last executing test programs: 26m48.235877045s ago: executing program 2 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x5, 0x0, 0x5, 0x0, 0x16, 0xb, 0xff, 0x4, 0x1, 0x2, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xef}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xdddd0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x2, 0xd, 0x4, 0x81, 0x0, 0x9, 0x2, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x7, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x9, 0xf8}, {0xeeee8000, 0xdddd1000, 0xa, 0xb, 0x0, 0x0, 0x9, 0x20, 0x0, 0x40}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0xfe}, {0x200000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0xfec00000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x280000001, 0x5, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m42.949810406s ago: executing program 2 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42) read(r4, &(0x7f0000000180), 0x1000) openat(0xffffffffffffff9c, 0x0, 0x2e4201, 0x0) 26m41.619927739s ago: executing program 2 (id=279): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount$nfs(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=202049,']) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004080) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./sec\x00', &(0x7f0000000b00)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000b80)="3c5c413ecd45036a2762bb626c65640a", 0x10) 26m33.482973052s ago: executing program 2 (id=298): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r2, 0x26, &(0x7f0000000180)) close_range(r1, 0xffffffffffffffff, 0x0) 26m29.657805267s ago: executing program 2 (id=295): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(0x0, 0x175) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000014) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x757e, 0x0, 0xfffffffe, 0xffffffff}, &(0x7f0000000580)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x29) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r9, r10, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x200, 0x321, 0x0, r0}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x8, 0x1, 0x2f2, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9dfe, 0x200, 0x8000001, 0x278, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb606, 0x4, 0x1, 0x321, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x0, 0xc0}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x2, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000001c0)}, 0x3e8) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000500), 0x2001000, &(0x7f0000000540)=ANY=[@ANYBLOB='si\x00e=8,uid=', @ANYRESHEX=r11, @ANYBLOB=',fsname=/-&(#,\x00']) 26m27.5119438s ago: executing program 2 (id=299): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="02d0143b7bedc83847bfcbbdbd152b324673e5f1d07482af85dd9bb08ffcf08be557edea831f8ec6ee2c42736b7e60ca37d4eff65e6d53bafa734b6a99ad6b03ec"], 0x1, 0x2c4, &(0x7f00000003c0)="$eJzs3T1rW1ccBvBT1bWLi1+mQrv00C7tcnHdL1ARbDARJDhWSDIErvF1IqRIRlcQyWTwniVzxowmY7ZAyBfwB8iezUvw5CkKlhy/xSFDkC/Gvx+I88CD4BzEFf/lcnbvPHtUX8+T9bQTSv/HUAohlPZDmB2koR8O19Igj4eTtsI/7148f3rr7r3r5UplYTnGxfLKf/Mxxuk/3jx+8vLPt51fbr+afj0Rdmbv736Yf7/z685vux9XHtbyWMtjs9WJaVxttTrpaiOLa7W8nsR4s5GleRZrzTxrn+rXG62NjV5Mm2tTkxvtLM9j2uzFetaLnVbstHsxfZDWmjFJkjg1GfiW6vbycloueheMVrtdTg+e4Ykvmup2IRsCAApl/r/KzP9XwcH8P374/J5m/gcAAAAAAAAAAAAAgMtgv9+f6ff7M5/Xs5+i98do+f2vthMv7v0cwt5Wt9qtDtdhv7hUWZiLA7PH39rrdqs/HvX/Dvt4uv8pTB728+f24+Hvv4b9QXftRuVMPxHWRn98AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhI4pFz7/dPkq/1w7S4VFmYO/d+/7Hw+9iFHQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvkve26ynjUbWFgRBOApF/zMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxTu+9LvonQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCkvLdZTxuNrD3CUPQZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpNPAQAA///JXtD+") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x3, 0x11, &(0x7f0000001000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 26m11.86917726s ago: executing program 32 (id=299): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="02d0143b7bedc83847bfcbbdbd152b324673e5f1d07482af85dd9bb08ffcf08be557edea831f8ec6ee2c42736b7e60ca37d4eff65e6d53bafa734b6a99ad6b03ec"], 0x1, 0x2c4, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x3, 0x11, &(0x7f0000001000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10m32.344453142s ago: executing program 1 (id=2604): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x200000, &(0x7f0000000380)=ANY=[], 0x1, 0x392, &(0x7f00000003c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143042, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000001c0)=0xae8, 0x863, 0x0) 10m31.115691403s ago: executing program 1 (id=2607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r1, 0x1, 0xffbfffff, 0x400000, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e25}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x58}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r5, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18060000567039f1ead80000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152, 0x0, 0x0, '\x00', r3}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x1401, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x22000000) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 10m29.913866964s ago: executing program 1 (id=2610): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x3a0001c, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@data_journal}]}, 0x1, 0x437, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000b00)='ext2\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000c40)={[{@nodioread_nolock}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'debug_want_extra_isize'}}, {@euid_lt}]}, 0xfe, 0x2a4, &(0x7f0000000e40)="$eJzs3bFrJFUcB/DfzO4mxjuOUxsrEUREA+EsBMFGGw8O5BARQQ9O5LRRLkJM2qyVjYW9SiqbIFYaBRuxCTb+AVFTxMYmWBgUTDGyO7Oy2Ww2s+7srGQ/H9jZN5s3eW/Jft9MmJl9AcytqxHxbEQ0ImI5IloRkfRXeDh/XC1Wt5Z2b0dk2Uu/J916+Xqut92liGhHxNMRzd7PNnZeO/hz7/pjH663Hv1s59Wlut5fv8OD/ReOPr35wVc3ntxIi9cuF8/976NKyZDXmknE/dNo7H8iaZasuDjljnCOL37q5P6BiHikm/9WpEVkP1pb+L4VT3wyfLuFo3r7CUxDlrU6+8B2BsydtHsMnKQrEZGX03RlJT+G/7mRxDura+8tv7W6fvfOrEcq4FxfHmfZ6BpJO/+/d//5bxa/vjSQ/98aef5LeaqKDgN16+T/5Re3f+mUjxqz7g1Qg297hU7+l1/ffDzkHy6UMifX5B8umrInXuUf5tlY+U/r6RMwplHZHXF9lf0/zC/5h/lVNv/tGvsEVKTVKwxP8OT7/7+KKwj/exeBul3pLh3/w/wayH9xyUBxt2q5g/7rb955e3odBKp2q1fozz8AMF+yxRnfgAzMzKzHHwAAAAAAAAAAAAAAAAAA4LStpd3bvUddbf7wccThc/m0Rf3t59MWNIppR+7pLu/9Izkxu1Ey1mxHw92acPtJfV7x3dc3R8z3MMyVX6ttv/xfZKG7/PGhqtvPvX9y9czp8DbvRrQ7la81m6c//0nZaW/O/P33nbNh641yDVQlGVh/5pV62x90vD3b9m/sRXzXGX+uDRv/0niw+zx8/Lnc/xXL8e9Heizv/j1J7wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjTPwEAAP//d/F4Hg==") prlimit64(0x0, 0xe, &(0x7f0000001100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001180)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000011c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000012c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001300), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES32, @ANYBLOB="0100000002"], 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/timer_list\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000001640), 0x0}, 0x20) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f00000017c0)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) socket(0x1, 0x805, 0x401) 10m27.414763877s ago: executing program 1 (id=2618): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000000180)="$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") open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000740)=@loop={'/dev/loop', 0x0}, &(0x7f0000000780)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000007c0)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x1, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff01000000000000000e00000000001d00", [0x4]}) openat(0xffffffffffffff9c, 0x0, 0x18000, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, 0x0) 10m26.608007777s ago: executing program 1 (id=2622): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, 0x0, 0x0) 10m25.434199527s ago: executing program 1 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0x25, 0x1) 10m24.839784993s ago: executing program 33 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000240)=""/182, 0xb6}], 0x1, 0x25, 0x1) 10m18.969525391s ago: executing program 0 (id=2670): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x535d, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000280)=0x2eb4, 0x2000007ff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB="05002f"], 0x2c}}, 0x18) 10m17.955703797s ago: executing program 0 (id=2671): socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x535d, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) 10m17.81986546s ago: executing program 0 (id=2672): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000180), 0xfdef) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000009c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000ac0), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x100000000e2) syz_create_resource$futex(0x0) keyctl$clear(0x3, 0xfffffffffffffffd) syz_open_dev$usbfs(0x0, 0x76, 0x101301) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) pread64(r0, &(0x7f0000001c00)=""/4084, 0xff4, 0x40000000) close_range(r2, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r8, &(0x7f0000000300)=[{{&(0x7f0000000340), 0x6e, 0x0}}], 0x1, 0x2022, &(0x7f00000003c0)) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000440)={0x0, 'bridge0\x00', {0x101}, 0x2}) socket$netlink(0x10, 0x3, 0x0) 10m16.192794192s ago: executing program 0 (id=2673): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000000180)="$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") open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000740)=@loop={'/dev/loop', 0x0}, &(0x7f0000000780)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000007c0)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x1, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff01000000000000000e00000000001d00", [0x4]}) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, 0x0) 10m14.642915901s ago: executing program 0 (id=2677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000050015000a000000050005000a00"], 0x60}}, 0x0) 10m13.052001021s ago: executing program 0 (id=2680): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x844, &(0x7f0000000280)=ANY=[], 0x1, 0x267, &(0x7f00000002c0)="$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") 10m12.465226616s ago: executing program 34 (id=2680): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x844, &(0x7f0000000280)=ANY=[], 0x1, 0x267, &(0x7f00000002c0)="$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") 9m18.225308793s ago: executing program 6 (id=2865): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000028c0)={'macvlan1\x00', 0x10}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [@tail_call, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x227e}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x101a, &(0x7f0000001880)=""/4122, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="260000000000000000000000b7cc953673e48f95dd9acf2f7f66652547ad31710cdf72e440dd82e75cc1056a940610afa8dfb297be74d291d9d3d675f37c268be78ad6e07f4cbc64a15e7f46527574a08c0cf5265818d3000000009993e51f00000000000000d8f9361021c77ad6a717c539c8c912448b3531ab3bac99bff6103f718789315ed84dad4005bd5d7317029764d80e6e8061f2c5d541499032edee284246f4466d42ab96c2e0ac92e380", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 9m17.021143403s ago: executing program 6 (id=2868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a310000000014000580080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 9m16.660078533s ago: executing program 6 (id=2871): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f000000a180)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f000000a240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f000000a280)=ANY=[], 0x78) 9m15.404119275s ago: executing program 6 (id=2878): syz_mount_image$msdos(&(0x7f0000001980), &(0x7f00000019c0)='./file0\x00', 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x4, 0x2bf, &(0x7f0000001c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000002340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35) 9m15.120783142s ago: executing program 6 (id=2879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e23, 0x3, @mcast2, 0x3ff}, 0x1c) 9m14.697883713s ago: executing program 6 (id=2883): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'wlc\x00', 0x28, 0xa7e, 0x2f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492c, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0x6310, 0x2}}, 0x44) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x2d, 0x8, 0x77}, {@remote, 0x4e24, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000300)={&(0x7f0000000440)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) read(r4, &(0x7f0000000240)=""/27, 0x1b) 9m14.050015899s ago: executing program 35 (id=2883): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'wlc\x00', 0x28, 0xa7e, 0x2f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492c, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0x6310, 0x2}}, 0x44) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x2d, 0x8, 0x77}, {@remote, 0x4e24, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000300)={&(0x7f0000000440)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) read(r4, &(0x7f0000000240)=""/27, 0x1b) 9.940754667s ago: executing program 5 (id=4993): socket(0x8, 0x5, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000380)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x4000a, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000005c0)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 8.364090367s ago: executing program 5 (id=4998): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$eJzs3U9rE0EYx/GnSWzSlDYRRFBQB73oZWnjC9AgLYgBpTaiHoSt3WjImpTdUImIzUW8+jqKR2+C+gZ6ES/evRVB8NKDdKS7m3TTpG1q06R/vh8oO7szP2bSTcqzC92sPnz/olRwjYJZlUhCSUSkLmsi6Y1WYCjYRrz2sITV5dronx8X7j96fCeby03NKDWdnb2eUUqNX/r88vWHy1+row8+jn+Ky0r6yervzM+V4ZVzq+uzz4uuKrqqXKkqU81VKlVzzrbUfNEtGUrdsy3TtVSx7FpOS3/Briws1JRZnh9LLjiW6yqzXFMlq6aqFVV1asp8ZhbLyjAMNZaUky3WxZj88syMmd22Ww+Fzj6OgJFOBx0nW+/cmV/uw5oAAMAhs3P979f629X/0WZrL/X/2d3rf5Fw/Z8IJqH+74F6y94u9T+OBcfJmsng89uK+h8AAAAAAAAAAAAAAAAAAAAAgKNgTeuU1jq1sQ0OeftxEUmIiI76+wNeJg5I+Pzr0E/z/Af7W2I3BrRc9FjoH/cSIva7xfxi3t/6/dmCFMUWSyYkJX+990PAb0/fzk1NKE9avthLQX5pMR+VeCPfkO6Uv3h60s+r1vwpSYbnz0hKznSeP9MxPyxXr4TyhqTk21OpiC3z3vt6M/9mUqlbd3Nb8iPeOAAAAAAAjgNDNbVdv3v93oCEtPf7+dD9Aa31UkSal+ht9we2XF/H5Hw3j6gEAAAAAAD75tZelUzbtpz/aMRFZB/x3je0Fhn8MqJyOH4brY2bItK3SWMDf8kJEfGPqJYu/86UyC7xX814V5PqLsbEgm/g8I8M9eWzs76P+KD/MgEAAADotc2ifw+h728PcEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJw83T4PrDG+ravRsUM8NF207y8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOET+BQAA//9mAxFo") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000e40)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) 7.715080334s ago: executing program 3 (id=5004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000380)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.268708646s ago: executing program 4 (id=5008): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write(r0, &(0x7f0000000200)='270', 0x3) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000600), 0x9, 0x2) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000640)={0x2d, 0x2, 0x0, 0xd}, 0x10) r3 = dup2(r1, r2) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x8080, 0xaa) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000004c0)="07000000010000", 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000500)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000580)={'pimreg\x00', 0x5005}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) 6.450461566s ago: executing program 3 (id=5009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) 6.010580147s ago: executing program 4 (id=5013): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) socket$inet6(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 4.946403474s ago: executing program 4 (id=5014): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f0ae03389f7b986", 0x0, 0x32d, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.910470885s ago: executing program 7 (id=5015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) 4.708071951s ago: executing program 4 (id=5016): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000008c0), 0x2}}, 0x20) 4.602753913s ago: executing program 4 (id=5017): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000e40)={0x1, &(0x7f00000011c0)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) shutdown(r0, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x101) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x109842, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="1515daf6667a1fb84e4e91e2e85d1debef12fa821399c0b30d3f3c46de80230b46282e4fecf74f43abd846e7da49546d69b9a328aee3b71a97d42150393b97dd9847951245bbf9429fa11b904e7e97ba0963fb6ab672d597269ec4e7", 0x5c}, {&(0x7f00000002c0)}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syslog(0x3, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xf, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x2008080}, 0x24008805) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) 4.500369626s ago: executing program 7 (id=5018): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00 ', @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf251b000000080001003800000008009a000000000008009a00020000000800010056000000050092008c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000005ac0)=""/114) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000500)=0xb, 0x4) r5 = syz_open_procfs(r1, &(0x7f0000000540)='coredump_filter\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x101}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x43d20711f7dd0504, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r8, 0x1, 0x7800, 0xffff, 0x8004, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @remote}}}}) getpriority(0x0, r1) 3.431467533s ago: executing program 5 (id=5019): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000028c0)={'macvlan1\x00', 0x10}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [@tail_call, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x227e}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x101a, &(0x7f0000001880)=""/4122, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 3.282440817s ago: executing program 7 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) 3.166201039s ago: executing program 7 (id=5021): clock_gettime(0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x80000006, 0x4) sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000340)={0xffffffffffffffb0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x100}, &(0x7f0000000440)=0x8) 2.161675515s ago: executing program 5 (id=5022): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) socket$inet6(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 2.116923786s ago: executing program 7 (id=5023): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 2.101953227s ago: executing program 3 (id=5024): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f0ae03389f7b986", 0x0, 0x32d, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.836000064s ago: executing program 3 (id=5025): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000008c0), 0x2}}, 0x20) 1.159447681s ago: executing program 5 (id=5026): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioprio_get$pid(0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.063074173s ago: executing program 7 (id=5027): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000e40)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) 925.875647ms ago: executing program 4 (id=5028): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 880.045698ms ago: executing program 3 (id=5029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) 28.706719ms ago: executing program 5 (id=5030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000540)=0x1) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000740)={0x0, 0x5961, 0x10000, 0x0, 0x38a}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000400)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000440)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000480)={0x0, 0x6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r8}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8, r0}, 0xc) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) shutdown(r9, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r11, &(0x7f0000000000)={0x2a, 0x29, 0x1, {0x9, [{{0x80, 0x2, 0x8}, 0x6, 0x2, 0x7, './file0'}]}}, 0x2a) splice(r9, 0x0, r11, 0x0, 0x7ffff000, 0x8) 0s ago: executing program 3 (id=5031): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000028c0)={'macvlan1\x00', 0x10}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [@tail_call, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x227e}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x101a, &(0x7f0000001880)=""/4122, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ler #0 [ 1269.836831][T17623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1269.846923][T17623] Call Trace: [ 1269.850233][T17623] [ 1269.853205][T17623] dump_stack_lvl+0x18c/0x250 [ 1269.857940][T17623] ? show_regs_print_info+0x20/0x20 [ 1269.863174][T17623] ? load_image+0x420/0x420 [ 1269.867734][T17623] ? __might_sleep+0xe0/0xe0 [ 1269.872380][T17623] ? __lock_acquire+0x7eb0/0x7eb0 [ 1269.877449][T17623] should_fail_ex+0x394/0x4c0 [ 1269.882189][T17623] should_failslab+0x9/0x20 [ 1269.886750][T17623] slab_pre_alloc_hook+0x59/0x300 [ 1269.891824][T17623] ? kvmalloc_node+0x70/0x180 [ 1269.896552][T17623] ? kvmalloc_node+0x70/0x180 [ 1269.901282][T17623] __kmem_cache_alloc_node+0x53/0x250 [ 1269.906726][T17623] ? kvmalloc_node+0x70/0x180 [ 1269.911459][T17623] __kmalloc_node+0xa6/0x240 [ 1269.916107][T17623] kvmalloc_node+0x70/0x180 [ 1269.920659][T17623] seq_read_iter+0x1e2/0xc50 [ 1269.925310][T17623] seq_read+0x175/0x220 [ 1269.929520][T17623] ? seq_open+0x140/0x140 [ 1269.933897][T17623] ? __mutex_trylock_common+0x160/0x270 [ 1269.939486][T17623] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1269.945683][T17623] ? end_current_label_crit_section+0x149/0x170 [ 1269.951955][T17623] ? seq_open+0x140/0x140 [ 1269.956301][T17623] proc_reg_read+0x1e4/0x2d0 [ 1269.960930][T17623] ? proc_reg_get_unmapped_area+0x380/0x380 [ 1269.966849][T17623] vfs_read+0x298/0x990 [ 1269.971027][T17623] ? kernel_read+0x1e0/0x1e0 [ 1269.975635][T17623] ? __fget_files+0x28/0x460 [ 1269.980244][T17623] ? __fget_files+0x3fc/0x460 [ 1269.984965][T17623] ? __fdget_pos+0x2a3/0x330 [ 1269.989577][T17623] ? ksys_read+0x74/0x260 [ 1269.993956][T17623] ksys_read+0x151/0x260 [ 1269.998213][T17623] ? vfs_write+0x9a0/0x9a0 [ 1270.002640][T17623] ? lockdep_hardirqs_on+0x98/0x150 [ 1270.007850][T17623] do_syscall_64+0x55/0xb0 [ 1270.012269][T17623] ? clear_bhb_loop+0x40/0x90 [ 1270.016976][T17623] ? clear_bhb_loop+0x40/0x90 [ 1270.021670][T17623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1270.027575][T17623] RIP: 0033:0x7fec8b99e559 [ 1270.031998][T17623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.051625][T17623] RSP: 002b:00007fec8c8db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1270.060055][T17623] RAX: ffffffffffffffda RBX: 00007fec8bc25fa0 RCX: 00007fec8b99e559 [ 1270.068043][T17623] RDX: 00000000000000d7 RSI: 0000200000000280 RDI: 0000000000000003 [ 1270.076057][T17623] RBP: 00007fec8ba358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.084052][T17623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.092036][T17623] R13: 00007fec8bc26038 R14: 00007fec8bc25fa0 R15: 00007fff932ac718 [ 1270.100032][T17623] [ 1270.853716][T17659] Invalid argument reading file caps for ./file0 [ 1271.442057][T17668] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3028'. [ 1272.740470][ T59] net_ratelimit: 13 callbacks suppressed [ 1272.844713][T17691] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3036'. [ 1273.209325][T17701] FAULT_INJECTION: forcing a failure. [ 1273.209325][T17701] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1273.223791][T17701] CPU: 1 PID: 17701 Comm: syz.3.3039 Not tainted syzkaller #0 [ 1273.231278][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1273.231294][T17701] Call Trace: [ 1273.231303][T17701] [ 1273.231313][T17701] dump_stack_lvl+0x18c/0x250 [ 1273.247596][T17701] ? __read_once_word_nocheck+0x9/0x10 [ 1273.258114][T17701] ? show_regs_print_info+0x20/0x20 [ 1273.258143][T17701] ? load_image+0x420/0x420 [ 1273.267813][T17701] ? is_bpf_text_address+0x26/0x2a0 [ 1273.267842][T17701] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1273.279077][T17701] should_fail_ex+0x394/0x4c0 [ 1273.279116][T17701] get_futex_key+0x136/0x1030 [ 1273.279145][T17701] ? futex_setup_timer+0xc0/0xc0 [ 1273.293478][T17701] ? stack_trace_save+0xaa/0x100 [ 1273.298459][T17701] ? stack_trace_snprint+0xf0/0xf0 [ 1273.303619][T17701] ? __stack_depot_save+0x1f/0x660 [ 1273.308769][T17701] futex_wait_setup+0xbc/0x270 [ 1273.313551][T17701] ? futex_wait_multiple+0x920/0x920 [ 1273.318871][T17701] ? slab_free_freelist_hook+0x130/0x1a0 [ 1273.324555][T17701] futex_wait+0x1bc/0x5c0 [ 1273.328944][T17701] ? futex_setup_timer+0xc0/0xc0 [ 1273.333949][T17701] ? futex_wait_setup+0x270/0x270 [ 1273.338993][T17701] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1273.344989][T17701] ? lockdep_hardirqs_on+0x98/0x150 [ 1273.350209][T17701] do_futex+0x2ff/0x3e0 [ 1273.354374][T17701] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1273.360277][T17701] __se_sys_futex+0x3a9/0x440 [ 1273.364960][T17701] ? __x64_sys_futex+0xf0/0xf0 [ 1273.369735][T17701] ? __x64_sys_futex+0x21/0xf0 [ 1273.374502][T17701] do_syscall_64+0x55/0xb0 [ 1273.378925][T17701] ? clear_bhb_loop+0x40/0x90 [ 1273.383604][T17701] ? clear_bhb_loop+0x40/0x90 [ 1273.388286][T17701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1273.394190][T17701] RIP: 0033:0x7fbc9679e559 [ 1273.398606][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.418220][T17701] RSP: 002b:00007fbc976590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1273.426641][T17701] RAX: ffffffffffffffda RBX: 00007fbc96a25fa8 RCX: 00007fbc9679e559 [ 1273.434621][T17701] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbc96a25fa8 [ 1273.442597][T17701] RBP: 00007fbc96a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.450574][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.458550][T17701] R13: 00007fbc96a26038 R14: 00007fff9901c250 R15: 00007fff9901c338 [ 1273.466544][T17701] [ 1274.151926][T17724] FAULT_INJECTION: forcing a failure. [ 1274.151926][T17724] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.173572][T17727] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3046'. [ 1274.185244][T17724] CPU: 1 PID: 17724 Comm: syz.7.3044 Not tainted syzkaller #0 [ 1274.192770][T17724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1274.202867][T17724] Call Trace: [ 1274.206157][T17724] [ 1274.209120][T17724] dump_stack_lvl+0x18c/0x250 [ 1274.213838][T17724] ? show_regs_print_info+0x20/0x20 [ 1274.219080][T17724] ? load_image+0x420/0x420 [ 1274.223628][T17724] ? __lock_acquire+0x7eb0/0x7eb0 [ 1274.228683][T17724] should_fail_ex+0x394/0x4c0 [ 1274.228734][T17724] should_failslab+0x9/0x20 [ 1274.228762][T17724] slab_pre_alloc_hook+0x59/0x300 [ 1274.228786][T17724] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1274.237967][T17724] ? sock_alloc_inode+0x28/0xc0 [ 1274.238009][T17724] sock_alloc_inode+0x28/0xc0 [ 1274.248112][T17724] ? sockfs_init_fs_context+0xb0/0xb0 [ 1274.248147][T17724] new_inode_pseudo+0x63/0x1d0 [ 1274.248175][T17724] __sock_create+0x12d/0x940 [ 1274.248198][T17724] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1274.248228][T17724] __sys_socket+0xd7/0x1b0 [ 1274.248253][T17724] __x64_sys_socket+0x7a/0x90 [ 1274.248275][T17724] do_syscall_64+0x55/0xb0 [ 1274.248292][T17724] ? clear_bhb_loop+0x40/0x90 [ 1274.248313][T17724] ? clear_bhb_loop+0x40/0x90 [ 1274.248334][T17724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1274.257835][T17724] RIP: 0033:0x7fec8b99e559 [ 1274.257860][T17724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.267991][T17724] RSP: 002b:00007fec8c8db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1274.268018][T17724] RAX: ffffffffffffffda RBX: 00007fec8bc25fa0 RCX: 00007fec8b99e559 [ 1274.268035][T17724] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1274.268049][T17724] RBP: 00007fec8ba358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.278575][T17724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1274.278591][T17724] R13: 00007fec8bc26038 R14: 00007fec8bc25fa0 R15: 00007fff932ac718 [ 1274.278624][T17724] [ 1275.150992][T17743] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3049'. [ 1276.265088][T17771] rxe_eth0 speed is unknown, defaulting to 1000 [ 1276.809040][T17776] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3056'. [ 1276.889507][T17778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3058'. [ 1277.778797][ C1] net_ratelimit: 14 callbacks suppressed [ 1278.766739][T17814] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1279.530104][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3068'. [ 1279.627726][T17839] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1281.687382][T17868] rxe_eth0 speed is unknown, defaulting to 1000 [ 1282.195491][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3078'. [ 1282.828067][ T41] net_ratelimit: 17 callbacks suppressed [ 1284.294973][T17909] netlink: 'syz.5.3087': attribute type 29 has an invalid length. [ 1284.347877][T17909] netlink: 'syz.5.3087': attribute type 29 has an invalid length. [ 1284.557400][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1284.845859][T17925] lo: entered promiscuous mode [ 1284.962734][T17925] tunl0: entered promiscuous mode [ 1285.043666][T17925] gre0: entered promiscuous mode [ 1285.339738][T17925] gretap0: entered promiscuous mode [ 1285.629418][T17925] erspan0: entered promiscuous mode [ 1285.964654][T17925] ip_vti0: entered promiscuous mode [ 1286.050824][T17925] ip6_vti0: entered promiscuous mode [ 1286.157491][T17925] sit0: entered promiscuous mode [ 1286.368559][T17925] ip6tnl0: entered promiscuous mode [ 1286.453995][T17925] ip6gre0: entered promiscuous mode [ 1286.493523][T17925] syz_tun: entered promiscuous mode [ 1286.550693][T17925] ip6gretap0: entered promiscuous mode [ 1286.631312][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.639114][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.672460][T17925] bridge0: entered promiscuous mode [ 1286.778260][T17925] vcan0: entered promiscuous mode [ 1286.889087][T17925] bond0: entered promiscuous mode [ 1286.894212][T17925] bond_slave_0: entered promiscuous mode [ 1286.938964][T17925] bond_slave_1: entered promiscuous mode [ 1287.011351][T17925] team0: entered promiscuous mode [ 1287.016550][T17925] team_slave_0: entered promiscuous mode [ 1287.029865][T17925] team_slave_1: entered promiscuous mode [ 1287.103809][T17925] dummy0: entered promiscuous mode [ 1287.150480][T17925] nlmon0: entered promiscuous mode [ 1287.163569][T17925] caif0: entered promiscuous mode [ 1287.177983][T17925] batadv0: entered promiscuous mode [ 1287.228934][T17925] vxcan0: entered promiscuous mode [ 1287.275031][T17925] vxcan1: entered promiscuous mode [ 1287.326346][T17925] veth0: entered promiscuous mode [ 1287.385433][T17925] veth1: entered promiscuous mode [ 1288.038275][T17925] net_ratelimit: 9 callbacks suppressed [ 1288.057377][T17925] wg0: entered promiscuous mode [ 1288.095556][T17925] wg1: entered promiscuous mode [ 1288.137081][T17925] wg2: entered promiscuous mode [ 1288.165653][T17925] veth0_to_bridge: entered promiscuous mode [ 1288.211936][T17925] veth1_to_bridge: entered promiscuous mode [ 1288.220570][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3102'. [ 1288.268111][T17925] veth0_to_bond: entered promiscuous mode [ 1288.327457][T17925] veth1_to_bond: entered promiscuous mode [ 1288.394788][T17925] veth0_to_team: entered promiscuous mode [ 1288.474042][T17925] veth1_to_team: entered promiscuous mode [ 1288.537233][T17925] veth0_to_batadv: entered promiscuous mode [ 1288.546795][T17925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.569605][T17925] batadv_slave_0: entered promiscuous mode [ 1289.260036][T17925] veth1_to_batadv: entered promiscuous mode [ 1289.281690][T17925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.318930][T17925] batadv_slave_1: entered promiscuous mode [ 1289.359980][T17925] xfrm0: entered promiscuous mode [ 1289.396341][T17925] veth0_to_hsr: entered promiscuous mode [ 1289.443160][T17925] veth1_to_hsr: entered promiscuous mode [ 1289.484908][T17925] hsr0: entered promiscuous mode [ 1289.508234][T17925] veth1_virt_wifi: entered promiscuous mode [ 1289.540241][T17925] veth0_virt_wifi: entered promiscuous mode [ 1289.564467][T17925] virt_wifi0: entered promiscuous mode [ 1289.692863][T17925] vlan0: entered promiscuous mode [ 1289.710175][T17925] vlan1: entered promiscuous mode [ 1289.737461][T17925] macvlan0: entered promiscuous mode [ 1289.771528][T17925] macvlan1: entered promiscuous mode [ 1289.782832][T17925] ipvlan0: entered promiscuous mode [ 1289.802921][T17925] ipvlan1: entered promiscuous mode [ 1289.819321][T17925] veth1_macvtap: entered promiscuous mode [ 1289.883815][T17925] macvtap0: entered promiscuous mode [ 1289.929432][T17925] geneve0: entered promiscuous mode [ 1289.974140][T17925] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.983962][T17925] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.993636][T17925] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.003204][T17925] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.012826][T17925] geneve1: entered promiscuous mode [ 1290.047004][T17925] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1290.079605][T17925] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1290.106656][T17925] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1290.152420][T17925] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1290.214570][T17925] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 1290.259805][T17925] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 1290.315780][T17968] rxe_eth0 speed is unknown, defaulting to 1000 [ 1291.143796][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'. [ 1292.178937][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 1292.452221][T18033] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3118'. [ 1293.300670][ T1131] net_ratelimit: 4 callbacks suppressed [ 1293.706419][T18057] ip_tables: iptables: counters copy to user failed while replacing table [ 1294.692455][T18075] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3129'. [ 1294.816044][T18068] syzkaller0: entered promiscuous mode [ 1294.874466][T18068] syzkaller0: entered allmulticast mode [ 1296.051644][T18091] ip_tables: iptables: counters copy to user failed while replacing table [ 1297.504605][T18103] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1299.812375][T18114] loop5: detected capacity change from 0 to 512 [ 1299.845940][T18114] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1299.854415][T18118] loop4: detected capacity change from 0 to 512 [ 1299.905751][T18118] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.3144: iget: bad i_size value: 38620345925642 [ 1300.033482][T18118] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3144: couldn't read orphan inode 15 (err -117) [ 1300.122340][T18118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1300.334629][T18118] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.3144: bg 0: block 5: invalid block bitmap [ 1300.353225][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.361005][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.403174][T18118] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 132 with error 28 [ 1300.446996][T18118] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1300.446996][T18118] [ 1300.467100][T18118] EXT4-fs (loop4): Total free blocks count 0 [ 1300.485369][T18118] EXT4-fs (loop4): Free/Dirty block details [ 1300.502932][T18118] EXT4-fs (loop4): free_blocks=0 [ 1300.514361][T18118] EXT4-fs (loop4): dirty_blocks=132 [ 1300.522272][T18118] EXT4-fs (loop4): Block reservation details [ 1300.542701][T18146] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3148'. [ 1300.555170][T18118] EXT4-fs (loop4): i_reserved_data_blocks=132 [ 1300.579652][T18141] EXT4-fs (loop4): shut down requested (0) [ 1301.220679][T18153] syzkaller0: entered promiscuous mode [ 1301.374143][T18153] syzkaller0: entered allmulticast mode [ 1301.599150][T18161] ip_tables: iptables: counters copy to user failed while replacing table [ 1301.712579][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1301.918023][T18169] loop4: detected capacity change from 0 to 512 [ 1301.955358][T18169] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1303.022631][T18175] FAULT_INJECTION: forcing a failure. [ 1303.022631][T18175] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1303.036576][T18175] CPU: 1 PID: 18175 Comm: syz.3.3157 Not tainted syzkaller #0 [ 1303.044103][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1303.054169][T18175] Call Trace: [ 1303.057457][T18175] [ 1303.060395][T18175] dump_stack_lvl+0x18c/0x250 [ 1303.065104][T18175] ? show_regs_print_info+0x20/0x20 [ 1303.070321][T18175] ? load_image+0x420/0x420 [ 1303.074833][T18175] ? __might_fault+0xaa/0x120 [ 1303.079516][T18175] ? __lock_acquire+0x7eb0/0x7eb0 [ 1303.084584][T18175] should_fail_ex+0x394/0x4c0 [ 1303.089281][T18175] strncpy_from_user+0x36/0x2f0 [ 1303.094143][T18175] getname_flags+0xf6/0x500 [ 1303.098672][T18175] do_sys_openat2+0xda/0x1d0 [ 1303.103307][T18175] ? do_sys_open+0xe0/0xe0 [ 1303.107762][T18175] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1303.113785][T18175] ? lock_chain_count+0x20/0x20 [ 1303.118643][T18175] __x64_sys_openat+0x139/0x160 [ 1303.123514][T18175] do_syscall_64+0x55/0xb0 [ 1303.127964][T18175] ? clear_bhb_loop+0x40/0x90 [ 1303.132655][T18175] ? clear_bhb_loop+0x40/0x90 [ 1303.137352][T18175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1303.143260][T18175] RIP: 0033:0x7fbc9675ed8e [ 1303.147682][T18175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1303.167300][T18175] RSP: 002b:00007fbc97658ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1303.175724][T18175] RAX: ffffffffffffffda RBX: 00007fbc976596c0 RCX: 00007fbc9675ed8e [ 1303.183699][T18175] RDX: 0000000000000002 RSI: 00007fbc97658f90 RDI: ffffffffffffff9c [ 1303.191694][T18175] RBP: 00007fbc968358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1303.199703][T18175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.207770][T18175] R13: 00007fbc96a26038 R14: 00007fbc96a25fa0 R15: 00007fff9901c338 [ 1303.215956][T18175] [ 1305.617088][T18186] rxe_eth0 speed is unknown, defaulting to 1000 [ 1306.157212][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3163'. [ 1307.117326][T18210] loop7: detected capacity change from 0 to 2048 [ 1307.193535][T18210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.259525][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1307.365704][T18208] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1307.420957][T18208] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1307.436474][T18208] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1307.436474][T18208] [ 1307.436559][T18208] EXT4-fs (loop7): Total free blocks count 0 [ 1307.436573][T18208] EXT4-fs (loop7): Free/Dirty block details [ 1307.436586][T18208] EXT4-fs (loop7): free_blocks=4096 [ 1307.436598][T18208] EXT4-fs (loop7): dirty_blocks=64 [ 1307.436608][T18208] EXT4-fs (loop7): Block reservation details [ 1307.436619][T18208] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 1307.525130][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 1307.599024][T18225] ip_tables: iptables: counters copy to user failed while replacing table [ 1307.892855][T18230] loop7: detected capacity change from 0 to 512 [ 1307.900905][T18230] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1308.103046][T18122] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1308.161597][T18231] syzkaller0: entered promiscuous mode [ 1308.167192][T18231] syzkaller0: entered allmulticast mode [ 1308.288087][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 1310.885772][T18291] ip_tables: iptables: counters copy to user failed while replacing table [ 1311.863545][T18297] loop5: detected capacity change from 0 to 512 [ 1311.871698][T18297] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1311.938200][T18298] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1313.406025][T18295] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3181'. [ 1313.641847][T18306] loop7: detected capacity change from 0 to 764 [ 1315.133678][T18310] rxe_eth0 speed is unknown, defaulting to 1000 [ 1315.594291][T18306] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1315.957931][T18328] ip_tables: iptables: counters copy to user failed while replacing table [ 1316.542697][T18338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3192'. [ 1316.765138][T18341] loop4: detected capacity change from 0 to 512 [ 1316.776926][T18341] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1316.830892][T18319] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1316.956154][T18346] loop3: detected capacity change from 0 to 1024 [ 1317.011280][T18346] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1317.069742][T18343] syzkaller0: entered promiscuous mode [ 1317.096884][T18343] syzkaller0: entered allmulticast mode [ 1317.112248][T18346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1317.237115][T18346] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3195: missing EA_INODE flag [ 1317.279070][T18346] EXT4-fs (loop3): Remounting filesystem read-only [ 1317.404901][T18359] ip_tables: iptables: counters copy to user failed while replacing table [ 1317.415387][T15081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.895405][T18366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3202'. [ 1321.414926][T18387] ip_tables: iptables: counters copy to user failed while replacing table [ 1322.187430][T18398] loop7: detected capacity change from 0 to 512 [ 1322.212815][T18398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1322.325448][T18403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1322.391977][T18398] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.3211: Unimplemented hash flags: 0x0001 [ 1322.433300][T18398] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.3211: Corrupt directory, running e2fsck is recommended [ 1322.513872][T18398] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.904102][T14723] Bluetooth: hci3: command 0x0406 tx timeout [ 1323.296777][T18444] loop5: detected capacity change from 0 to 512 [ 1323.330594][T18443] loop4: detected capacity change from 0 to 512 [ 1323.352218][T18444] EXT4-fs: Ignoring removed mblk_io_submit option [ 1323.401027][T18444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1323.429127][T18443] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 1323.507846][T18443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1323.534176][T18444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1323.571504][T18443] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1323.575514][T18444] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1323.821894][T16083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.948821][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.808056][T18533] loop4: detected capacity change from 0 to 164 [ 1325.852942][T18533] rock: directory entry would overflow storage [ 1325.884721][T18533] rock: sig=0x66, size=4, remaining=3 [ 1327.187810][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3261'. [ 1328.719372][T18609] loop3: detected capacity change from 0 to 1024 [ 1328.747945][T18609] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1328.831765][T18609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.071653][T15081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.297381][T18634] loop3: detected capacity change from 0 to 512 [ 1329.354539][T18634] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.3275: iget: bad i_size value: 38620345925642 [ 1329.431395][T18634] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.3275: couldn't read orphan inode 15 (err -117) [ 1329.517786][T18634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.811591][T15081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.904515][T18748] FAULT_INJECTION: forcing a failure. [ 1334.904515][T18748] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.937869][T18748] CPU: 0 PID: 18748 Comm: syz.3.3303 Not tainted syzkaller #0 [ 1334.945393][T18748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1334.955479][T18748] Call Trace: [ 1334.958789][T18748] [ 1334.961746][T18748] dump_stack_lvl+0x18c/0x250 [ 1334.966457][T18748] ? show_regs_print_info+0x20/0x20 [ 1334.971683][T18748] ? load_image+0x420/0x420 [ 1334.976227][T18748] ? __might_sleep+0xe0/0xe0 [ 1334.980855][T18748] ? __lock_acquire+0x7eb0/0x7eb0 [ 1334.985894][T18748] should_fail_ex+0x394/0x4c0 [ 1334.985934][T18748] should_failslab+0x9/0x20 [ 1334.995137][T18748] slab_pre_alloc_hook+0x59/0x300 [ 1335.000197][T18748] ? vfs_write+0x5de/0x9a0 [ 1335.004653][T18748] kmem_cache_alloc+0x5a/0x2c0 [ 1335.009456][T18748] ? getname_flags+0xbb/0x500 [ 1335.014165][T18748] getname_flags+0xbb/0x500 [ 1335.018696][T18748] do_sys_openat2+0xda/0x1d0 [ 1335.023320][T18748] ? do_sys_open+0xe0/0xe0 [ 1335.027769][T18748] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1335.033782][T18748] ? lock_chain_count+0x20/0x20 [ 1335.038666][T18748] __x64_sys_openat+0x139/0x160 [ 1335.043550][T18748] do_syscall_64+0x55/0xb0 [ 1335.047985][T18748] ? clear_bhb_loop+0x40/0x90 [ 1335.052681][T18748] ? clear_bhb_loop+0x40/0x90 [ 1335.057376][T18748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1335.063297][T18748] RIP: 0033:0x7fbc9675ed8e [ 1335.067736][T18748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1335.087376][T18748] RSP: 002b:00007fbc97658ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1335.095836][T18748] RAX: ffffffffffffffda RBX: 00007fbc976596c0 RCX: 00007fbc9675ed8e [ 1335.103847][T18748] RDX: 0000000000000002 RSI: 00007fbc97658f90 RDI: ffffffffffffff9c [ 1335.111846][T18748] RBP: 00007fbc968358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.119842][T18748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.127837][T18748] R13: 00007fbc96a26038 R14: 00007fbc96a25fa0 R15: 00007fff9901c338 [ 1335.135872][T18748] [ 1335.208528][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3304'. [ 1337.255329][T18787] loop5: detected capacity change from 0 to 512 [ 1337.388992][T18787] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.3312: iget: bad i_size value: 38620345925642 [ 1337.432744][T18787] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.3312: couldn't read orphan inode 15 (err -117) [ 1337.467405][T18787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.692127][T16083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.580168][T18776] rxe_eth0 speed is unknown, defaulting to 1000 [ 1338.603405][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3313'. [ 1339.480464][T18818] loop5: detected capacity change from 0 to 512 [ 1339.509754][T18818] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1341.372473][T18858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3324'. [ 1342.078380][T18868] loop5: detected capacity change from 0 to 512 [ 1342.112348][T18868] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1342.641507][T18878] loop5: detected capacity change from 0 to 256 [ 1342.694250][ T27] audit: type=1800 audit(1792113521.797:197): pid=18878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3333" name="file1" dev="loop5" ino=1048737 res=0 errno=0 [ 1343.305027][T18700] Set syz1 is full, maxelem 65536 reached [ 1343.430783][T18893] rxe_eth0 speed is unknown, defaulting to 1000 [ 1344.049008][T18911] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3344'. [ 1345.076476][T18935] rxe_eth0 speed is unknown, defaulting to 1000 [ 1345.435084][T18948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3355'. [ 1345.663086][T18950] loop3: detected capacity change from 0 to 512 [ 1345.857117][T18950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1345.969315][T18950] ext4 filesystem being mounted at /240/mnt/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.070920][T18950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.145860][T18970] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3361'. [ 1346.704868][T18974] syzkaller0: entered promiscuous mode [ 1346.728527][T18974] syzkaller0: entered allmulticast mode [ 1346.781947][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3365'. [ 1350.135304][T19004] rxe_eth0 speed is unknown, defaulting to 1000 [ 1351.014821][T19013] loop5: detected capacity change from 0 to 512 [ 1351.056807][T19017] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3373'. [ 1351.126475][T19013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1351.205904][T19013] ext4 filesystem being mounted at /185/mnt/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1351.247707][T19023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'. [ 1351.270835][T19013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.042477][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3381'. [ 1353.389656][T19068] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3383'. [ 1353.406852][T19071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 1353.585398][T19074] loop4: detected capacity change from 0 to 512 [ 1353.725884][T19074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.742077][T19076] loop5: detected capacity change from 0 to 512 [ 1353.809117][T19074] ext4 filesystem being mounted at /143/mnt/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.850277][T19076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1353.941410][T19074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.995230][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.435372][T19098] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3394'. [ 1355.164303][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3403'. [ 1355.342817][T19128] loop3: detected capacity change from 0 to 512 [ 1355.375941][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3405'. [ 1355.401825][T19128] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1355.462486][T19134] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3406'. [ 1355.782834][T19145] loop3: detected capacity change from 0 to 512 [ 1355.867268][T19145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1355.981419][T19142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.402891][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3415'. [ 1356.427790][T19165] loop4: detected capacity change from 0 to 512 [ 1356.514479][T19165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.572126][T19165] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.662223][T19165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.128959][T19183] rxe_eth0 speed is unknown, defaulting to 1000 [ 1357.543088][T19187] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3417'. [ 1357.962038][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1358.285664][T19211] loop4: detected capacity change from 0 to 512 [ 1358.467376][T19211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.483065][T19211] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.507928][T19211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.818840][T19241] __nla_validate_parse: 1 callbacks suppressed [ 1359.818889][T19241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3434'. [ 1359.893610][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1359.992850][T19248] gtp0: entered allmulticast mode [ 1361.900100][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.906694][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.224218][T19287] rxe_eth0 speed is unknown, defaulting to 1000 [ 1363.240884][T19305] rxe_eth0 speed is unknown, defaulting to 1000 [ 1363.899044][T14723] Bluetooth: hci0: command 0x0406 tx timeout [ 1364.224574][T19317] gtp0: entered allmulticast mode [ 1364.750073][T19335] netlink: 'syz.3.3459': attribute type 21 has an invalid length. [ 1364.804480][T19335] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1364.844972][T19335] netlink: 'syz.3.3459': attribute type 5 has an invalid length. [ 1364.876509][T19335] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1366.942284][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3472'. [ 1368.268447][T19407] netlink: 'syz.7.3477': attribute type 63 has an invalid length. [ 1368.295353][T19407] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3477'. [ 1368.341953][T19408] loop4: detected capacity change from 0 to 512 [ 1368.404192][T19408] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1368.448329][T19408] EXT4-fs (loop4): invalid journal inode [ 1368.471306][T19408] EXT4-fs (loop4): can't get journal size [ 1368.616756][T19408] EXT4-fs (loop4): 1 truncate cleaned up [ 1368.675951][T19408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1368.860443][T19424] ip_tables: iptables: counters copy to user failed while replacing table [ 1369.067357][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.254248][T19470] Illegal XDP return value 4294967274 on prog (id 187) dev N/A, expect packet loss! [ 1374.055780][T19543] loop4: detected capacity change from 0 to 512 [ 1374.196411][T19543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.332887][T19543] ext4 filesystem being mounted at /164/mnt/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.420499][T19543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.060244][T19572] rxe_eth0 speed is unknown, defaulting to 1000 [ 1377.150687][T19619] rxe_eth0 speed is unknown, defaulting to 1000 [ 1380.944603][T19679] rxe_eth0 speed is unknown, defaulting to 1000 [ 1381.802678][T19705] loop4: detected capacity change from 0 to 512 [ 1381.931374][T19705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.993580][T19705] ext4 filesystem being mounted at /173/mnt/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.092031][T19705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.171997][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3568'. [ 1384.432800][T19777] loop4: detected capacity change from 0 to 1024 [ 1384.472971][T19777] EXT4-fs: quotafile must be on filesystem root [ 1384.937510][T19794] loop4: detected capacity change from 0 to 128 [ 1385.184103][T19794] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1385.210457][T19794] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1385.853483][T16609] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1387.204963][T19843] loop4: detected capacity change from 0 to 512 [ 1387.234469][T19843] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1388.303161][T19861] loop4: detected capacity change from 0 to 1024 [ 1388.329591][T19861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1388.443556][T19861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1388.532843][T19861] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.097043][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1389.959950][T19895] loop4: detected capacity change from 0 to 512 [ 1389.980707][T19895] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1390.763079][T19903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1391.915127][T19923] loop4: detected capacity change from 0 to 512 [ 1392.059777][T19923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1392.148741][T19923] ext4 filesystem being mounted at /185/mnt/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1392.173792][T19923] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.100751][T19960] loop4: detected capacity change from 0 to 512 [ 1393.122609][T19960] ext4: Unknown parameter 'fowner>00000000000000000000' [ 1397.428384][T20090] IPVS: Error connecting to the multicast addr [ 1398.689702][T20120] rxe_eth0 speed is unknown, defaulting to 1000 [ 1399.389282][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1402.531962][T20220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.247970][T20237] rxe_eth0 speed is unknown, defaulting to 1000 [ 1406.804006][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1407.424820][T20328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3728'. [ 1408.538739][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3731'. [ 1408.585564][T20344] Set syz1 is full, maxelem 65536 reached [ 1409.951818][T20377] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3743'. [ 1410.069365][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1410.560663][T20390] rxe_eth0 speed is unknown, defaulting to 1000 [ 1412.712757][T20403] rxe_eth0 speed is unknown, defaulting to 1000 [ 1413.970696][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3758'. [ 1414.967556][T20439] rxe_eth0 speed is unknown, defaulting to 1000 [ 1415.678842][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1416.213337][T20465] syz_tun: entered allmulticast mode [ 1416.281122][T20465] dvmrp6: entered allmulticast mode [ 1416.324331][T20466] dvmrp6: left allmulticast mode [ 1416.461392][T20463] syz_tun: left allmulticast mode [ 1416.554262][T20473] FAULT_INJECTION: forcing a failure. [ 1416.554262][T20473] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.567182][T20473] CPU: 1 PID: 20473 Comm: syz.4.3780 Not tainted syzkaller #0 [ 1416.574677][T20473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1416.584751][T20473] Call Trace: [ 1416.588030][T20473] [ 1416.590956][T20473] dump_stack_lvl+0x18c/0x250 [ 1416.595630][T20473] ? show_regs_print_info+0x20/0x20 [ 1416.600808][T20473] ? load_image+0x420/0x420 [ 1416.605320][T20473] ? __lock_acquire+0x7eb0/0x7eb0 [ 1416.605354][T20473] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1416.605379][T20473] ? __lock_acquire+0x7eb0/0x7eb0 [ 1416.616376][T20473] should_fail_ex+0x394/0x4c0 [ 1416.616417][T20473] should_failslab+0x9/0x20 [ 1416.626094][T20473] slab_pre_alloc_hook+0x59/0x300 [ 1416.626124][T20473] ? copy_net_ns+0x112/0x530 [ 1416.635630][T20473] ? copy_net_ns+0x112/0x530 [ 1416.635663][T20473] __kmem_cache_alloc_node+0x53/0x250 [ 1416.644820][T20473] ? copy_net_ns+0x112/0x530 [ 1416.644847][T20473] __kmalloc+0xa7/0x240 [ 1416.654786][T20473] copy_net_ns+0x112/0x530 [ 1416.654817][T20473] create_new_namespaces+0x3ce/0x700 [ 1416.654855][T20473] unshare_nsproxy_namespaces+0x11a/0x160 [ 1416.663390][T20473] ksys_unshare+0x4fa/0x8f0 [ 1416.663427][T20473] ? sighand_ctor+0x50/0x50 [ 1416.674409][T20473] ? lock_chain_count+0x20/0x20 [ 1416.674442][T20473] ? syscall_enter_from_user_mode+0x25/0x80 [ 1416.674473][T20473] __x64_sys_unshare+0x38/0x40 [ 1416.699076][T20473] do_syscall_64+0x55/0xb0 [ 1416.703518][T20473] ? clear_bhb_loop+0x40/0x90 [ 1416.708196][T20473] ? clear_bhb_loop+0x40/0x90 [ 1416.712878][T20473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1416.718782][T20473] RIP: 0033:0x7f372219e559 [ 1416.723197][T20473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.742813][T20473] RSP: 002b:00007f3722fea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1416.751236][T20473] RAX: ffffffffffffffda RBX: 00007f3722425fa0 RCX: 00007f372219e559 [ 1416.759219][T20473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 1416.767190][T20473] RBP: 00007f37222358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.775160][T20473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.783130][T20473] R13: 00007f3722426038 R14: 00007f3722425fa0 R15: 00007ffc437b02a8 [ 1416.791115][T20473] [ 1416.970014][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3782'. [ 1417.892632][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1419.286130][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 1419.652748][T20549] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3810'. [ 1420.048424][T20559] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3813'. [ 1420.530797][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1420.828176][T20565] rxe_eth0 speed is unknown, defaulting to 1000 [ 1422.056653][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3823'. [ 1422.078701][T20585] netlink: 13 bytes leftover after parsing attributes in process `syz.7.3823'. [ 1422.868758][T20601] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3826'. [ 1423.261091][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.267723][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.705386][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 1424.779567][T20620] rxe_eth0 speed is unknown, defaulting to 1000 [ 1426.422449][T20631] netlink: 'syz.7.3835': attribute type 21 has an invalid length. [ 1426.440657][T20631] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3835'. [ 1426.835482][T20635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1427.557871][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'. [ 1429.490311][T20677] usb usb8: usbfs: process 20677 (syz.4.3850) did not claim interface 0 before use [ 1429.756554][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3854'. [ 1429.946655][T20691] dvmrp6: entered allmulticast mode [ 1429.956844][T20691] dvmrp6: left allmulticast mode [ 1432.767549][T20712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1432.936604][ T27] audit: type=1326 audit(1792113612.037:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20722 comm="syz.4.3870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f372219e559 code=0x0 [ 1434.247923][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3877'. [ 1435.882300][T20768] rxe_eth0 speed is unknown, defaulting to 1000 [ 1436.374964][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3888'. [ 1436.835347][T20787] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1439.584189][ T11] rpcbind: server 127.0.0.1 not responding, timed out [ 1440.347625][T20836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1440.798110][T20827] rxe_eth0 speed is unknown, defaulting to 1000 [ 1442.396886][T20855] rxe_eth0 speed is unknown, defaulting to 1000 [ 1444.948187][T20890] 9pnet: p9_errstr2errno: server reported unknown error [ 1445.679530][T20901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3927'. [ 1448.357823][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3945'. [ 1449.012218][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3943'. [ 1449.231396][T20770] udevd[20770]: symlink '../../loop7' '/dev/disk/by-diskseq/403.tmp-b7:7' failed: Read-only file system [ 1450.442492][T20977] dvmrp6: entered allmulticast mode [ 1450.461017][T20980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1450.628065][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1452.015807][ T6742] rpcbind: server 127.0.0.1 not responding, timed out [ 1453.410723][T21021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1453.597078][T21026] dvmrp6: entered allmulticast mode [ 1455.315196][T21057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1459.971048][T21094] 0x000000000000-0x000000010000 : "" [ 1460.053607][T21094] ftl_cs: FTL header not found. [ 1460.086721][T21094] FAULT_INJECTION: forcing a failure. [ 1460.086721][T21094] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.136084][T21094] CPU: 0 PID: 21094 Comm: syz.4.3988 Not tainted syzkaller #0 [ 1460.143595][T21094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1460.153698][T21094] Call Trace: [ 1460.157006][T21094] [ 1460.159970][T21094] dump_stack_lvl+0x18c/0x250 [ 1460.164682][T21094] ? show_regs_print_info+0x20/0x20 [ 1460.169910][T21094] ? load_image+0x420/0x420 [ 1460.174457][T21094] ? __might_sleep+0xe0/0xe0 [ 1460.179085][T21094] ? __lock_acquire+0x7eb0/0x7eb0 [ 1460.184152][T21094] should_fail_ex+0x394/0x4c0 [ 1460.188877][T21094] should_failslab+0x9/0x20 [ 1460.193418][T21094] slab_pre_alloc_hook+0x59/0x300 [ 1460.198480][T21094] kmem_cache_alloc+0x5a/0x2c0 [ 1460.203317][T21094] ? __kernfs_new_node+0xe5/0x7f0 [ 1460.208389][T21094] __kernfs_new_node+0xe5/0x7f0 [ 1460.213287][T21094] ? kernfs_new_node+0x260/0x260 [ 1460.218287][T21094] ? up_write+0x1be/0x410 [ 1460.222635][T21094] kernfs_new_node+0x14c/0x260 [ 1460.227450][T21094] __kernfs_create_file+0x4b/0x2e0 [ 1460.232581][T21094] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1460.238036][T21094] internal_create_group+0x431/0xd10 [ 1460.243336][T21094] ? kernfs_add_one+0x149/0x6b0 [ 1460.248248][T21094] ? sysfs_create_group+0x20/0x20 [ 1460.253346][T21094] ? up_write+0x1be/0x410 [ 1460.257718][T21094] sysfs_create_groups+0x59/0x120 [ 1460.262788][T21094] device_add_attrs+0x12d/0x830 [ 1460.267689][T21094] ? device_add_class_symlinks+0x240/0x240 [ 1460.273547][T21094] ? device_add_class_symlinks+0x21f/0x240 [ 1460.279408][T21094] device_add+0x51a/0xc40 [ 1460.283787][T21094] device_add_disk+0x468/0xfe0 [ 1460.288607][T21094] add_mtd_blktrans_dev+0x1039/0x14e0 [ 1460.294018][T21094] mtdblock_add_mtd+0x18a/0x240 [ 1460.298883][T21094] blktrans_notify_add+0x99/0xe0 [ 1460.303840][T21094] add_mtd_device+0x11b3/0x17e0 [ 1460.303882][T21094] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 1460.314515][T21094] ? __mutex_lock+0x30d/0xc80 [ 1460.314554][T21094] ? mtd_cls_resume+0x130/0x130 [ 1460.324065][T21094] mtd_add_partition+0x30a/0x510 [ 1460.329046][T21094] ? release_mtd_partition+0x80/0x80 [ 1460.334384][T21094] ? __might_fault+0xaa/0x120 [ 1460.339095][T21094] ? __might_fault+0xc6/0x120 [ 1460.343779][T21094] ? __might_fault+0xaa/0x120 [ 1460.343810][T21094] mtdchar_blkpg_ioctl+0x287/0x2b0 [ 1460.343837][T21094] ? shrink_ecclayout+0xae0/0xae0 [ 1460.348822][T21094] ? __might_fault+0xaa/0x120 [ 1460.348846][T21094] ? __might_fault+0xc6/0x120 [ 1460.348864][T21094] ? __might_fault+0xaa/0x120 [ 1460.359179][T21094] mtdchar_ioctl+0x14f7/0x1b80 [ 1460.359209][T21094] ? mtdchar_close+0x180/0x180 [ 1460.359232][T21094] ? verify_lock_unused+0x140/0x140 [ 1460.363916][T21094] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 1460.373250][T21094] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1460.399319][T21094] ? __lock_acquire+0x7eb0/0x7eb0 [ 1460.404380][T21094] ? slab_free_freelist_hook+0x130/0x1a0 [ 1460.410066][T21094] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1460.415748][T21094] ? __mutex_trylock_common+0x160/0x270 [ 1460.421335][T21094] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1460.427533][T21094] ? rcu_is_watching+0x15/0xb0 [ 1460.432340][T21094] ? trace_contention_end+0x39/0xe0 [ 1460.437582][T21094] ? __mutex_lock+0x30d/0xc80 [ 1460.442311][T21094] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1460.447723][T21094] ? mutex_lock_nested+0x20/0x20 [ 1460.452704][T21094] ? __fget_files+0x28/0x460 [ 1460.457354][T21094] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1460.462591][T21094] ? mtdchar_write+0x5c0/0x5c0 [ 1460.467406][T21094] __se_sys_ioctl+0xfd/0x170 [ 1460.472032][T21094] do_syscall_64+0x55/0xb0 [ 1460.476470][T21094] ? clear_bhb_loop+0x40/0x90 [ 1460.481171][T21094] ? clear_bhb_loop+0x40/0x90 [ 1460.485876][T21094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1460.491815][T21094] RIP: 0033:0x7f372219e559 [ 1460.496253][T21094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.515897][T21094] RSP: 002b:00007f3722fea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.524367][T21094] RAX: ffffffffffffffda RBX: 00007f3722425fa0 RCX: 00007f372219e559 [ 1460.532383][T21094] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000008 [ 1460.540395][T21094] RBP: 00007f37222358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.548405][T21094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.556413][T21094] R13: 00007f3722426038 R14: 00007f3722425fa0 R15: 00007ffc437b02a8 [ 1460.564452][T21094] [ 1465.024356][T21166] rxe_eth0 speed is unknown, defaulting to 1000 [ 1466.731167][T21207] Invalid ELF header magic: != ELF [ 1468.073667][T21225] input: syz1 as /devices/virtual/input/input7 [ 1469.123288][T21238] rxe_eth0 speed is unknown, defaulting to 1000 [ 1469.863073][T21223] rxe_eth0 speed is unknown, defaulting to 1000 [ 1472.928553][ T27] audit: type=1326 audit(1792113651.957:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8b99e559 code=0x7ffc0000 [ 1473.088506][ T27] audit: type=1326 audit(1792113651.957:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8b99e559 code=0x7ffc0000 [ 1473.203079][ T27] audit: type=1326 audit(1792113651.957:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1473.293953][ T27] audit: type=1326 audit(1792113651.957:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1473.366871][ T27] audit: type=1326 audit(1792113651.957:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1473.462125][ T27] audit: type=1326 audit(1792113651.957:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1473.529133][ T27] audit: type=1326 audit(1792113651.957:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1473.608063][ T27] audit: type=1326 audit(1792113651.957:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1473.673147][ T27] audit: type=1326 audit(1792113651.957:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1473.708538][ T27] audit: type=1326 audit(1792113651.957:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21275 comm="syz.7.4045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1474.066291][T21300] rxe_eth0 speed is unknown, defaulting to 1000 [ 1476.561751][T21317] loop4: detected capacity change from 0 to 1024 [ 1476.665066][T21317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1476.734437][T21317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.771519][T21317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1477.136618][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/459.tmp-b7:4' failed: Read-only file system [ 1477.195872][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1477.221646][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.417961][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/459.tmp-b7:4' failed: Read-only file system [ 1477.476711][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1477.921872][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/459.tmp-b7:4' failed: Read-only file system [ 1478.266843][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/459.tmp-b7:4' failed: Read-only file system [ 1478.327416][T21324] rxe_eth0 speed is unknown, defaulting to 1000 [ 1481.774383][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4070'. [ 1482.273721][T21366] rxe_eth0 speed is unknown, defaulting to 1000 [ 1482.755736][T21370] loop4: detected capacity change from 0 to 512 [ 1482.797003][T21370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1482.885380][T21370] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1482.917632][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/461.tmp-b7:4' failed: Read-only file system [ 1482.948749][T21370] EXT4-fs (loop4): 1 truncate cleaned up [ 1482.956160][T21370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1482.980484][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 1484.728868][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.735309][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.771942][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.875430][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/461.tmp-b7:4' failed: Read-only file system [ 1484.904319][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/461.tmp-b7:4' failed: Read-only file system [ 1485.873664][T21401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1486.557194][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4080'. [ 1486.633608][T21409] loop4: detected capacity change from 0 to 512 [ 1486.649051][T21409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1486.669454][T21409] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1486.723080][T21409] EXT4-fs (loop4): 1 truncate cleaned up [ 1486.760146][T21409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1486.777241][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/463.tmp-b7:4' failed: Read-only file system [ 1486.789459][T21417] Invalid ELF header magic: != ELF [ 1486.842758][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 1487.027761][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-diskseq/463.tmp-b7:4' failed: Read-only file system [ 1487.056617][T21227] udevd[21227]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 1487.886412][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.312675][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4092'. [ 1488.501220][T21452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1489.521511][T21454] rxe_eth0 speed is unknown, defaulting to 1000 [ 1490.410204][T21463] Invalid ELF header magic: != ELF [ 1490.760363][T21468] Invalid ELF header magic: != ELF [ 1491.815326][T21488] loop4: detected capacity change from 0 to 512 [ 1491.863940][T21488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1491.908598][T21488] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1492.063514][T21488] EXT4-fs (loop4): 1 truncate cleaned up [ 1492.073681][T21488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1492.275940][T21498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1492.674898][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4105'. [ 1493.373059][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.005717][T21522] syzkaller0: entered promiscuous mode [ 1494.025624][T21522] syzkaller0: entered allmulticast mode [ 1494.915982][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4116'. [ 1495.187040][T21538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1497.329399][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4125'. [ 1497.621202][T21563] syzkaller0: entered promiscuous mode [ 1497.626735][T21563] syzkaller0: entered allmulticast mode [ 1498.776221][T21574] rxe_eth0 speed is unknown, defaulting to 1000 [ 1499.298292][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4132'. [ 1500.112498][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4136'. [ 1503.476551][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 1504.382751][T21626] rxe_eth0 speed is unknown, defaulting to 1000 [ 1506.517220][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4156'. [ 1507.234081][T21677] rxe_eth0 speed is unknown, defaulting to 1000 [ 1509.743405][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4167'. [ 1510.026816][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4170'. [ 1510.440207][T21719] rxe_eth0 speed is unknown, defaulting to 1000 [ 1510.681024][T21721] Invalid ELF header magic: != ELF [ 1510.791750][T21722] netlink: 'syz.3.4168': attribute type 1 has an invalid length. [ 1515.029483][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4179'. [ 1515.212892][T21753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4180'. [ 1515.673129][T21763] Invalid ELF header magic: != ELF [ 1518.296411][T21779] rxe_eth0 speed is unknown, defaulting to 1000 [ 1519.145117][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4190'. [ 1519.306900][T21796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4191'. [ 1519.589205][T21800] 9pnet_virtio: no channels available for device syz [ 1520.125152][T21807] Invalid ELF header magic: != ELF [ 1521.369501][T21814] Invalid ELF header magic: != ELF [ 1522.147679][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4199'. [ 1524.419041][T21851] Invalid ELF header magic: != ELF [ 1525.400416][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4208'. [ 1526.374563][T21869] rxe_eth0 speed is unknown, defaulting to 1000 [ 1527.251424][T21884] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4215'. [ 1527.389826][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1527.683123][T21892] Invalid ELF header magic: != ELF [ 1529.304858][T21917] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4228'. [ 1529.692826][T21924] Invalid ELF header magic: != ELF [ 1530.401707][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 1530.401746][ T27] audit: type=1326 audit(1792113709.507:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21930 comm="syz.3.4234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc9679e559 code=0x0 [ 1530.560657][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4237'. [ 1530.717987][T21944] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4240'. [ 1531.252122][T21953] rxe_eth0 speed is unknown, defaulting to 1000 [ 1531.516785][T21956] Invalid ELF header magic: != ELF [ 1534.439834][T21989] Invalid ELF header magic: != ELF [ 1534.988633][T14723] Bluetooth: hci3: command 0x0406 tx timeout [ 1535.633622][T21997] Invalid ELF header magic: != ELF [ 1538.147137][T22036] rxe_eth0 speed is unknown, defaulting to 1000 [ 1540.341221][T14723] Bluetooth: hci1: command 0x0406 tx timeout [ 1542.023240][T22084] Invalid ELF header magic: != ELF [ 1545.162227][T22113] rxe_eth0 speed is unknown, defaulting to 1000 [ 1546.114724][T22126] Invalid ELF header magic: != ELF [ 1546.470346][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.476912][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.119816][T22145] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4295'. [ 1549.087532][T22165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1549.168594][T22166] Invalid ELF header magic: != ELF [ 1552.462270][T22192] rxe_eth0 speed is unknown, defaulting to 1000 [ 1553.763577][T22200] rxe_eth0 speed is unknown, defaulting to 1000 [ 1559.615260][T22254] Invalid ELF header magic: != ELF [ 1560.331947][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1560.625155][T22270] loop4: detected capacity change from 0 to 512 [ 1560.643427][T22270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1560.716677][T22270] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1560.896519][T22270] EXT4-fs (loop4): 1 truncate cleaned up [ 1561.012624][T22276] rxe_eth0 speed is unknown, defaulting to 1000 [ 1561.265344][T22270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1561.922595][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.746156][T22292] Invalid ELF header magic: != ELF [ 1563.010359][T22294] rxe_eth0 speed is unknown, defaulting to 1000 [ 1564.495140][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1565.375181][T22310] rxe_eth0 speed is unknown, defaulting to 1000 [ 1566.450605][T22321] Invalid ELF header magic: != ELF [ 1568.400459][T22334] Invalid ELF header magic: != ELF [ 1569.085617][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4347'. [ 1570.962915][T22359] Invalid ELF header magic: != ELF [ 1571.088498][T22357] Invalid ELF header magic: != ELF [ 1571.652684][T22358] rxe_eth0 speed is unknown, defaulting to 1000 [ 1573.550951][T22376] Invalid ELF header magic: != ELF [ 1574.830012][T22384] rxe_eth0 speed is unknown, defaulting to 1000 [ 1578.270917][T22429] Invalid ELF header magic: != ELF [ 1580.194426][T22427] Invalid ELF header magic: != ELF [ 1581.416277][T22456] loop4: detected capacity change from 0 to 512 [ 1581.517435][T22456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1581.645907][T22456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.688505][T22456] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.779135][T22464] Invalid ELF header magic: != ELF [ 1582.372739][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1582.515018][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.960518][T22474] rxe_eth0 speed is unknown, defaulting to 1000 [ 1584.123139][T22481] loop4: detected capacity change from 0 to 512 [ 1584.184655][T22481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1584.239408][T22481] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1584.269833][T22481] EXT4-fs (loop4): 1 truncate cleaned up [ 1584.291025][T22481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1585.574015][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.923397][T22497] loop4: detected capacity change from 0 to 512 [ 1585.962276][T22497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1586.164007][T22502] Invalid ELF header magic: != ELF [ 1586.760914][T22497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1586.818832][T22497] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1587.117781][T22497] netlink: 'syz.4.4393': attribute type 1 has an invalid length. [ 1587.313032][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1588.077655][T22519] rxe_eth0 speed is unknown, defaulting to 1000 [ 1589.629795][T22528] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4397'. [ 1589.688357][T22528] gretap0: left promiscuous mode [ 1589.876707][T22510] rxe_eth0 speed is unknown, defaulting to 1000 [ 1591.383780][T22543] Invalid ELF header magic: != ELF [ 1592.288826][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4404'. [ 1594.128394][T22564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4412'. [ 1595.152246][T22575] rxe_eth0 speed is unknown, defaulting to 1000 [ 1595.173089][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4415'. [ 1595.950075][T22584] Invalid ELF header magic: != ELF [ 1598.928813][T22609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1600.543454][T22617] Invalid ELF header magic: != ELF [ 1600.854309][T22628] rxe_eth0 speed is unknown, defaulting to 1000 [ 1601.124116][T22638] loop4: detected capacity change from 0 to 512 [ 1601.149428][T22638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1601.174124][T22638] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1601.377321][T22638] EXT4-fs (loop4): 1 truncate cleaned up [ 1601.415338][T22638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1603.196165][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.540167][T22658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1603.698358][T22663] Invalid ELF header magic: != ELF [ 1605.732872][T22667] rxe_eth0 speed is unknown, defaulting to 1000 [ 1607.544444][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.551274][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.284205][T22699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4450'. [ 1609.103710][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4452'. [ 1609.134140][T22705] loop4: detected capacity change from 0 to 512 [ 1609.175135][T22705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1609.203791][T22705] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1609.381267][T22705] EXT4-fs (loop4): 1 truncate cleaned up [ 1609.407458][T22705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.383515][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1611.885879][T22738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4463'. [ 1612.386311][T22744] rxe_eth0 speed is unknown, defaulting to 1000 [ 1615.175807][T22758] rxe_eth0 speed is unknown, defaulting to 1000 [ 1615.243780][T22765] tipc: Started in network mode [ 1615.258773][T22765] tipc: Node identity , cluster identity 4711 [ 1615.289292][T22765] tipc: Failed to obtain node identity [ 1615.315928][T22765] tipc: Enabling of bearer rejected, failed to enable media [ 1616.052148][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4473'. [ 1616.785287][T22776] rxe_eth0 speed is unknown, defaulting to 1000 [ 1619.827501][T22808] Invalid ELF header magic: != ELF [ 1619.986585][T22811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4484'. [ 1621.849077][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4490'. [ 1621.869090][T22833] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4491'. [ 1622.872297][T22851] rxe_eth0 speed is unknown, defaulting to 1000 [ 1624.650958][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4502'. [ 1625.428177][T22887] rxe_eth0 speed is unknown, defaulting to 1000 [ 1625.905732][T22892] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1626.887983][T22901] rxe_eth0 speed is unknown, defaulting to 1000 [ 1629.718923][T22930] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4523'. [ 1630.530584][T22936] rxe_eth0 speed is unknown, defaulting to 1000 [ 1630.718760][T22938] rxe_eth0 speed is unknown, defaulting to 1000 [ 1635.057573][T22972] loop4: detected capacity change from 0 to 512 [ 1635.096152][T22972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1635.186014][T22976] rxe_eth0 speed is unknown, defaulting to 1000 [ 1635.312579][T22972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1635.330019][T22972] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.501749][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1635.651836][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.274417][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 1637.634170][T23009] rxe_eth0 speed is unknown, defaulting to 1000 [ 1639.294397][T23033] rxe_eth0 speed is unknown, defaulting to 1000 [ 1640.523293][T23043] rxe_eth0 speed is unknown, defaulting to 1000 [ 1642.123179][T23059] loop4: detected capacity change from 0 to 512 [ 1642.165760][T23059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1642.214886][T23059] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1642.700616][T23059] EXT4-fs (loop4): 1 truncate cleaned up [ 1642.731973][T23059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1643.361152][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.517431][T23078] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4572'. [ 1644.014252][T23086] rxe_eth0 speed is unknown, defaulting to 1000 [ 1644.604074][T23091] rxe_eth0 speed is unknown, defaulting to 1000 [ 1646.057316][T23114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4584'. [ 1646.957279][T23128] rxe_eth0 speed is unknown, defaulting to 1000 [ 1648.255074][T23140] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4594'. [ 1649.403837][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1651.221980][T23180] rxe_eth0 speed is unknown, defaulting to 1000 [ 1651.904082][T23187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4609'. [ 1651.930436][T23184] rxe_eth0 speed is unknown, defaulting to 1000 [ 1653.398450][T23206] loop4: detected capacity change from 0 to 512 [ 1653.450491][T23206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1653.499508][T23206] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1653.554023][T23206] EXT4-fs (loop4): 1 truncate cleaned up [ 1653.590171][T23206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1654.297478][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.610541][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4619'. [ 1654.628111][T23222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1654.906677][T23225] rxe_eth0 speed is unknown, defaulting to 1000 [ 1655.738081][T23237] Invalid ELF header magic: != ELF [ 1657.526784][T23246] loop4: detected capacity change from 0 to 512 [ 1657.594414][T23246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1657.667719][T23246] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1658.749531][T23246] EXT4-fs (loop4): 1 truncate cleaned up [ 1659.031890][T23246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.119905][T23255] rxe_eth0 speed is unknown, defaulting to 1000 [ 1660.012057][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.181418][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4629'. [ 1661.092045][T23280] rxe_eth0 speed is unknown, defaulting to 1000 [ 1663.839900][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4638'. [ 1666.445279][T23329] rxe_eth0 speed is unknown, defaulting to 1000 [ 1667.763446][T23341] loop4: detected capacity change from 0 to 512 [ 1667.790560][T23341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1668.054408][T23341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1668.068461][T23341] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1668.329391][T23341] netlink: 'syz.4.4647': attribute type 1 has an invalid length. [ 1668.803655][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.983360][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.989847][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.335334][T23358] loop4: detected capacity change from 0 to 512 [ 1669.652373][T23358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1669.684981][T23358] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1669.771629][T23358] EXT4-fs (loop4): 1 truncate cleaned up [ 1669.785917][T23358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.550856][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.753860][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4656'. [ 1671.960273][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4659'. [ 1672.919556][T23388] 9pnet_virtio: no channels available for device syz [ 1672.962985][T23392] loop4: detected capacity change from 0 to 512 [ 1673.013092][T23392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1673.214721][T23392] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1673.430243][T23392] EXT4-fs (loop4): 1 truncate cleaned up [ 1673.479546][T23392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1675.052784][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.577517][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4671'. [ 1675.980121][T23422] Invalid ELF header magic: != ELF [ 1677.090624][T23455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4682'. [ 1677.742360][T23463] sctp: [Deprecated]: syz.4.4685 (pid 23463) Use of int in max_burst socket option. [ 1677.742360][T23463] Use struct sctp_assoc_value instead [ 1679.077600][T23479] loop4: detected capacity change from 0 to 512 [ 1679.128455][T23479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1679.198587][T23479] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1679.286241][T23479] EXT4-fs (loop4): 1 truncate cleaned up [ 1679.324619][T23479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1679.363509][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4691'. [ 1680.010080][T23493] rxe_eth0 speed is unknown, defaulting to 1000 [ 1680.491671][T23477] Invalid ELF header magic: != ELF [ 1680.933201][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1682.610738][T23505] Invalid ELF header magic: != ELF [ 1684.350769][T23530] rxe_eth0 speed is unknown, defaulting to 1000 [ 1684.789130][T23527] Invalid ELF header magic: != ELF [ 1685.080949][T23539] loop4: detected capacity change from 0 to 512 [ 1685.122270][T23539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1685.205161][T23539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1685.290425][T23539] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1685.559815][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.257449][T23575] Invalid ELF header magic: != ELF [ 1687.466545][ T27] audit: type=1326 audit(1792113866.529:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8b99e559 code=0x7ffc0000 [ 1687.647672][ T27] audit: type=1326 audit(1792113866.529:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8b99e559 code=0x7ffc0000 [ 1687.838188][ T27] audit: type=1326 audit(1792113866.539:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1687.955905][ T27] audit: type=1326 audit(1792113866.539:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1688.015185][ T27] audit: type=1326 audit(1792113866.539:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1688.140707][ T27] audit: type=1326 audit(1792113866.539:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1688.295275][ T27] audit: type=1326 audit(1792113866.549:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1688.410972][ T27] audit: type=1326 audit(1792113866.549:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1688.495187][ T27] audit: type=1326 audit(1792113866.549:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1688.519699][ T27] audit: type=1326 audit(1792113866.549:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec8b99e1eb code=0x7ffc0000 [ 1688.603064][T23608] Invalid ELF header magic: != ELF [ 1689.660904][T23627] loop4: detected capacity change from 0 to 512 [ 1689.694700][T23627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1689.748711][T23627] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1689.801357][T23627] EXT4-fs (loop4): 1 truncate cleaned up [ 1689.827931][T23627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1691.129801][T23647] Invalid ELF header magic: != ELF [ 1692.113204][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.298462][T23657] loop4: detected capacity change from 0 to 512 [ 1692.309921][T23657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1692.461892][T23657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1692.494287][T23657] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.633643][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.962748][T23678] loop4: detected capacity change from 0 to 512 [ 1693.977110][T23678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1694.017089][T23678] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1694.112795][T23678] EXT4-fs (loop4): 1 truncate cleaned up [ 1694.179209][T23678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1694.312602][T23682] Invalid ELF header magic: != ELF [ 1696.432660][T14723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1696.444836][T14723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1696.455768][T14723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1696.467108][T14723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1696.477070][T14723] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1696.487303][T14723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1696.834308][T23705] rxe_eth0 speed is unknown, defaulting to 1000 [ 1696.847998][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.335636][T23736] Invalid ELF header magic: != ELF [ 1698.630986][T14723] Bluetooth: hci4: command tx timeout [ 1699.385897][T23705] chnl_net:caif_netlink_parms(): no params data found [ 1700.512767][T23705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.520295][T23705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.528093][T23705] bridge_slave_0: entered allmulticast mode [ 1700.536173][T23705] bridge_slave_0: entered promiscuous mode [ 1700.546886][T23705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.554183][T23764] loop4: detected capacity change from 0 to 512 [ 1700.554220][T23705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.568507][T23705] bridge_slave_1: entered allmulticast mode [ 1700.576631][T23705] bridge_slave_1: entered promiscuous mode [ 1700.594413][T23764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1700.621674][T23764] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1700.655280][T14723] Bluetooth: hci4: command tx timeout [ 1700.708438][T23764] EXT4-fs (loop4): 1 truncate cleaned up [ 1700.755981][T23764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1700.827430][T23705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.894380][T23705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.011647][T23705] team0: Port device team_slave_0 added [ 1702.058410][T23705] team0: Port device team_slave_1 added [ 1702.194696][T23705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1702.216218][T23705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.242133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1702.334156][T23705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.389289][T23705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.397029][T23705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.424521][T23705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.474145][T23783] Invalid ELF header magic: != ELF [ 1702.646219][T23705] hsr_slave_0: entered promiscuous mode [ 1702.662346][T23705] hsr_slave_1: entered promiscuous mode [ 1702.678900][T23705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1702.697327][T23705] Cannot create hsr debugfs directory [ 1702.735204][T14723] Bluetooth: hci4: command tx timeout [ 1703.191371][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1703.722105][T23789] rxe_eth0 speed is unknown, defaulting to 1000 [ 1703.925771][T14723] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 1704.305451][T23799] netlink: 'syz.5.4789': attribute type 1 has an invalid length. [ 1704.806510][T23804] loop4: detected capacity change from 0 to 512 [ 1704.816434][T14723] Bluetooth: hci4: command tx timeout [ 1704.853704][T23804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1705.283496][T23804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1705.500887][T23804] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.578068][T23705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1705.664096][T23705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1705.695401][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1705.754436][T23705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1706.057809][T23705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1707.147558][T23705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.207363][T23705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.281542][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.288749][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1707.451957][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.459226][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.629995][T23828] loop4: detected capacity change from 0 to 512 [ 1707.650612][T23828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1707.662930][T23828] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1707.699416][T23828] EXT4-fs (loop4): 1 truncate cleaned up [ 1707.717224][T23828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1708.456442][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4798'. [ 1708.551043][T23705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.723532][T23705] veth0_vlan: entered promiscuous mode [ 1708.789659][T23705] veth1_vlan: entered promiscuous mode [ 1709.554237][T23705] veth0_macvtap: entered promiscuous mode [ 1709.669765][T23705] veth1_macvtap: entered promiscuous mode [ 1709.761324][T23705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1709.790676][T23705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1709.819721][T23705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.844105][T23705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.883624][T23705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.913096][T23705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.692851][T14723] Bluetooth: hci0: command 0x0406 tx timeout [ 1710.726188][T23855] rxe_eth0 speed is unknown, defaulting to 1000 [ 1711.103039][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.110969][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.121527][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.121552][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.274140][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.483862][T23872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1712.506084][ T41] net_ratelimit: 29 callbacks suppressed [ 1712.633559][T23876] Bluetooth: MGMT ver 1.22 [ 1712.801008][T23873] FAULT_INJECTION: forcing a failure. [ 1712.801008][T23873] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.824120][T23873] CPU: 1 PID: 23873 Comm: syz.3.4807 Not tainted syzkaller #0 [ 1712.831644][T23873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1712.841733][T23873] Call Trace: [ 1712.845050][T23873] [ 1712.848000][T23873] dump_stack_lvl+0x18c/0x250 [ 1712.852709][T23873] ? show_regs_print_info+0x20/0x20 [ 1712.857932][T23873] ? load_image+0x420/0x420 [ 1712.862471][T23873] ? __might_sleep+0xe0/0xe0 [ 1712.867089][T23873] ? __lock_acquire+0x7eb0/0x7eb0 [ 1712.872147][T23873] should_fail_ex+0x394/0x4c0 [ 1712.876864][T23873] should_failslab+0x9/0x20 [ 1712.881417][T23873] slab_pre_alloc_hook+0x59/0x300 [ 1712.886465][T23873] ? qdisc_create+0x90f/0x1060 [ 1712.891340][T23873] ? tc_modify_qdisc+0xb47/0x1de0 [ 1712.896385][T23873] ? rtnetlink_rcv_msg+0x843/0xf90 [ 1712.901529][T23873] ? qdisc_alloc+0x95/0xa80 [ 1712.906136][T23873] ? qdisc_alloc+0x95/0xa80 [ 1712.910669][T23873] __kmem_cache_alloc_node+0x53/0x250 [ 1712.916083][T23873] ? qdisc_alloc+0x95/0xa80 [ 1712.920617][T23873] __kmalloc_node+0xa6/0x240 [ 1712.925248][T23873] qdisc_alloc+0x95/0xa80 [ 1712.929628][T23873] qdisc_create_dflt+0x63/0x430 [ 1712.934608][T23873] taprio_init+0x437/0xc20 [ 1712.939130][T23873] ? ___sys_sendmsg+0x2a6/0x360 [ 1712.943989][T23873] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 1712.949017][T23873] ? do_syscall_64+0x55/0xb0 [ 1712.953618][T23873] ? taprio_peek+0x40/0x40 [ 1712.958033][T23873] ? qdisc_alloc+0x7a2/0xa80 [ 1712.962638][T23873] ? taprio_peek+0x40/0x40 [ 1712.967057][T23873] qdisc_create+0x90f/0x1060 [ 1712.971660][T23873] ? qdisc_notify+0x370/0x370 [ 1712.976388][T23873] ? lockdep_rtnl_is_held+0x26/0x30 [ 1712.981593][T23873] ? qdisc_lookup+0x361/0x6c0 [ 1712.986280][T23873] tc_modify_qdisc+0xb47/0x1de0 [ 1712.991147][T23873] ? qdisc_offload_query_caps+0x150/0x150 [ 1712.996893][T23873] ? qdisc_offload_query_caps+0x150/0x150 [ 1713.002616][T23873] rtnetlink_rcv_msg+0x843/0xf90 [ 1713.007562][T23873] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1713.012686][T23873] ? rtnetlink_bind+0x80/0x80 [ 1713.017371][T23873] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1713.023355][T23873] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1713.028730][T23873] ? lock_chain_count+0x20/0x20 [ 1713.033594][T23873] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1713.038992][T23873] ? lockdep_hardirqs_on+0x98/0x150 [ 1713.044226][T23873] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1713.049617][T23873] ? _local_bh_enable+0xa0/0xa0 [ 1713.054493][T23873] ? __dev_queue_xmit+0x272/0x37e0 [ 1713.059616][T23873] ? __dev_queue_xmit+0x1329/0x37e0 [ 1713.064824][T23873] ? __dev_queue_xmit+0x272/0x37e0 [ 1713.069986][T23873] ? ref_tracker_free+0x686/0x830 [ 1713.075035][T23873] netlink_rcv_skb+0x235/0x4c0 [ 1713.079829][T23873] ? rtnetlink_bind+0x80/0x80 [ 1713.084524][T23873] ? netlink_ack+0x1160/0x1160 [ 1713.089314][T23873] ? __lock_acquire+0x7eb0/0x7eb0 [ 1713.094350][T23873] ? netlink_deliver_tap+0x2e/0x1b0 [ 1713.099561][T23873] netlink_unicast+0x7b1/0x930 [ 1713.104341][T23873] netlink_sendmsg+0x8d0/0xbf0 [ 1713.109127][T23873] ? netlink_getsockopt+0x590/0x590 [ 1713.114340][T23873] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1713.119884][T23873] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1713.125173][T23873] ? security_socket_sendmsg+0x80/0xa0 [ 1713.125196][T23873] ? netlink_getsockopt+0x590/0x590 [ 1713.125220][T23873] ____sys_sendmsg+0x61b/0x980 [ 1713.125257][T23873] ? __asan_memset+0x22/0x40 [ 1713.125284][T23873] ? __sys_sendmsg_sock+0x30/0x30 [ 1713.135912][T23873] ? __import_iovec+0x5f2/0x850 [ 1713.135954][T23873] ? import_iovec+0x73/0xa0 [ 1713.145288][T23873] ___sys_sendmsg+0x2a6/0x360 [ 1713.145329][T23873] ? __sys_sendmsg+0x2b0/0x2b0 [ 1713.155229][T23873] __se_sys_sendmsg+0x1d0/0x2c0 [ 1713.164495][T23873] ? __x64_sys_sendmsg+0x80/0x80 [ 1713.164542][T23873] ? lockdep_hardirqs_on+0x98/0x150 [ 1713.174145][T23873] do_syscall_64+0x55/0xb0 [ 1713.174168][T23873] ? clear_bhb_loop+0x40/0x90 [ 1713.174189][T23873] ? clear_bhb_loop+0x40/0x90 [ 1713.174211][T23873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1713.174243][T23873] RIP: 0033:0x7f45d9f9e559 [ 1713.184336][T23873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1713.184357][T23873] RSP: 002b:00007f45d81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.184381][T23873] RAX: ffffffffffffffda RBX: 00007f45da225fa0 RCX: 00007f45d9f9e559 [ 1713.184396][T23873] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000009 [ 1713.188815][T23873] RBP: 00007f45da0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.188832][T23873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1713.188845][T23873] R13: 00007f45da226038 R14: 00007f45da225fa0 R15: 00007fffb1c805d8 [ 1713.188875][T23873] [ 1714.754113][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1714.760638][T14723] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1716.268836][T23913] FAULT_INJECTION: forcing a failure. [ 1716.268836][T23913] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.333258][T23913] CPU: 1 PID: 23913 Comm: syz.3.4819 Not tainted syzkaller #0 [ 1716.340781][T23913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1716.350863][T23913] Call Trace: [ 1716.354163][T23913] [ 1716.357110][T23913] dump_stack_lvl+0x18c/0x250 [ 1716.361904][T23913] ? show_regs_print_info+0x20/0x20 [ 1716.367124][T23913] ? load_image+0x420/0x420 [ 1716.371659][T23913] ? __might_sleep+0xe0/0xe0 [ 1716.376272][T23913] ? __lock_acquire+0x7eb0/0x7eb0 [ 1716.381322][T23913] should_fail_ex+0x394/0x4c0 [ 1716.386033][T23913] should_failslab+0x9/0x20 [ 1716.390567][T23913] slab_pre_alloc_hook+0x59/0x300 [ 1716.395607][T23913] ? qdisc_create+0x90f/0x1060 [ 1716.400390][T23913] ? tc_modify_qdisc+0xb47/0x1de0 [ 1716.405450][T23913] ? rtnetlink_rcv_msg+0x843/0xf90 [ 1716.410579][T23913] ? qdisc_alloc+0x95/0xa80 [ 1716.415122][T23913] ? qdisc_alloc+0x95/0xa80 [ 1716.419660][T23913] __kmem_cache_alloc_node+0x53/0x250 [ 1716.425074][T23913] ? qdisc_alloc+0x95/0xa80 [ 1716.429614][T23913] __kmalloc_node+0xa6/0x240 [ 1716.434241][T23913] qdisc_alloc+0x95/0xa80 [ 1716.438616][T23913] qdisc_create_dflt+0x63/0x430 [ 1716.443509][T23913] taprio_init+0x437/0xc20 [ 1716.447955][T23913] ? ___sys_sendmsg+0x2a6/0x360 [ 1716.452836][T23913] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 1716.457888][T23913] ? do_syscall_64+0x55/0xb0 [ 1716.462513][T23913] ? taprio_peek+0x40/0x40 [ 1716.466949][T23913] ? qdisc_alloc+0x7a2/0xa80 [ 1716.471584][T23913] ? taprio_peek+0x40/0x40 [ 1716.476026][T23913] qdisc_create+0x90f/0x1060 [ 1716.480651][T23913] ? qdisc_notify+0x370/0x370 [ 1716.485358][T23913] ? lockdep_rtnl_is_held+0x26/0x30 [ 1716.490591][T23913] ? qdisc_lookup+0x361/0x6c0 [ 1716.495294][T23913] tc_modify_qdisc+0xb47/0x1de0 [ 1716.500186][T23913] ? qdisc_offload_query_caps+0x150/0x150 [ 1716.505965][T23913] ? qdisc_offload_query_caps+0x150/0x150 [ 1716.511721][T23913] rtnetlink_rcv_msg+0x843/0xf90 [ 1716.516698][T23913] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1716.521835][T23913] ? rtnetlink_bind+0x80/0x80 [ 1716.526514][T23913] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1716.532510][T23913] ? lock_chain_count+0x20/0x20 [ 1716.537385][T23913] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1716.542790][T23913] ? lockdep_hardirqs_on+0x98/0x150 [ 1716.547990][T23913] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1716.553374][T23913] ? _local_bh_enable+0xa0/0xa0 [ 1716.558235][T23913] ? __dev_queue_xmit+0x272/0x37e0 [ 1716.563357][T23913] ? __dev_queue_xmit+0x1329/0x37e0 [ 1716.568546][T23913] ? __dev_queue_xmit+0x272/0x37e0 [ 1716.573655][T23913] ? ref_tracker_free+0x686/0x830 [ 1716.578675][T23913] netlink_rcv_skb+0x235/0x4c0 [ 1716.583432][T23913] ? rtnetlink_bind+0x80/0x80 [ 1716.588123][T23913] ? netlink_ack+0x1160/0x1160 [ 1716.592931][T23913] ? __lock_acquire+0x7eb0/0x7eb0 [ 1716.598003][T23913] ? netlink_deliver_tap+0x2e/0x1b0 [ 1716.603226][T23913] netlink_unicast+0x7b1/0x930 [ 1716.608036][T23913] netlink_sendmsg+0x8d0/0xbf0 [ 1716.612843][T23913] ? netlink_getsockopt+0x590/0x590 [ 1716.618080][T23913] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1716.623641][T23913] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1716.628936][T23913] ? security_socket_sendmsg+0x80/0xa0 [ 1716.628958][T23913] ? netlink_getsockopt+0x590/0x590 [ 1716.628988][T23913] ____sys_sendmsg+0x61b/0x980 [ 1716.629025][T23913] ? __asan_memset+0x22/0x40 [ 1716.639648][T23913] ? __sys_sendmsg_sock+0x30/0x30 [ 1716.639677][T23913] ? __import_iovec+0x5f2/0x850 [ 1716.649013][T23913] ? import_iovec+0x73/0xa0 [ 1716.649049][T23913] ___sys_sendmsg+0x2a6/0x360 [ 1716.658890][T23913] ? __sys_sendmsg+0x2b0/0x2b0 [ 1716.658969][T23913] __se_sys_sendmsg+0x1d0/0x2c0 [ 1716.668091][T23913] ? __x64_sys_sendmsg+0x80/0x80 [ 1716.668143][T23913] do_syscall_64+0x55/0xb0 [ 1716.668163][T23913] ? clear_bhb_loop+0x40/0x90 [ 1716.677737][T23913] ? clear_bhb_loop+0x40/0x90 [ 1716.677762][T23913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1716.677792][T23913] RIP: 0033:0x7f45d9f9e559 [ 1716.677813][T23913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.677831][T23913] RSP: 002b:00007f45d81f6028 EFLAGS: 00000246 [ 1716.687148][T23913] ORIG_RAX: 000000000000002e [ 1716.687159][T23913] RAX: ffffffffffffffda RBX: 00007f45da225fa0 RCX: 00007f45d9f9e559 [ 1716.687174][T23913] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000009 [ 1716.687188][T23913] RBP: 00007f45da0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.687202][T23913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.687215][T23913] R13: 00007f45da226038 R14: 00007f45da225fa0 R15: 00007fffb1c805d8 [ 1716.696564][T23913] [ 1717.508963][T23926] rxe_eth0 speed is unknown, defaulting to 1000 [ 1718.094486][ C0] net_ratelimit: 7 callbacks suppressed [ 1718.186748][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1718.194240][T14723] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1718.505420][T23939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4827'. [ 1719.019444][T23944] loop3: detected capacity change from 0 to 512 [ 1719.401591][T23944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1719.452182][T23944] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1719.511681][T23941] rxe_eth0 speed is unknown, defaulting to 1000 [ 1719.539529][T23944] EXT4-fs (loop3): 1 truncate cleaned up [ 1719.563094][T23944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1721.399964][T23705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.365152][T23975] rxe_eth0 speed is unknown, defaulting to 1000 [ 1722.922193][T23985] loop4: detected capacity change from 0 to 512 [ 1722.930390][T23985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1722.938511][T23985] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1723.027887][T23985] EXT4-fs (loop4): 1 truncate cleaned up [ 1723.107472][T23985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1723.294256][ T49] net_ratelimit: 10 callbacks suppressed [ 1723.663619][T23995] rxe_eth0 speed is unknown, defaulting to 1000 [ 1724.950899][T24005] Invalid ELF header magic: != ELF [ 1726.784895][T14723] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1728.114677][T24047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1728.135734][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.573584][ C0] net_ratelimit: 7 callbacks suppressed [ 1728.816118][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1729.313151][T24057] rxe_eth0 speed is unknown, defaulting to 1000 [ 1730.420303][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.426820][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.028416][T24078] Invalid ELF header magic: != ELF [ 1732.813480][T14723] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1732.820026][T14723] Bluetooth: hci0: command 0x0406 tx timeout [ 1733.626636][ T41] net_ratelimit: 11 callbacks suppressed [ 1734.565614][T24115] rxe_eth0 speed is unknown, defaulting to 1000 [ 1735.691093][T24125] rxe_eth0 speed is unknown, defaulting to 1000 [ 1736.237624][T24131] loop3: detected capacity change from 0 to 512 [ 1736.261319][T24131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1736.292155][T24131] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1736.318145][T24131] EXT4-fs (loop3): 1 truncate cleaned up [ 1736.338637][T24131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1738.584222][T23705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.629536][T24155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4890'. [ 1738.653141][ C1] net_ratelimit: 10 callbacks suppressed [ 1738.881074][T24159] loop3: detected capacity change from 0 to 512 [ 1738.923083][T24159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1739.004932][T24159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1739.077370][T24159] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1739.193279][T24159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4892'. [ 1739.733912][T23705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.739005][T24170] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1739.933119][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1740.093441][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1740.103236][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1740.113251][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1740.122101][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1740.131656][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1740.307263][T24180] Invalid ELF header magic: != ELF [ 1740.427900][T24174] rxe_eth0 speed is unknown, defaulting to 1000 [ 1741.858894][T24185] loop4: detected capacity change from 0 to 512 [ 1741.901621][T24185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1741.947276][T24185] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1742.086395][T24185] EXT4-fs (loop4): 1 truncate cleaned up [ 1742.146511][T24185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1742.254256][ T5779] Bluetooth: hci2: command tx timeout [ 1743.003523][T24174] chnl_net:caif_netlink_parms(): no params data found [ 1743.138805][T24203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4901'. [ 1743.518989][T24211] Invalid ELF header magic: != ELF [ 1743.703092][ C0] net_ratelimit: 6 callbacks suppressed [ 1744.229605][T24215] loop3: detected capacity change from 0 to 512 [ 1744.283743][T24215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1744.332736][ T5779] Bluetooth: hci2: command tx timeout [ 1744.341846][T24215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1744.382880][T24215] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.390520][T24221] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4905'. [ 1744.466870][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4904'. [ 1744.892371][T23705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.326073][T24234] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4910'. [ 1745.395412][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.553057][T24236] Invalid ELF header magic: != ELF [ 1745.614545][T24174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.642160][T24174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.665250][T24174] bridge_slave_0: entered allmulticast mode [ 1745.673584][T24240] Invalid ELF header magic: != ELF [ 1745.704619][T24174] bridge_slave_0: entered promiscuous mode [ 1745.858640][T24174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.916657][T24174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.933975][T24174] bridge_slave_1: entered allmulticast mode [ 1745.969978][T24174] bridge_slave_1: entered promiscuous mode [ 1746.454775][ T5779] Bluetooth: hci2: command tx timeout [ 1747.003078][T24252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4915'. [ 1747.072211][T24174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.139651][T24174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1747.462148][T24174] team0: Port device team_slave_0 added [ 1747.554799][T24174] team0: Port device team_slave_1 added [ 1747.903994][T24174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.931504][T24174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.957452][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.061557][T24174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.110340][T24174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.134547][T24174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.160469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.194626][T24174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.258383][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.279658][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.306858][ T5871] bridge_slave_1: left allmulticast mode [ 1748.324680][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.353625][ T5871] bridge_slave_0: left allmulticast mode [ 1748.376586][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.492717][T14723] Bluetooth: hci2: command tx timeout [ 1748.952168][T24274] loop3: detected capacity change from 0 to 512 [ 1748.969747][T24274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1748.988607][T24274] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1749.074935][T24274] EXT4-fs (loop3): 1 truncate cleaned up [ 1749.082312][T24274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1749.212419][ C1] net_ratelimit: 10 callbacks suppressed [ 1749.452511][T14723] Bluetooth: hci0: command 0x0406 tx timeout [ 1749.458736][ T5779] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1749.708678][T24281] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4919'. [ 1750.913358][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 1751.108884][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 1751.341599][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.542189][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1751.862019][T24287] Invalid ELF header magic: != ELF [ 1752.679132][T24292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1752.739893][ T5871] bond0 (unregistering): Released all slaves [ 1753.351658][T24174] hsr_slave_0: entered promiscuous mode [ 1753.424776][T24174] hsr_slave_1: entered promiscuous mode [ 1753.453692][T24174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1753.481907][T24174] Cannot create hsr debugfs directory [ 1753.559919][T23705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.418476][ C1] net_ratelimit: 15 callbacks suppressed [ 1754.754806][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4925'. [ 1755.033398][T24317] rxe_eth0 speed is unknown, defaulting to 1000 [ 1755.322748][ T5871] IPVS: stop unused estimator thread 0... [ 1755.945038][T24330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4927'. [ 1756.190794][T24339] Invalid ELF header magic: != ELF [ 1756.519752][T24347] loop3: detected capacity change from 0 to 512 [ 1756.569375][T24347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1756.634889][T24347] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1756.662079][T24342] netlink: 'syz.4.4930': attribute type 2 has an invalid length. [ 1756.692354][T24347] EXT4-fs (loop3): 1 truncate cleaned up [ 1756.754448][T24347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1758.279705][T24369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1758.383265][T24371] loop4: detected capacity change from 0 to 512 [ 1758.420365][T24371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1758.513767][T24371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1758.586021][T24371] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1758.652034][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4935'. [ 1759.329216][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.679275][T24174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1759.766577][T24386] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4937'. [ 1759.788810][T24174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1759.859377][ T1095] net_ratelimit: 8 callbacks suppressed [ 1759.877151][T24174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1760.034711][T24174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1760.350218][T24397] Invalid ELF header magic: != ELF [ 1760.722878][T24174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1760.841144][T24174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.890508][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.897731][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1760.934676][T23705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.964795][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.972082][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.013304][T24174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.141852][T23854] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1762.358259][T23854] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1762.377900][T23854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.420501][T23854] usb 4-1: Product: syz [ 1762.441929][T23854] usb 4-1: Manufacturer: syz [ 1762.446921][T23854] usb 4-1: SerialNumber: syz [ 1762.504482][T24430] loop4: detected capacity change from 0 to 512 [ 1762.531512][T24430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1762.614762][T24430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1762.720353][T24430] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1762.805125][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4943'. [ 1762.915874][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.925279][T23854] rtl8150 4-1:1.0: couldn't reset the device [ 1762.953060][T23854] rtl8150: probe of 4-1:1.0 failed with error -5 [ 1763.015882][T24174] veth0_vlan: entered promiscuous mode [ 1763.023257][T23854] usb 4-1: USB disconnect, device number 2 [ 1763.089252][T24174] veth1_vlan: entered promiscuous mode [ 1763.233387][T24174] veth0_macvtap: entered promiscuous mode [ 1763.410035][T24174] veth1_macvtap: entered promiscuous mode [ 1763.492517][T24174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.504898][T24174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.521938][T24174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.541899][T24174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.557518][T24174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.703921][T24174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.113856][T24174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.174167][T24174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.243527][T24174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.293852][T24174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.395205][T24452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1764.476929][T24455] loop4: detected capacity change from 0 to 512 [ 1764.515553][T24455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1764.542542][T24455] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1764.599659][T24457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1764.631208][T24455] EXT4-fs (loop4): 1 truncate cleaned up [ 1764.640273][T24455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1764.678778][ T6742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.722481][ T6742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.807574][ T6742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.822342][ T6742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.972330][ T11] net_ratelimit: 45 callbacks suppressed [ 1766.191569][T24477] Invalid ELF header magic: != ELF [ 1766.707718][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.707747][T24482] loop3: detected capacity change from 0 to 512 [ 1766.798981][T24482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1766.865315][T24482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1766.878430][T24482] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1766.930182][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4951'. [ 1767.003920][T23705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.419516][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 1767.419532][ T27] audit: type=1326 audit(1792113946.514:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1767.449823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1767.561654][ T27] audit: type=1326 audit(1792113946.514:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1767.672503][ T27] audit: type=1326 audit(1792113946.524:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1767.696534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1767.757949][ T27] audit: type=1326 audit(1792113946.524:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1767.871514][ T27] audit: type=1326 audit(1792113946.524:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1767.946343][T24508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4955'. [ 1767.956945][ T27] audit: type=1326 audit(1792113946.524:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1768.034315][ T27] audit: type=1326 audit(1792113946.524:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1768.151516][ T27] audit: type=1326 audit(1792113946.524:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d9f9e559 code=0x7ffc0000 [ 1768.218120][ T27] audit: type=1326 audit(1792113946.524:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45d9f9e1eb code=0x7ffc0000 [ 1768.321424][ T27] audit: type=1326 audit(1792113946.524:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.3.4953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45d9f9e1eb code=0x7ffc0000 [ 1768.345455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.733373][T24526] loop5: detected capacity change from 0 to 512 [ 1768.760138][T24526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1768.791120][T24526] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1768.830975][T24526] EXT4-fs (loop5): 1 truncate cleaned up [ 1768.843355][T24533] 9pnet_virtio: no channels available for device syz [ 1768.862516][T24526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1769.060191][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4964'. [ 1769.779158][T24547] Invalid ELF header magic: != ELF [ 1770.107680][ T1095] net_ratelimit: 19 callbacks suppressed [ 1770.383745][T24174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.408674][T24553] Invalid ELF header magic: != ELF [ 1770.871408][T23800] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1771.094821][T23800] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1771.126877][T23800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.145298][T23800] usb 4-1: Product: syz [ 1771.149525][T23800] usb 4-1: Manufacturer: syz [ 1771.182542][T23800] usb 4-1: SerialNumber: syz [ 1774.655525][T23800] rtl8150 4-1:1.0: couldn't reset the device [ 1774.671122][T23800] rtl8150: probe of 4-1:1.0 failed with error -5 [ 1774.689490][T23800] usb 4-1: USB disconnect, device number 3 [ 1774.756796][T24583] loop4: detected capacity change from 0 to 512 [ 1774.810832][T24583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1774.870214][T24583] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1774.910542][T24583] EXT4-fs (loop4): 1 truncate cleaned up [ 1774.943316][T24583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1775.106448][ T1095] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 7 [ 1775.759625][T24600] Invalid ELF header magic: != ELF [ 1775.882145][ T6742] net_ratelimit: 28 callbacks suppressed [ 1778.158171][T24617] sctp: [Deprecated]: syz.3.4985 (pid 24617) Use of int in max_burst socket option. [ 1778.158171][T24617] Use struct sctp_assoc_value instead [ 1778.618545][T24623] block nbd5: shutting down sockets [ 1778.682707][T16609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.324993][T24638] Invalid ELF header magic: != ELF [ 1779.360811][T24638] overlay: Unknown parameter '/' [ 1781.290631][ C1] net_ratelimit: 19 callbacks suppressed [ 1781.790254][T24666] loop5: detected capacity change from 0 to 512 [ 1781.843015][T24666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1781.901327][T24666] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1781.937371][T24666] EXT4-fs (loop5): 1 truncate cleaned up [ 1781.964702][T24666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1782.773082][T24694] Invalid ELF header magic: != ELF [ 1782.809610][T24694] overlay: Unknown parameter '/' [ 1785.455165][ T5779] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1785.532423][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1785.920236][T24737] Invalid ELF header magic: != ELF [ 1786.444233][ C0] net_ratelimit: 25 callbacks suppressed [ 1786.574987][T24174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.300957][T24774] Invalid ELF header magic: != ELF [ 1790.029485][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 1790.029502][ T27] audit: type=1326 audit(1792113969.135:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372219e559 code=0x7ffc0000 [ 1790.093402][ T27] audit: type=1326 audit(1792113969.135:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372219e559 code=0x7ffc0000 [ 1790.134961][ T27] audit: type=1326 audit(1792113969.185:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.211884][T24777] [ 1790.214264][T24777] ====================================================== [ 1790.221293][T24777] WARNING: possible circular locking dependency detected [ 1790.228330][T24777] syzkaller #0 Not tainted [ 1790.232754][T24777] ------------------------------------------------------ [ 1790.239783][T24777] syz.5.5030/24777 is trying to acquire lock: [ 1790.245858][T24777] ffff888020763690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0 [ 1790.256084][T24777] [ 1790.256084][T24777] but task is already holding lock: [ 1790.263461][T24777] ffffffff984c6c18 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0xa5c/0x1290 [ 1790.273164][T24777] [ 1790.273164][T24777] which lock already depends on the new lock. [ 1790.273164][T24777] [ 1790.283578][T24777] [ 1790.283578][T24777] the existing dependency chain (in reverse order) is: [ 1790.292604][T24777] [ 1790.292604][T24777] -> #2 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1790.300451][T24777] __mutex_lock+0x135/0xc80 [ 1790.305502][T24777] ip_set_nfnl_get_byindex+0x67/0x230 [ 1790.311526][T24777] set_match_v1_checkentry+0x71/0x230 [ 1790.317493][T24777] xt_check_match+0x49d/0xc60 [ 1790.322722][T24777] __nft_match_init+0x671/0x8b0 [ 1790.328202][T24777] nf_tables_newrule+0x176e/0x2870 [ 1790.333982][T24777] nfnetlink_rcv+0x1133/0x2490 [ 1790.339300][T24777] netlink_unicast+0x7b1/0x930 [ 1790.344609][T24777] netlink_sendmsg+0x8d0/0xbf0 [ 1790.349921][T24777] ____sys_sendmsg+0x61b/0x980 [ 1790.355240][T24777] ___sys_sendmsg+0x2a6/0x360 [ 1790.360469][T24777] __se_sys_sendmsg+0x1d0/0x2c0 [ 1790.365862][T24777] do_syscall_64+0x55/0xb0 [ 1790.370821][T24777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.377268][T24777] [ 1790.377268][T24777] -> #1 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1790.385546][T24777] __mutex_lock+0x135/0xc80 [ 1790.390604][T24777] nf_tables_dumpreset_obj+0x72/0xa0 [ 1790.396440][T24777] netlink_dump+0x738/0xec0 [ 1790.401496][T24777] __netlink_dump_start+0x57c/0x7a0 [ 1790.407242][T24777] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1790.413420][T24777] nf_tables_getobj_reset+0x1e1/0x620 [ 1790.419338][T24777] nfnetlink_rcv_msg+0x89c/0x1290 [ 1790.420240][ T27] audit: type=1326 audit(1792113969.185:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.424888][T24777] netlink_rcv_skb+0x235/0x4c0 [ 1790.454159][T24777] nfnetlink_rcv+0x2c9/0x2490 [ 1790.459379][T24777] netlink_unicast+0x7b1/0x930 [ 1790.464683][T24777] netlink_sendmsg+0x8d0/0xbf0 [ 1790.469988][T24777] ____sys_sendmsg+0x61b/0x980 [ 1790.475289][T24777] ___sys_sendmsg+0x2a6/0x360 [ 1790.480515][T24777] __se_sys_sendmsg+0x1d0/0x2c0 [ 1790.485924][T24777] do_syscall_64+0x55/0xb0 [ 1790.489845][T24782] kcov: kcov_start: t = ffff88807ddeda00, size = 524288, area = ffffc9000ed97000 [ 1790.490862][T24777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.500951][ T27] audit: type=1326 audit(1792113969.185:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.506342][T24777] [ 1790.506342][T24777] -> #0 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1790.538737][T24777] __lock_acquire+0x3a07/0x7eb0 [ 1790.544143][T24777] lock_acquire+0x19e/0x420 [ 1790.549198][T24777] __mutex_lock+0x135/0xc80 [ 1790.554252][T24777] __netlink_dump_start+0xf4/0x7a0 [ 1790.559916][T24777] ip_set_dump+0x15c/0x1f0 [ 1790.564878][T24777] nfnetlink_rcv_msg+0xcaf/0x1290 [ 1790.570041][ C1] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1790.570434][T24777] netlink_rcv_skb+0x235/0x4c0 [ 1790.582288][ T6742] nf_nat: Already setup manip DST for ct ffff88802f31e480 (status bits 0x188) [ 1790.587125][T24777] nfnetlink_rcv+0x2c9/0x2490 [ 1790.596010][ T6742] nf_nat: Already setup manip SRC for ct ffff88802f31e480 (status bits 0x188) [ 1790.601131][T24777] netlink_unicast+0x7b1/0x930 [ 1790.601155][T24777] netlink_sendmsg+0x8d0/0xbf0 [ 1790.613738][ C1] virtqueue callback for ffff88814164b800 (ffffffff85c809b0) [ 1790.615230][T24777] ____sys_sendmsg+0x61b/0x980 [ 1790.620564][ C1] No more buffers in queue [ 1790.627835][T24777] ___sys_sendmsg+0x2a6/0x360 [ 1790.633174][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 1790.637501][T24777] __se_sys_sendmsg+0x1d0/0x2c0 [ 1790.642705][ C1] No more buffers in queue [ 1790.648453][T24777] do_syscall_64+0x55/0xb0 [ 1790.653996][ C1] No more buffers in queue [ 1790.658192][T24777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.663149][ C1] eth0: xmit ffff88807d457000 42:01:0a:80:00:01 [ 1790.667494][T24777] [ 1790.667494][T24777] other info that might help us debug this: [ 1790.667494][T24777] [ 1790.667503][T24777] Chain exists of: [ 1790.667503][T24777] [ 1790.673908][ C1] Added buffer head 11 to ffff88814164ba00 [ 1790.680106][T24777] nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex --> nfnl_subsys_ipset [ 1790.680106][T24777] [ 1790.680130][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1790.680136][T24777] Possible unsafe locking scenario: [ 1790.680136][T24777] [ 1790.680142][T24777] CPU0 CPU1 [ 1790.680147][T24777] ---- ---- [ 1790.680152][T24777] lock(nfnl_subsys_ipset); [ 1790.690665][ C1] Sent skb ffff88807d457000 [ 1790.696420][T24777] lock(&nft_net->commit_mutex [ 1790.702253][ C1] No more buffers in queue [ 1790.712843][T24777] ); [ 1790.712849][T24777] lock(nfnl_subsys_ipset); [ 1790.712863][T24777] lock(nlk_cb_mutex-NETFILTER); [ 1790.712876][T24777] [ 1790.712876][T24777] *** DEADLOCK *** [ 1790.712876][T24777] [ 1790.730143][ T27] audit: type=1326 audit(1792113969.185:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.733017][T24777] 1 lock held by syz.5.5030/24777: [ 1790.733030][T24777] #0: ffffffff984c6c18 (nfnl_subsys_ipset [ 1790.740353][ T27] audit: type=1326 audit(1792113969.185:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.742982][T24777] ){+.+.}-{3:3}, at: nfnetlink_rcv_msg+0xa5c/0x1290 [ 1790.747512][ T27] audit: type=1326 audit(1792113969.185:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.754820][T24777] [ 1790.754820][T24777] stack backtrace: [ 1790.754827][T24777] CPU: 0 PID: 24777 Comm: syz.5.5030 Not tainted syzkaller #0 [ 1790.754845][T24777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1790.754856][T24777] Call Trace: [ 1790.754863][T24777] [ 1790.754871][T24777] dump_stack_lvl+0x18c/0x250 [ 1790.754897][T24777] ? load_image+0x420/0x420 [ 1790.754921][T24777] ? show_regs_print_info+0x20/0x20 [ 1790.754943][T24777] ? print_circular_bug+0x12b/0x1a0 [ 1790.754970][T24777] check_noncircular+0x2fc/0x400 [ 1790.754992][T24777] ? look_up_lock_class+0x75/0x140 [ 1790.755017][T24777] ? print_deadlock_bug+0x5d0/0x5d0 [ 1790.755039][T24777] ? lockdep_lock+0xf5/0x230 [ 1790.809968][ T27] audit: type=1326 audit(1792113969.185:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.811244][T24777] ? _find_first_zero_bit+0xd6/0x100 [ 1790.835440][T24785] kcov: kcov_start: t = ffff888022673c00, size = 524288, area = ffffc90016699000 [ 1790.840975][T24777] __lock_acquire+0x3a07/0x7eb0 [ 1790.858474][ T27] audit: type=1326 audit(1792113969.185:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.4.5028" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f372219e1eb code=0x7ffc0000 [ 1790.871506][T24777] ? __lock_acquire+0x135d/0x7eb0 [ 1790.871536][T24777] ? verify_lock_unused+0x140/0x140 [ 1790.871556][T24777] ? verify_lock_unused+0x140/0x140 [ 1790.871585][T24777] lock_acquire+0x19e/0x420 [ 1790.871605][T24777] ? __netlink_dump_start+0xf4/0x7a0 [ 1791.020657][T24786] kcov: kcov_start: t = ffff88802af48000, size = 524288, area = ffffc9001909c000 [ 1791.023053][T24777] ? __might_sleep+0xe0/0xe0 [ 1791.046834][T24777] ? read_lock_is_recursive+0x20/0x20 [ 1791.051540][T24786] kcov: kcov_task_exit: t = ffff88802af48000, kcov->t = ffff88802af48000 [ 1791.052222][T24777] ? __lock_acquire+0x7eb0/0x7eb0 [ 1791.061011][T24785] kcov: kcov_task_exit: t = ffff888022673c00, kcov->t = ffff888022673c00 [ 1791.065628][T24777] __mutex_lock+0x135/0xc80 [ 1791.076985][T24767] kcov: kcov_task_exit: t = ffff888029e3bc00, kcov->t = ffff888029e3bc00 [ 1791.078505][T24777] ? __netlink_dump_start+0xf4/0x7a0 [ 1791.092242][T24777] ? netlink_lookup+0x30/0x200 [ 1791.097032][T24777] ? __netlink_dump_start+0xf4/0x7a0 [ 1791.102333][T24777] ? __lock_acquire+0x7eb0/0x7eb0 [ 1791.107380][T24777] ? mutex_lock_nested+0x20/0x20 [ 1791.112361][T24777] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1791.118545][T24777] ? netlink_lookup+0x30/0x200 [ 1791.123351][T24777] ? netlink_lookup+0x30/0x200 [ 1791.128144][T24777] __netlink_dump_start+0xf4/0x7a0 [ 1791.133382][T24777] ? ip_set_dump+0x114/0x1f0 [ 1791.138003][T24777] ip_set_dump+0x15c/0x1f0 [ 1791.142445][T24777] ? ip_set_swap+0x820/0x820 [ 1791.147052][T24777] ? ip_set_destroy_set_rcu+0xb0/0xb0 [ 1791.152444][T24777] ? ip_set_dump_start+0x420/0x420 [ 1791.157581][T24777] ? ip_set_dump_do+0x17a0/0x17a0 [ 1791.162629][T24777] nfnetlink_rcv_msg+0xcaf/0x1290 [ 1791.167669][T24777] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1791.173759][T24777] ? nfnetlink_rcv_msg+0x228/0x1290 [ 1791.179011][T24777] ? nfnetlink_unbind+0x160/0x160 [ 1791.184066][T24777] ? __dev_queue_xmit+0x1be8/0x37e0 [ 1791.189280][T24777] ? __netlink_deliver_tap+0x579/0x7f0 [ 1791.194762][T24777] ? netlink_deliver_tap+0x19c/0x1b0 [ 1791.200067][T24777] ? netlink_unicast+0x77b/0x930 [ 1791.205022][T24777] ? netlink_sendmsg+0x8d0/0xbf0 [ 1791.209979][T24777] ? ____sys_sendmsg+0x61b/0x980 [ 1791.209997][ C1] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 1791.214915][T24777] ? ___sys_sendmsg+0x2a6/0x360 [ 1791.227331][ T1095] nf_nat: Already setup manip DST for ct ffff88807850cc00 (status bits 0x188) [ 1791.231173][T24777] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 1791.231200][T24777] ? do_syscall_64+0x55/0xb0 [ 1791.240069][ T1095] nf_nat: Already setup manip SRC for ct ffff88807850cc00 (status bits 0x188) [ 1791.245038][T24777] netlink_rcv_skb+0x235/0x4c0 [ 1791.263336][T24777] ? nfnetlink_unbind+0x160/0x160 [ 1791.268393][T24777] ? netlink_ack+0x1160/0x1160 [ 1791.273187][T24777] ? apparmor_capable+0x137/0x1a0 [ 1791.278232][T24777] ? bpf_lsm_capable+0x9/0x10 [ 1791.282929][T24777] ? security_capable+0x89/0xb0 [ 1791.287798][T24777] nfnetlink_rcv+0x2c9/0x2490 [ 1791.292503][T24777] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1791.297897][T24777] ? lockdep_hardirqs_on+0x98/0x150 [ 1791.303122][T24777] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1791.308511][T24777] ? _local_bh_enable+0xa0/0xa0 [ 1791.313385][T24777] ? __dev_queue_xmit+0x272/0x37e0 [ 1791.318522][T24777] ? __dev_queue_xmit+0x1329/0x37e0 [ 1791.323738][T24777] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1791.329299][T24777] ? __dev_queue_xmit+0x272/0x37e0 [ 1791.334449][T24777] ? ref_tracker_free+0x686/0x830 [ 1791.339511][T24777] ? refcount_inc+0x70/0x70 [ 1791.344033][T24777] ? __asan_memcpy+0x40/0x70 [ 1791.348641][T24777] ? __skb_clone+0x5c/0x6c0 [ 1791.353167][T24777] ? __skb_clone+0x446/0x6c0 [ 1791.357791][T24777] ? netlink_deliver_tap+0x2e/0x1b0 [ 1791.363018][T24777] ? __lock_acquire+0x7eb0/0x7eb0 [ 1791.365221][T24782] kcov: kcov_task_exit: t = ffff88807ddeda00, kcov->t = ffff88807ddeda00 [ 1791.368050][T24777] ? netlink_deliver_tap+0x2e/0x1b0 [ 1791.381646][T24777] netlink_unicast+0x7b1/0x930 [ 1791.386460][T24777] netlink_sendmsg+0x8d0/0xbf0 [ 1791.391250][T24777] ? netlink_getsockopt+0x590/0x590 [ 1791.396479][T24777] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1791.402050][T24777] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1791.407360][T24777] ? security_socket_sendmsg+0x80/0xa0 [ 1791.412839][T24777] ? netlink_getsockopt+0x590/0x590 [ 1791.418059][T24777] ____sys_sendmsg+0x61b/0x980 [ 1791.422858][T24777] ? __asan_memset+0x22/0x40 [ 1791.427472][T24777] ? __sys_sendmsg_sock+0x30/0x30 [ 1791.432515][T24777] ? __import_iovec+0x5f2/0x850 [ 1791.437399][T24777] ? import_iovec+0x73/0xa0 [ 1791.441931][T24777] ___sys_sendmsg+0x2a6/0x360 [ 1791.446639][T24777] ? __sys_sendmsg+0x2b0/0x2b0 [ 1791.451460][T24777] __se_sys_sendmsg+0x1d0/0x2c0 [ 1791.456347][T24777] ? __x64_sys_sendmsg+0x80/0x80 [ 1791.461329][T24777] ? lockdep_hardirqs_on+0x98/0x150 [ 1791.466551][T24777] do_syscall_64+0x55/0xb0 [ 1791.470998][T24777] ? clear_bhb_loop+0x40/0x90 [ 1791.475693][T24777] ? clear_bhb_loop+0x40/0x90 [ 1791.480390][T24777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1791.486313][T24777] RIP: 0033:0x7f446459e559 [ 1791.490756][T24777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.510475][T24777] RSP: 002b:00007f44627f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1791.518925][T24777] RAX: ffffffffffffffda RBX: 00007f4464825fa0 RCX: 00007f446459e559 [ 1791.526918][T24777] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 000000000000000a [ 1791.534915][T24777] RBP: 00007f44646358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1791.542909][T24777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1791.550901][T24777] R13: 00007f4464826038 R14: 00007f4464825fa0 R15: 00007ffc0d4ed518 [ 1791.558904][T24777] [ 1791.564957][ C0] virtqueue callback for ffff8880223ec600 (ffffffff85c809b0) [ 1791.572418][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1791.579505][ T5757] No more buffers in queue [ 1791.579819][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1791.584250][ T5757] eth0: xmit ffff888044143770 42:01:0a:80:00:01 [ 1791.591106][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1791.594777][ C0] No more buffers in queue [ 1791.597435][ T5757] Added buffer head 11 to ffff88814164ba00 [ 1791.604391][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1791.604416][ C0] virtqueue callback for ffff8880223ec600 (ffffffff85c809b0) [ 1791.608977][ C1] Sent skb ffff888044143770 [ 1791.614659][ C0] Receiving skb proto 0x0800 len 172 type 0 [ 1791.621984][ C1] No more buffers in queue [ 1791.644376][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1791.650240][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1791.656113][ C0] Receiving skb proto 0x0800 len 172 type 0 [ 1791.662092][ C0] Receiving skb proto 0x0800 len 172 type 0 [ 1791.668066][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 1791.670075][ C1] No more buffers in queue [ 1791.673910][ C0] No more buffers in queue [ 1791.678274][ C1] eth0: xmit ffff8880441439f0 42:01:0a:80:00:01 [ 1791.678297][ C1] Added buffer head 11 to ffff88814164ba00 [ 1791.682710][ C0] virtqueue callback for ffff8880223ec600 (ffffffff85c809b0) [ 1791.682710][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1791.709571][ C1] Sent skb ffff8880441439f0 [ 1791.714090][ C1] No more buffers in queue [ 1791.718563][ C0] No more buffers in queue [ 1791.723032][ C0] eth0: xmit ffff88807a558c80 42:01:0a:80:00:01 [ 1791.729328][ C0] Added buffer head 11 to ffff88814164ba00 [ 1791.729364][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1791.735153][ C0] virtqueue callback for ffff8880223ec600 (ffffffff85c809b0) [ 1791.749889][ C1] Sent skb ffff88807a558c80 [ 1791.750185][ C0] No more buffers in queue [ 1791.754431][ C1] No more buffers in queue [ 1791.758813][ C0] eth0: xmit ffff88807a558b40 42:01:0a:80:00:01 [ 1791.769463][ C0] Added buffer head 4 to ffff88814164b600 [ 1791.775184][ C0] virtqueue callback for ffff8880223ec600 (ffffffff85c809b0) [ 1791.775199][ C0] virtqueue callback for ffff88814164b600 (ffffffff85c80aa0) [ 1791.790018][ C1] net_ratelimit: 25 callbacks suppressed [ 1791.790029][ C1] wireguard: wg0: Sending keepalive packet to peer 81 ([::1]:20002/0%0) [ 1791.791447][ C0] Sent skb ffff88807a558b40 [ 1791.796262][ C1] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0) [ 1791.804063][ C0] No more buffers in queue [ 1791.808592][ C1] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0) [ 1791.818764][ C0] No more buffers in queue [ 1791.834859][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 1791.840754][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 1791.846617][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 1791.851288][T24790] kcov: kcov_start: t = ffff888079ee9e00, size = 524288, area = ffffc90005019000 [ 1791.852462][ C0] No more buffers in queue [ 1791.866033][ C0] Added buffer head 4059 to ffff8880223ec600 [ 1791.870444][ T5757] No more buffers in queue [ 1791.872048][ C0] Added buffer head 4058 to ffff8880223ec600 [ 1791.876425][ T5757] eth0: xmit ffff888063046640 42:01:0a:80:00:01 [ 1791.876446][ T5757] Added buffer head 11 to ffff88814164ba00 [ 1791.882433][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1791.882432][ C0] virtqueue callback for ffff8880223ec600 (ffffffff85c809b0) [ 1791.882454][ C0] Added buffer head 4057 to ffff8880223ec600 [ 1791.888713][ C1] Sent skb ffff888063046640 [ 1791.894549][ C0] Added buffer head 4056 to ffff8880223ec600 [ 1791.901917][ C1] No more buffers in queue [ 1791.909276][ C0] Added buffer head 4055 to ffff8880223ec600 [ 1791.920114][ C1] No more buffers in queue [ 1791.925751][ C0] Added buffer head 4054 to ffff8880223ec600 [ 1791.930158][ C1] eth0: xmit ffff888044143770 42:01:0a:80:00:01 [ 1791.936129][ C0] Added buffer head 4053 to ffff8880223ec600 [ 1791.940524][ C1] Added buffer head 11 to ffff88814164ba00 [ 1791.946482][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1791.946497][ C0] virtqueue callback for ffff8880223ec600 (ffffffff85c809b0) [ 1791.946515][ C0] Added buffer head 4052 to ffff8880223ec600 [ 1791.952866][ C1] Sent skb ffff888044143770 [ 1791.958717][ C0] Added buffer head 3942 to ffff8880223ec600 [ 1791.964507][ C1] No more buffers in queue [ 1791.971875][ C0] Added buffer head 3941 to ffff8880223ec600 [ 1791.990160][T24791] kcov: kcov_start: t = ffff88807cf01e00, size = 524288, area = ffffc9000ed97000 [ 1791.995785][ C0] Added buffer head 3940 to ffff8880223ec600 [ 1792.011359][T24793] kcov: kcov_start: t = ffff888064c59e00, size = 524288, area = ffffc9000f4b9000 [ 1792.015315][ C0] Added buffer head 3939 to ffff8880223ec600 [ 1792.022488][T24777] dump type, flag: 1 0 index: 0 [ 1792.030380][ C0] Added buffer head 4047 to ffff8880223ec600 [ 1792.040208][T24792] kcov: kcov_start: t = ffff888064c58000, size = 524288, area = ffffc9001cfca000 [ 1792.041221][ C0] Added buffer head 4046 to ffff8880223ec600 [ 1792.047201][T24792] MPTCP: sk=ffff88805d0a6400, how=2 [ 1792.056325][ C0] Added buffer head 4045 to ffff8880223ec600 [ 1792.056344][ C0] Added buffer head 4044 to ffff8880223ec600 [ 1792.056357][ C0] Added buffer head 4043 to ffff8880223ec600 [ 1792.056370][ C0] Added buffer head 4042 to ffff8880223ec600 [ 1792.056384][ C0] Added buffer head 4041 to ffff8880223ec600 [ 1792.080742][T24794] kcov: kcov_start: t = ffff888064c5bc00, size = 524288, area = ffffc9001d3cb000 [ 1792.085588][ C0] Added buffer head 4040 to ffff8880223ec600 [ 1792.113005][ C0] Added buffer head 3931 to ffff8880223ec600 [ 1792.117380][T24796] kcov: kcov_start: t = ffff88806f381e00, size = 524288, area = ffffc9001d7cc000 [ 1792.119138][ C0] Added buffer head 3930 to ffff8880223ec600 [ 1792.134274][ C0] Added buffer head 3929 to ffff8880223ec600 [ 1792.134493][T24795] kcov: kcov_start: t = ffff888064c5da00, size = 524288, area = ffffc90016298000 [ 1792.140318][ C0] Added buffer head 3928 to ffff8880223ec600 [ 1792.155405][ C0] Added buffer head 3927 to ffff8880223ec600 [ 1792.161445][ C0] Added buffer head 3926 to ffff8880223ec600 [ 1792.167476][ C0] Added buffer head 3925 to ffff8880223ec600 [ 1792.173520][ C0] Added buffer head 3924 to ffff8880223ec600 [ 1792.179551][ C0] Added buffer head 3923 to ffff8880223ec600 [ 1792.185583][ C0] Added buffer head 4031 to ffff8880223ec600 [ 1792.191616][ C0] Added buffer head 4030 to ffff8880223ec600 [ 1792.197633][ C0] Added buffer head 4029 to ffff8880223ec600 [ 1792.203747][ C0] Added buffer head 3919 to ffff8880223ec600 [ 1792.214340][ C0] wireguard: wg0: Handshake for peer 1 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1792.226316][ C0] No more buffers in queue [ 1792.230825][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 1792.236675][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 1792.242531][ C0] No more buffers in queue [ 1792.254059][T16032] Added buffer head 0 to ffff88801e651200 [ 1792.259967][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1792.267378][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1792.274321][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1792.284786][ C1] wireguard: wg1: Receiving keepalive packet from peer 77 ([::1]:20001/0%0) [ 1792.286025][T16032] Added buffer head 0 to ffff88801e651200 [ 1792.299375][ C0] wireguard: wg2: Packet has unallowed src IP (fe80::42) from peer 85 ([::1]:20001/0%0) [ 1792.309823][ T1292] No more buffers in queue [ 1792.314312][ T1292] eth0: xmit ffff88807ed578c0 ff:ff:ff:ff:ff:ff [ 1792.320598][T24770] kcov: kcov_task_exit: t = ffff888029e38000, kcov->t = ffff888029e38000 [ 1792.320621][ T1292] Added buffer head 11 to ffff88814164ba00 [ 1792.329022][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1792.330690][ T6742] wireguard: wg0: Sending handshake initiation to peer 1 ([::1]:20002/0%0) [ 1792.334949][ C1] Sent skb ffff88807ed578c0 [ 1792.343041][T24777] dump type, flag: 3 0 index: 0 [ 1792.350855][ C1] No more buffers in queue [ 1792.351464][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.355581][T24797] kcov: kcov_start: t = ffff888019725a00, size = 524288, area = ffffc9001586a000 [ 1792.360285][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.387272][T24799] kcov: kcov_start: t = ffff888029625a00, size = 524288, area = ffffc90015c6b000 [ 1792.397660][ C1] nf_nat: Already setup manip DST for ct ffff888024bf7b00 (status bits 0x188) [ 1792.406597][ C1] nf_nat: Already setup manip SRC for ct ffff888024bf7b00 (status bits 0x188) [ 1792.425929][T24792] MPTCP: msk=ffff88805d0a6400 snd_data_fin_enable=0 shutdown=3 state=9 pending=0 [ 1792.436056][ T6742] nf_nat: Already setup manip DST for ct ffff88807850c180 (status bits 0x188) [ 1792.444983][ T6742] nf_nat: Already setup manip SRC for ct ffff88807850c180 (status bits 0x188) [ 1792.456112][T24792] MPTCP: msk=ffff88805d0a6400 snd_data_fin_enable=1 pending=0 snd_nxt=12981985226768465051 write_seq=12981985226768465052 [ 1792.482344][T24800] kcov: kcov_start: t = ffff888024701e00, size = 524288, area = ffffc9001ad53000 [ 1792.657447][T24801] kcov: kcov_start: t = ffff888024703c00, size = 524288, area = ffffc9001b154000 [ 1792.749923][T24799] sctp: sctp_init_sock: sk:ffff88807c05ec00 [ 1792.757868][T24799] sctp: sctp_setsockopt: sk:ffff88807c05ec00, optname:11 [ 1792.768802][T24798] kcov: kcov_start: t = ffff888023389e00, size = 524288, area = ffffc9001dbcd000 [ 1792.790400][T24792] MPTCP: Fallback [ 1792.809957][ C1] wireguard: wg0: Sending keepalive packet to peer 81 ([::1]:20002/0%0) [ 1792.822753][T24768] kobject: 'kvm' (ffff88801cadd000): kobject_uevent_env [ 1792.823910][T16032] MPTCP: msk=ffff88805d0a6400 snd_data_fin_enable=1 pending=0 snd_nxt=12981985226768465052 write_seq=12981985226768465052 [ 1792.836824][T24768] kobject: 'kvm' (ffff88801cadd000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1792.843178][T24777] MPTCP: msk=ffff88805d0a6400 rx queue empty=1:1 copied=0 [ 1792.852796][ C1] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0) [ 1792.874539][T24776] MPTCP: msk=ffff88805d0a6400 state=7 [ 1792.884223][T24776] MPTCP: msk=ffff88805d0a6400 [ 1792.902065][T24778] sctp: sctp_close: sk:ffff88807c05ec00, timeout:0 [ 1792.908704][T24778] sctp: sctp_destroy_sock: sk:ffff88807c05ec00 [ 1792.915772][T24778] uart_close(3) called [ 1792.920358][T24778] uart_wait_until_sent(3), jiffies=4295116395, expire=4295116401... [ 1792.930600][T24776] MPTCP: msk=ffff88805d0a6400 [ 1792.932101][T24779] kcov: kcov_task_exit: t = ffff88801c3c0000, kcov->t = ffff88801c3c0000 [ 1792.935522][T24797] kcov: kcov_task_exit: t = ffff888019725a00, kcov->t = ffff888019725a00 [ 1792.944808][T24800] kcov: kcov_task_exit: t = ffff888024701e00, kcov->t = ffff888024701e00 [ 1792.952697][T24799] kcov: kcov_task_exit: t = ffff888029625a00, kcov->t = ffff888029625a00 [ 1792.960902][T24801] kcov: kcov_task_exit: t = ffff888024703c00, kcov->t = ffff888024703c00 [ 1792.977638][ C0] wireguard: wg0: Sending keepalive packet to peer 76 ([::1]:20003/0%0) [ 1793.025883][T24790] kcov: kcov_task_exit: t = ffff888079ee9e00, kcov->t = ffff888079ee9e00 [ 1793.034816][T24793] kcov: kcov_task_exit: t = ffff888064c59e00, kcov->t = ffff888064c59e00 [ 1793.043437][T24795] kcov: kcov_task_exit: t = ffff888064c5da00, kcov->t = ffff888064c5da00 [ 1793.066693][ C1] wireguard: wg2: Receiving keepalive packet from peer 79 ([::1]:20001/0%0) [ 1793.081521][T24796] kcov: kcov_task_exit: t = ffff88806f381e00, kcov->t = ffff88806f381e00 [ 1793.090238][T24794] kcov: kcov_task_exit: t = ffff888064c5bc00, kcov->t = ffff888064c5bc00 [ 1793.098957][T24792] kcov: kcov_task_exit: t = ffff888064c58000, kcov->t = ffff888064c58000 [ 1793.099989][T24777] kcov: kcov_task_exit: t = ffff888069f61e00, kcov->t = ffff888069f61e00 [ 1793.117054][T24798] kcov: kcov_task_exit: t = ffff888023389e00, kcov->t = ffff888023389e00 [ 1793.130078][ C0] nf_nat: Already setup manip DST for ct ffff888024b78780 (status bits 0x188) [ 1793.139033][ C0] nf_nat: Already setup manip SRC for ct ffff888024b78780 (status bits 0x188) [ 1793.148078][ C0] nf_nat: Already setup manip DST for ct ffff888024b78780 (status bits 0x188) [ 1793.157041][ C0] nf_nat: Already setup manip SRC for ct ffff888024b78780 (status bits 0x188) [ 1793.220859][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775801 percpu 8 [ 1793.259908][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1793.267358][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1793.274315][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1793.281581][T16032] Added buffer head 0 to ffff88801e651200 [ 1793.298498][T24791] kcov: kcov_task_exit: t = ffff88807cf01e00, kcov->t = ffff88807cf01e00 [ 1793.770207][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 1794.259845][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1794.267270][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1794.274206][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1794.281391][T16032] Added buffer head 0 to ffff88801e651200 [ 1794.409838][ C0] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 16) [ 1794.421563][ C0] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 5) [ 1794.434828][ T5099] sd 0:0:1:0: cmd ffff888024e7cf50 CDB: 0x2a [ 1794.440971][ T5099] Added buffer head 62 to ffff8880223c7200 [ 1794.450070][ C1] virtqueue callback for ffff8880223c7200 (ffffffff857fec60) [ 1794.457479][ C1] sd 0:0:1:0: cmd ffff888024e7cf50 response 0 status 0x0 sense_len 0 [ 1794.465532][ C1] No more buffers in queue [ 1794.470344][T12647] sd 0:0:1:0: cmd ffff888024141110 CDB: 0x35 [ 1794.476388][T12647] Added buffer head 62 to ffff8880223c7200 [ 1794.482479][ C1] virtqueue callback for ffff8880223c7200 (ffffffff857fec60) [ 1794.489854][ C1] sd 0:0:1:0: cmd ffff888024141110 response 0 status 0x0 sense_len 0 [ 1794.497910][ C1] No more buffers in queue [ 1794.502596][ T24] sd 0:0:1:0: cmd ffff888024e7d310 CDB: 0x2a [ 1794.508594][ T24] Added buffer head 62 to ffff8880223c7200 [ 1794.530407][ C1] virtqueue callback for ffff8880223c7200 (ffffffff857fec60) [ 1794.537802][ C1] sd 0:0:1:0: cmd ffff888024e7d310 response 0 status 0x0 sense_len 0 [ 1794.545875][ C1] No more buffers in queue [ 1794.550829][ T24] sd 0:0:1:0: cmd ffff888024141110 CDB: 0x35 [ 1794.556872][ T24] Added buffer head 62 to ffff8880223c7200 [ 1794.562888][ C1] virtqueue callback for ffff8880223c7200 (ffffffff857fec60) [ 1794.570274][ C1] sd 0:0:1:0: cmd ffff888024141110 response 0 status 0x0 sense_len 0 [ 1794.578327][ C1] No more buffers in queue [ 1794.969865][ C1] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 1794.981753][T24580] nf_nat: Already setup manip DST for ct ffff88807850c300 (status bits 0x188) [ 1794.990785][T24580] nf_nat: Already setup manip SRC for ct ffff88807850c300 (status bits 0x188) [ 1795.259757][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1795.267208][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1795.274138][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1795.281327][T16032] Added buffer head 0 to ffff88801e651200 [ 1796.259674][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1796.267146][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1796.274090][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1796.282043][T16032] Added buffer head 0 to ffff88801e651200 [ 1796.329703][ C1] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1796.341689][T24580] nf_nat: Already setup manip DST for ct ffff88802f31e480 (status bits 0x188) [ 1796.350618][T24580] nf_nat: Already setup manip SRC for ct ffff88802f31e480 (status bits 0x188) [ 1796.612629][ C1] virtqueue callback for ffff88814164b800 (ffffffff85c809b0) [ 1796.620070][ C1] No more buffers in queue [ 1796.624530][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 1796.630366][ C1] No more buffers in queue [ 1796.635054][ C1] No more buffers in queue [ 1796.639455][ C1] eth0: xmit ffff888026926dc0 42:01:0a:80:00:01 [ 1796.645750][ C1] Added buffer head 11 to ffff88814164ba00 [ 1796.651574][ C1] virtqueue callback for ffff88814164ba00 (ffffffff85c80aa0) [ 1796.659185][ C1] Sent skb ffff888026926dc0 [ 1796.664765][ C1] No more buffers in queue [ 1796.969695][ C1] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 1796.969742][ C0] net_ratelimit: 22 callbacks suppressed [ 1796.969753][ C0] wireguard: wg1: Sending keepalive packet to peer 78 (127.0.0.1:20003) [ 1796.989061][T15880] wireguard: wg1: Sending handshake initiation to peer 3 ([::1]:20001/0%0) [ 1796.997535][ T12] IPv6: now = 4295116802, schedule = 4295128900, rounded schedule = 4295129000 => 4295128900 [ 1797.004930][T15880] nf_nat: Already setup manip DST for ct ffff88807850cc00 (status bits 0x188) [ 1797.023239][T15880] nf_nat: Already setup manip SRC for ct ffff88807850cc00 (status bits 0x188) [ 1797.032342][ C1] wireguard: wg2: Receiving keepalive packet from peer 80 (127.0.0.1:20002) [ 1797.059723][ C1] wireguard: wg0: Sending keepalive packet to peer 81 ([::1]:20002/0%0) [ 1797.068291][ C1] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0) [ 1797.259581][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1797.267014][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1797.273962][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1797.281173][T16032] Added buffer head 0 to ffff88801e651200 [ 1797.449696][ C1] wireguard: wg0: Sending keepalive packet to peer 75 ([::1]:20002/0%0) [ 1797.461035][ C0] wireguard: wg1: Receiving keepalive packet from peer 77 ([::1]:20001/0%0) [ 1797.849630][ C1] wireguard: wg0: Handshake for peer 1 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1797.861322][ T12] wireguard: wg0: Sending handshake initiation to peer 1 ([::1]:20002/0%0) [ 1797.870317][ T12] nf_nat: Already setup manip DST for ct ffff88807850c180 (status bits 0x188) [ 1797.879201][ T12] nf_nat: Already setup manip SRC for ct ffff88807850c180 (status bits 0x188) [ 1798.089648][ C1] wireguard: wg0: Sending keepalive packet to peer 81 ([::1]:20002/0%0) [ 1798.098983][ C0] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0) [ 1798.259498][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1798.266920][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1798.273857][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1798.281044][T16032] Added buffer head 0 to ffff88801e651200 [ 1799.259412][ C0] virtqueue callback for ffff88801e651200 (ffffffff84a0d580) [ 1799.266855][ C0] virtqueue interrupt with no work for ffff88801e651000 [ 1799.273788][ C0] virtqueue interrupt with no work for ffff88801e650e00 [ 1799.281057][T16032] Added buffer head 0 to ffff88801e651200 [ 1799.529601][ C1] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 6) [ 1800.169485][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 17)