1): ext4_setattr:5634: inode #18: comm syz.1.1240: mark_inode_dirty error [ 343.018066][T11087] EXT4-fs error (device loop1) in ext4_setattr:5695: Out of memory [ 343.166071][T10062] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.815111][T11124] xt_connbytes: Forcing CT accounting to be enabled [ 343.821774][T11124] Cannot find set identified by id 0 to match [ 344.190817][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 344.575178][T11159] netlink: 'syz.0.1257': attribute type 11 has an invalid length. [ 345.719858][T11194] TC_ACT_REPEAT abuse ? [ 346.453763][T11225] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1275'. [ 346.698800][T11239] FAULT_INJECTION: forcing a failure. [ 346.698800][T11239] name failslab, interval 1, probability 0, space 0, times 0 [ 346.716604][T11239] CPU: 1 PID: 11239 Comm: syz.1.1278 Not tainted syzkaller #0 [ 346.724130][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.734211][T11239] Call Trace: [ 346.737507][T11239] [ 346.740470][T11239] dump_stack_lvl+0x18c/0x250 [ 346.745193][T11239] ? show_regs_print_info+0x20/0x20 [ 346.750425][T11239] ? load_image+0x420/0x420 [ 346.755224][T11239] ? __lock_acquire+0x7d80/0x7d80 [ 346.760296][T11239] should_fail_ex+0x394/0x4c0 [ 346.765053][T11239] should_failslab+0x9/0x20 [ 346.769591][T11239] slab_pre_alloc_hook+0x59/0x300 [ 346.774653][T11239] ? __get_vm_area_node+0x125/0x370 [ 346.779870][T11239] __kmem_cache_alloc_node+0x53/0x250 [ 346.785250][T11239] ? __get_vm_area_node+0x125/0x370 [ 346.790464][T11239] kmalloc_node_trace+0x26/0xe0 [ 346.795325][T11239] __get_vm_area_node+0x125/0x370 [ 346.800355][T11239] ? rcu_is_watching+0x15/0xb0 [ 346.805126][T11239] vmap+0x126/0x2a0 [ 346.808935][T11239] ? relay_open_buf+0x3db/0xd70 [ 346.813804][T11239] relay_open_buf+0x3db/0xd70 [ 346.818534][T11239] relay_open+0x404/0x8e0 [ 346.822888][T11239] do_blk_trace_setup+0x569/0x9e0 [ 346.827918][T11239] blk_trace_ioctl+0x3e2/0x560 [ 346.832689][T11239] ? __blk_trace_startstop+0x630/0x630 [ 346.838153][T11239] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 346.843643][T11239] blkdev_ioctl+0x44b/0x730 [ 346.848149][T11239] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 346.853611][T11239] ? bpf_lsm_file_ioctl+0x9/0x10 [ 346.858543][T11239] ? security_file_ioctl+0x80/0xa0 [ 346.863655][T11239] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 346.869124][T11239] __se_sys_ioctl+0xfd/0x170 [ 346.873728][T11239] do_syscall_64+0x55/0xb0 [ 346.878161][T11239] ? clear_bhb_loop+0x40/0x90 [ 346.882839][T11239] ? clear_bhb_loop+0x40/0x90 [ 346.887523][T11239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.893417][T11239] RIP: 0033:0x7fe89899e159 [ 346.897848][T11239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.917477][T11239] RSP: 002b:00007fe8998a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.925892][T11239] RAX: ffffffffffffffda RBX: 00007fe898c25fa0 RCX: 00007fe89899e159 [ 346.934034][T11239] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 346.942091][T11239] RBP: 00007fe898a3503b R08: 0000000000000000 R09: 0000000000000000 [ 346.950060][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.958026][T11239] R13: 00007fe898c26038 R14: 00007fe898c25fa0 R15: 00007ffddb7a82c8 [ 346.966009][T11239] [ 347.282022][T11251] loop2: detected capacity change from 0 to 512 [ 347.412855][T11251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.489679][T11251] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.559341][T11264] loop1: detected capacity change from 0 to 1024 [ 347.560091][T11267] netlink: 201392 bytes leftover after parsing attributes in process `syz.8.1285'. [ 347.588489][T11267] netlink: zone id is out of range [ 347.602272][T11267] netlink: zone id is out of range [ 347.613389][T11267] netlink: zone id is out of range [ 347.620213][T11264] hfsplus: unable to parse mount options [ 347.624279][T11267] netlink: zone id is out of range [ 347.652192][T11267] netlink: zone id is out of range [ 347.696031][T11267] netlink: zone id is out of range [ 347.712882][T11251] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2974: inode #15: comm syz.2.1282: corrupted xattr block 33: bad e_name length [ 347.750132][T11267] netlink: zone id is out of range [ 347.760232][T11267] netlink: zone id is out of range [ 347.772150][T11267] netlink: zone id is out of range [ 347.795955][T11251] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 347.908404][ T9297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.608585][T11334] bond1: option arp_interval: invalid value (18446744073709551611) [ 349.617047][T11334] bond1: option arp_interval: allowed values 0 - 2147483647 [ 349.656130][T11334] bond1 (unregistering): Released all slaves [ 350.704385][T11377] IPVS: Scheduler module ip_vs_ not found [ 350.963582][ T5774] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 351.150073][T11396] syz_tun: entered allmulticast mode [ 351.157585][T11396] wg2: entered allmulticast mode [ 351.167583][T11395] syz_tun: left allmulticast mode [ 351.178062][ T5774] usb 3-1: Using ep0 maxpacket: 16 [ 351.190347][ T5774] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 351.223368][ T5774] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.232495][ T5774] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.259374][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.293414][ T5774] usb 3-1: config 0 descriptor?? [ 351.355964][T11403] overlayfs: failed to clone upperpath [ 352.134838][T11440] netlink: 'syz.0.1327': attribute type 10 has an invalid length. [ 352.148067][T11440] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.159414][T11440] bond0: (slave team0): Enslaving as an active interface with an up link [ 353.503623][T11482] loop1: detected capacity change from 0 to 8192 [ 353.527884][T11482] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.711976][ T5809] usb 3-1: USB disconnect, device number 11 [ 354.834719][T11499] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1339'. [ 355.281368][T11523] FAULT_INJECTION: forcing a failure. [ 355.281368][T11523] name failslab, interval 1, probability 0, space 0, times 0 [ 355.298048][T11523] CPU: 0 PID: 11523 Comm: syz.2.1355 Not tainted syzkaller #0 [ 355.305566][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.315648][T11523] Call Trace: [ 355.318934][T11523] [ 355.321905][T11523] dump_stack_lvl+0x18c/0x250 [ 355.326598][T11523] ? show_regs_print_info+0x20/0x20 [ 355.331799][T11523] ? load_image+0x420/0x420 [ 355.336303][T11523] ? __lock_acquire+0x7d80/0x7d80 [ 355.341337][T11523] should_fail_ex+0x394/0x4c0 [ 355.346029][T11523] should_failslab+0x9/0x20 [ 355.350535][T11523] slab_pre_alloc_hook+0x59/0x300 [ 355.355569][T11523] ? __get_vm_area_node+0x125/0x370 [ 355.360771][T11523] __kmem_cache_alloc_node+0x53/0x250 [ 355.366153][T11523] ? __get_vm_area_node+0x125/0x370 [ 355.371383][T11523] kmalloc_node_trace+0x26/0xe0 [ 355.376255][T11523] __get_vm_area_node+0x125/0x370 [ 355.381292][T11523] ? rcu_is_watching+0x15/0xb0 [ 355.386067][T11523] vmap+0x126/0x2a0 [ 355.389874][T11523] ? relay_open_buf+0x3db/0xd70 [ 355.394735][T11523] relay_open_buf+0x3db/0xd70 [ 355.399430][T11523] relay_open+0x404/0x8e0 [ 355.403772][T11523] do_blk_trace_setup+0x569/0x9e0 [ 355.408811][T11523] blk_trace_ioctl+0x3e2/0x560 [ 355.413576][T11523] ? __blk_trace_startstop+0x630/0x630 [ 355.419039][T11523] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 355.424561][T11523] blkdev_ioctl+0x44b/0x730 [ 355.429069][T11523] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 355.434531][T11523] ? bpf_lsm_file_ioctl+0x9/0x10 [ 355.439474][T11523] ? security_file_ioctl+0x80/0xa0 [ 355.444590][T11523] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 355.450048][T11523] __se_sys_ioctl+0xfd/0x170 [ 355.454644][T11523] do_syscall_64+0x55/0xb0 [ 355.459062][T11523] ? clear_bhb_loop+0x40/0x90 [ 355.463742][T11523] ? clear_bhb_loop+0x40/0x90 [ 355.468425][T11523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.474584][T11523] RIP: 0033:0x7f4f9b19e159 [ 355.478998][T11523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.498606][T11523] RSP: 002b:00007f4f9c002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.507021][T11523] RAX: ffffffffffffffda RBX: 00007f4f9b425fa0 RCX: 00007f4f9b19e159 [ 355.514993][T11523] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 355.522959][T11523] RBP: 00007f4f9b23503b R08: 0000000000000000 R09: 0000000000000000 [ 355.531107][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.539075][T11523] R13: 00007f4f9b426038 R14: 00007f4f9b425fa0 R15: 00007ffc3ef1ca98 [ 355.547064][T11523] [ 355.698716][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1348'. [ 356.606831][T11558] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 356.633567][T11558] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.1359'. [ 358.040985][T11607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 359.564714][T11653] BUG: unable to handle page fault for address: fffffffffffffbc8 [ 359.572495][T11653] #PF: supervisor read access in kernel mode [ 359.578490][T11653] #PF: error_code(0x0000) - not-present page [ 359.584499][T11653] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 359.590517][T11653] Oops: 0000 [#1] PREEMPT SMP KASAN [ 359.595723][T11653] CPU: 1 PID: 11653 Comm: syz.0.1381 Not tainted syzkaller #0 [ 359.603195][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.613270][T11653] RIP: 0010:strlen+0x39/0x70 [ 359.617887][T11653] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 359.637537][T11653] RSP: 0018:ffffc900041a6a98 EFLAGS: 00010286 [ 359.643630][T11653] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 359.651657][T11653] RDX: ffffc9000c889000 RSI: 0000000000000bb1 RDI: fffffffffffffbc8 [ 359.659752][T11653] RBP: ffffc900041a6bc8 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 359.667932][T11653] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: dffffc0000000000 [ 359.675928][T11653] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 359.684101][T11653] FS: 00007f48e74ed6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 359.693100][T11653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.699717][T11653] CR2: fffffffffffffbc8 CR3: 000000006994d000 CR4: 00000000003506e0 [ 359.707809][T11653] Call Trace: [ 359.711104][T11653] [ 359.714665][T11653] trace_event_raw_event_drv_net_setup_tc+0x109/0x4d0 [ 359.721488][T11653] ? perf_trace_drv_twt_teardown_request+0x480/0x480 [ 359.728216][T11653] ieee80211_netdev_setup_tc+0x2c2/0x320 [ 359.733935][T11653] tcf_block_offload_cmd+0x235/0x3a0 [ 359.739270][T11653] ? net_generic+0x240/0x240 [ 359.744677][T11653] ? down_read_killable+0x340/0x340 [ 359.750024][T11653] tcf_block_get_ext+0xdf2/0x13d0 [ 359.755215][T11653] tcf_block_get+0x68/0xa0 [ 359.760853][T11653] ? tcf_block_get+0xa0/0xa0 [ 359.765678][T11653] htb_init+0x1f8/0xdc0 [ 359.770140][T11653] ? qdisc_create+0x172/0x1060 [ 359.775024][T11653] ? tc_modify_qdisc+0xb47/0x1de0 [ 359.780337][T11653] ? rtnetlink_rcv_msg+0x843/0xf90 [ 359.786266][T11653] ? netlink_rcv_skb+0x235/0x4c0 [ 359.791326][T11653] ? netlink_unicast+0x7b1/0x930 [ 359.796424][T11653] ? netlink_sendmsg+0x8d0/0xbf0 [ 359.802278][T11653] ? ____sys_sendmsg+0x61b/0x980 [ 359.808771][T11653] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 359.816449][T11653] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.822820][T11653] ? qdisc_alloc+0x95/0xa80 [ 359.828148][T11653] ? qdisc_alloc+0x7a2/0xa80 [ 359.832786][T11653] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 359.838206][T11653] qdisc_create+0x90f/0x1060 [ 359.843221][T11653] ? qdisc_notify+0x370/0x370 [ 359.848666][T11653] ? lockdep_rtnl_is_held+0x26/0x30 [ 359.854076][T11653] ? qdisc_lookup+0x361/0x6c0 [ 359.859398][T11653] tc_modify_qdisc+0xb47/0x1de0 [ 359.864286][T11653] ? qdisc_offload_query_caps+0x150/0x150 [ 359.872594][T11653] ? qdisc_offload_query_caps+0x150/0x150 [ 359.879689][T11653] rtnetlink_rcv_msg+0x843/0xf90 [ 359.884667][T11653] ? rtnetlink_rcv_msg+0x220/0xf90 [ 359.889813][T11653] ? rtnetlink_bind+0x80/0x80 [ 359.894521][T11653] ? mark_lock+0x94/0x320 [ 359.898888][T11653] ? __lock_acquire+0x1262/0x7d80 [ 359.903943][T11653] ? mark_lock+0x94/0x320 [ 359.908298][T11653] ? mark_lock+0x94/0x320 [ 359.912652][T11653] ? __lock_acquire+0x1262/0x7d80 [ 359.917706][T11653] ? kmalloc_reserve+0x95/0x240 [ 359.922585][T11653] ? verify_lock_unused+0x140/0x140 [ 359.927899][T11653] ? verify_lock_unused+0x140/0x140 [ 359.933136][T11653] netlink_rcv_skb+0x235/0x4c0 [ 359.937932][T11653] ? rtnetlink_bind+0x80/0x80 [ 359.942644][T11653] ? netlink_ack+0x1160/0x1160 [ 359.947534][T11653] ? __lock_acquire+0x7d80/0x7d80 [ 359.952577][T11653] ? net_generic+0x1e/0x240 [ 359.957104][T11653] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.962341][T11653] netlink_unicast+0x7b1/0x930 [ 359.967143][T11653] netlink_sendmsg+0x8d0/0xbf0 [ 359.971937][T11653] ? netlink_getsockopt+0x590/0x590 [ 359.977162][T11653] ? apparmor_socket_sendmsg+0x170/0x330 [ 359.982818][T11653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 359.988126][T11653] ? security_socket_sendmsg+0x80/0xa0 [ 359.993610][T11653] ? netlink_getsockopt+0x590/0x590 [ 359.998842][T11653] ____sys_sendmsg+0x61b/0x980 [ 360.003636][T11653] ? __asan_memset+0x22/0x40 [ 360.008253][T11653] ? __sys_sendmsg_sock+0x30/0x30 [ 360.013302][T11653] ? __import_iovec+0x5f2/0x850 [ 360.018182][T11653] ? import_iovec+0x73/0xa0 [ 360.022801][T11653] ___sys_sendmsg+0x2a6/0x360 [ 360.027553][T11653] ? __sys_sendmsg+0x2b0/0x2b0 [ 360.032360][T11653] __se_sys_sendmsg+0x1d0/0x2c0 [ 360.037244][T11653] ? __x64_sys_sendmsg+0x80/0x80 [ 360.042217][T11653] ? lockdep_hardirqs_on+0x98/0x150 [ 360.047438][T11653] do_syscall_64+0x55/0xb0 [ 360.051881][T11653] ? clear_bhb_loop+0x40/0x90 [ 360.056589][T11653] ? clear_bhb_loop+0x40/0x90 [ 360.061293][T11653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.067393][T11653] RIP: 0033:0x7f48e659e159 [ 360.071831][T11653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.091462][T11653] RSP: 002b:00007f48e74ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.100081][T11653] RAX: ffffffffffffffda RBX: 00007f48e6825fa0 RCX: 00007f48e659e159 [ 360.108090][T11653] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000004 [ 360.116264][T11653] RBP: 00007f48e663503b R08: 0000000000000000 R09: 0000000000000000 [ 360.124268][T11653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.132267][T11653] R13: 00007f48e6826038 R14: 00007f48e6825fa0 R15: 00007ffeb0eb3c58 [ 360.140275][T11653] [ 360.143319][T11653] Modules linked in: [ 360.147244][T11653] CR2: fffffffffffffbc8 [ 360.151552][T11653] ---[ end trace 0000000000000000 ]--- [ 360.157117][T11653] RIP: 0010:strlen+0x39/0x70 [ 360.161751][T11653] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 360.181536][T11653] RSP: 0018:ffffc900041a6a98 EFLAGS: 00010286 [ 360.187645][T11653] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 360.195649][T11653] RDX: ffffc9000c889000 RSI: 0000000000000bb1 RDI: fffffffffffffbc8 [ 360.203656][T11653] RBP: ffffc900041a6bc8 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 360.211741][T11653] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: dffffc0000000000 [ 360.219999][T11653] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 360.227994][T11653] FS: 00007f48e74ed6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 360.236947][T11653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.243557][T11653] CR2: fffffffffffffbc8 CR3: 000000006994d000 CR4: 00000000003506e0 [ 360.251558][T11653] Kernel panic - not syncing: Fatal exception [ 360.257889][T11653] Kernel Offset: disabled [ 360.262204][T11653] Rebooting in 86400 seconds..