last executing test programs: 2m44.435733178s ago: executing program 1 (id=1598): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000000) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) 2m44.277376871s ago: executing program 1 (id=1601): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2m41.771049669s ago: executing program 1 (id=1615): socket$inet(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r1, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4, @ANYBLOB="1308010000000200"], 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 2m41.591692764s ago: executing program 1 (id=1619): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m41.466579676s ago: executing program 1 (id=1622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000700000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079001a0000"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.050504896s ago: executing program 1 (id=1625): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 2m40.718928354s ago: executing program 32 (id=1625): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000340)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 43.524429906s ago: executing program 4 (id=2193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x5, 0x1}, @loopback, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 43.116029475s ago: executing program 4 (id=2198): add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4a, &(0x7f0000000500), 0x4) 41.375803385s ago: executing program 4 (id=2200): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 41.227713398s ago: executing program 4 (id=2203): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./bus\x00', 0x3820420, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 39.871082239s ago: executing program 4 (id=2207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001500)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x5, 0x30, 0x64, 0x0, 0x1, 0x1, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1a}}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x4, 0x6, {0x5, 0x4, 0x2, 0x36, 0x9, 0x66, 0x2, 0xd7, 0x1d, 0x7ff, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) 37.901543834s ago: executing program 4 (id=2211): socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff003, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 21.998915218s ago: executing program 33 (id=2211): socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff003, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 13.451576923s ago: executing program 0 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20005891}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rthdr_2292={{0x18, 0x29, 0x39, {0xff, 0x0, 0x2, 0x1}}}], 0x18}}], 0x1, 0x4040084) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x400, 0x1422, 0xa}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x3, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xffffffffffffffff], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.11314004s ago: executing program 0 (id=2298): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myev', 0xe) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='p:mygrou-/myevent ./dummy:0', 0x1b) 13.023944633s ago: executing program 0 (id=2299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xb3e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.616875652s ago: executing program 0 (id=2303): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x2004c040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x7000, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.314799459s ago: executing program 0 (id=2305): syz_emit_ethernet(0x15, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) fanotify_init(0x200, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 3.595896198s ago: executing program 2 (id=2378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffb000/0x2000)=nil) 3.156766418s ago: executing program 2 (id=2382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 2.870762465s ago: executing program 2 (id=2386): timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000), 0x1, 0x5a6, &(0x7f0000000a00)="$eJzs3EFv29YdAPBHR3YcD0gLFGtSNwc23SEDVldSFgdGgQEaTdlsZVEg6SI5DcXiFMHsbmg7YM0tl2wD9iW63fYJdto3KnbcsQNFKXVqS3Y2xw7W3w9I3hP5J9//UcL7Q0yoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEKNlstztRGGTD3XvxbMlmke/M2T893z+ea+aMG0JU/wnLy2Gp2XT9je92/7j+62a41ry6FpbrZjk8/tGbr3/wRmthevychM7B4iTZ/b3P5wdG4dvovJJ6ObaPu9SteCsdZmWe7fS20jgr83hjfb39/na/jPvZIC3vl1W6Eyet0KvyIr6V/DTubGzcjtO1+/nucGuzN0inG+++12231+MP10Zpryjz4fsfrpXJdjYYZMOtcUy9u465W38QP8qq+PKza3/7pNwfPtrf65wmqHtSULfd7XY63W5n/c7GnbvtduvIhvb3hCMRF/2h5TxFk4/p4W1nsGrD2ZjWfwAAAOD/VzS+x15//18M18e9fvRt46JTAwAAAM7I+F/+r/0tqr//hxCuh6ifDdL2oYhLF5YbAAAAcDb+dOIzduXocvTPf4WiWIyejO79JDro1XG9g8l9gSO3B6p+K7o6Ocm4WW9NXiXpjeitJuitafQ3k+bhSXlEL5DA6owEwl/CahOz+qBpH0z3NKOs9LNBupbkgw86ode7ulCl96rff/boD2E8/T8Pd65G4eGj/b21X/92/8E4lyf1WZ4cTB6gOPIcxZxcvhz/f4vxPZfnZ/x1c6rFOpdoMu5KM2778PwXmsMX5o65EkL4bsyn4e0m5u2Vpl15fv7L9ZidtRmz33gtjLPo/I8zfxpuNDE3br1bN+/eOiaL7nFZTJ4UHWfRPZzFqa7Ff5HF7VnXonlHLocQTpXFlVlZAFyUh7Oq0LP6//2623q2yi09f6o5a+20ul+ZhNajTPtnV92fhneamHdWxwtra/WYFb29FoU5K/q0xj5ZOlTdrhy5bHOy+Hu42cTcnAYfW2N/8dp43PB6M24rNFV1XPy/nllVy0E3qt+oS18e/C68+cVXj997dPDJp3uf7n3W7d5eb/+83b7TDYvjaUyaOZkC8MOVFt9EK9Ufo6LIRr/qbGx0etV2Ghd58lFcZJtbaZwNq7RItnvDrTQeFXmVJ/mg7nycbaZlXO6ORnlRxf28iEd5md0b//JLPPnplzINPxtWWVKOBmmvTOMkH1a9pIo3szKJR7u/HGTldlqMDy5HaZL1s6RXZfkwbuW7f03StTgu0/RQYLaZDqusn9XdYTwqsp1ecT/+OB/s7qTxZlomRTaq8uaE07GyYT8vdnpVdimsXfTFBoBXxBdfPf7NJ/v7e5+fsvPvycOBz7Zcbn4Ab95RR0dduoipAgATdZVemlGlAQAAAAAAAAAAAACAV8OLPv93hp3FSQovdaxeCOE853V1MqkXPXz6ROQFvRezO2H5lUjjYjoLpwpeCLNjWq/ALGZ2povAsTHnvxYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEn+EwAA///MHI5S") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, 0x0, 0x0) 2.029946993s ago: executing program 2 (id=2392): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000002c0)={0x1, 0x0, [{0xb, 0x8, 0x5, 0xe03, 0x5, 0x81, 0xc}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x6, 0xd8, 0x1, '\x00', 0xcc95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x85, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x60, 0xd, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x9, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0x1}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x6, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) getdents(r0, 0x0, 0x0) 1.380071719s ago: executing program 5 (id=2399): timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000), 0x1, 0x5a6, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, 0x0, 0x0) 1.280411261s ago: executing program 2 (id=2401): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x6, 0xd8, 0x1, '\x00', 0xcc95}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x85, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x60, 0xd, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x9, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0x1}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x6, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 764.000633ms ago: executing program 2 (id=2402): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0xfffffffd}, {0x3d, 0x0, 0x0, 0xfffffffc}, {0x6, 0x4}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0xa, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) 647.447376ms ago: executing program 5 (id=2403): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents64(r2, 0x0, 0x0) 522.573538ms ago: executing program 5 (id=2404): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = eventfd2(0xe5c, 0x80000) r1 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x6, 0x0, r1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000240)={r1, 0x7, 0x2, r0}) 404.028151ms ago: executing program 5 (id=2405): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xf2, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd0, 0x0, @gue={{0x1, 0x1, 0x1, 0xc, 0x0, @void}, "e738972110686afc1b89ceaaac78072238e6e1a1970796d1577192014df04c3eceb151e9c3f51481b31b3426f92bebab0adad3c6521068529afe7a36d6512ac0bc6b88865fc945dffe31d676955dbf5ee12e76c0b12d8c60224396ee2702f1b7f2929dec03cb1ff7f543b3440d166a6c809be9237ec2ad982c1b0b852251a0ef5da622a9a87460236d22fa4e8324049e57682f703b3362234b3ada1cbd552677f51d9b0064489022106452e8149bd090f5955b8f8fd2e037b443ced42cdb861ac8247a18"}}}}}}, 0x0) 380.453531ms ago: executing program 3 (id=2406): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ae1000/0x3000)=nil, 0x3000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000280)='\x00d9', 0x3, 0x6}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000780)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, &(0x7f00000003c0)='U', 0x1, 0x10001}) 344.596012ms ago: executing program 5 (id=2407): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet6(r0, &(0x7f00000004c0)="2b98", 0x2, 0x8015, 0x0, 0x0) 312.918273ms ago: executing program 3 (id=2408): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffb000/0x2000)=nil) 220.041145ms ago: executing program 5 (id=2409): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x6, 0xd8, 0x1, '\x00', 0xcc95}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x85, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x60, 0xd, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x9, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0x1}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x6, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 219.804055ms ago: executing program 3 (id=2410): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./bus\x00', 0x3820420, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 164.511887ms ago: executing program 3 (id=2411): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents64(r2, 0x0, 0x0) 93.347838ms ago: executing program 3 (id=2412): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd2(0xe5c, 0x80000) r2 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000000c0)={r1, 0x6, 0x0, r2}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2, r1}) 176.89µs ago: executing program 3 (id=2413): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x329}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 0s ago: executing program 0 (id=2307): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x1211009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0xc2) getdents64(r1, &(0x7f0000001f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): dor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 392.485142][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.536547][ T5810] usb 1-1: Product: syz [ 392.559835][ T5810] usb 1-1: Manufacturer: syz [ 392.590513][ T5810] usb 1-1: SerialNumber: syz [ 394.509962][ T5810] usb 1-1: selecting invalid altsetting 0 [ 394.554483][ T5810] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 394.582331][ T5810] usb 1-1: No valid video chain found. [ 394.624422][ T5810] usb 1-1: selecting invalid altsetting 0 [ 394.673963][ T5810] usbtest: probe of 1-1:220.1 failed with error -22 [ 394.731591][ T5810] usb 1-1: USB disconnect, device number 7 [ 396.047629][ T7599] syzkaller0: entered promiscuous mode [ 396.064564][ T7599] syzkaller0: entered allmulticast mode [ 396.191040][ T7606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.214567][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 396.224680][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 396.607511][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 396.889245][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 397.003398][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 397.160393][ T9] usb 1-1: config 220 has no interface number 2 [ 397.247502][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 397.412207][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 397.500774][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 397.602059][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 397.711657][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 397.829842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.948958][ T9] usb 1-1: Product: syz [ 398.010774][ T9] usb 1-1: Manufacturer: syz [ 398.080679][ T9] usb 1-1: SerialNumber: syz [ 399.531379][ T9] usb 1-1: selecting invalid altsetting 0 [ 399.555764][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 399.569423][ T9] usb 1-1: No valid video chain found. [ 399.602165][ T9] usb 1-1: selecting invalid altsetting 0 [ 399.631946][ T9] usbtest: probe of 1-1:220.1 failed with error -22 [ 399.663168][ T9] usb 1-1: USB disconnect, device number 8 [ 401.279979][ T7652] bond1: option mode: unable to set because the bond device has slaves [ 401.300922][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 401.327884][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 401.353021][ T7652] bond1: (slave bond0): Releasing active interface [ 401.692933][ T7677] bond1: option mode: unable to set because the bond device is up [ 401.746197][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 401.756959][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 401.911687][ T7687] bond1: option mode: unable to set because the bond device has slaves [ 401.948784][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 401.973285][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 402.021149][ T7687] bond1: (slave bond0): Releasing active interface [ 402.229237][ T7699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.301949][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 402.328606][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 402.405603][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 402.805249][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 402.821483][ T7736] bond1: option mode: unable to set because the bond device is up [ 403.174677][ T7756] bond1: option mode: unable to set because the bond device is up [ 403.604136][ T7774] syzkaller0: entered promiscuous mode [ 403.610312][ T7774] syzkaller0: entered allmulticast mode [ 403.622760][ T7780] bond1: option mode: unable to set because the bond device is up [ 408.649245][ T7836] syzkaller0: entered promiscuous mode [ 408.677281][ T7836] syzkaller0: entered allmulticast mode [ 409.176808][ T7849] __nla_validate_parse: 8 callbacks suppressed [ 409.176861][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 411.968286][ T7873] bond1: option mode: unable to set because the bond device is up [ 411.978116][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 411.986939][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 411.998749][ T7873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.019134][ T7873] bond1: (slave bond0): making interface the new active one [ 412.042559][ T7873] bond1: (slave bond0): Enslaving as an active interface with an up link [ 412.245182][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 412.409173][ T7889] syzkaller0: entered promiscuous mode [ 412.414700][ T7889] syzkaller0: entered allmulticast mode [ 412.783645][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 412.799549][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 412.854116][ T1084] bond1: (slave bond0): link status definitely down, disabling slave [ 412.882078][ T1084] bond1: now running without any active interface! [ 413.336440][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 413.366578][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 413.408210][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.422349][ T7932] bond1: (slave bond0): making interface the new active one [ 413.432380][ T7932] bond1: (slave bond0): Enslaving as an active interface with an up link [ 413.894992][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 413.912320][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 416.191671][ T8032] syzkaller0: entered promiscuous mode [ 416.236084][ T8032] syzkaller0: entered allmulticast mode [ 419.655342][ T8118] syz.0.747 (8118) used obsolete PPPIOCDETACH ioctl [ 420.013424][ T8130] syzkaller0: entered promiscuous mode [ 420.027321][ T8130] syzkaller0: entered allmulticast mode [ 432.387430][ T8309] netlink: 'syz.0.827': attribute type 27 has an invalid length. [ 432.402061][ T8309] netlink: 'syz.0.827': attribute type 25 has an invalid length. [ 436.186698][ T8351] warning: `syz.0.841' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 440.184694][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.197630][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.628487][ T8427] syzkaller0: entered promiscuous mode [ 445.636812][ T8427] syzkaller0: entered allmulticast mode [ 448.305112][ T8454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.878'. [ 448.324697][ T8454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.878'. [ 448.361601][ T8454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.878'. [ 450.028544][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 451.234871][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'. [ 451.313740][ T8524] netlink: 'syz.2.899': attribute type 33 has an invalid length. [ 451.336361][ T8524] netlink: 152 bytes leftover after parsing attributes in process `syz.2.899'. [ 451.610165][ T8535] syzkaller1: entered promiscuous mode [ 451.615965][ T8535] syzkaller1: entered allmulticast mode [ 451.946747][ T8550] IPv6: NLM_F_REPLACE set, but no existing node found! [ 452.142952][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 452.784454][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.912'. [ 452.793999][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.912'. [ 452.807454][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 454.315444][ T8526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.085665][ T8635] ip_tables: iptables: counters copy to user failed while replacing table [ 458.765784][ T8671] syzkaller0: entered promiscuous mode [ 458.777133][ T8671] syzkaller0: entered allmulticast mode [ 460.211860][ T8712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.965'. [ 460.766719][ T8735] tc action pedit offset must be on 32 bit boundaries [ 463.240773][ T8715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.223707][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 465.935240][ T8796] syzkaller0: entered promiscuous mode [ 465.957275][ T8796] syzkaller0: entered allmulticast mode [ 468.331041][ T8846] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1006'. [ 468.823767][ T8856] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 469.023464][ T8860] syzkaller0: entered promiscuous mode [ 469.032154][ T8860] syzkaller0: entered allmulticast mode [ 469.310567][ T8876] Bluetooth: MGMT ver 1.22 [ 469.990048][ T8872] sctp: failed to load transform for md5: -2 [ 471.377368][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 471.383555][ T5785] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 471.432470][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 471.458471][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 471.534061][ T8342] bond1: (slave bond0): link status definitely down, disabling slave [ 471.559116][ T8899] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 471.569912][ T8342] bond1: now running without any active interface! [ 473.202264][ T8909] syzkaller0: entered promiscuous mode [ 473.217107][ T8909] syzkaller0: entered allmulticast mode [ 474.292953][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 474.317588][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 474.329002][ T8929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.348699][ T8929] bond1: (slave bond0): making interface the new active one [ 474.368627][ T8929] bond1: (slave bond0): Enslaving as an active interface with an up link [ 478.932705][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 479.011744][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 479.117720][ T8955] bond1: (slave bond0): Releasing active interface [ 485.262109][ T8989] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1059'. [ 488.812941][ T9061] block nbd0: not configured, cannot reconfigure [ 490.731355][ T9092] ip6_vti0: mtu greater than device maximum [ 491.189397][ T9121] ip_tables: iptables: counters copy to user failed while replacing table [ 491.225394][ T5785] Bluetooth: hci2: unexpected event 0x0f length: 0 < 4 [ 493.140021][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 495.595780][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 497.567045][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1168'. [ 497.576410][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1168'. [ 497.588616][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 501.462566][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'. [ 501.486199][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'. [ 501.509727][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 501.623194][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.629767][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.349862][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 502.377456][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 502.407276][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 502.858314][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 502.923770][ T9396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.278223][ T9423] syzkaller0: entered promiscuous mode [ 503.296283][ T9423] syzkaller0: entered allmulticast mode [ 506.994033][ T9465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.370894][ T9505] syzkaller0: entered promiscuous mode [ 507.383485][ T9505] syzkaller0: entered allmulticast mode [ 507.513320][ T9512] ip_tables: iptables: counters copy to user failed while replacing table [ 508.555839][ T9559] syzkaller0: entered promiscuous mode [ 508.565089][ T9559] syzkaller0: entered allmulticast mode [ 508.584111][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 508.607290][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 508.625352][ T9566] bond1: (slave bond0): Releasing active interface [ 511.049565][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 513.698810][ T9688] batman_adv: batadv0: Adding interface: syzkaller0 [ 513.706936][ T9688] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.734519][ T9688] batman_adv: batadv0: Interface activated: syzkaller0 [ 514.100609][ T9709] syzkaller0: entered promiscuous mode [ 514.106280][ T9709] syzkaller0: entered allmulticast mode [ 514.561561][ T9687] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 514.588106][ T9687] batman_adv: batadv0: Removing interface: syzkaller0 [ 514.743770][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 514.793129][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 516.446700][ T9723] syzkaller0: entered promiscuous mode [ 516.452361][ T9723] syzkaller0: entered allmulticast mode [ 516.875596][ T9765] 0: reclassify loop, rule prio 0, protocol 03 [ 518.588049][ T9797] syzkaller0: entered promiscuous mode [ 518.593581][ T9797] syzkaller0: entered allmulticast mode [ 518.805457][ T9805] x_tables: duplicate underflow at hook 3 [ 518.914577][ T9807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1370'. [ 519.141510][ T9826] ip_tables: iptables: counters copy to user failed while replacing table [ 520.958047][ T9853] syzkaller0: entered promiscuous mode [ 520.963586][ T9853] syzkaller0: entered allmulticast mode [ 521.287792][ T9869] ªªªªª6: renamed from veth0_vlan [ 521.848040][ T9896] syzkaller0: entered promiscuous mode [ 521.876621][ T9896] syzkaller0: entered allmulticast mode [ 522.612109][ T9927] syzkaller0: entered promiscuous mode [ 522.618916][ T9927] syzkaller0: entered allmulticast mode [ 524.272997][ T9968] syzkaller0: entered promiscuous mode [ 524.284511][ T9968] syzkaller0: entered allmulticast mode [ 525.881677][T10003] syzkaller0: entered promiscuous mode [ 525.890070][T10003] syzkaller0: entered allmulticast mode [ 526.018394][T10009] xt_hashlimit: size too large, truncated to 1048576 [ 526.284591][T10012] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1455'. [ 526.309228][T10012] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 526.363072][T10012] 0ªX¹¦Dö»: entered allmulticast mode [ 526.488426][T10018] ip_tables: iptables: counters copy to user failed while replacing table [ 528.224583][T10037] syzkaller0: entered promiscuous mode [ 528.257512][T10037] syzkaller0: entered allmulticast mode [ 530.236985][T10054] ip_tables: iptables: counters copy to user failed while replacing table [ 533.780471][T10103] 0: reclassify loop, rule prio 0, protocol 03 [ 538.222645][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 539.351382][T10174] bond1 (unregistering): Released all slaves [ 541.482645][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'. [ 541.494555][T10223] ip_tables: iptables: counters copy to user failed while replacing table [ 542.752200][T10240] ======================================================= [ 542.752200][T10240] WARNING: The mand mount option has been deprecated and [ 542.752200][T10240] and is ignored by this kernel. Remove the mand [ 542.752200][T10240] option from the mount to silence this warning. [ 542.752200][T10240] ======================================================= [ 542.815495][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'. [ 542.836799][T10242] ip_tables: iptables: counters copy to user failed while replacing table [ 543.275395][T10265] loop0: detected capacity change from 0 to 128 [ 545.256131][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 545.601919][T10300] bond1 (unregistering): (slave bond0): Releasing active interface [ 545.613902][T10300] bond1 (unregistering): Released all slaves [ 545.891627][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1562'. [ 548.012159][T10372] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 550.372679][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 551.065195][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 552.016995][T10482] kvm: apic: phys broadcast and lowest prio [ 553.267582][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 553.515783][T10517] 0: reclassify loop, rule prio 0, protocol 03 [ 553.584062][T10515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4210825046 (8421650092 ns) > initial count (6043900494 ns). Using initial count to start timer. [ 554.598005][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 554.620720][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 554.629310][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 554.639877][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 554.648436][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 554.659408][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 555.765309][ T1084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.796954][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 555.891314][ T1084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.993896][ T1084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.185999][ T1084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.263492][T10540] chnl_net:caif_netlink_parms(): no params data found [ 556.631932][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 556.645596][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.667647][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.674994][T10540] bridge_slave_0: entered allmulticast mode [ 556.700582][T10540] bridge_slave_0: entered promiscuous mode [ 556.714954][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.725292][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.748179][ T5785] Bluetooth: hci3: command tx timeout [ 556.756286][T10540] bridge_slave_1: entered allmulticast mode [ 556.765156][T10540] bridge_slave_1: entered promiscuous mode [ 556.886683][T10540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.949678][T10540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.081725][T10540] team0: Port device team_slave_0 added [ 557.111643][T10540] team0: Port device team_slave_1 added [ 557.375915][T10540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.401115][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.435391][T10540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.541743][T10540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.552114][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.589063][T10540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.768533][T10540] hsr_slave_0: entered promiscuous mode [ 557.786074][T10540] hsr_slave_1: entered promiscuous mode [ 557.797305][T10540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.806172][T10540] Cannot create hsr debugfs directory [ 559.037289][ T5785] Bluetooth: hci3: command tx timeout [ 559.334665][T10628] bond1 (unregistering): Released all slaves [ 560.073230][ T1084] hsr_slave_0: left promiscuous mode [ 560.079809][ T1084] hsr_slave_1: left promiscuous mode [ 560.094529][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.113056][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.141638][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.155721][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.184580][ T1084] bridge_slave_1: left allmulticast mode [ 560.207547][ T1084] bridge_slave_1: left promiscuous mode [ 560.218050][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.258321][ T1084] bridge_slave_0: left allmulticast mode [ 560.264117][ T1084] bridge_slave_0: left promiscuous mode [ 560.277528][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.386078][ T1084] dummy0: left allmulticast mode [ 560.400181][ T1084] dummy0: left promiscuous mode [ 560.449875][ T1084] veth1_macvtap: left promiscuous mode [ 560.467124][ T1084] veth0_macvtap: left promiscuous mode [ 560.487032][ T1084] veth1_vlan: left promiscuous mode [ 560.500786][ T1084] veth0_vlan: left promiscuous mode [ 561.057677][ T5785] Bluetooth: hci3: command tx timeout [ 561.072997][ T1084] bond1 (unregistering): Released all slaves [ 561.550649][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 561.589549][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 561.632350][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.672292][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.964222][ T1084] bond0 (unregistering): Released all slaves [ 562.184070][T10540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 562.248874][T10540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 562.297746][T10540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 562.355662][T10540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 562.391969][T10706] ip_tables: iptables: counters copy to user failed while replacing table [ 562.732790][T10540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.786700][T10540] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.862367][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.869567][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.920918][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.928185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.063135][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.070009][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.129475][T10735] 0: reclassify loop, rule prio 0, protocol 03 [ 563.138916][ T5785] Bluetooth: hci3: command tx timeout [ 563.598280][T10540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.813242][T10774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1678'. [ 563.884719][T10774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1678'. [ 563.899068][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1678'. [ 564.315425][T10540] veth0_vlan: entered promiscuous mode [ 564.332335][T10540] veth1_vlan: entered promiscuous mode [ 564.366346][T10540] veth0_macvtap: entered promiscuous mode [ 564.389955][T10540] veth1_macvtap: entered promiscuous mode [ 565.712477][T10540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.727602][T10540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.757954][T10540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.785427][T10540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.804446][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1687'. [ 565.817332][T10540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.837216][T10540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.880292][T10540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.905417][T10540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.935089][T10540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.946379][T10540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.958080][T10540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.977021][T10540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.995934][T10540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.022715][T10540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.037285][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1687'. [ 566.063076][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1687'. [ 566.079361][T10540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.108059][T10540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.116811][T10540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.142796][T10540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.338370][ T8342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.346333][ T8342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.410069][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.436781][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.923854][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1697'. [ 566.947462][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1697'. [ 566.974232][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1697'. [ 567.070351][T10851] 0: reclassify loop, rule prio 0, protocol 03 [ 567.197615][T10856] FAULT_INJECTION: forcing a failure. [ 567.197615][T10856] name fail_futex, interval 1, probability 0, space 0, times 1 [ 567.245090][T10856] CPU: 0 PID: 10856 Comm: syz.3.1700 Not tainted syzkaller #0 [ 567.252626][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.262742][T10856] Call Trace: [ 567.266123][T10856] [ 567.269141][T10856] dump_stack_lvl+0x18c/0x250 [ 567.274006][T10856] ? show_regs_print_info+0x20/0x20 [ 567.279300][T10856] ? load_image+0x420/0x420 [ 567.283866][T10856] ? mark_lock+0x94/0x320 [ 567.288332][T10856] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 567.294346][T10856] should_fail_ex+0x394/0x4c0 [ 567.299106][T10856] get_futex_key+0x136/0x1030 [ 567.303847][T10856] ? slab_free_freelist_hook+0x130/0x1a0 [ 567.309545][T10856] ? futex_setup_timer+0xc0/0xc0 [ 567.314506][T10856] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 567.320226][T10856] futex_wake+0x127/0x4f0 [ 567.324586][T10856] ? tomoyo_path_number_perm+0x217/0x5e0 [ 567.330265][T10856] ? futex_wake_mark+0x150/0x150 [ 567.335244][T10856] do_futex+0x35d/0x3e0 [ 567.339433][T10856] ? __ia32_sys_get_robust_list+0x110/0x110 [ 567.345476][T10856] __se_sys_futex+0x3a9/0x440 [ 567.350187][T10856] ? __x64_sys_futex+0xf0/0xf0 [ 567.354985][T10856] ? __x64_sys_futex+0x21/0xf0 [ 567.359782][T10856] do_syscall_64+0x55/0xb0 [ 567.364237][T10856] ? clear_bhb_loop+0x40/0x90 [ 567.369037][T10856] ? clear_bhb_loop+0x40/0x90 [ 567.373754][T10856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.379828][T10856] RIP: 0033:0x7f7318f9e159 [ 567.384337][T10856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.404030][T10856] RSP: 002b:00007f7319dde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 567.412498][T10856] RAX: ffffffffffffffda RBX: 00007f7319225fa8 RCX: 00007f7318f9e159 [ 567.420505][T10856] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7319225fac [ 567.428508][T10856] RBP: 00007f7319225fa0 R08: 0000000000745a38 R09: 0000000000000000 [ 567.436513][T10856] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 567.444518][T10856] R13: 00007f7319226038 R14: 00007ffc04a22ff0 R15: 00007ffc04a230d8 [ 567.452539][T10856] [ 567.703666][T10881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1708'. [ 568.832920][T10923] 0: reclassify loop, rule prio 0, protocol 03 [ 569.380064][T10946] loop4: detected capacity change from 0 to 16 [ 569.402853][T10948] __nla_validate_parse: 6 callbacks suppressed [ 569.402869][T10948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1729'. [ 569.421728][T10948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1729'. [ 569.424446][T10946] erofs: Unknown parameter '01777777777777777777777' [ 569.464117][T10950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1729'. [ 569.465746][T10480] udevd[10480]: incorrect erofs checksum on /dev/loop4 [ 569.511843][T10946] loop4: detected capacity change from 0 to 164 [ 569.708099][T10953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1730'. [ 570.183708][T10973] Unsupported NM flag settings (240) [ 570.201360][T10973] Unsupported NM flag settings (240) [ 570.227478][T10975] ip_tables: iptables: counters copy to user failed while replacing table [ 570.294667][T10971] syzkaller0: entered promiscuous mode [ 570.302249][T10946] Unsupported NM flag settings (240) [ 570.321885][T10971] syzkaller0: entered allmulticast mode [ 570.322321][T10981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1738'. [ 570.767580][ T7017] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 571.028059][ T7017] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 571.146993][ T7017] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 571.285300][ T7017] usb 4-1: config 220 has no interface number 2 [ 571.364977][ T7017] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 571.517465][ T7017] usb 4-1: config 220 interface 0 has no altsetting 0 [ 571.604033][ T7017] usb 4-1: config 220 interface 76 has no altsetting 0 [ 571.675663][ T7017] usb 4-1: config 220 interface 1 has no altsetting 0 [ 571.770059][ T7017] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 571.865092][ T7017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.977069][ T7017] usb 4-1: Product: syz [ 572.043450][ T7017] usb 4-1: Manufacturer: syz [ 572.131096][ T7017] usb 4-1: SerialNumber: syz [ 573.633928][T10993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1741'. [ 573.674649][ T7017] usb 4-1: selecting invalid altsetting 0 [ 573.693503][ T7017] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 573.724550][ T7017] usb 4-1: No valid video chain found. [ 573.780913][ T7017] usb 4-1: selecting invalid altsetting 0 [ 573.797678][ T7017] usbtest: probe of 4-1:220.1 failed with error -22 [ 573.841706][ T7017] usb 4-1: USB disconnect, device number 8 [ 574.231263][T11005] ip_tables: iptables: counters copy to user failed while replacing table [ 575.157490][T11015] kvm: apic: phys broadcast and lowest prio [ 576.263813][T10981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1738'. [ 576.357499][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 576.627787][ T23] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 576.698501][ T23] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 576.819383][ T23] usb 5-1: config 220 has no interface number 2 [ 576.876626][ T23] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 577.004971][ T23] usb 5-1: config 220 interface 0 has no altsetting 0 [ 577.077476][ T23] usb 5-1: config 220 interface 76 has no altsetting 0 [ 577.144630][ T23] usb 5-1: config 220 interface 1 has no altsetting 0 [ 577.214745][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 577.280089][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.385481][ T23] usb 5-1: Product: syz [ 577.446479][ T23] usb 5-1: Manufacturer: syz [ 577.523757][ T23] usb 5-1: SerialNumber: syz [ 579.256083][ T23] usb 5-1: selecting invalid altsetting 0 [ 579.267856][ T23] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 579.274270][ T23] usb 5-1: No valid video chain found. [ 579.339131][ T23] usb 5-1: selecting invalid altsetting 0 [ 579.344933][ T23] usbtest: probe of 5-1:220.1 failed with error -22 [ 579.417516][ T23] usb 5-1: USB disconnect, device number 2 [ 579.577090][T11048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 579.608800][T11048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 579.629306][T11048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 579.821212][T11056] syzkaller0: entered promiscuous mode [ 579.826749][T11056] syzkaller0: entered allmulticast mode [ 580.209092][ T970] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 580.513264][ T970] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 580.624013][ T970] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 580.774779][ T970] usb 3-1: config 220 has no interface number 2 [ 580.901588][ T970] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 581.137951][ T970] usb 3-1: config 220 interface 0 has no altsetting 0 [ 581.261696][ T970] usb 3-1: config 220 interface 76 has no altsetting 0 [ 581.372641][ T970] usb 3-1: config 220 interface 1 has no altsetting 0 [ 581.502388][ T970] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 581.616258][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.742041][ T970] usb 3-1: Product: syz [ 581.807648][ T970] usb 3-1: Manufacturer: syz [ 581.874780][ T970] usb 3-1: SerialNumber: syz [ 583.190311][ T970] usb 3-1: selecting invalid altsetting 0 [ 583.233013][ T970] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 583.271417][ T970] usb 3-1: No valid video chain found. [ 583.318867][ T970] usb 3-1: selecting invalid altsetting 0 [ 583.324683][ T970] usbtest: probe of 3-1:220.1 failed with error -22 [ 583.399841][ T970] usb 3-1: USB disconnect, device number 3 [ 583.453301][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1770'. [ 583.481259][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1770'. [ 583.504164][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1770'. [ 583.550544][T11093] FAULT_INJECTION: forcing a failure. [ 583.550544][T11093] name fail_futex, interval 1, probability 0, space 0, times 0 [ 583.577478][T11093] CPU: 0 PID: 11093 Comm: syz.3.1771 Not tainted syzkaller #0 [ 583.585021][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.595110][T11093] Call Trace: [ 583.598412][T11093] [ 583.601376][T11093] dump_stack_lvl+0x18c/0x250 [ 583.606107][T11093] ? show_regs_print_info+0x20/0x20 [ 583.611351][T11093] ? load_image+0x420/0x420 [ 583.615905][T11093] should_fail_ex+0x394/0x4c0 [ 583.620632][T11093] get_futex_key+0x136/0x1030 [ 583.625355][T11093] ? futex_setup_timer+0xc0/0xc0 [ 583.630349][T11093] futex_wake+0x127/0x4f0 [ 583.634724][T11093] ? futex_wake_mark+0x150/0x150 [ 583.639709][T11093] ? __se_sys_keyctl+0x812/0xb50 [ 583.644721][T11093] ? __fget_files+0x28/0x460 [ 583.649390][T11093] do_futex+0x35d/0x3e0 [ 583.653592][T11093] ? __ia32_sys_get_robust_list+0x110/0x110 [ 583.659527][T11093] ? fput+0x154/0x1a0 [ 583.663587][T11093] __se_sys_futex+0x3a9/0x440 [ 583.668314][T11093] ? __x64_sys_futex+0xf0/0xf0 [ 583.673127][T11093] ? __x64_sys_futex+0x21/0xf0 [ 583.677934][T11093] do_syscall_64+0x55/0xb0 [ 583.682400][T11093] ? clear_bhb_loop+0x40/0x90 [ 583.687117][T11093] ? clear_bhb_loop+0x40/0x90 [ 583.691837][T11093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.697781][T11093] RIP: 0033:0x7f7318f9e159 [ 583.702230][T11093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.721867][T11093] RSP: 002b:00007f7319dde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 583.730327][T11093] RAX: ffffffffffffffda RBX: 00007f7319225fa8 RCX: 00007f7318f9e159 [ 583.738335][T11093] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7319225fac [ 583.746341][T11093] RBP: 00007f7319225fa0 R08: 0000000000745a38 R09: 0000000000000000 [ 583.754352][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.762357][T11093] R13: 00007f7319226038 R14: 00007ffc04a22ff0 R15: 00007ffc04a230d8 [ 583.770377][T11093] [ 584.003854][T11107] syzkaller0: entered promiscuous mode [ 584.031286][T11107] syzkaller0: entered allmulticast mode [ 584.172206][T11120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1780'. [ 584.207990][T11120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1780'. [ 584.236613][T11120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1780'. [ 584.747393][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 585.044392][ T23] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 585.155074][ T23] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 585.339933][ T23] usb 5-1: config 220 has no interface number 2 [ 585.461684][ T23] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 585.699015][ T23] usb 5-1: config 220 interface 0 has no altsetting 0 [ 585.822950][ T23] usb 5-1: config 220 interface 76 has no altsetting 0 [ 585.951632][ T23] usb 5-1: config 220 interface 1 has no altsetting 0 [ 586.110025][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 586.304868][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.457586][ T23] usb 5-1: Product: syz [ 586.550026][ T23] usb 5-1: Manufacturer: syz [ 586.650880][ T23] usb 5-1: SerialNumber: syz [ 587.351017][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 587.726838][ T23] usb 5-1: selecting invalid altsetting 0 [ 587.753623][ T23] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 587.795689][ T23] usb 5-1: No valid video chain found. [ 587.838767][ T23] usb 5-1: selecting invalid altsetting 0 [ 587.861911][ T23] usbtest: probe of 5-1:220.1 failed with error -22 [ 587.899066][ T23] usb 5-1: USB disconnect, device number 3 [ 587.919310][T11154] syzkaller0: entered promiscuous mode [ 587.935160][T11154] syzkaller0: entered allmulticast mode [ 587.956931][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1792'. [ 587.995535][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1792'. [ 588.011949][T11159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1792'. [ 588.088745][T11163] loop3: detected capacity change from 0 to 16 [ 588.116913][T11163] erofs: (device loop3): mounted with root inode @ nid 36. [ 588.170836][T11163] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 588.214050][T11163] syz.3.1794: attempt to access beyond end of device [ 588.214050][T11163] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 588.275683][T11163] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 588.317594][T11163] syz.3.1794: attempt to access beyond end of device [ 588.317594][T11163] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 588.332022][T11171] FAULT_INJECTION: forcing a failure. [ 588.332022][T11171] name failslab, interval 1, probability 0, space 0, times 1 [ 588.357431][T11171] CPU: 1 PID: 11171 Comm: syz.0.1796 Not tainted syzkaller #0 [ 588.364943][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.374999][T11171] Call Trace: [ 588.378279][T11171] [ 588.381205][T11171] dump_stack_lvl+0x18c/0x250 [ 588.385893][T11171] ? show_regs_print_info+0x20/0x20 [ 588.391092][T11171] ? load_image+0x420/0x420 [ 588.395597][T11171] ? __might_sleep+0xe0/0xe0 [ 588.400241][T11171] ? __lock_acquire+0x7eb0/0x7eb0 [ 588.405270][T11171] should_fail_ex+0x394/0x4c0 [ 588.409956][T11171] should_failslab+0x9/0x20 [ 588.414485][T11171] slab_pre_alloc_hook+0x59/0x300 [ 588.419520][T11171] ? memcg_list_lru_alloc+0x231/0xb00 [ 588.424906][T11171] ? memcg_list_lru_alloc+0x231/0xb00 [ 588.430282][T11171] __kmem_cache_alloc_node+0x53/0x250 [ 588.435667][T11171] ? memcg_list_lru_alloc+0x231/0xb00 [ 588.441040][T11171] __kmalloc+0xa7/0x240 [ 588.445203][T11171] memcg_list_lru_alloc+0x231/0xb00 [ 588.450407][T11171] ? memcg_reparent_list_lrus+0x860/0x860 [ 588.456133][T11171] ? get_obj_cgroup_from_current+0xd4/0x280 [ 588.462110][T11171] ? get_obj_cgroup_from_current+0xd4/0x280 [ 588.468011][T11171] slab_pre_alloc_hook+0x2ad/0x300 [ 588.473128][T11171] ? slab_pre_alloc_hook+0xb1/0x300 [ 588.478331][T11171] kmem_cache_alloc_lru+0x4d/0x2b0 [ 588.483442][T11171] ? __d_alloc+0x31/0x710 [ 588.487771][T11171] __d_alloc+0x31/0x710 [ 588.491923][T11171] d_make_root+0x4a/0xe0 [ 588.496162][T11171] pseudo_fs_fill_super+0x265/0x350 [ 588.501358][T11171] ? pseudo_fs_get_tree+0x20/0x20 [ 588.506378][T11171] get_tree_nodev+0xb5/0x140 [ 588.510964][T11171] vfs_get_tree+0x8c/0x280 [ 588.515379][T11171] do_new_mount+0x24a/0xa40 [ 588.519884][T11171] __se_sys_mount+0x2e7/0x3d0 [ 588.524564][T11171] ? __x64_sys_mount+0xc0/0xc0 [ 588.529333][T11171] ? lockdep_hardirqs_on+0x98/0x150 [ 588.534525][T11171] ? __x64_sys_mount+0x20/0xc0 [ 588.539287][T11171] do_syscall_64+0x55/0xb0 [ 588.543707][T11171] ? clear_bhb_loop+0x40/0x90 [ 588.548378][T11171] ? clear_bhb_loop+0x40/0x90 [ 588.553053][T11171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.558944][T11171] RIP: 0033:0x7f4f3699e159 [ 588.563360][T11171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.582985][T11171] RSP: 002b:00007f4f37915028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.591395][T11171] RAX: ffffffffffffffda RBX: 00007f4f36c25fa0 RCX: 00007f4f3699e159 [ 588.599452][T11171] RDX: 0000200000002580 RSI: 0000200000002540 RDI: 0000000000000000 [ 588.607421][T11171] RBP: 00007f4f36a3506b R08: 0000000000000000 R09: 0000000000000000 [ 588.615384][T11171] R10: 0000000002200cd0 R11: 0000000000000246 R12: 0000000000000000 [ 588.623349][T11171] R13: 00007f4f36c26038 R14: 00007f4f36c25fa0 R15: 00007fff9add1ed8 [ 588.631335][T11171] [ 588.644908][T11163] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 588.672179][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1797'. [ 588.673839][ T28] audit: type=1800 audit(1791062675.806:2): pid=11163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1794" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 588.800270][T11163] syz.3.1794 (11163) used greatest stack depth: 19816 bytes left [ 588.989931][T11187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1802'. [ 589.016381][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 589.042083][T11187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1802'. [ 589.089974][T11192] syzkaller0: entered promiscuous mode [ 589.114154][T11192] syzkaller0: entered allmulticast mode [ 589.468707][T11187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1802'. [ 589.497990][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 589.789232][ T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 589.905058][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 590.097675][ T23] usb 4-1: config 220 has no interface number 2 [ 590.210360][ T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 590.420889][ T23] usb 4-1: config 220 interface 0 has no altsetting 0 [ 590.538777][ T23] usb 4-1: config 220 interface 76 has no altsetting 0 [ 590.649731][ T23] usb 4-1: config 220 interface 1 has no altsetting 0 [ 590.799524][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 590.926736][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.048142][ T23] usb 4-1: Product: syz [ 591.109758][ T23] usb 4-1: Manufacturer: syz [ 591.196370][ T23] usb 4-1: SerialNumber: syz [ 592.131978][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 592.453476][ T23] usb 4-1: selecting invalid altsetting 0 [ 592.486047][ T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 592.522398][ T23] usb 4-1: No valid video chain found. [ 592.548630][ T23] usb 4-1: selecting invalid altsetting 0 [ 592.554426][ T23] usbtest: probe of 4-1:220.1 failed with error -22 [ 592.591476][T11213] loop4: detected capacity change from 0 to 256 [ 592.627783][ T23] usb 4-1: USB disconnect, device number 9 [ 592.888078][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 592.927475][T11230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 592.936522][T11230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 592.973272][T11230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 593.127128][T11236] syzkaller0: entered promiscuous mode [ 593.133254][T11236] syzkaller0: entered allmulticast mode [ 593.901235][T11272] __nla_validate_parse: 2 callbacks suppressed [ 593.901247][T11272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1826'. [ 594.060400][T11272] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1826'. [ 594.198953][T11274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1826'. [ 594.217419][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 594.478113][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 594.564143][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 594.686497][ T9] usb 1-1: config 220 has no interface number 2 [ 594.788809][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 594.941159][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 595.036011][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 595.135890][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 595.240396][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 595.346004][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.445163][ T9] usb 1-1: Product: syz [ 595.494306][ T9] usb 1-1: Manufacturer: syz [ 595.553185][ T9] usb 1-1: SerialNumber: syz [ 597.077712][ T9] usb 1-1: selecting invalid altsetting 0 [ 597.100508][T11279] loop0: detected capacity change from 0 to 512 [ 597.138049][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 597.173036][ T9] usb 1-1: No valid video chain found. [ 597.202132][ T9] usb 1-1: selecting invalid altsetting 0 [ 597.218590][ T9] usbtest: probe of 1-1:220.1 failed with error -22 [ 597.260527][ T9] usb 1-1: USB disconnect, device number 9 [ 597.346888][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 597.394798][T11287] syzkaller0: entered promiscuous mode [ 597.403376][T11287] syzkaller0: entered allmulticast mode [ 597.572449][T11291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1833'. [ 597.678569][T11297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'. [ 597.696857][T11297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'. [ 597.708918][T11297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'. [ 598.037590][ T5830] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 598.319627][ T5830] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 598.540771][ T5830] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 598.809716][ T5830] usb 1-1: config 220 has no interface number 2 [ 598.990943][ T5830] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 599.412533][ T5830] usb 1-1: config 220 interface 0 has no altsetting 0 [ 599.631490][ T5830] usb 1-1: config 220 interface 76 has no altsetting 0 [ 599.851571][ T5830] usb 1-1: config 220 interface 1 has no altsetting 0 [ 600.082953][ T5830] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 600.356344][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.545676][ T5830] usb 1-1: Product: syz [ 600.646666][ T5830] usb 1-1: Manufacturer: syz [ 600.713947][ T5830] usb 1-1: SerialNumber: syz [ 600.783326][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 600.789031][ T5830] usb 1-1: can't set config #220, error -71 [ 600.855502][ T5830] usb 1-1: USB disconnect, device number 10 [ 600.926238][T11320] loop2: detected capacity change from 0 to 2048 [ 600.984715][T11320] loop2: p1 < > p3 [ 601.014362][T11320] loop2: p3 size 134217728 extends beyond EOD, truncated [ 601.074763][ T5141] loop2: p1 < > p3 [ 601.089459][ T5141] loop2: p3 size 134217728 extends beyond EOD, truncated [ 601.135824][T11326] kvm: apic: phys broadcast and lowest prio [ 601.436664][T11340] syzkaller0: entered promiscuous mode [ 601.473039][T11340] syzkaller0: entered allmulticast mode [ 601.527631][T11345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1846'. [ 601.593261][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1845'. [ 601.622577][T11345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1846'. [ 601.640235][T11350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1846'. [ 601.687452][T11346] kvm: apic: phys broadcast and lowest prio [ 601.761299][T11354] FAULT_INJECTION: forcing a failure. [ 601.761299][T11354] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 601.785163][T11354] CPU: 0 PID: 11354 Comm: syz.0.1847 Not tainted syzkaller #0 [ 601.792697][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.802870][T11354] Call Trace: [ 601.806175][T11354] [ 601.809127][T11354] dump_stack_lvl+0x18c/0x250 [ 601.813850][T11354] ? show_regs_print_info+0x20/0x20 [ 601.819082][T11354] ? load_image+0x420/0x420 [ 601.823625][T11354] ? __lock_acquire+0x7eb0/0x7eb0 [ 601.828688][T11354] ? __kasan_slab_alloc+0x6c/0x80 [ 601.833757][T11354] should_fail_ex+0x394/0x4c0 [ 601.838481][T11354] strncpy_from_user+0x36/0x2f0 [ 601.843615][T11354] getname_flags+0xf6/0x500 [ 601.848135][T11354] user_path_at_empty+0x2c/0x60 [ 601.853000][T11354] __se_sys_mount+0x2a8/0x3d0 [ 601.857696][T11354] ? __x64_sys_mount+0xc0/0xc0 [ 601.862491][T11354] ? lockdep_hardirqs_on+0x98/0x150 [ 601.867723][T11354] ? __x64_sys_mount+0x20/0xc0 [ 601.872512][T11354] do_syscall_64+0x55/0xb0 [ 601.876946][T11354] ? clear_bhb_loop+0x40/0x90 [ 601.881629][T11354] ? clear_bhb_loop+0x40/0x90 [ 601.886315][T11354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.892229][T11354] RIP: 0033:0x7f4f3699e159 [ 601.896652][T11354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.916472][T11354] RSP: 002b:00007f4f37915028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.924898][T11354] RAX: ffffffffffffffda RBX: 00007f4f36c25fa0 RCX: 00007f4f3699e159 [ 601.932990][T11354] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 601.940968][T11354] RBP: 00007f4f36a3506b R08: 0000000000000000 R09: 0000000000000000 [ 601.948945][T11354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.956913][T11354] R13: 00007f4f36c26038 R14: 00007f4f36c25fa0 R15: 00007fff9add1ed8 [ 601.965014][T11354] [ 602.367966][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 602.604214][ T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 602.684406][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 602.826463][ T23] usb 4-1: config 220 has no interface number 2 [ 602.919026][ T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 603.168120][ T23] usb 4-1: config 220 interface 0 has no altsetting 0 [ 603.274044][ T23] usb 4-1: config 220 interface 76 has no altsetting 0 [ 603.381859][ T23] usb 4-1: config 220 interface 1 has no altsetting 0 [ 603.505562][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 603.649256][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.773003][ T23] usb 4-1: Product: syz [ 603.844119][ T23] usb 4-1: Manufacturer: syz [ 603.923088][ T23] usb 4-1: SerialNumber: syz [ 605.377789][ T23] usb 4-1: selecting invalid altsetting 0 [ 605.384089][ T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 605.429590][ T23] usb 4-1: No valid video chain found. [ 605.476778][ T23] usb 4-1: selecting invalid altsetting 0 [ 605.527388][ T23] usbtest: probe of 4-1:220.1 failed with error -22 [ 605.568541][ T23] usb 4-1: USB disconnect, device number 10 [ 605.903104][T11390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1856'. [ 606.026050][T11395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1857'. [ 606.051416][T11395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1857'. [ 606.083558][T11395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1857'. [ 606.183261][T11402] loop3: detected capacity change from 0 to 2048 [ 606.444039][T11402] loop3: unable to read partition table [ 606.480073][T11402] loop3: partition table beyond EOD, truncated [ 606.555054][T11402] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 606.968904][ T5141] loop3: unable to read partition table [ 606.987583][ T5141] loop3: partition table beyond EOD, truncated [ 607.482727][ T5830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 607.855746][ T5830] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 608.011655][ T5830] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 608.208642][ T5830] usb 5-1: config 220 has no interface number 2 [ 608.243983][T11429] xt_bpf: check failed: parse error [ 608.336225][ T5830] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 608.583962][ T5830] usb 5-1: config 220 interface 0 has no altsetting 0 [ 608.709786][ T5830] usb 5-1: config 220 interface 76 has no altsetting 0 [ 608.854698][ T5830] usb 5-1: config 220 interface 1 has no altsetting 0 [ 609.034032][ T5830] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 609.227061][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.367458][ T5830] usb 5-1: Product: syz [ 609.434474][ T5830] usb 5-1: Manufacturer: syz [ 609.506922][ T5830] usb 5-1: SerialNumber: syz [ 610.434109][ T5830] usb 5-1: selecting invalid altsetting 0 [ 610.459461][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1868'. [ 610.493005][ T5830] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 610.531865][ T5830] usb 5-1: No valid video chain found. [ 610.582790][ T5830] usb 5-1: selecting invalid altsetting 0 [ 610.587511][T11445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1869'. [ 610.597285][ T5830] usbtest: probe of 5-1:220.1 failed with error -22 [ 610.617357][T11445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1869'. [ 610.617510][ T5830] usb 5-1: USB disconnect, device number 4 [ 610.679349][T11445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1869'. [ 611.155193][T11459] syzkaller0: entered promiscuous mode [ 611.157035][T11467] loop4: detected capacity change from 0 to 16 [ 611.172548][T11459] syzkaller0: entered allmulticast mode [ 611.226671][T11467] erofs: (device loop4): mounted with root inode @ nid 36. [ 612.115280][T11486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 613.227504][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 613.464208][ T5830] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 613.490902][ T5830] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 613.554084][ T5830] usb 3-1: config 220 has no interface number 2 [ 613.573098][ T5830] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 613.651232][ T5830] usb 3-1: config 220 interface 0 has no altsetting 0 [ 613.690763][ T5830] usb 3-1: config 220 interface 76 has no altsetting 0 [ 613.735846][ T5830] usb 3-1: config 220 interface 1 has no altsetting 0 [ 613.785920][ T5830] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 613.832031][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.883340][ T5830] usb 3-1: Product: syz [ 613.903025][ T5830] usb 3-1: Manufacturer: syz [ 613.934974][ T5830] usb 3-1: SerialNumber: syz [ 615.868215][ T5830] usb 3-1: selecting invalid altsetting 0 [ 615.894244][ T5830] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 615.910638][ T5830] usb 3-1: No valid video chain found. [ 615.922343][ T5830] usb 3-1: selecting invalid altsetting 0 [ 615.930146][ T5830] usbtest: probe of 3-1:220.1 failed with error -22 [ 615.955591][ T5830] usb 3-1: USB disconnect, device number 4 [ 616.191820][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1879'. [ 616.201430][T11486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 616.579092][T11524] FAULT_INJECTION: forcing a failure. [ 616.579092][T11524] name failslab, interval 1, probability 0, space 0, times 0 [ 616.592153][T11524] CPU: 1 PID: 11524 Comm: syz.4.1889 Not tainted syzkaller #0 [ 616.599653][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.609731][T11524] Call Trace: [ 616.613102][T11524] [ 616.616041][T11524] dump_stack_lvl+0x18c/0x250 [ 616.620744][T11524] ? show_regs_print_info+0x20/0x20 [ 616.626032][T11524] ? load_image+0x420/0x420 [ 616.630551][T11524] ? __might_sleep+0xe0/0xe0 [ 616.635199][T11524] ? __lock_acquire+0x7eb0/0x7eb0 [ 616.640274][T11524] should_fail_ex+0x394/0x4c0 [ 616.644988][T11524] should_failslab+0x9/0x20 [ 616.649508][T11524] slab_pre_alloc_hook+0x59/0x300 [ 616.654566][T11524] ? memcg_list_lru_alloc+0x335/0xb00 [ 616.659985][T11524] ? memcg_list_lru_alloc+0x335/0xb00 [ 616.665361][T11524] __kmem_cache_alloc_node+0x53/0x250 [ 616.670751][T11524] ? memcg_list_lru_alloc+0x335/0xb00 [ 616.676181][T11524] __kmalloc+0xa7/0x240 [ 616.680367][T11524] memcg_list_lru_alloc+0x335/0xb00 [ 616.685587][T11524] ? memcg_reparent_list_lrus+0x860/0x860 [ 616.691320][T11524] ? get_obj_cgroup_from_current+0xd4/0x280 [ 616.697227][T11524] slab_pre_alloc_hook+0x2ad/0x300 [ 616.702355][T11524] ? slab_pre_alloc_hook+0xb1/0x300 [ 616.707569][T11524] kmem_cache_alloc_lru+0x4d/0x2b0 [ 616.712688][T11524] ? new_inode_pseudo+0x82/0x1d0 [ 616.717632][T11524] new_inode_pseudo+0x82/0x1d0 [ 616.722401][T11524] create_pipe_files+0x51/0x700 [ 616.727265][T11524] ? __ia32_sys_get_robust_list+0x110/0x110 [ 616.733169][T11524] __do_pipe_flags+0x4c/0x2c0 [ 616.737860][T11524] do_pipe2+0xab/0x190 [ 616.742020][T11524] ? _compound_head+0x120/0x120 [ 616.746929][T11524] ? lock_chain_count+0x20/0x20 [ 616.751810][T11524] ? syscall_enter_from_user_mode+0x25/0x80 [ 616.757741][T11524] __x64_sys_pipe+0x3a/0x40 [ 616.762257][T11524] do_syscall_64+0x55/0xb0 [ 616.766694][T11524] ? clear_bhb_loop+0x40/0x90 [ 616.771377][T11524] ? clear_bhb_loop+0x40/0x90 [ 616.776080][T11524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.781991][T11524] RIP: 0033:0x7f157739e159 [ 616.786415][T11524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.806044][T11524] RSP: 002b:00007f15782d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 616.814557][T11524] RAX: ffffffffffffffda RBX: 00007f1577625fa0 RCX: 00007f157739e159 [ 616.822533][T11524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.830507][T11524] RBP: 00007f157743506b R08: 0000000000000000 R09: 0000000000000000 [ 616.838489][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.846470][T11524] R13: 00007f1577626038 R14: 00007f1577625fa0 R15: 00007ffc87ef31a8 [ 616.854548][T11524] [ 617.358901][T11540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1893'. [ 617.447395][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 617.490982][T11540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1893'. [ 617.651886][ T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 617.663552][T11542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1893'. [ 617.710827][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 617.872411][ T23] usb 4-1: config 220 has no interface number 2 [ 618.014235][ T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 618.222546][ T23] usb 4-1: config 220 interface 0 has no altsetting 0 [ 618.326376][ T23] usb 4-1: config 220 interface 76 has no altsetting 0 [ 618.431075][ T23] usb 4-1: config 220 interface 1 has no altsetting 0 [ 618.558975][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 618.695059][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.819650][ T23] usb 4-1: Product: syz [ 618.888418][ T23] usb 4-1: Manufacturer: syz [ 618.959094][ T23] usb 4-1: SerialNumber: syz [ 619.428493][T11545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1895'. [ 620.411847][ T23] usb 4-1: selecting invalid altsetting 0 [ 620.458663][ T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 620.465092][ T23] usb 4-1: No valid video chain found. [ 620.514579][ T23] usb 4-1: selecting invalid altsetting 0 [ 620.551497][ T23] usbtest: probe of 4-1:220.1 failed with error -22 [ 620.592969][ T23] usb 4-1: USB disconnect, device number 11 [ 621.122047][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1906'. [ 621.141354][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'. [ 621.172702][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'. [ 621.216533][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'. [ 621.306404][T11587] loop3: detected capacity change from 0 to 2048 [ 621.518218][T11587] loop3: unable to read partition table [ 621.524114][T11587] loop3: partition table beyond EOD, truncated [ 621.557748][T11587] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 621.927878][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 622.219504][ T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 622.308789][ T8] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 622.460452][ T8] usb 1-1: config 220 has no interface number 2 [ 622.570766][ T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 622.786014][ T8] usb 1-1: config 220 interface 0 has no altsetting 0 [ 622.895834][ T8] usb 1-1: config 220 interface 76 has no altsetting 0 [ 623.001021][ T8] usb 1-1: config 220 interface 1 has no altsetting 0 [ 623.128329][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 623.272632][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.396009][ T8] usb 1-1: Product: syz [ 623.465059][ T8] usb 1-1: Manufacturer: syz [ 623.532217][ T8] usb 1-1: SerialNumber: syz [ 624.503727][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.510135][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.922392][ T8] usb 1-1: selecting invalid altsetting 0 [ 624.972084][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1914'. [ 624.976302][T11611] FAULT_INJECTION: forcing a failure. [ 624.976302][T11611] name failslab, interval 1, probability 0, space 0, times 0 [ 624.982941][ T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 624.995844][T11611] CPU: 1 PID: 11611 Comm: syz.4.1915 Not tainted syzkaller #0 [ 625.008150][T11611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.018243][T11611] Call Trace: [ 625.021544][T11611] [ 625.024498][T11611] dump_stack_lvl+0x18c/0x250 [ 625.029220][T11611] ? show_regs_print_info+0x20/0x20 [ 625.034456][T11611] ? load_image+0x420/0x420 [ 625.038993][T11611] ? __might_sleep+0xe0/0xe0 [ 625.041207][ T8] usb 1-1: No valid video chain found. [ 625.043594][T11611] ? __lock_acquire+0x7eb0/0x7eb0 [ 625.054113][T11611] should_fail_ex+0x394/0x4c0 [ 625.058842][T11611] should_failslab+0x9/0x20 [ 625.063389][T11611] slab_pre_alloc_hook+0x59/0x300 [ 625.068449][T11611] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 625.074187][T11611] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 625.079844][T11611] __kmem_cache_alloc_node+0x53/0x250 [ 625.085235][T11611] ? tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 625.090870][T11611] __kmalloc_node_track_caller+0xa4/0x230 [ 625.096642][T11611] kstrdup+0x3b/0x80 [ 625.100553][T11611] tcp_sigpool_alloc_ahash+0x87a/0xcc0 [ 625.106030][T11611] ? tcp_illinois_init+0x2b0/0x2b0 [ 625.111269][T11611] tcp_md5_alloc_sigpool+0x1b/0x50 [ 625.116441][T11611] tcp_md5_do_add+0x104/0x3b0 [ 625.121132][T11611] tcp_v4_parse_md5_keys+0x47c/0x650 [ 625.126486][T11611] ? tcp4_seq_show+0xf10/0xf10 [ 625.131276][T11611] ? __local_bh_enable_ip+0x13a/0x1c0 [ 625.136649][T11611] ? _local_bh_enable+0xa0/0xa0 [ 625.141512][T11611] do_tcp_setsockopt+0x1089/0x1c50 [ 625.146634][T11611] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 625.152018][T11611] ? aa_af_perm+0x330/0x330 [ 625.156532][T11611] ? __sys_bind+0x32f/0x3f0 [ 625.161163][T11611] ? __fget_files+0x28/0x460 [ 625.165761][T11611] ? aa_sock_opt_perm+0x74/0x100 [ 625.170700][T11611] ? sock_common_setsockopt+0x36/0xc0 [ 625.176095][T11611] ? tcp_setsockopt+0x3d/0xe0 [ 625.180776][T11611] ? tcp_enable_tx_delay+0x70/0x70 [ 625.185910][T11611] ? sock_common_recvmsg+0x190/0x190 [ 625.191201][T11611] do_sock_setsockopt+0x175/0x1a0 [ 625.196232][T11611] ? __fdget+0x180/0x210 [ 625.200484][T11611] __x64_sys_setsockopt+0x182/0x200 [ 625.205693][T11611] do_syscall_64+0x55/0xb0 [ 625.210118][T11611] ? clear_bhb_loop+0x40/0x90 [ 625.214799][T11611] ? clear_bhb_loop+0x40/0x90 [ 625.219479][T11611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.225383][T11611] RIP: 0033:0x7f157739e159 [ 625.229821][T11611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.249432][T11611] RSP: 002b:00007f15782d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 625.257856][T11611] RAX: ffffffffffffffda RBX: 00007f1577625fa0 RCX: 00007f157739e159 [ 625.265920][T11611] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 625.273891][T11611] RBP: 00007f157743506b R08: 00000000000000d8 R09: 0000000000000000 [ 625.281874][T11611] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 625.289864][T11611] R13: 00007f1577626038 R14: 00007f1577625fa0 R15: 00007ffc87ef31a8 [ 625.297853][T11611] [ 625.315526][ T8] usb 1-1: selecting invalid altsetting 0 [ 625.334552][ T8] usbtest: probe of 1-1:220.1 failed with error -22 [ 625.346808][ T8] usb 1-1: USB disconnect, device number 11 [ 625.411797][T11616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1917'. [ 625.421094][T11616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1917'. [ 625.431544][T11616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1917'. [ 625.845127][T11634] FAULT_INJECTION: forcing a failure. [ 625.845127][T11634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.866787][T11634] CPU: 1 PID: 11634 Comm: syz.0.1920 Not tainted syzkaller #0 [ 625.874316][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.884398][T11634] Call Trace: [ 625.887702][T11634] [ 625.890661][T11634] dump_stack_lvl+0x18c/0x250 [ 625.895370][T11634] ? show_regs_print_info+0x20/0x20 [ 625.900599][T11634] ? load_image+0x420/0x420 [ 625.905138][T11634] ? __might_fault+0xaa/0x120 [ 625.909845][T11634] ? __lock_acquire+0x7eb0/0x7eb0 [ 625.914905][T11634] should_fail_ex+0x394/0x4c0 [ 625.919733][T11634] _copy_from_user+0x2f/0xe0 [ 625.924370][T11634] restore_altstack+0xaf/0x4e0 [ 625.929165][T11634] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 625.935196][T11634] ? __lock_acquire+0x7eb0/0x7eb0 [ 625.940245][T11634] ? __ia32_sys_sigaltstack+0x2a0/0x2a0 [ 625.945851][T11634] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.951177][T11634] ? lockdep_hardirqs_on+0x98/0x150 [ 625.956386][T11634] __ia32_sys_rt_sigreturn+0x239/0x850 [ 625.961899][T11634] ? x64_setup_rt_frame+0xc30/0xc30 [ 625.967141][T11634] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 625.973144][T11634] ? lock_chain_count+0x20/0x20 [ 625.978043][T11634] ? lockdep_hardirqs_on+0x98/0x150 [ 625.983249][T11634] do_syscall_64+0x55/0xb0 [ 625.987673][T11634] ? clear_bhb_loop+0x40/0x90 [ 625.992360][T11634] ? clear_bhb_loop+0x40/0x90 [ 625.997047][T11634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.002959][T11634] RIP: 0033:0x7f4f3693f4d9 [ 626.007403][T11634] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 626.027039][T11634] RSP: 002b:00007f4f37914a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 626.035459][T11634] RAX: ffffffffffffffda RBX: 00007f4f36c25fa0 RCX: 00007f4f3693f4d9 [ 626.043428][T11634] RDX: 00007f4f37914a80 RSI: 00007f4f37914bb0 RDI: 0000000000000021 [ 626.051396][T11634] RBP: 00007f4f36a3506b R08: 0000000000000000 R09: 0000000000000000 [ 626.059370][T11634] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 626.067343][T11634] R13: 00007f4f36c26038 R14: 00007f4f36c25fa0 R15: 00007fff9add1ed8 [ 626.075676][T11634] [ 626.386015][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1925'. [ 626.524546][T11657] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1926'. [ 626.565237][T11657] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1926'. [ 626.634438][T11661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1926'. [ 626.927381][ T5810] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 627.254566][ T5810] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 627.396541][ T5810] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 627.574957][ T5810] usb 4-1: config 220 has no interface number 2 [ 627.694159][ T5810] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 627.885084][ T5810] usb 4-1: config 220 interface 0 has no altsetting 0 [ 628.039648][ T5810] usb 4-1: config 220 interface 76 has no altsetting 0 [ 628.192229][ T5810] usb 4-1: config 220 interface 1 has no altsetting 0 [ 628.354039][ T5810] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 628.541030][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.691459][ T5810] usb 4-1: Product: syz [ 628.779364][ T5810] usb 4-1: Manufacturer: syz [ 628.873835][ T5810] usb 4-1: SerialNumber: syz [ 629.891999][ T5810] usb 4-1: selecting invalid altsetting 0 [ 629.927738][ T5810] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 629.934173][ T5810] usb 4-1: No valid video chain found. [ 629.972975][ T5810] usb 4-1: selecting invalid altsetting 0 [ 629.997376][ T5810] usbtest: probe of 4-1:220.1 failed with error -22 [ 630.028576][ T5810] usb 4-1: USB disconnect, device number 12 [ 631.092921][T11695] loop4: detected capacity change from 0 to 256 [ 632.483831][T11701] syzkaller0: entered promiscuous mode [ 632.503525][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1938'. [ 632.507454][T11701] syzkaller0: entered allmulticast mode [ 632.531690][ T28] audit: type=1326 audit(1791062719.666:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.531862][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1938'. [ 632.560819][ T28] audit: type=1326 audit(1791062719.666:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.596655][ T28] audit: type=1326 audit(1791062719.696:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.623980][ T28] audit: type=1326 audit(1791062719.696:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.657489][ T28] audit: type=1326 audit(1791062719.696:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.691504][ T28] audit: type=1326 audit(1791062719.696:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.752069][ T28] audit: type=1326 audit(1791062719.696:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.785871][ T28] audit: type=1326 audit(1791062719.726:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.810810][T11718] kvm: apic: phys broadcast and lowest prio [ 632.818172][ T28] audit: type=1326 audit(1791062719.726:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.842638][ T28] audit: type=1326 audit(1791062719.726:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.3.1937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7318f9e159 code=0x7ffc0000 [ 632.890642][T11712] tmpfs: Bad value for 'mpol' [ 633.512569][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 633.754202][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 633.813865][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 633.902565][ T9] usb 1-1: config 220 has no interface number 2 [ 633.964196][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 634.058833][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 634.121801][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 634.170631][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 634.271263][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 634.333391][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.405547][ T9] usb 1-1: Product: syz [ 634.435263][ T9] usb 1-1: Manufacturer: syz [ 634.472372][ T9] usb 1-1: SerialNumber: syz [ 635.772986][T11732] loop3: detected capacity change from 0 to 2048 [ 636.354702][ T9] usb 1-1: selecting invalid altsetting 0 [ 636.389326][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 636.395793][ T9] usb 1-1: No valid video chain found. [ 636.455612][ T9] usb 1-1: selecting invalid altsetting 0 [ 636.461847][ T9] usbtest: probe of 1-1:220.1 failed with error -22 [ 636.496960][ T9] usb 1-1: USB disconnect, device number 12 [ 636.912481][T11746] loop0: detected capacity change from 0 to 16 [ 636.939190][T11746] erofs: (device loop0): mounted with root inode @ nid 36. [ 636.966616][T11746] overlayfs: failed to resolve './file1': -2 [ 637.429154][T11744] kvm: apic: phys broadcast and lowest prio [ 638.721326][T11716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1938'. [ 639.554406][T11782] loop2: detected capacity change from 0 to 16 [ 639.627455][T11782] erofs: (device loop2): mounted with root inode @ nid 36. [ 639.665713][T11782] overlayfs: failed to resolve './file1': -2 [ 639.847342][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1956'. [ 641.044766][T11812] 9pnet: p9_errstr2errno: server reported unknown error [ 641.081957][T11812] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11815] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11812] [ 641.305157][T11819] loop4: detected capacity change from 0 to 2048 [ 641.466506][T11819] loop4: unable to read partition table [ 641.473034][T11819] loop4: partition table beyond EOD, truncated [ 641.480580][T11819] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 642.114730][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1956'. [ 642.639764][T11842] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 642.770158][T11845] loop4: detected capacity change from 0 to 736 [ 642.876964][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1969'. [ 642.891352][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1969'. [ 642.903979][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1969'. [ 642.975834][T11852] loop2: detected capacity change from 0 to 2048 [ 643.119802][T11846] kvm: apic: phys broadcast and lowest prio [ 643.173510][T11856] syzkaller0: entered promiscuous mode [ 643.201630][T11856] syzkaller0: entered allmulticast mode [ 643.368776][T11852] loop2: unable to read partition table [ 643.390606][T11852] loop2: partition table beyond EOD, truncated [ 643.406118][T11852] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 643.629087][T11873] overlay: filesystem on ./file0 not supported as upperdir [ 643.658502][ T5141] loop2: unable to read partition table [ 643.670070][ T5141] loop2: partition table beyond EOD, truncated [ 644.048281][T11887] loop0: detected capacity change from 0 to 736 [ 644.329751][T11893] FAULT_INJECTION: forcing a failure. [ 644.329751][T11893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.357375][T11893] CPU: 0 PID: 11893 Comm: syz.4.1980 Not tainted syzkaller #0 [ 644.364904][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 644.375062][T11893] Call Trace: [ 644.378344][T11893] [ 644.381275][T11893] dump_stack_lvl+0x18c/0x250 [ 644.385977][T11893] ? show_regs_print_info+0x20/0x20 [ 644.391223][T11893] ? load_image+0x420/0x420 [ 644.395739][T11893] ? __might_fault+0xaa/0x120 [ 644.400418][T11893] ? __lock_acquire+0x7eb0/0x7eb0 [ 644.405440][T11893] ? rawv6_sendmsg+0x128b/0x17c0 [ 644.410468][T11893] ? __virt_addr_valid+0x10c/0x380 [ 644.415600][T11893] should_fail_ex+0x394/0x4c0 [ 644.420290][T11893] _copy_from_user+0x2f/0xe0 [ 644.424880][T11893] csum_and_copy_from_iter+0x1f3/0x1480 [ 644.430447][T11893] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 644.436091][T11893] ? __kmem_cache_alloc_node+0x194/0x250 [ 644.441740][T11893] ? __alloc_skb+0x138/0x2c0 [ 644.446332][T11893] ? rcu_is_watching+0x15/0xb0 [ 644.451102][T11893] ip_generic_getfrag+0x163/0x2f0 [ 644.456148][T11893] ? ip_skb_dst_mtu+0x870/0x870 [ 644.460997][T11893] ? raw6_getfrag+0x11d/0x390 [ 644.465673][T11893] ? __alloc_skb+0x1b2/0x2c0 [ 644.470261][T11893] ? skb_put+0x112/0x210 [ 644.474513][T11893] __ip6_append_data+0x3049/0x3d40 [ 644.479727][T11893] ? rawv6_send_hdrinc+0x1660/0x1660 [ 644.485021][T11893] ? ip6_setup_cork+0x10f0/0x10f0 [ 644.490154][T11893] ip6_append_data+0x1b0/0x350 [ 644.494922][T11893] ? rawv6_send_hdrinc+0x1660/0x1660 [ 644.500211][T11893] rawv6_sendmsg+0x128b/0x17c0 [ 644.504987][T11893] ? compat_rawv6_ioctl+0x70/0x70 [ 644.510111][T11893] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 644.516560][T11893] ? aa_sock_msg_perm+0x94/0x150 [ 644.521525][T11893] ? inet_sendmsg+0x7e/0x2a0 [ 644.526159][T11893] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 644.531465][T11893] __sys_sendto+0x4a9/0x6b0 [ 644.535986][T11893] ? __ia32_sys_getpeername+0x90/0x90 [ 644.541375][T11893] ? __lock_acquire+0x7eb0/0x7eb0 [ 644.546417][T11893] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 644.552403][T11893] ? lock_chain_count+0x20/0x20 [ 644.557266][T11893] __x64_sys_sendto+0xde/0xf0 [ 644.561956][T11893] do_syscall_64+0x55/0xb0 [ 644.566373][T11893] ? clear_bhb_loop+0x40/0x90 [ 644.571046][T11893] ? clear_bhb_loop+0x40/0x90 [ 644.575723][T11893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.581622][T11893] RIP: 0033:0x7f157739e159 [ 644.586041][T11893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.605655][T11893] RSP: 002b:00007f15782d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 644.614080][T11893] RAX: ffffffffffffffda RBX: 00007f1577625fa0 RCX: 00007f157739e159 [ 644.622063][T11893] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000004 [ 644.630044][T11893] RBP: 00007f157743506b R08: 0000200000000040 R09: 0000000000000018 [ 644.638020][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.645992][T11893] R13: 00007f1577626038 R14: 00007f1577625fa0 R15: 00007ffc87ef31a8 [ 644.653983][T11893] [ 645.308010][T11910] loop4: detected capacity change from 0 to 2048 [ 645.553062][T11910] loop4: unable to read partition table [ 645.565420][T11910] loop4: partition table beyond EOD, truncated [ 645.595938][T11910] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 645.776872][ T5141] loop4: unable to read partition table [ 645.787007][ T5141] loop4: partition table beyond EOD, truncated [ 646.423351][T11945] overlay: filesystem on ./file0 not supported as upperdir [ 646.519653][T11948] loop2: detected capacity change from 0 to 16 [ 646.551534][T11948] erofs: (device loop2): mounted with root inode @ nid 36. [ 648.510690][T12008] syzkaller0: entered promiscuous mode [ 648.517389][T12008] syzkaller0: entered allmulticast mode [ 649.082748][T12023] kvm: apic: phys broadcast and lowest prio [ 649.424475][T12033] loop0: detected capacity change from 0 to 164 [ 651.773655][T12078] kvm: apic: phys broadcast and lowest prio [ 653.487309][T12117] syzkaller0: entered promiscuous mode [ 653.504258][T12117] syzkaller0: entered allmulticast mode [ 653.753746][T12128] loop0: detected capacity change from 0 to 512 [ 653.780775][T12128] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 654.416542][T12149] kvm: apic: phys broadcast and lowest prio [ 655.575092][T12180] kvm: apic: phys broadcast and lowest prio [ 657.115561][T12207] overlayfs: failed to resolve './bus': -2 [ 657.169313][T12209] overlayfs: failed to resolve './bus': -2 [ 657.766791][T12238] syzkaller0: entered promiscuous mode [ 657.788337][T12238] syzkaller0: entered allmulticast mode [ 657.856682][T12246] loop0: detected capacity change from 0 to 164 [ 657.922064][T10480] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 657.952715][T12246] loop0: detected capacity change from 0 to 512 [ 657.952900][T10480] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 657.961507][T12246] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 658.406521][T12253] overlayfs: failed to resolve './bus': -2 [ 658.415280][T12253] overlayfs: failed to resolve './bus': -2 [ 658.888932][T12263] kvm: apic: phys broadcast and lowest prio [ 659.239351][T12267] loop2: detected capacity change from 0 to 736 [ 660.940661][T12293] overlayfs: failed to resolve './bus': -2 [ 660.958819][T12293] overlayfs: failed to resolve './bus': -2 [ 661.487630][T12315] overlayfs: failed to resolve './bus': -2 [ 661.501246][T12315] overlayfs: failed to resolve './bus': -2 [ 661.666268][T12322] loop4: detected capacity change from 0 to 16 [ 661.690900][T12322] erofs: (device loop4): mounted with root inode @ nid 36. [ 661.720258][T12322] overlayfs: missing 'lowerdir' [ 661.777884][T12324] loop2: detected capacity change from 0 to 512 [ 661.800507][T12320] syzkaller0: entered promiscuous mode [ 661.801448][T12324] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 661.816821][T12320] syzkaller0: entered allmulticast mode [ 663.219867][T12349] overlayfs: failed to resolve './bus': -2 [ 663.230345][T12349] overlayfs: failed to resolve './bus': -2 [ 664.034862][T12358] loop0: detected capacity change from 0 to 16 [ 664.062322][T12358] erofs: (device loop0): mounted with root inode @ nid 36. [ 664.084661][T12358] overlayfs: missing 'lowerdir' [ 664.725182][T12387] loop3: detected capacity change from 0 to 16 [ 664.762089][T12387] erofs: (device loop3): mounted with root inode @ nid 36. [ 664.791366][T12387] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 664.803702][T12387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 665.011946][T12395] syzkaller0: entered promiscuous mode [ 665.018583][T12395] syzkaller0: entered allmulticast mode [ 668.537281][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 668.537382][ T28] audit: type=1326 audit(1791062755.666:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12462 comm="syz.0.2160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f3699e159 code=0x0 [ 669.026680][T12486] syzkaller0: entered promiscuous mode [ 669.032564][T12486] syzkaller0: entered allmulticast mode [ 669.166066][T12492] process 'syz.0.2169' launched '/dev/fd/6/./trace' with NULL argv: empty string added [ 669.197518][T12492] FAULT_INJECTION: forcing a failure. [ 669.197518][T12492] name failslab, interval 1, probability 0, space 0, times 0 [ 669.234460][T12492] CPU: 0 PID: 12492 Comm: syz.0.2169 Not tainted syzkaller #0 [ 669.241987][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.252075][T12492] Call Trace: [ 669.255376][T12492] [ 669.258327][T12492] dump_stack_lvl+0x18c/0x250 [ 669.263048][T12492] ? show_regs_print_info+0x20/0x20 [ 669.268291][T12492] ? load_image+0x420/0x420 [ 669.272840][T12492] ? __might_sleep+0xe0/0xe0 [ 669.277461][T12492] ? __lock_acquire+0x7eb0/0x7eb0 [ 669.282610][T12492] should_fail_ex+0x394/0x4c0 [ 669.287324][T12492] should_failslab+0x9/0x20 [ 669.291941][T12492] slab_pre_alloc_hook+0x59/0x300 [ 669.297000][T12492] ? bpf_init_fs_context+0x4f/0xe0 [ 669.302145][T12492] __kmem_cache_alloc_node+0x53/0x250 [ 669.307557][T12492] ? bpf_init_fs_context+0x4f/0xe0 [ 669.312700][T12492] kmalloc_trace+0x2a/0xe0 [ 669.317162][T12492] bpf_init_fs_context+0x4f/0xe0 [ 669.322126][T12492] alloc_fs_context+0x618/0x7a0 [ 669.327013][T12492] __se_sys_fsopen+0xa0/0x2c0 [ 669.331735][T12492] do_syscall_64+0x55/0xb0 [ 669.336188][T12492] ? clear_bhb_loop+0x40/0x90 [ 669.340889][T12492] ? clear_bhb_loop+0x40/0x90 [ 669.345589][T12492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.351518][T12492] RIP: 0033:0x7f4f3699e159 [ 669.355959][T12492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.375599][T12492] RSP: 002b:00007f4f37915028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 669.384052][T12492] RAX: ffffffffffffffda RBX: 00007f4f36c25fa0 RCX: 00007f4f3699e159 [ 669.392055][T12492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 669.400056][T12492] RBP: 00007f4f36a3506b R08: 0000000000000000 R09: 0000000000000000 [ 669.408140][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.416158][T12492] R13: 00007f4f36c26038 R14: 00007f4f36c25fa0 R15: 00007fff9add1ed8 [ 669.424156][T12492] [ 669.718404][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 670.948980][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 671.428634][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 674.107582][ T970] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 674.362840][ T970] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 674.462816][ T970] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 674.593582][ T970] usb 1-1: config 220 has no interface number 2 [ 674.703207][ T970] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 674.917502][ T970] usb 1-1: config 220 interface 0 has no altsetting 0 [ 674.989798][ T970] usb 1-1: config 220 interface 76 has no altsetting 0 [ 675.084343][ T970] usb 1-1: config 220 interface 1 has no altsetting 0 [ 675.194370][ T970] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 675.319576][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.428091][ T970] usb 1-1: Product: syz [ 675.477926][ T970] usb 1-1: Manufacturer: syz [ 675.534762][ T970] usb 1-1: SerialNumber: syz [ 677.029573][ T970] usb 1-1: selecting invalid altsetting 0 [ 677.035896][ T970] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 677.063892][ T970] usb 1-1: No valid video chain found. [ 677.104066][ T970] usb 1-1: selecting invalid altsetting 0 [ 677.129749][ T970] usbtest: probe of 1-1:220.1 failed with error -22 [ 677.175905][ T970] usb 1-1: USB disconnect, device number 13 [ 677.619335][T12652] overlayfs: failed to resolve './file0': -2 [ 677.777380][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 678.542273][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 678.784365][ T27] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 678.815375][ T27] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 678.900388][ T27] usb 4-1: config 220 has no interface number 2 [ 678.993014][ T27] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 679.119484][ T27] usb 4-1: config 220 interface 0 has no altsetting 0 [ 679.195801][ T27] usb 4-1: config 220 interface 76 has no altsetting 0 [ 679.264765][ T27] usb 4-1: config 220 interface 1 has no altsetting 0 [ 679.325638][ T27] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 679.396284][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.470012][ T27] usb 4-1: Product: syz [ 679.500865][ T27] usb 4-1: Manufacturer: syz [ 679.541437][ T27] usb 4-1: SerialNumber: syz [ 681.178144][ T27] usb 4-1: selecting invalid altsetting 0 [ 681.228549][ T27] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 681.234944][ T27] usb 4-1: No valid video chain found. [ 681.274197][ T27] usb 4-1: selecting invalid altsetting 0 [ 681.286961][ T27] usbtest: probe of 4-1:220.1 failed with error -22 [ 681.336872][ T27] usb 4-1: USB disconnect, device number 13 [ 681.622668][T12680] overlayfs: failed to resolve './file0': -2 [ 681.946443][T12686] FAULT_INJECTION: forcing a failure. [ 681.946443][T12686] name failslab, interval 1, probability 0, space 0, times 0 [ 681.962010][T12686] CPU: 0 PID: 12686 Comm: syz.2.2225 Not tainted syzkaller #0 [ 681.969558][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.979731][T12686] Call Trace: [ 681.983019][T12686] [ 681.985957][T12686] dump_stack_lvl+0x18c/0x250 [ 681.990659][T12686] ? show_regs_print_info+0x20/0x20 [ 681.995870][T12686] ? load_image+0x420/0x420 [ 682.000382][T12686] ? __lock_acquire+0x7eb0/0x7eb0 [ 682.005409][T12686] ? __lock_acquire+0x135d/0x7eb0 [ 682.010438][T12686] ? lockdep_lock+0x230/0x230 [ 682.015127][T12686] should_fail_ex+0x394/0x4c0 [ 682.019875][T12686] should_failslab+0x9/0x20 [ 682.024389][T12686] slab_pre_alloc_hook+0x59/0x300 [ 682.029428][T12686] kmem_cache_alloc_lru+0x4d/0x2b0 [ 682.034545][T12686] ? __d_alloc+0x31/0x710 [ 682.038877][T12686] __d_alloc+0x31/0x710 [ 682.043038][T12686] d_alloc_parallel+0xe0/0x1590 [ 682.047907][T12686] ? lockdep_softirqs_off+0x440/0x440 [ 682.053291][T12686] ? lockdep_softirqs_off+0x440/0x440 [ 682.058669][T12686] ? d_hash_and_lookup+0x1b0/0x1b0 [ 682.063792][T12686] ? __init_waitqueue_head+0xa8/0x140 [ 682.069176][T12686] __lookup_slow+0x138/0x400 [ 682.073822][T12686] ? lookup_one_len+0x2e0/0x2e0 [ 682.078695][T12686] lookup_one_len+0x1a1/0x2e0 [ 682.083378][T12686] ? lookup_one_common+0x450/0x450 [ 682.088488][T12686] ? __mnt_want_write+0x223/0x2a0 [ 682.093531][T12686] do_mq_open+0x25f/0x760 [ 682.097875][T12686] ? mq_clear_sbinfo+0x90/0x90 [ 682.102683][T12686] ? __might_fault+0xaa/0x120 [ 682.107374][T12686] ? __might_fault+0xc6/0x120 [ 682.112063][T12686] ? __might_fault+0xaa/0x120 [ 682.116750][T12686] __x64_sys_mq_open+0x186/0x1e0 [ 682.121705][T12686] ? proc_ipc_sem_dointvec+0x180/0x180 [ 682.127220][T12686] ? lockdep_hardirqs_on+0x98/0x150 [ 682.132433][T12686] do_syscall_64+0x55/0xb0 [ 682.136864][T12686] ? clear_bhb_loop+0x40/0x90 [ 682.141589][T12686] ? clear_bhb_loop+0x40/0x90 [ 682.146270][T12686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.152180][T12686] RIP: 0033:0x7fe85b59e159 [ 682.156613][T12686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.176234][T12686] RSP: 002b:00007fe85c519028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 682.184662][T12686] RAX: ffffffffffffffda RBX: 00007fe85b825fa0 RCX: 00007fe85b59e159 [ 682.192727][T12686] RDX: 0000000000000030 RSI: 00000000000008c2 RDI: 0000200000000000 [ 682.200708][T12686] RBP: 00007fe85b63506b R08: 0000000000000000 R09: 0000000000000000 [ 682.208725][T12686] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 682.216713][T12686] R13: 00007fe85b826038 R14: 00007fe85b825fa0 R15: 00007ffe81e7c8e8 [ 682.224738][T12686] [ 682.862729][ T5813] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 683.107991][ T5813] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 683.144264][ T5813] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 683.211290][ T5813] usb 4-1: config 220 has no interface number 2 [ 683.292212][ T5813] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 683.428408][ T5813] usb 4-1: config 220 interface 0 has no altsetting 0 [ 683.487078][ T5813] usb 4-1: config 220 interface 76 has no altsetting 0 [ 683.541557][ T5813] usb 4-1: config 220 interface 1 has no altsetting 0 [ 683.606193][ T5813] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 683.685770][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.765573][ T5813] usb 4-1: Product: syz [ 683.810747][ T5813] usb 4-1: Manufacturer: syz [ 683.860332][ T5813] usb 4-1: SerialNumber: syz [ 685.474118][ T5813] usb 4-1: selecting invalid altsetting 0 [ 685.504312][ T5813] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 685.530101][ T5813] usb 4-1: No valid video chain found. [ 685.561744][ T5813] usb 4-1: selecting invalid altsetting 0 [ 685.574174][ T5813] usbtest: probe of 4-1:220.1 failed with error -22 [ 685.605255][ T5813] usb 4-1: USB disconnect, device number 14 [ 685.718257][T12705] overlayfs: failed to resolve './file0': -2 [ 685.845693][T12710] loop2: detected capacity change from 0 to 256 [ 685.887692][T12710] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 685.944348][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.955126][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.667456][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 686.973353][ T5813] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 687.053676][ T5813] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 687.136214][ T5813] usb 3-1: config 220 has no interface number 2 [ 687.207468][ T5813] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 687.373856][ T5813] usb 3-1: config 220 interface 0 has no altsetting 0 [ 687.435782][ T5813] usb 3-1: config 220 interface 76 has no altsetting 0 [ 687.501256][ T5813] usb 3-1: config 220 interface 1 has no altsetting 0 [ 687.569951][ T5813] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 687.656255][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.729170][ T5813] usb 3-1: Product: syz [ 687.765614][ T5813] usb 3-1: Manufacturer: syz [ 687.807000][ T5813] usb 3-1: SerialNumber: syz [ 689.393121][ T5813] usb 3-1: selecting invalid altsetting 0 [ 689.402349][ T5813] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 689.422315][ T5813] usb 3-1: No valid video chain found. [ 689.458662][ T5813] usb 3-1: selecting invalid altsetting 0 [ 689.473390][ T5813] usbtest: probe of 3-1:220.1 failed with error -22 [ 689.512641][ T5813] usb 3-1: USB disconnect, device number 5 [ 689.548704][T12735] loop3: detected capacity change from 0 to 256 [ 689.591953][T12735] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 690.497688][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 690.731183][ T27] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 690.777148][ T27] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 690.880757][ T27] usb 1-1: config 220 has no interface number 2 [ 690.964118][ T27] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 691.071239][ T27] usb 1-1: config 220 interface 0 has no altsetting 0 [ 691.142642][ T27] usb 1-1: config 220 interface 76 has no altsetting 0 [ 691.223295][ T27] usb 1-1: config 220 interface 1 has no altsetting 0 [ 691.316786][ T27] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 691.410729][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.500750][ T27] usb 1-1: Product: syz [ 691.547620][ T27] usb 1-1: Manufacturer: syz [ 691.607459][ T27] usb 1-1: SerialNumber: syz [ 693.302387][ T27] usb 1-1: selecting invalid altsetting 0 [ 693.333933][ T27] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 693.358014][ T27] usb 1-1: No valid video chain found. [ 693.386461][ T27] usb 1-1: selecting invalid altsetting 0 [ 693.400523][ T27] usbtest: probe of 1-1:220.1 failed with error -22 [ 693.416277][ T27] usb 1-1: USB disconnect, device number 14 [ 693.617122][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.643111][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.661723][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.682722][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.698675][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 693.714865][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 694.947525][T11664] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 695.181793][T11664] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 695.237659][T11664] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 695.335309][T11664] usb 1-1: config 220 has no interface number 2 [ 695.401544][T11664] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 695.529028][T11664] usb 1-1: config 220 interface 0 has no altsetting 0 [ 695.578631][T11664] usb 1-1: config 220 interface 76 has no altsetting 0 [ 695.636566][T11664] usb 1-1: config 220 interface 1 has no altsetting 0 [ 695.700578][T11664] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 695.762191][T11664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.778542][ T5785] Bluetooth: hci4: command tx timeout [ 695.833958][T11664] usb 1-1: Product: syz [ 695.868546][T11664] usb 1-1: Manufacturer: syz [ 695.911937][T11664] usb 1-1: SerialNumber: syz [ 697.656321][T11664] usb 1-1: selecting invalid altsetting 0 [ 697.672392][T11664] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 697.707425][T11664] usb 1-1: No valid video chain found. [ 697.729622][T12797] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 697.748667][T11664] usb 1-1: selecting invalid altsetting 0 [ 697.754511][T11664] usbtest: probe of 1-1:220.1 failed with error -22 [ 697.770520][T12797] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 697.818514][T11664] usb 1-1: USB disconnect, device number 15 [ 697.833629][T12797] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 697.859907][ T5785] Bluetooth: hci4: command tx timeout [ 698.425070][T12815] overlayfs: missing 'lowerdir' [ 699.036953][T12773] chnl_net:caif_netlink_parms(): no params data found [ 699.155078][T12773] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.162591][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.170013][T12773] bridge_slave_0: entered allmulticast mode [ 699.178612][T12773] bridge_slave_0: entered promiscuous mode [ 699.188883][T12773] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.196161][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.203792][T12773] bridge_slave_1: entered allmulticast mode [ 699.213018][T12773] bridge_slave_1: entered promiscuous mode [ 699.249729][T12773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.262835][T12773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.268278][T12838] loop3: detected capacity change from 0 to 736 [ 699.303219][T12773] team0: Port device team_slave_0 added [ 699.314330][T12773] team0: Port device team_slave_1 added [ 699.413757][T12773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.427097][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.454487][T12773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.473736][T12773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.486420][T12773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.597052][T12773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.772907][T12773] hsr_slave_0: entered promiscuous mode [ 699.807934][T12773] hsr_slave_1: entered promiscuous mode [ 699.820433][T12848] overlayfs: missing 'lowerdir' [ 699.945303][ T5785] Bluetooth: hci4: command tx timeout [ 699.979057][T12845] kvm: apic: phys broadcast and lowest prio [ 700.066556][T12857] kvm: apic: phys broadcast and lowest prio [ 700.229259][T12773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 700.243020][T12773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 700.274681][T12773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 700.316968][T12773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 700.359720][T12861] FAULT_INJECTION: forcing a failure. [ 700.359720][T12861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.381820][T12861] CPU: 0 PID: 12861 Comm: syz.3.2283 Not tainted syzkaller #0 [ 700.389354][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.399442][T12861] Call Trace: [ 700.402753][T12861] [ 700.405706][T12861] dump_stack_lvl+0x18c/0x250 [ 700.410419][T12861] ? show_regs_print_info+0x20/0x20 [ 700.415651][T12861] ? load_image+0x420/0x420 [ 700.420196][T12861] ? __might_fault+0xaa/0x120 [ 700.424909][T12861] ? __lock_acquire+0x7eb0/0x7eb0 [ 700.429972][T12861] ? __virt_addr_valid+0x10c/0x380 [ 700.435123][T12861] should_fail_ex+0x394/0x4c0 [ 700.439855][T12861] _copy_to_user+0x2f/0xa0 [ 700.444319][T12861] bpf_verifier_vlog+0x5ac/0x840 [ 700.449327][T12861] __btf_verifier_log+0xe3/0x140 [ 700.454318][T12861] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.460441][T12861] ? btf_check_sec_info+0x350/0x350 [ 700.465690][T12861] ? mark_lock+0x94/0x320 [ 700.470156][T12861] __btf_verifier_log_type+0x3c9/0x690 [ 700.475674][T12861] ? sort_r+0x17f5/0x1810 [ 700.480087][T12861] ? btf_int_show+0x2810/0x2810 [ 700.484247][T12773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.485008][T12861] btf_datasec_check_meta+0x46d/0xb50 [ 700.497132][T12861] btf_check_all_metas+0x371/0xaf0 [ 700.502299][T12861] btf_parse_type_sec+0xfc/0x1960 [ 700.507354][T12861] ? btf_check_sec_info+0x350/0x350 [ 700.512602][T12861] ? __virt_addr_valid+0x10c/0x380 [ 700.515125][T12773] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.517732][T12861] ? btf_verifier_log+0x1a0/0x1a0 [ 700.517767][T12861] ? btf_parse_hdr+0x545/0x700 [ 700.517788][T12861] ? btf_parse_str_sec+0x20d/0x2a0 [ 700.517813][T12861] btf_new_fd+0x440/0x9e0 [ 700.517845][T12861] ? bpf_btf_show_fdinfo+0x80/0x80 [ 700.517873][T12861] ? capable+0x88/0xe0 [ 700.517898][T12861] __sys_bpf+0x670/0x890 [ 700.517921][T12861] ? bpf_link_show_fdinfo+0x560/0x560 [ 700.532822][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.534292][T12861] ? lock_chain_count+0x20/0x20 [ 700.539543][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.543699][T12861] __x64_sys_bpf+0x7c/0x90 [ 700.574433][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.581523][T12861] do_syscall_64+0x55/0xb0 [ 700.581556][T12861] ? clear_bhb_loop+0x40/0x90 [ 700.581574][T12861] ? clear_bhb_loop+0x40/0x90 [ 700.581594][T12861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.586094][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.593013][T12861] RIP: 0033:0x7f7318f9e159 [ 700.593033][T12861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.593050][T12861] RSP: 002b:00007f7319dde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.652455][T12861] RAX: ffffffffffffffda RBX: 00007f7319225fa0 RCX: 00007f7318f9e159 [ 700.660553][T12861] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 700.668556][T12861] RBP: 00007f731903506b R08: 0000000000000000 R09: 0000000000000000 [ 700.676590][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.684598][T12861] R13: 00007f7319226038 R14: 00007f7319225fa0 R15: 00007ffc04a230d8 [ 700.692627][T12861] [ 700.962869][T12773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.004105][T12878] loop3: detected capacity change from 0 to 256 [ 701.063519][T12878] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 701.256790][T12882] kvm: pic: non byte write [ 701.450275][T12897] kvm: apic: phys broadcast and lowest prio [ 701.563800][T12773] veth0_vlan: entered promiscuous mode [ 701.584626][T12773] veth1_vlan: entered promiscuous mode [ 701.666247][T12773] veth0_macvtap: entered promiscuous mode [ 701.711426][T12773] veth1_macvtap: entered promiscuous mode [ 701.738075][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.774051][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.797309][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.823548][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.843618][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.875206][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.886353][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.900814][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.915818][T12773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.955916][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.992803][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.003193][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.021463][ T5785] Bluetooth: hci4: command tx timeout [ 702.031687][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.045397][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.046339][T12917] overlayfs: missing 'lowerdir' [ 702.056634][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.074924][T12773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.085694][T12773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.098317][T12773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.142165][T12773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.162795][T12773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.172053][T12773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.181521][T12773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.397026][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.420950][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.518792][T11314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.527860][T11314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.702094][T12936] loop0: detected capacity change from 0 to 512 [ 702.710072][T12936] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 703.038176][T12944] overlayfs: missing 'workdir' [ 703.343274][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 703.355050][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 703.363985][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 703.376574][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 703.386199][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 703.393812][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 703.769176][ T8342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.990972][ T8342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.201736][T12974] loop2: detected capacity change from 0 to 16 [ 704.221729][T12974] erofs: (device loop2): mounted with root inode @ nid 36. [ 704.222044][ T8342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.260505][T12974] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 704.287087][T12974] syz.2.2318: attempt to access beyond end of device [ 704.287087][T12974] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 704.330987][T12974] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 704.354191][T12974] syz.2.2318: attempt to access beyond end of device [ 704.354191][T12974] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 704.375355][ T8342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.391013][T12948] chnl_net:caif_netlink_parms(): no params data found [ 704.403137][T12974] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 704.438754][ T28] audit: type=1800 audit(1791062791.566:86): pid=12974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2318" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 704.487403][T12974] syz.2.2318 (12974) used greatest stack depth: 19240 bytes left [ 704.526016][T12948] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.533440][T12948] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.541196][T12948] bridge_slave_0: entered allmulticast mode [ 704.548829][T12948] bridge_slave_0: entered promiscuous mode [ 704.555043][T12980] loop5: detected capacity change from 0 to 736 [ 704.557582][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.569088][T12948] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.576316][T12948] bridge_slave_1: entered allmulticast mode [ 704.583808][T12948] bridge_slave_1: entered promiscuous mode [ 704.729514][T12948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.833741][T12948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.968103][T12948] team0: Port device team_slave_0 added [ 705.024931][T12948] team0: Port device team_slave_1 added [ 705.285932][T12991] loop5: detected capacity change from 0 to 764 [ 705.458019][ T51] Bluetooth: hci5: command tx timeout [ 705.488701][T12948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.495694][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.587343][T12948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.697723][T12948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.725685][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.773487][T12948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.792486][T13008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 706.073304][T12948] hsr_slave_0: entered promiscuous mode [ 706.107609][T12948] hsr_slave_1: entered promiscuous mode [ 706.147794][T12948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.155757][T12948] Cannot create hsr debugfs directory [ 706.222208][T13028] loop5: detected capacity change from 0 to 764 [ 706.230504][T13029] overlay: filesystem on ./file0 not supported as upperdir [ 706.550269][T13038] fuse: Bad value for 'fd' [ 707.095165][T13055] EXT4-fs (sda1): shut down requested (2) [ 707.111296][T13055] Aborting journal on device sda1-8. [ 707.484028][T13073] overlay: filesystem on ./file0 not supported as upperdir [ 707.537406][ T51] Bluetooth: hci5: command tx timeout [ 707.881198][ T8342] hsr_slave_0: left promiscuous mode [ 707.904635][ T8342] hsr_slave_1: left promiscuous mode [ 707.920542][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.934946][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.953196][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.976655][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.994651][ T8342] bridge_slave_1: left allmulticast mode [ 708.000829][ T8342] bridge_slave_1: left promiscuous mode [ 708.006603][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.028905][ T8342] bridge_slave_0: left allmulticast mode [ 708.034706][ T8342] bridge_slave_0: left promiscuous mode [ 708.053409][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.113576][T13099] loop5: detected capacity change from 0 to 512 [ 708.134198][ T8342] veth1_macvtap: left promiscuous mode [ 708.140041][ T8342] veth0_macvtap: left promiscuous mode [ 708.145704][ T8342] veth1_vlan: left promiscuous mode [ 708.152724][ T8342] veth0_vlan: left promiscuous mode [ 708.419154][T13113] overlay: filesystem on ./file0 not supported as upperdir [ 709.213789][ T8342] team0 (unregistering): Port device team_slave_1 removed [ 709.279842][ T8342] team0 (unregistering): Port device team_slave_0 removed [ 709.331399][T13134] kvm: apic: phys broadcast and lowest prio [ 709.340041][ T8342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.393376][ T8342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.618319][ T51] Bluetooth: hci5: command tx timeout [ 709.844343][ T8342] bond0 (unregistering): Released all slaves [ 710.354328][T12948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 710.379508][T12948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 710.399808][T12948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.441847][T12948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.673208][T12948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.713017][T12948] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.748512][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.755742][ T8342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.791679][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.798866][ T8342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.074715][T12948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.195477][T12948] veth0_vlan: entered promiscuous mode [ 711.211806][T13186] xt_hashlimit: max too large, truncated to 1048576 [ 711.233038][T12948] veth1_vlan: entered promiscuous mode [ 711.306695][T12948] veth0_macvtap: entered promiscuous mode [ 711.334993][T12948] veth1_macvtap: entered promiscuous mode [ 711.371406][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.382408][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.396444][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.414723][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.425148][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.447246][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.457120][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.475756][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.490813][T12948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.529537][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.549404][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.559700][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.587277][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.606382][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.630757][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.641842][T12948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.652406][T12948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.663658][T12948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.684262][T12948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.694081][T12948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.703619][ T5785] Bluetooth: hci5: command tx timeout [ 711.714612][T12948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.723437][T12948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.942922][T13209] overlayfs: failed to resolve './file0': -2 [ 712.055173][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.084284][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.131587][T13215] loop5: detected capacity change from 0 to 128 [ 712.152614][ T8342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.183986][ T8342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.606905][T13227] loop2: detected capacity change from 0 to 736 [ 712.769981][T13228] kvm: apic: phys broadcast and lowest prio [ 713.335499][T13232] kvm: apic: phys broadcast and lowest prio [ 713.882928][T13261] loop5: detected capacity change from 0 to 736 [ 714.371259][T13266] fuse: Bad value for 'fd' [ 714.541239][T13270] ip_tables: iptables: counters copy to user failed while replacing table [ 714.789338][T13279] kvm: apic: phys broadcast and lowest prio [ 714.802059][T13285] fuse: Bad value for 'fd' SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 715.012706][ T8342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.750452][ T5770] syz_tun (unregistering): left allmulticast mode [ 716.464334][ T8342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.524364][ T8342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.596333][ T8342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.469960][ T8342] hsr_slave_0: left promiscuous mode [ 717.482410][ T8342] hsr_slave_1: left promiscuous mode [ 717.489455][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.496863][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.505027][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.513810][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.521821][ T8342] bridge_slave_1: left allmulticast mode [ 717.527753][ T8342] bridge_slave_1: left promiscuous mode [ 717.533474][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.545097][ T8342] bridge_slave_0: left allmulticast mode [ 717.551873][ T8342] bridge_slave_0: left promiscuous mode [ 717.557835][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.580021][ T8342] veth1_macvtap: left promiscuous mode [ 717.585564][ T8342] veth0_macvtap: left promiscuous mode [ 717.591359][ T8342] veth1_vlan: left promiscuous mode [ 717.596691][ T8342] veth0_vlan: left promiscuous mode [ 718.220460][ T8342] team0 (unregistering): Port device team_slave_1 removed [ 718.271448][ T8342] team0 (unregistering): Port device team_slave_0 removed [ 718.320082][ T8342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.369148][ T8342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.730052][ T8342] bond0 (unregistering): Released all slaves [ 719.155167][ T8342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.220071][ T8342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.280997][ T8342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.341691][ T8342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.490655][ T8342] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.554141][ T8342] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.622119][ T8342] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.713280][ T8342] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.895804][ T8342] hsr_slave_0: left promiscuous mode [ 720.903261][ T8342] hsr_slave_1: left promiscuous mode [ 720.909357][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.916759][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.926554][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.934552][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.945040][ T8342] bridge_slave_1: left allmulticast mode [ 720.950841][ T8342] bridge_slave_1: left promiscuous mode [ 720.956538][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.965771][ T8342] bridge_slave_0: left allmulticast mode [ 720.971641][ T8342] bridge_slave_0: left promiscuous mode [ 720.977708][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.989777][ T8342] hsr_slave_0: left promiscuous mode [ 720.995564][ T8342] hsr_slave_1: left promiscuous mode [ 721.002072][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.009582][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.019202][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.027005][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.042054][ T8342] bridge_slave_1: left allmulticast mode [ 721.047857][ T8342] bridge_slave_1: left promiscuous mode [ 721.053596][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.071495][ T8342] bridge_slave_0: left allmulticast mode [ 721.077298][ T8342] bridge_slave_0: left promiscuous mode [ 721.083104][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.119970][ T8342] veth1_macvtap: left promiscuous mode [ 721.125517][ T8342] veth0_macvtap: left promiscuous mode [ 721.132264][ T8342] veth1_vlan: left promiscuous mode [ 721.139918][ T8342] veth1_macvtap: left promiscuous mode [ 721.145554][ T8342] veth0_macvtap: left promiscuous mode [ 721.151396][ T8342] veth1_vlan: left promiscuous mode [ 721.156760][ T8342] veth0_vlan: left promiscuous mode [ 721.480122][ T8342] bond3 (unregistering): Released all slaves [ 721.629366][ T8342] bond2 (unregistering): Released all slaves [ 722.171200][ T8342] team0 (unregistering): Port device team_slave_1 removed [ 722.218983][ T8342] team0 (unregistering): Port device team_slave_0 removed [ 722.266558][ T8342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.315918][ T8342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.706365][ T8342] bond0 (unregistering): Released all slaves [ 723.241513][ T8342] team0 (unregistering): Port device team_slave_1 removed [ 723.283258][ T8342] team0 (unregistering): Port device team_slave_0 removed [ 723.329307][ T8342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.373021][ T8342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.733850][ T8342] bond0 (unregistering): Released all slaves