last executing test programs: 7m18.635237955s ago: executing program 3 (id=483): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x2000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 7m16.59238219s ago: executing program 3 (id=486): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x2, {{0xa, 0x5, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e21, 0x2000, @local, 0xffffffff}}}, 0x108) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) write(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8003, 0x0) r6 = eventfd2(0x7fffffff, 0x80000) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) setuid(0xee01) sendmsg$TCPDIAG_GETSOCK(r7, 0x0, 0x20004010) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100)=r6, 0x1) ptrace(0x10, r4) mount(0x0, 0x0, 0x0, 0x0, 0x0) 7m15.869287334s ago: executing program 3 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x7}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x6, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x0, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0xff}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10003, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0xff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0x85, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0xfffffffe, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0xffffffff, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x7, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564dc}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)}, 0x20000885) 7m15.175728377s ago: executing program 3 (id=489): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x1, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 7m14.268181309s ago: executing program 3 (id=491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x38, r1, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x20008004) 7m12.829515637s ago: executing program 3 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/256, 0x100) read(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x120}}, 0x0) write(r3, &(0x7f00000005c0)="010000000705810240", 0x9) 7m12.429089376s ago: executing program 32 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/ep1in-bulk\x00', 0x2, 0x0) read(r2, &(0x7f00000002c0)=""/256, 0x100) read(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x120}}, 0x0) write(r3, &(0x7f00000005c0)="010000000705810240", 0x9) 6m31.472596589s ago: executing program 0 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0xf}, {0x7, 0xf}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4000098) 6m29.781928738s ago: executing program 0 (id=623): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x679}], 0x1, 0x40000000, 0x0) 6m29.361669218s ago: executing program 0 (id=625): r0 = socket(0x1d, 0x2, 0x6) recvmsg$kcm(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) 6m28.949633987s ago: executing program 0 (id=628): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x8080c2, &(0x7f0000000040), 0xfe, 0x4b1, &(0x7f0000000440)="$eJzs3M9vVNUeAPDvnelMW3689vF47wmCVtFA/NHSgsrCDUYTF5qY6ALjqraFIAM1tCZCiKILXBoS98aliX+AcSNsjLoycat7Y0IMG5CYOObO3FuGdmba0ukMOp9Pcplz77lz7/nec07n3HNnCKBvjaX/JBHbIuKniBipr965w1j95eb1CzO/X78wk0S1+upvSSRRjhvXL8zku+bv25qtJG3Oe+mNiOlKZe5stj6xePrtiYVz5588eXr6xNyJuTNTR44cPrS3XN5gfHkZ0rhu7H5vfs+uF1+//PLMsctvfvdFmrcty2+Mo1PG6lc3vyJ3eLTTJ+ux7Q3pZKCHBWFdhiIira5Srf+PRDGGl/JG4oUPW75xrEsFBDZNtVqoDrbOvlgF/sHS0fw6DW1KQYAuyz/o0/vffOnS0OOecO1ofY4gjftmttQmC2IgCtk+peweaTOkt1HHLt76NF1ik+YhAAAaXTkaEU80G/8V4n8N+/0re4YyGhH/jogd5Yj/RMTOiPhvRG3f/0fEfXccvXGE2dzyaeSV45/qyEbiW006/ns2e7a1NP6ryUd/MVrM1rbX4i8lx09W5g5m1+RAlAbT9ck257j6/I8ft8prHP+lS3r+fCyYlePXgWUTdLPTi9MbibnRtQ8idg80iz9ZGvOm4+NdEbH7Ls9x8rHP96zceqvWNlaPv40ODMqrn0Xsr9f/xVgWfy5p+Xxy8pmnp56aGIrK3MGJvFWs9P0Pl15pdf4Nxd8B165UY0vT9p/Hn/yZDEUsnDt/qva8dmENB83ba/Yo6dLPHzW/pynVX+qxj8axwTbt/+q2pS1p+y8nr9XS+fPhd6cXF89ORpSTl1Zun7p9tHw93z9t/wf2Ne//O7LX9ErcHxFpI947HPFARDyY1d1DEfFwROxrczm+fe6Rt1rlta7/NrPyHZTGP9u2/mM0Td2u/zQRhSyxtKVdonjqm6/WFH/en1fU/+Fa6kC2ZS1//26XIol2Bbzb6wYAAAB/J4Xad+CTwvhSulAYH69/Y31nbClU5hcWHz8+/86Z2fp35UejVMhnukbixJeRzYdOZnPD+fzo1LL1Q9m88SfF4dr6+Mx8ZbbXwUOf29qi/6d+Kfa6dMCm83st6F/6P/Qv/R/6l/4P/Uv/h/7VrP+/34NyAN23yuf/cLfKAXRf8/7/R9fLAXSf+3/oX/o/9KWWv40vxP6B7L/oX/sv/StzZ4txN++S6FDi63KbOl09UV77zlG4R0LucaIYnTpgKZpklWMg1n3A4XWdfbBpVq//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTGXwEAAP//pO7cuA==") syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000006c0)=ANY=[], 0x14) 6m28.521708307s ago: executing program 0 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x0, 0x180d001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='at', 0x2) 6m27.917637666s ago: executing program 0 (id=634): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) 6m12.70604509s ago: executing program 33 (id=634): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) 4m33.741818917s ago: executing program 4 (id=1061): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xc, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xfffffe7d, 0x0, 0x100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 4m33.399192163s ago: executing program 4 (id=1063): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfe0f}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) 4m30.531596388s ago: executing program 4 (id=1066): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeef", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b", 0x38}, {&(0x7f0000002240)="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", 0x653}], 0x2}}], 0x2, 0x0) 4m29.284153386s ago: executing program 4 (id=1072): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4m25.356792611s ago: executing program 4 (id=1079): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m23.850311531s ago: executing program 1 (id=1081): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x40, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x40}}, 0x0) 4m23.615124002s ago: executing program 4 (id=1082): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = getpgrp(0x0) syz_open_procfs$userns(r1, &(0x7f0000000040)) 4m23.114106786s ago: executing program 34 (id=1082): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = getpgrp(0x0) syz_open_procfs$userns(r1, &(0x7f0000000040)) 4m23.107512046s ago: executing program 1 (id=1085): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 sync 2', 0x3a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") 4m22.983082062s ago: executing program 1 (id=1086): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)}], 0x1}, 0x8044) 4m22.788919941s ago: executing program 1 (id=1087): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4m20.419367312s ago: executing program 1 (id=1091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 4m19.136782543s ago: executing program 1 (id=1099): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeef", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b", 0x38}, {&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143edd69b131595bbf776aa7583687228d8ea578f9f08ea949be49c1b087f430262968f639047eeb91c84a4cc6df66c749fb9b5b38e7e6546683df3a6ae722ea0d644256d82d8f3ba6b8bca23498a7dcc06fcda64d94f15b6bf620e7b272a476b097715f430c1d7c4c221156df5225c9fee4e580a5600713a1ce6e503c37730b5b4d3be23b212eb0ac2a05a7dc6aa88984566664086491ba3214bd9c9a4196d028f6ba448682536b40eab416ea8cf4098101af663d53110ebc2dffd88457ffd70decf1269f3fa61460593671d750ea0ab08aaac98a555a78da62b62625b550f840f34d1b02788bceb09002f615187159295d1a10e2dcfda5c1d399226047a53a1695f0af8121ad144b4dbe411d34d5e4eb4b4075e522d60d0020b2969025021bfc03062e0c8281bfa4cbce38241b53e970acc20ee903fcc81e8770f93367d7eddb95093177337475d5ef009ab799de6950d06ad68e8f9474634672657ba29df601e0be9e362197bafc25fee416a2b6d378dd31294d99317e5cc0d83827f6916ac648d638a515f823d0d784d841c31483b7d030258c62256268055286d3e773316f0f50df6411da24d8aeed75f50f49b0f6cc8672630954c1c3a1632d3497e3be53a4734619bd79aea6ffd87b8278f09775884018c70a6cf7290d5d09c6fa35a2c5fe9be746c9a4cb3e45855a12bf0c0fdeecb5a86922094b0d7b1adf0c10295e0e2ded424c476b8a15ddc44d229951e8a86d359c911e6a4baaeeb2c84cf367e92566ad2bed0c079c614f903d48cd19252c004a2f1de096d83f032d1a86bcd0b53b16668c88258d7d5ca7fc72d41b74ffe5c4a02e5b7077eddbeb77e4678a45e2983e4a1c07e7eb53ebddedca9bf2c52b84b759a88ec4cad17935e7af6c1ae2dd0ce1d37a2dcc74c336a71daf179ebddb5651a41f209b6a5ea7a001efbf74bd21f7fa3708430baddc2b24a7871f7bb443913ca59e64556d361af986aff89975fa48682bd97e707590f3d508427f6a61e293393518b620c12b6d055014a2f5744be4a16a8b39e5cb19112eb529646f83ca092c52945bd873e6dffbd22f9ba99f350689313c2acc9d4a35c182056bf029aa5fbd942a955d5627b815b658a522605fc5a993c4cc3722da94d1509a1926fe2873c02027714784d20f2765c5f299c56a18791b4ca799bf477832093222f805fa125527495975cb5f50f5ca6cba89459b85d674214ff894c33b8a2c85193d7f312de8a42f4eede4fb84ae648dffae1ec13e8ad5663b10847f9d476e1bcacff45389dee0cc7e1a84834ab7904116ef8c89705f931b42a501303da83ac9799dde0df252d0b597e78001229d9a2339bd71c6244fdaebcffc10595c09ddad42bf7cfed789817962bffec", 0x653}], 0x2}}], 0x2, 0x0) 4m18.328080311s ago: executing program 35 (id=1099): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeef", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b", 0x38}, {&(0x7f0000002240)="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", 0x653}], 0x2}}], 0x2, 0x0) 3m55.661869365s ago: executing program 5 (id=1156): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x10000000000}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") r1 = socket(0x15, 0x3, 0x3) sendmsg$nl_generic(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m53.128182624s ago: executing program 5 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xe0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 3m49.981881001s ago: executing program 5 (id=1162): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x188}}], 0x2, 0x4000810) 3m49.752828352s ago: executing program 5 (id=1163): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3m48.765729498s ago: executing program 5 (id=1164): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 3m48.0978549s ago: executing program 5 (id=1165): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3m47.527012127s ago: executing program 36 (id=1165): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3m31.760230717s ago: executing program 6 (id=1200): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) 3m30.904138977s ago: executing program 6 (id=1202): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4) 3m30.663215159s ago: executing program 6 (id=1205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x3, 0x2, [0x3, 0x100]}, 0xc) 3m30.268948767s ago: executing program 6 (id=1206): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) setxattr$incfs_metadata(&(0x7f0000000080)='./file2\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) 3m25.279589581s ago: executing program 6 (id=1216): ptrace(0x4207, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m24.150866114s ago: executing program 6 (id=1221): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x1, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 3m23.644000628s ago: executing program 37 (id=1221): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x1, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 14.661510882s ago: executing program 2 (id=1778): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 14.560316716s ago: executing program 2 (id=1779): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000140)={0x8001, 0x2, 0x10000}) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$netlink(0x10, 0x3, 0x0) 13.608415441s ago: executing program 2 (id=1780): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b00", 0x34}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 11.480132371s ago: executing program 2 (id=1783): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYBLOB="af613ac396302976355ad642f567454761bf62bd96d53f7b4c0ce4df073d5b251e5027f898b9ccf422b304288c11ab43e98e30b1b49aa480cc9a808376289d5520abf1207c6024490e3fb1cb337c9129c962414367a2bcc7656c8ac0d7eec773ece3134e900384d26b81d4282ecce12200457d123eefb177bf2adc6b96ec2c93a653491e45a05d268e5fba0e", @ANYBLOB="ffff0900"/18, @ANYRES16=0x0], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) tkill(0x0, 0x2a) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001900)={r6}, &(0x7f0000000340)=0x8) 6.39037656s ago: executing program 7 (id=1802): openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000020)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x8000], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl(r6, 0x8914, &(0x7f0000000100)="63616e3000000000000000000000000001") bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r7, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 5.32265529s ago: executing program 9 (id=1803): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x1, 0x3, 0x1}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x5, 0x0, 0x0, r1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000340)) 4.177515244s ago: executing program 8 (id=1804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4, 0x34}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0xf2ff}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 3.931173646s ago: executing program 7 (id=1805): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) close(r3) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x14) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0ae2ffff03000000040000006200000000000000531526f0bd791da6a873fffaf5bc24340802d276a2de425c9f455563c64a0e070b902fe0be71ab263657c69eaaefcbec4f0bd500ff821025bc7c955f3920db37be7969d7fa457370de54e36fbee395ce1efc5b532118757c6c462cee7b1176d7c839711f8c563ddf586fb632fd5580219547416edaa60b63d469f8f75664662c013adde056433943ddeba76508f45ca445e456d4e1f0f5c3b449b3ae395fbfad5ac2c4d70036dde7abbb9f4df8e75d72f9cc269bc0546a5a408549", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 3.822484431s ago: executing program 9 (id=1806): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) dup2(r1, r0) ioctl$PPPIOCSFLAGS1(r1, 0x4004743c, &(0x7f0000000580)=0xa300010) 3.667302728s ago: executing program 8 (id=1807): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e9703000000", 0xd7}], 0x1}, 0x20048812) 2.842703026s ago: executing program 9 (id=1808): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ptrace(0x4207, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.814439248s ago: executing program 7 (id=1809): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000140)={0x8001, 0x2, 0x10000}) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$netlink(0x10, 0x3, 0x0) 2.600491438s ago: executing program 8 (id=1810): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000040), &(0x7f0000000180)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x8000) 1.609786175s ago: executing program 7 (id=1811): r0 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.546979557s ago: executing program 9 (id=1812): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x6c, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.49019453s ago: executing program 2 (id=1813): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) close(r8) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.28550664s ago: executing program 8 (id=1814): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x121800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340, 0x63812}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) setns(0xffffffffffffffff, 0x10000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f0000000100), 0x1, 0x50d, &(0x7f0000001bc0)="$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") getgroups(0x2, &(0x7f00000002c0)=[0x0, 0xee00]) chown(&(0x7f00000000c0)='./file1\x00', 0x0, r2) mount$bind(0x0, &(0x7f0000000280)='.\x00', 0x0, 0xca3, 0x0) 1.206937323s ago: executing program 9 (id=1815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4, 0x34}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 885.825259ms ago: executing program 7 (id=1816): ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x6) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x7f, 0x6}, {0xc, 0x9, [0x40]}}}}, 0x13) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'bridge_slave_0\x00'}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x211) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x2bd44000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) 554.827664ms ago: executing program 8 (id=1817): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00'}, 0x94) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='raid5', 0x5) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000500)='ppl', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000580), 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 521.951606ms ago: executing program 9 (id=1818): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x20}}}, &(0x7f0000000480)=0x0) r6 = dup(r1) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x11, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3900, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf150, 0x400, 0x6, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000580)=""/72, 0x48}], 0x1, 0x0, 0x7e, 0x10) 427.14069ms ago: executing program 2 (id=1819): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@discard}, {@resuid}, {@debug}, {@dioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x14, r3, 0x709, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) 263.009247ms ago: executing program 8 (id=1820): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_usb_connect(0x4, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1f}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 0s ago: executing program 7 (id=1821): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x10000000000}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) read(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): TU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.811067][T10014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.855811][T10014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.881056][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.932974][T10014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.373599][T10014] hsr_slave_0: entered promiscuous mode [ 447.405903][T10014] hsr_slave_1: entered promiscuous mode [ 447.419030][T10014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.439608][T10014] Cannot create hsr debugfs directory [ 448.832670][ C1] net_ratelimit: 35 callbacks suppressed [ 449.180736][T10014] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 449.289355][T10014] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 449.322540][T10014] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 449.469185][T10014] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 449.696016][T10197] FAULT_INJECTION: forcing a failure. [ 449.696016][T10197] name fail_futex, interval 1, probability 0, space 0, times 0 [ 449.757919][T10197] CPU: 1 PID: 10197 Comm: syz.2.1203 Not tainted syzkaller #0 [ 449.765438][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.765454][T10197] Call Trace: [ 449.765463][T10197] [ 449.765474][T10197] dump_stack_lvl+0x18c/0x250 [ 449.765511][T10197] ? show_regs_print_info+0x20/0x20 [ 449.791816][T10197] ? load_image+0x420/0x420 [ 449.796375][T10197] ? move_vma+0x1156/0x16a0 [ 449.796406][T10197] should_fail_ex+0x394/0x4c0 [ 449.796445][T10197] get_futex_key+0x136/0x1030 [ 449.796478][T10197] ? futex_setup_timer+0xc0/0xc0 [ 449.796502][T10197] ? userfaultfd_unmap_complete+0x293/0x310 [ 449.796535][T10197] futex_wake+0x127/0x4f0 [ 449.796565][T10197] ? futex_wake_mark+0x150/0x150 [ 449.796599][T10197] ? __se_sys_mremap+0x87e/0x11a0 [ 449.796627][T10197] do_futex+0x35d/0x3e0 [ 449.796657][T10197] ? __ia32_sys_get_robust_list+0x110/0x110 [ 449.796681][T10197] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 449.796709][T10197] ? __lock_acquire+0x7d80/0x7d80 [ 449.796741][T10197] __se_sys_futex+0x3a9/0x440 [ 449.796772][T10197] ? __x64_sys_futex+0xf0/0xf0 [ 449.796803][T10197] ? __x64_sys_futex+0x21/0xf0 [ 449.796829][T10197] do_syscall_64+0x55/0xb0 [ 449.796859][T10197] ? clear_bhb_loop+0x40/0x90 [ 449.796888][T10197] ? clear_bhb_loop+0x40/0x90 [ 449.796918][T10197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.796947][T10197] RIP: 0033:0x7f735dd9e159 [ 449.796969][T10197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.796989][T10197] RSP: 002b:00007f735eba80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 449.797015][T10197] RAX: ffffffffffffffda RBX: 00007f735e025fa8 RCX: 00007f735dd9e159 [ 449.797034][T10197] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f735e025fac [ 449.806552][T10197] RBP: 00007f735e025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 449.806569][T10197] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 449.806584][T10197] R13: 00007f735e026038 R14: 00007ffe48e8d960 R15: 00007ffe48e8da48 [ 449.806615][T10197] [ 450.209559][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.284779][T10204] loop6: detected capacity change from 0 to 512 [ 450.365844][T10204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.443449][T10204] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.478614][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.737364][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.744835][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.791036][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.798328][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.933749][T10220] xt_bpf: check failed: parse error [ 451.808890][T10217] loop6: detected capacity change from 512 to 0 [ 452.408730][ T9537] loop: Write error at byte offset 9223372036854831103, length 2048. [ 452.446709][ C0] I/O error, dev loop6, sector 108 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 452.456757][ C0] Buffer I/O error on dev loop6, logical block 27, lost sync page write [ 452.551255][T10204] EXT4-fs error (device loop6): ext4_ext_insert_extent:2206: inode #16: block 27: comm syz.6.1206: IO error syncing itable block [ 452.757451][T10204] syz.6.1206: attempt to access beyond end of device [ 452.757451][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 452.936096][T10014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.000013][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 453.092950][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 453.201916][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 453.290580][T10204] syz.6.1206: attempt to access beyond end of device [ 453.290580][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 453.385713][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 453.394236][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 453.401154][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 453.422813][T10204] syz.6.1206: attempt to access beyond end of device [ 453.422813][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 453.473339][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 453.507265][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 453.530964][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 453.573499][T10204] syz.6.1206: attempt to access beyond end of device [ 453.573499][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 453.624244][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 453.662368][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 453.689722][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 453.731003][T10204] syz.6.1206: attempt to access beyond end of device [ 453.731003][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 453.772852][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 453.802780][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 453.810023][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 453.872673][ C0] net_ratelimit: 28 callbacks suppressed [ 453.909282][T10204] syz.6.1206: attempt to access beyond end of device [ 453.909282][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 453.976318][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 454.014901][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 454.021976][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 454.092248][T10204] syz.6.1206: attempt to access beyond end of device [ 454.092248][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 454.126334][T10014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.153122][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 454.161530][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 454.217916][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 454.238753][T10204] syz.6.1206: attempt to access beyond end of device [ 454.238753][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 454.259159][T10204] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 454.279136][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 454.315007][T10204] syz.6.1206: attempt to access beyond end of device [ 454.315007][T10204] loop6: rw=14337, sector=108, nr_sectors = 4 limit=0 [ 454.329354][T10204] Buffer I/O error on dev loop6, logical block 27, lost sync page write [ 454.338276][T10204] EXT4-fs error (device loop6): ext4_ext_rm_leaf:2755: inode #16: block 27: comm syz.6.1206: IO error syncing itable block [ 454.386069][T10204] syz.6.1206: attempt to access beyond end of device [ 454.386069][T10204] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 454.422866][T10204] EXT4-fs (loop6): I/O error while writing superblock [ 454.440355][T10204] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1206: Error while async write back metadata [ 454.491219][T10204] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 38) [ 454.567233][T10204] Buffer I/O error on device loop6, logical block 38 [ 454.574845][T10204] Buffer I/O error on device loop6, logical block 39 [ 454.621089][T10204] Buffer I/O error on device loop6, logical block 40 [ 454.627878][T10204] Buffer I/O error on device loop6, logical block 41 [ 454.689483][T10204] Buffer I/O error on device loop6, logical block 42 [ 454.701103][T10204] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 20) [ 454.739030][T10204] Buffer I/O error on device loop6, logical block 20 [ 454.780447][T10204] Buffer I/O error on device loop6, logical block 21 [ 454.787242][T10204] Buffer I/O error on device loop6, logical block 22 [ 454.816805][T10204] Buffer I/O error on device loop6, logical block 23 [ 454.840987][T10204] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 44) [ 454.880742][T10204] Buffer I/O error on device loop6, logical block 44 [ 454.897807][T10204] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 24) [ 454.927804][T10204] EXT4-fs warning (device loop6): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 48) [ 455.046814][ T9634] EXT4-fs warning (device loop6): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 455.118118][ T9634] EXT4-fs warning (device loop6): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 455.163803][ T9634] EXT4-fs warning (device loop6): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 455.210463][ T9634] EXT4-fs warning (device loop6): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 455.263853][ T9634] EXT4-fs warning (device loop6): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 455.392933][T10207] EXT4-fs: 8 callbacks suppressed [ 455.392950][T10207] EXT4-fs (loop6): I/O error while writing superblock [ 455.539822][T10014] veth0_vlan: entered promiscuous mode [ 455.619579][T10014] veth1_vlan: entered promiscuous mode [ 456.026927][T10014] veth0_macvtap: entered promiscuous mode [ 456.104587][ T9634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.170864][ T9634] EXT4-fs (loop6): I/O error while writing superblock [ 456.235443][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.334972][T10014] veth1_macvtap: entered promiscuous mode [ 456.516278][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.797723][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.935471][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.957315][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.976250][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.001790][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.038031][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.078418][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.110459][T10014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.158205][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.185582][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.222940][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.245535][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.271706][T10014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.298972][T10014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.336679][T10014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.396904][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.436755][T10285] syzkaller1: entered promiscuous mode [ 457.442326][T10285] syzkaller1: entered allmulticast mode [ 457.593460][T10014] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.602256][T10014] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.662646][T10014] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.671435][T10014] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.046165][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.058660][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.069829][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.096566][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.114109][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 458.122037][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.482741][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.503638][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.912692][ C1] net_ratelimit: 64 callbacks suppressed [ 459.127517][T10300] loop7: detected capacity change from 0 to 32768 [ 459.301430][T10300] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 459.350313][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.409516][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.544333][T10300] XFS (loop7): Ending clean mount [ 459.566958][T10300] XFS (loop7): Quotacheck needed: Please wait. [ 459.721193][T10300] XFS (loop7): Quotacheck: Done. [ 459.918422][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 460.196080][ T5789] Bluetooth: hci3: command tx timeout [ 461.401720][T10344] loop8: detected capacity change from 0 to 512 [ 461.409642][T10344] EXT4-fs: Ignoring removed bh option [ 463.173679][ T5789] Bluetooth: hci3: command tx timeout [ 463.985162][T10344] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1167: corrupted in-inode xattr: e_value size too large [ 464.012899][T10344] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1167: couldn't read orphan inode 15 (err -117) [ 464.034320][T10344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.113009][ C1] net_ratelimit: 15 callbacks suppressed [ 464.211167][T10349] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.1167: Unrecognised inode hash code 4 [ 464.222648][T10349] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1167: Corrupt directory, running e2fsck is recommended [ 464.237903][T10349] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #12: comm syz.8.1167: corrupted in-inode xattr: bad e_name length [ 464.600837][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.243192][ T5789] Bluetooth: hci3: command tx timeout [ 465.732467][ T11] hsr_slave_0: left promiscuous mode [ 465.763587][ T11] hsr_slave_1: left promiscuous mode [ 465.842908][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.862724][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.891512][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.928631][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.983604][ T11] bridge_slave_1: left allmulticast mode [ 465.989422][ T11] bridge_slave_1: left promiscuous mode [ 466.012890][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.041313][ T11] bridge_slave_0: left allmulticast mode [ 466.057565][ T11] bridge_slave_0: left promiscuous mode [ 466.089483][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.228550][ T11] veth1_macvtap: left promiscuous mode [ 466.235460][ T11] veth0_macvtap: left promiscuous mode [ 466.250415][ T11] veth1_vlan: left promiscuous mode [ 466.261641][ T11] veth0_vlan: left promiscuous mode [ 466.813745][T10383] loop8: detected capacity change from 0 to 32768 [ 466.873916][T10383] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 467.147518][T10383] XFS (loop8): Ending clean mount [ 467.169916][T10383] XFS (loop8): Quotacheck needed: Please wait. [ 467.281563][T10383] XFS (loop8): Quotacheck: Done. [ 467.318351][ T5789] Bluetooth: hci3: command tx timeout [ 467.394699][T10014] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 468.433764][T10420] loop8: detected capacity change from 0 to 512 [ 468.448716][T10420] EXT4-fs: Ignoring removed bh option [ 468.874612][T10420] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1243: corrupted in-inode xattr: e_value size too large [ 468.902307][T10420] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1243: couldn't read orphan inode 15 (err -117) [ 468.942134][T10420] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.177513][T10423] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.1243: Unrecognised inode hash code 4 [ 469.189223][T10423] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1243: Corrupt directory, running e2fsck is recommended [ 469.203332][T10423] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #12: comm syz.8.1243: corrupted in-inode xattr: bad e_name length [ 469.333288][ T1126] net_ratelimit: 40 callbacks suppressed [ 470.066503][ T11] team0 (unregistering): Port device team_slave_1 removed [ 470.268172][ T11] team0 (unregistering): Port device team_slave_0 removed [ 470.464824][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.563893][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.215778][ T11] bond0 (unregistering): Released all slaves [ 471.351931][T10301] chnl_net:caif_netlink_parms(): no params data found [ 471.816908][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.267432][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.278651][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.290022][T10301] bridge_slave_0: entered allmulticast mode [ 472.314412][T10301] bridge_slave_0: entered promiscuous mode [ 472.347637][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.391205][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.421252][T10301] bridge_slave_1: entered allmulticast mode [ 472.450444][T10301] bridge_slave_1: entered promiscuous mode [ 472.729957][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.775588][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.087594][T10301] team0: Port device team_slave_0 added [ 473.115454][T10301] team0: Port device team_slave_1 added [ 473.324306][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.349804][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.431777][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.492932][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.499980][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.588048][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.061980][T10301] hsr_slave_0: entered promiscuous mode [ 474.104841][T10301] hsr_slave_1: entered promiscuous mode [ 474.461356][T10454] loop8: detected capacity change from 0 to 32768 [ 474.520861][T10454] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 474.835859][T10454] XFS (loop8): Ending clean mount [ 474.868435][T10454] XFS (loop8): Quotacheck needed: Please wait. [ 474.982267][T10454] XFS (loop8): Quotacheck: Done. [ 474.992979][ T12] net_ratelimit: 20 callbacks suppressed [ 475.168513][T10014] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 475.430860][T10497] loop7: detected capacity change from 0 to 512 [ 475.470311][T10497] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 475.530363][T10497] EXT4-fs (loop7): orphan cleanup on readonly fs [ 475.575156][T10497] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:512: comm syz.7.1259: Block bitmap for bg 0 marked uninitialized [ 475.739420][T10301] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 475.773304][T10497] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 475.810320][T10497] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:512: comm syz.7.1259: Block bitmap for bg 0 marked uninitialized [ 475.871169][T10497] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 475.905483][T10301] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 475.916589][T10497] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:512: comm syz.7.1259: Block bitmap for bg 0 marked uninitialized [ 475.977307][T10301] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 476.076126][T10497] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 476.086675][T10497] EXT4-fs (loop7): 1 orphan inode deleted [ 476.108740][T10497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 476.116001][T10301] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 476.212061][T10497] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 476.334474][T10497] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 476.503967][ T9691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.575106][T10530] loop7: detected capacity change from 0 to 32768 [ 477.696151][T10530] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 477.948176][T10530] XFS (loop7): Ending clean mount [ 478.030079][T10530] XFS (loop7): Quotacheck needed: Please wait. [ 478.202072][T10530] XFS (loop7): Quotacheck: Done. [ 478.347513][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 480.112671][ C0] net_ratelimit: 27 callbacks suppressed [ 480.988972][T10301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.100212][T10301] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.124121][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.131408][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.206514][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.213800][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.760894][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.875990][T10301] veth0_vlan: entered promiscuous mode [ 484.938724][T10301] veth1_vlan: entered promiscuous mode [ 485.080971][T10301] veth0_macvtap: entered promiscuous mode [ 485.126730][T10301] veth1_macvtap: entered promiscuous mode [ 485.152797][ C1] net_ratelimit: 22 callbacks suppressed [ 485.335368][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.375626][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.385731][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.407147][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.882802][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.942871][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.009746][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.105604][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.205690][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.244405][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.258024][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.292665][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.317506][T10595] loop8: detected capacity change from 0 to 32768 [ 486.324141][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.351113][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.418482][T10595] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 486.496054][T10301] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.518947][T10301] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.538289][T10301] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.547187][T10301] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.906210][T10595] XFS (loop8): Ending clean mount [ 486.951424][T10595] XFS (loop8): Quotacheck needed: Please wait. [ 487.031977][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.085670][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.180804][T10595] XFS (loop8): Quotacheck: Done. [ 487.260878][ T9264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.316865][ T9264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.499674][T10014] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.235400][T10653] loop9: detected capacity change from 0 to 1024 [ 488.312773][T10653] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 488.372837][T10653] JBD2: no valid journal superblock found [ 488.422080][T10653] EXT4-fs (loop9): Could not load journal inode [ 488.557113][T10660] loop8: detected capacity change from 0 to 512 [ 488.565643][T10660] EXT4-fs: Ignoring removed bh option [ 488.784022][T10660] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1287: corrupted in-inode xattr: e_value size too large [ 488.803125][T10660] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1287: couldn't read orphan inode 15 (err -117) [ 488.819638][T10660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.487073][ T9887] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.192790][ C1] net_ratelimit: 57 callbacks suppressed [ 490.489730][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 490.489750][ T28] audit: type=1326 audit(1790097035.244:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 491.229612][T10676] ip_tables: iptables: counters copy to user failed while replacing table [ 492.400734][ T28] audit: type=1326 audit(1790097035.244:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 492.430286][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.484278][ T28] audit: type=1326 audit(1790097035.244:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3bdf55e98e code=0x7ffc0000 [ 492.571623][ T28] audit: type=1326 audit(1790097035.244:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 492.693517][ T28] audit: type=1326 audit(1790097035.244:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 492.796759][ T28] audit: type=1326 audit(1790097035.244:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 492.898536][ T28] audit: type=1326 audit(1790097035.244:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 492.979573][ T28] audit: type=1326 audit(1790097035.244:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 493.082926][ T28] audit: type=1326 audit(1790097035.254:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 493.204227][ T28] audit: type=1326 audit(1790097035.254:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.7.1293" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 493.319842][T10699] syz_tun: entered allmulticast mode [ 493.696010][T10705] loop9: detected capacity change from 0 to 512 [ 493.704603][T10705] EXT4-fs: Ignoring removed bh option [ 493.869205][T10705] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.1303: corrupted in-inode xattr: e_value size too large [ 493.905957][T10705] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.1303: couldn't read orphan inode 15 (err -117) [ 493.935361][T10705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.392658][ C0] net_ratelimit: 27 callbacks suppressed [ 496.692220][T10301] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.826643][T10745] loop7: detected capacity change from 0 to 512 [ 497.835303][T10745] EXT4-fs: Ignoring removed bh option [ 498.027950][T10745] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1313: corrupted in-inode xattr: e_value size too large [ 498.053421][T10745] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1313: couldn't read orphan inode 15 (err -117) [ 498.076245][T10745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.849044][ T9691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.672783][ C1] net_ratelimit: 30 callbacks suppressed [ 500.936824][T10787] loop9: detected capacity change from 0 to 512 [ 500.954697][T10787] EXT4-fs: Ignoring removed bh option [ 501.220259][T10787] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.1322: corrupted in-inode xattr: e_value size too large [ 501.240579][T10787] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.1322: couldn't read orphan inode 15 (err -117) [ 501.271322][T10787] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.943544][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.953546][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.015527][T10301] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.039819][T10775] loop7: detected capacity change from 0 to 32768 [ 503.131976][T10775] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 503.281117][T10808] FAULT_INJECTION: forcing a failure. [ 503.281117][T10808] name failslab, interval 1, probability 0, space 0, times 0 [ 503.376641][T10808] CPU: 0 PID: 10808 Comm: syz.2.1325 Not tainted syzkaller #0 [ 503.384210][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.394327][T10808] Call Trace: [ 503.397654][T10808] [ 503.400631][T10808] dump_stack_lvl+0x18c/0x250 [ 503.405385][T10808] ? show_regs_print_info+0x20/0x20 [ 503.410652][T10808] ? load_image+0x420/0x420 [ 503.415220][T10808] ? __lock_acquire+0x7d80/0x7d80 [ 503.420309][T10808] should_fail_ex+0x394/0x4c0 [ 503.425055][T10808] should_failslab+0x9/0x20 [ 503.429630][T10808] slab_pre_alloc_hook+0x59/0x300 [ 503.434790][T10808] kmem_cache_alloc_lru+0x4d/0x2b0 [ 503.439975][T10808] ? sock_alloc_inode+0x28/0xc0 [ 503.444979][T10808] sock_alloc_inode+0x28/0xc0 [ 503.449718][T10808] ? sockfs_init_fs_context+0xb0/0xb0 [ 503.455165][T10808] new_inode_pseudo+0x63/0x1d0 [ 503.460006][T10808] __sock_create+0x12d/0x940 [ 503.464695][T10808] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 503.470826][T10808] __sys_socket+0xd7/0x1b0 [ 503.475350][T10808] __x64_sys_socket+0x7a/0x90 [ 503.480093][T10808] do_syscall_64+0x55/0xb0 [ 503.484576][T10808] ? clear_bhb_loop+0x40/0x90 [ 503.489314][T10808] ? clear_bhb_loop+0x40/0x90 [ 503.494062][T10808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.500023][T10808] RIP: 0033:0x7f735dd9e159 [ 503.504522][T10808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.524190][T10808] RSP: 002b:00007f735eba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 503.532665][T10808] RAX: ffffffffffffffda RBX: 00007f735e025fa0 RCX: 00007f735dd9e159 [ 503.540746][T10808] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 503.548778][T10808] RBP: 00007f735de3506b R08: 0000000000000000 R09: 0000000000000000 [ 503.556811][T10808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.564877][T10808] R13: 00007f735e026038 R14: 00007f735e025fa0 R15: 00007ffe48e8da48 [ 503.572971][T10808] [ 503.842959][T10775] XFS (loop7): Ending clean mount [ 503.887648][T10818] loop9: detected capacity change from 0 to 1024 [ 503.900807][T10775] XFS (loop7): Quotacheck needed: Please wait. [ 503.940960][T10818] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 504.001225][T10820] loop8: detected capacity change from 0 to 512 [ 504.022380][T10818] JBD2: no valid journal superblock found [ 504.047368][T10775] XFS (loop7): Quotacheck: Done. [ 504.085319][T10820] EXT4-fs: Ignoring removed bh option [ 504.113050][T10818] EXT4-fs (loop9): Could not load journal inode [ 504.202477][T10820] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1327: corrupted in-inode xattr: e_value size too large [ 504.315835][T10820] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1327: couldn't read orphan inode 15 (err -117) [ 504.534294][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 504.551715][T10820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.712752][ C0] net_ratelimit: 27 callbacks suppressed [ 505.777258][T10854] FAULT_INJECTION: forcing a failure. [ 505.777258][T10854] name failslab, interval 1, probability 0, space 0, times 0 [ 505.831260][T10854] CPU: 0 PID: 10854 Comm: syz.2.1337 Not tainted syzkaller #0 [ 505.838821][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.848942][T10854] Call Trace: [ 505.852279][T10854] [ 505.855265][T10854] dump_stack_lvl+0x18c/0x250 [ 505.860028][T10854] ? show_regs_print_info+0x20/0x20 [ 505.865392][T10854] ? load_image+0x420/0x420 [ 505.869989][T10854] ? __lock_acquire+0x7d80/0x7d80 [ 505.875082][T10854] should_fail_ex+0x394/0x4c0 [ 505.879862][T10854] should_failslab+0x9/0x20 [ 505.884441][T10854] slab_pre_alloc_hook+0x59/0x300 [ 505.889564][T10854] kmem_cache_alloc_lru+0x4d/0x2b0 [ 505.894758][T10854] ? sock_alloc_inode+0x28/0xc0 [ 505.899715][T10854] sock_alloc_inode+0x28/0xc0 [ 505.904465][T10854] ? sockfs_init_fs_context+0xb0/0xb0 [ 505.909913][T10854] new_inode_pseudo+0x63/0x1d0 [ 505.914763][T10854] __sock_create+0x12d/0x940 [ 505.919426][T10854] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 505.925486][T10854] __sys_socket+0xd7/0x1b0 [ 505.929975][T10854] __x64_sys_socket+0x7a/0x90 [ 505.934725][T10854] do_syscall_64+0x55/0xb0 [ 505.939213][T10854] ? clear_bhb_loop+0x40/0x90 [ 505.943970][T10854] ? clear_bhb_loop+0x40/0x90 [ 505.948735][T10854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.954708][T10854] RIP: 0033:0x7f735dd9e159 [ 505.959187][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.978868][T10854] RSP: 002b:00007f735eba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 505.987367][T10854] RAX: ffffffffffffffda RBX: 00007f735e025fa0 RCX: 00007f735dd9e159 [ 505.995420][T10854] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 506.003449][T10854] RBP: 00007f735de3506b R08: 0000000000000000 R09: 0000000000000000 [ 506.011551][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.019579][T10854] R13: 00007f735e026038 R14: 00007f735e025fa0 R15: 00007ffe48e8da48 [ 506.027626][T10854] [ 507.439733][T10860] loop9: detected capacity change from 0 to 32768 [ 507.590156][T10860] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 508.040059][T10860] XFS (loop9): Ending clean mount [ 508.072543][T10860] XFS (loop9): Quotacheck needed: Please wait. [ 508.207183][T10860] XFS (loop9): Quotacheck: Done. [ 508.437035][T10301] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.102502][T10908] FAULT_INJECTION: forcing a failure. [ 510.102502][T10908] name failslab, interval 1, probability 0, space 0, times 0 [ 510.143183][T10908] CPU: 1 PID: 10908 Comm: syz.7.1347 Not tainted syzkaller #0 [ 510.150711][T10908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.150729][T10908] Call Trace: [ 510.150740][T10908] [ 510.164136][T10908] dump_stack_lvl+0x18c/0x250 [ 510.164192][T10908] ? show_regs_print_info+0x20/0x20 [ 510.171806][T10908] ? load_image+0x420/0x420 [ 510.181547][T10908] ? __lock_acquire+0x7d80/0x7d80 [ 510.181588][T10908] should_fail_ex+0x394/0x4c0 [ 510.191317][T10908] should_failslab+0x9/0x20 [ 510.191360][T10908] slab_pre_alloc_hook+0x59/0x300 [ 510.200927][T10908] kmem_cache_alloc_lru+0x4d/0x2b0 [ 510.206086][T10908] ? sock_alloc_inode+0x28/0xc0 [ 510.210982][T10908] sock_alloc_inode+0x28/0xc0 [ 510.215699][T10908] ? sockfs_init_fs_context+0xb0/0xb0 [ 510.215736][T10908] new_inode_pseudo+0x63/0x1d0 [ 510.215769][T10908] __sock_create+0x12d/0x940 [ 510.225942][T10908] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 510.225983][T10908] __sys_socket+0xd7/0x1b0 [ 510.241090][T10908] __x64_sys_socket+0x7a/0x90 [ 510.245838][T10908] do_syscall_64+0x55/0xb0 [ 510.250330][T10908] ? clear_bhb_loop+0x40/0x90 [ 510.255055][T10908] ? clear_bhb_loop+0x40/0x90 [ 510.255091][T10908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.255123][T10908] RIP: 0033:0x7f3bdf59e159 [ 510.255143][T10908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.255163][T10908] RSP: 002b:00007f3be03cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 510.255188][T10908] RAX: ffffffffffffffda RBX: 00007f3bdf825fa0 RCX: 00007f3bdf59e159 [ 510.255206][T10908] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 510.255221][T10908] RBP: 00007f3bdf63506b R08: 0000000000000000 R09: 0000000000000000 [ 510.255236][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.255251][T10908] R13: 00007f3bdf826038 R14: 00007f3bdf825fa0 R15: 00007ffeb366ced8 [ 510.255283][T10908] [ 510.648140][T10915] binder: BINDER_SET_CONTEXT_MGR already set [ 510.686463][T10915] binder: 10913:10915 ioctl 4018620d 200000004a80 returned -16 [ 510.764053][ T9264] net_ratelimit: 48 callbacks suppressed [ 511.157489][T10928] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 512.586313][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.934772][T10946] FAULT_INJECTION: forcing a failure. [ 512.934772][T10946] name fail_futex, interval 1, probability 0, space 0, times 0 [ 513.038217][T10946] CPU: 0 PID: 10946 Comm: syz.9.1356 Not tainted syzkaller #0 [ 513.045868][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.056003][T10946] Call Trace: [ 513.059310][T10946] [ 513.062303][T10946] dump_stack_lvl+0x18c/0x250 [ 513.067063][T10946] ? show_regs_print_info+0x20/0x20 [ 513.072426][T10946] ? load_image+0x420/0x420 [ 513.077001][T10946] ? move_vma+0x1156/0x16a0 [ 513.081575][T10946] should_fail_ex+0x394/0x4c0 [ 513.086334][T10946] get_futex_key+0x136/0x1030 [ 513.091078][T10946] ? futex_setup_timer+0xc0/0xc0 [ 513.096082][T10946] ? userfaultfd_unmap_complete+0x293/0x310 [ 513.102040][T10946] futex_wake+0x127/0x4f0 [ 513.106446][T10946] ? futex_wake_mark+0x150/0x150 [ 513.111451][T10946] ? __se_sys_mremap+0x87e/0x11a0 [ 513.116718][T10946] do_futex+0x35d/0x3e0 [ 513.120938][T10946] ? __ia32_sys_get_robust_list+0x110/0x110 [ 513.126898][T10946] ? __lock_acquire+0x7d80/0x7d80 [ 513.131996][T10946] __se_sys_futex+0x3a9/0x440 [ 513.136744][T10946] ? __x64_sys_futex+0xf0/0xf0 [ 513.141576][T10946] ? __x64_sys_futex+0x21/0xf0 [ 513.146445][T10946] do_syscall_64+0x55/0xb0 [ 513.150937][T10946] ? clear_bhb_loop+0x40/0x90 [ 513.155674][T10946] ? clear_bhb_loop+0x40/0x90 [ 513.160413][T10946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.166368][T10946] RIP: 0033:0x7f72f759e159 [ 513.170845][T10946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.190494][T10946] RSP: 002b:00007f72f843e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 513.190526][T10946] RAX: ffffffffffffffda RBX: 00007f72f7825fa8 RCX: 00007f72f759e159 [ 513.190543][T10946] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f72f7825fac [ 513.190558][T10946] RBP: 00007f72f7825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 513.190573][T10946] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 513.190588][T10946] R13: 00007f72f7826038 R14: 00007ffefa886a20 R15: 00007ffefa886b08 [ 513.190620][T10946] [ 513.885033][T10966] syz_tun: entered allmulticast mode [ 513.892805][ T9961] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 513.905453][T10935] loop7: detected capacity change from 0 to 32768 [ 513.970509][T10935] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 514.073245][ T9961] usb 10-1: device descriptor read/64, error -71 [ 514.224484][T10935] XFS (loop7): Ending clean mount [ 514.277520][T10935] XFS (loop7): Quotacheck needed: Please wait. [ 514.343909][ T9961] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 514.441330][T10935] XFS (loop7): Quotacheck: Done. [ 514.523203][ T9961] usb 10-1: device descriptor read/64, error -71 [ 514.775351][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 514.844873][T10989] FAULT_INJECTION: forcing a failure. [ 514.844873][T10989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 514.892316][T10989] CPU: 0 PID: 10989 Comm: syz.2.1366 Not tainted syzkaller #0 [ 514.899916][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.910037][T10989] Call Trace: [ 514.913379][T10989] [ 514.916359][T10989] dump_stack_lvl+0x18c/0x250 [ 514.921198][T10989] ? show_regs_print_info+0x20/0x20 [ 514.926461][T10989] ? load_image+0x420/0x420 [ 514.931040][T10989] ? move_vma+0x1156/0x16a0 [ 514.935643][T10989] should_fail_ex+0x394/0x4c0 [ 514.940389][T10989] get_futex_key+0x136/0x1030 [ 514.945392][T10989] ? futex_setup_timer+0xc0/0xc0 [ 514.950394][T10989] ? userfaultfd_unmap_complete+0x293/0x310 [ 514.956364][T10989] futex_wake+0x127/0x4f0 [ 514.960835][T10989] ? cachefiles_free_volume+0x150/0x220 [ 514.966529][T10989] ? futex_wake_mark+0x150/0x150 [ 514.971541][T10989] ? __se_sys_mremap+0x87e/0x11a0 [ 514.976636][T10989] do_futex+0x35d/0x3e0 [ 514.980856][T10989] ? __ia32_sys_get_robust_list+0x110/0x110 [ 514.986907][T10989] ? __lock_acquire+0x7d80/0x7d80 [ 514.992072][T10989] __se_sys_futex+0x3a9/0x440 [ 514.996832][T10989] ? __x64_sys_futex+0xf0/0xf0 [ 515.001664][T10989] ? __x64_sys_futex+0x21/0xf0 [ 515.006514][T10989] do_syscall_64+0x55/0xb0 [ 515.010997][T10989] ? clear_bhb_loop+0x40/0x90 [ 515.015748][T10989] ? clear_bhb_loop+0x40/0x90 [ 515.020534][T10989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.026507][T10989] RIP: 0033:0x7f735dd9e159 [ 515.031068][T10989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.050832][T10989] RSP: 002b:00007f735eba80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 515.059640][T10989] RAX: ffffffffffffffda RBX: 00007f735e025fa8 RCX: 00007f735dd9e159 [ 515.067763][T10989] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f735e025fac [ 515.075799][T10989] RBP: 00007f735e025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 515.083828][T10989] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 515.091873][T10989] R13: 00007f735e026038 R14: 00007ffe48e8d960 R15: 00007ffe48e8da48 [ 515.099944][T10989] [ 515.113926][ T9961] usb usb10-port1: attempt power cycle [ 515.123420][T10992] loop8: detected capacity change from 0 to 512 [ 515.134897][T10992] EXT4-fs: Ignoring removed bh option [ 515.193047][T10992] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1364: corrupted in-inode xattr: e_value size too large [ 515.268439][T10992] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1364: couldn't read orphan inode 15 (err -117) [ 515.317309][T10992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.536817][ T9961] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 515.589196][ T9961] usb 10-1: device descriptor read/8, error -71 [ 515.862696][ T9961] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 515.899384][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.932490][ T9961] usb 10-1: device descriptor read/8, error -71 [ 515.953680][ C0] net_ratelimit: 37 callbacks suppressed [ 516.093684][ T9961] usb usb10-port1: unable to enumerate USB device [ 516.124526][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 516.966651][T11023] [ 517.750755][T11040] loop7: detected capacity change from 0 to 512 [ 517.804961][T11040] EXT4-fs: Ignoring removed bh option [ 518.149134][T11040] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1378: corrupted in-inode xattr: e_value size too large [ 518.190189][T11040] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1378: couldn't read orphan inode 15 (err -117) [ 518.485758][T11040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.483130][T11061] device-mapper: ioctl: name not supplied when creating device [ 519.602957][ T5817] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 519.793187][ T5817] usb 10-1: device descriptor read/64, error -71 [ 519.820301][ T9691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.831855][T11065] FAULT_INJECTION: forcing a failure. [ 519.831855][T11065] name failslab, interval 1, probability 0, space 0, times 0 [ 519.846610][T11065] CPU: 1 PID: 11065 Comm: syz.8.1385 Not tainted syzkaller #0 [ 519.854160][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.864289][T11065] Call Trace: [ 519.867618][T11065] [ 519.870596][T11065] dump_stack_lvl+0x18c/0x250 [ 519.875350][T11065] ? show_regs_print_info+0x20/0x20 [ 519.880702][T11065] ? load_image+0x420/0x420 [ 519.885270][T11065] ? __might_sleep+0xe0/0xe0 [ 519.889931][T11065] ? __lock_acquire+0x7d80/0x7d80 [ 519.895029][T11065] should_fail_ex+0x394/0x4c0 [ 519.899790][T11065] should_failslab+0x9/0x20 [ 519.904372][T11065] slab_pre_alloc_hook+0x59/0x300 [ 519.909475][T11065] kmem_cache_alloc+0x5a/0x2c0 [ 519.914324][T11065] ? security_inode_alloc+0x34/0x110 [ 519.919680][T11065] security_inode_alloc+0x34/0x110 [ 519.924863][T11065] inode_init_always+0x914/0xc90 [ 519.929878][T11065] new_inode_pseudo+0x95/0x1d0 [ 519.934727][T11065] __sock_create+0x12d/0x940 [ 519.939380][T11065] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 519.945425][T11065] __sys_socket+0xd7/0x1b0 [ 519.949910][T11065] __x64_sys_socket+0x7a/0x90 [ 519.954669][T11065] do_syscall_64+0x55/0xb0 [ 519.959151][T11065] ? clear_bhb_loop+0x40/0x90 [ 519.963896][T11065] ? clear_bhb_loop+0x40/0x90 [ 519.968612][T11065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.974566][T11065] RIP: 0033:0x7f676299e159 [ 519.979010][T11065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.998677][T11065] RSP: 002b:00007f6763911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 520.007132][T11065] RAX: ffffffffffffffda RBX: 00007f6762c25fa0 RCX: 00007f676299e159 [ 520.015180][T11065] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 520.023215][T11065] RBP: 00007f6762a3506b R08: 0000000000000000 R09: 0000000000000000 [ 520.031266][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.039290][T11065] R13: 00007f6762c26038 R14: 00007f6762c25fa0 R15: 00007ffc1ced7ea8 [ 520.047352][T11065] [ 520.233596][ T5817] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 520.431321][ T5817] usb 10-1: device descriptor read/64, error -71 [ 520.584734][ T5817] usb usb10-port1: attempt power cycle [ 521.084034][ T49] net_ratelimit: 34 callbacks suppressed [ 521.152310][T11087] device-mapper: ioctl: name not supplied when creating device [ 521.262851][ T5817] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 521.455993][ T5817] usb 10-1: device descriptor read/8, error -71 [ 521.928779][ T5817] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 522.035495][ T5817] usb 10-1: device descriptor read/8, error -71 [ 522.304396][ T5817] usb usb10-port1: unable to enumerate USB device [ 523.421966][T11120] device-mapper: ioctl: name not supplied when creating device [ 524.281709][T11094] loop8: detected capacity change from 0 to 32768 [ 524.412411][T11094] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 524.582872][ T9950] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 524.743195][ T9950] usb 10-1: device descriptor read/64, error -71 [ 524.816425][T11094] XFS (loop8): Ending clean mount [ 524.837008][T11094] XFS (loop8): Quotacheck needed: Please wait. [ 524.941675][T11094] XFS (loop8): Quotacheck: Done. [ 525.033036][T11140] FAULT_INJECTION: forcing a failure. [ 525.033036][T11140] name failslab, interval 1, probability 0, space 0, times 0 [ 525.052857][ T9950] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 525.095616][T10014] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.105088][T11140] CPU: 0 PID: 11140 Comm: syz.2.1406 Not tainted syzkaller #0 [ 525.112627][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.122741][T11140] Call Trace: [ 525.126068][T11140] [ 525.129034][T11140] dump_stack_lvl+0x18c/0x250 [ 525.133781][T11140] ? show_regs_print_info+0x20/0x20 [ 525.139044][T11140] ? load_image+0x420/0x420 [ 525.143615][T11140] ? __might_sleep+0xe0/0xe0 [ 525.148276][T11140] ? __lock_acquire+0x7d80/0x7d80 [ 525.153370][T11140] should_fail_ex+0x394/0x4c0 [ 525.158127][T11140] should_failslab+0x9/0x20 [ 525.162739][T11140] slab_pre_alloc_hook+0x59/0x300 [ 525.167874][T11140] ? prepend_path+0x8a7/0x950 [ 525.172608][T11140] ? tomoyo_encode+0x2ad/0x570 [ 525.177435][T11140] ? tomoyo_encode+0x2ad/0x570 [ 525.182274][T11140] __kmem_cache_alloc_node+0x53/0x250 [ 525.187733][T11140] ? tomoyo_encode+0x2ad/0x570 [ 525.192924][T11140] __kmalloc+0xa7/0x240 [ 525.197238][T11140] tomoyo_encode+0x2ad/0x570 [ 525.201990][T11140] tomoyo_realpath_from_path+0x57c/0x5c0 [ 525.207689][T11140] ? tomoyo_domain+0xd6/0x120 [ 525.212474][T11140] tomoyo_mkdev_perm+0x234/0x580 [ 525.217491][T11140] ? tomoyo_mkdev_perm+0x204/0x580 [ 525.222684][T11140] ? tomoyo_path_perm+0x560/0x560 [ 525.227816][T11140] ? _raw_spin_unlock+0x28/0x40 [ 525.232834][T11140] ? __d_add+0x4e2/0x7e0 [ 525.237159][T11140] ? d_set_d_op+0x25f/0x370 [ 525.241724][T11140] ? hook_path_mknod+0x157/0x540 [ 525.246720][T11140] ? simple_lookup+0xc5/0xf0 [ 525.251423][T11140] tomoyo_path_mknod+0xfc/0x1a0 [ 525.256344][T11140] ? hook_path_mkdir+0x20/0x20 [ 525.261171][T11140] ? tomoyo_path_symlink+0xf0/0xf0 [ 525.266355][T11140] ? kern_path_create+0x50/0x50 [ 525.271283][T11140] security_path_mknod+0xf0/0x150 [ 525.276395][T11140] do_mknodat+0x25a/0x500 [ 525.280821][T11140] ? __check_object_size+0x4fc/0xa40 [ 525.286191][T11140] ? do_o_path+0x200/0x200 [ 525.290712][T11140] ? getname_flags+0x20a/0x500 [ 525.295544][T11140] __x64_sys_mknodat+0xa9/0xc0 [ 525.300369][T11140] do_syscall_64+0x55/0xb0 [ 525.304847][T11140] ? clear_bhb_loop+0x40/0x90 [ 525.309602][T11140] ? clear_bhb_loop+0x40/0x90 [ 525.314341][T11140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.320304][T11140] RIP: 0033:0x7f735dd9e159 [ 525.324786][T11140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.344464][T11140] RSP: 002b:00007f735eba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 525.352944][T11140] RAX: ffffffffffffffda RBX: 00007f735e025fa0 RCX: 00007f735dd9e159 [ 525.360978][T11140] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 525.369008][T11140] RBP: 00007f735de3506b R08: 0000000000000000 R09: 0000000000000000 [ 525.377044][T11140] R10: 0000000000000704 R11: 0000000000000246 R12: 0000000000000000 [ 525.385079][T11140] R13: 00007f735e026038 R14: 00007f735e025fa0 R15: 00007ffe48e8da48 [ 525.393134][T11140] [ 525.416404][T11140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.503039][ T9950] usb 10-1: device descriptor read/64, error -71 [ 525.657818][ T9950] usb usb10-port1: attempt power cycle [ 526.122650][ C0] net_ratelimit: 37 callbacks suppressed [ 526.157472][ T9950] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 526.197143][ T9950] usb 10-1: device descriptor read/8, error -71 [ 526.472711][ T9950] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 526.543695][ T9950] usb 10-1: device descriptor read/8, error -71 [ 526.696857][ T9950] usb usb10-port1: unable to enumerate USB device [ 526.851804][T11172] device-mapper: ioctl: name not supplied when creating device [ 529.213841][T11205] loop9: detected capacity change from 0 to 1024 [ 529.262616][T11205] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 529.304792][T11205] JBD2: no valid journal superblock found [ 529.333766][T11205] EXT4-fs (loop9): Could not load journal inode [ 529.404917][ T9887] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.525161][T11181] loop8: detected capacity change from 0 to 32768 [ 529.582682][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 529.841185][T11181] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 530.363734][T11181] XFS (loop8): Ending clean mount [ 530.468306][T11181] XFS (loop8): Quotacheck needed: Please wait. [ 530.666745][T11223] binder: BINDER_SET_CONTEXT_MGR already set [ 530.673148][T11223] binder: 11222:11223 ioctl 4018620d 200000004a80 returned -16 [ 530.817415][T11181] XFS (loop8): Quotacheck: Done. [ 530.820302][T11227] device-mapper: ioctl: name not supplied when creating device [ 530.991118][T10014] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 531.252933][ C0] net_ratelimit: 36 callbacks suppressed [ 531.292638][ T9958] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 531.442887][ T9958] usb 8-1: device descriptor read/64, error -71 [ 531.712928][ T9958] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 531.885707][ T9958] usb 8-1: device descriptor read/64, error -71 [ 532.003248][ T9958] usb usb8-port1: attempt power cycle [ 532.442765][ T9958] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 532.493622][ T9958] usb 8-1: device descriptor read/8, error -71 [ 532.767056][ T9958] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 532.840929][ T9958] usb 8-1: device descriptor read/8, error -71 [ 532.978376][ T9958] usb usb8-port1: unable to enumerate USB device [ 533.730058][T11279] device-mapper: ioctl: name not supplied when creating device [ 533.882366][T11272] loop9: detected capacity change from 0 to 32768 [ 534.002747][T11272] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.356690][T11272] XFS (loop9): Ending clean mount [ 534.423958][T11272] XFS (loop9): Quotacheck needed: Please wait. [ 535.464246][T11272] XFS (loop9): Quotacheck: Done. [ 535.676893][T10301] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 536.352679][ C1] net_ratelimit: 35 callbacks suppressed [ 536.674947][ T9950] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 536.852688][ T9950] usb 8-1: device descriptor read/64, error -71 [ 537.021301][T11335] binder: 11334:11335 ioctl c0306201 0 returned -14 [ 537.152795][ T9950] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 537.333509][ T9950] usb 8-1: device descriptor read/64, error -71 [ 538.591608][ T9950] usb usb8-port1: attempt power cycle [ 539.032710][ T9950] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 539.095645][ T9950] usb 8-1: device descriptor read/8, error -71 [ 539.382775][ T9950] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 539.474595][ T9950] usb 8-1: device descriptor read/8, error -71 [ 539.613288][ T9950] usb usb8-port1: unable to enumerate USB device [ 539.734128][T11367] binder: 11366:11367 ioctl c0306201 0 returned -14 [ 540.069826][T11369] loop7: detected capacity change from 0 to 512 [ 540.152731][T11369] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1458: invalid indirect mapped block 11 (level 0) [ 540.293561][T11369] EXT4-fs (loop7): Remounting filesystem read-only [ 540.355728][T11369] EXT4-fs (loop7): 1 truncate cleaned up [ 540.384003][T11369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.132730][ T9691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.400311][ C0] net_ratelimit: 28 callbacks suppressed [ 542.235875][T11392] loop9: detected capacity change from 0 to 512 [ 542.277510][T11392] EXT4-fs (loop9): bad s_min_extra_isize: 544 [ 542.286669][T11390] FAULT_INJECTION: forcing a failure. [ 542.286669][T11390] name fail_futex, interval 1, probability 0, space 0, times 0 [ 542.353450][T11390] CPU: 0 PID: 11390 Comm: syz.8.1465 Not tainted syzkaller #0 [ 542.361039][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.371157][T11390] Call Trace: [ 542.374498][T11390] [ 542.377500][T11390] dump_stack_lvl+0x18c/0x250 [ 542.382274][T11390] ? show_regs_print_info+0x20/0x20 [ 542.387580][T11390] ? load_image+0x420/0x420 [ 542.392188][T11390] ? plist_add+0x3db/0x490 [ 542.396691][T11390] ? verify_lock_unused+0x140/0x140 [ 542.401962][T11390] should_fail_ex+0x394/0x4c0 [ 542.406731][T11390] get_futex_key+0x136/0x1030 [ 542.411470][T11390] ? futex_unqueue+0xcb/0xf0 [ 542.416131][T11390] ? futex_wait+0x4a7/0x5c0 [ 542.420714][T11390] ? futex_setup_timer+0xc0/0xc0 [ 542.425742][T11390] futex_wake+0x127/0x4f0 [ 542.430137][T11390] ? __fget_files+0x28/0x460 [ 542.434821][T11390] ? futex_wake_mark+0x150/0x150 [ 542.439878][T11390] ? __fget_files+0x3fc/0x460 [ 542.444641][T11390] do_futex+0x35d/0x3e0 [ 542.448866][T11390] ? __ia32_sys_get_robust_list+0x110/0x110 [ 542.454798][T11390] ? __sys_getsockname+0x19e/0x2d0 [ 542.454838][T11390] __se_sys_futex+0x3a9/0x440 [ 542.454869][T11390] ? __x64_sys_futex+0xf0/0xf0 [ 542.454898][T11390] ? __x64_sys_futex+0x21/0xf0 [ 542.454926][T11390] do_syscall_64+0x55/0xb0 [ 542.478869][T11390] ? clear_bhb_loop+0x40/0x90 [ 542.483622][T11390] ? clear_bhb_loop+0x40/0x90 [ 542.488376][T11390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.494336][T11390] RIP: 0033:0x7f676299e159 [ 542.498787][T11390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.518441][T11390] RSP: 002b:00007f67639110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 542.526908][T11390] RAX: ffffffffffffffda RBX: 00007f6762c25fa8 RCX: 00007f676299e159 [ 542.534923][T11390] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6762c25fac [ 542.542932][T11390] RBP: 00007f6762c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 542.550944][T11390] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 542.558950][T11390] R13: 00007f6762c26038 R14: 00007ffc1ced7dc0 R15: 00007ffc1ced7ea8 [ 542.566975][T11390] [ 542.605776][T11392] loop9: detected capacity change from 0 to 1024 [ 542.743403][T11392] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 542.793053][T11392] JBD2: no valid journal superblock found [ 542.835755][T11399] IPv6: Can't replace route, no match found [ 542.852936][T11392] EXT4-fs (loop9): Could not load journal inode [ 544.866257][T11396] loop7: detected capacity change from 0 to 32768 [ 545.044787][T11396] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 545.582762][T11396] XFS (loop7): Ending clean mount [ 545.592302][T11396] XFS (loop7): Quotacheck needed: Please wait. [ 545.734700][T11396] XFS (loop7): Quotacheck: Done. [ 545.887447][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 546.012867][T11449] FAULT_INJECTION: forcing a failure. [ 546.012867][T11449] name fail_futex, interval 1, probability 0, space 0, times 0 [ 546.075936][T11449] CPU: 1 PID: 11449 Comm: syz.8.1478 Not tainted syzkaller #0 [ 546.083532][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.093732][T11449] Call Trace: [ 546.097059][T11449] [ 546.100030][T11449] dump_stack_lvl+0x18c/0x250 [ 546.104777][T11449] ? show_regs_print_info+0x20/0x20 [ 546.110064][T11449] ? load_image+0x420/0x420 [ 546.114632][T11449] ? plist_add+0x3db/0x490 [ 546.119114][T11449] ? verify_lock_unused+0x140/0x140 [ 546.124374][T11449] should_fail_ex+0x394/0x4c0 [ 546.129123][T11449] get_futex_key+0x136/0x1030 [ 546.133858][T11449] ? futex_unqueue+0xcb/0xf0 [ 546.138503][T11449] ? futex_wait+0x4a7/0x5c0 [ 546.143067][T11449] ? futex_setup_timer+0xc0/0xc0 [ 546.148069][T11449] futex_wake+0x127/0x4f0 [ 546.152489][T11449] ? __fget_files+0x28/0x460 [ 546.157145][T11449] ? futex_wake_mark+0x150/0x150 [ 546.162160][T11449] ? __fget_files+0x3fc/0x460 [ 546.166909][T11449] do_futex+0x35d/0x3e0 [ 546.171132][T11449] ? __ia32_sys_get_robust_list+0x110/0x110 [ 546.177135][T11449] ? __sys_getsockname+0x19e/0x2d0 [ 546.182298][T11449] __se_sys_futex+0x3a9/0x440 [ 546.187012][T11449] ? __x64_sys_futex+0xf0/0xf0 [ 546.187043][T11449] ? __x64_sys_futex+0x21/0xf0 [ 546.187069][T11449] do_syscall_64+0x55/0xb0 [ 546.187100][T11449] ? clear_bhb_loop+0x40/0x90 [ 546.196768][T11449] ? clear_bhb_loop+0x40/0x90 [ 546.196804][T11449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.205929][T11449] RIP: 0033:0x7f676299e159 [ 546.205953][T11449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.205975][T11449] RSP: 002b:00007f67639110e8 EFLAGS: 00000246 [ 546.216554][T11449] ORIG_RAX: 00000000000000ca [ 546.216568][T11449] RAX: ffffffffffffffda RBX: 00007f6762c25fa8 RCX: 00007f676299e159 [ 546.216585][T11449] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6762c25fac [ 546.216601][T11449] RBP: 00007f6762c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 546.216617][T11449] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 546.240665][T11449] R13: 00007f6762c26038 R14: 00007ffc1ced7dc0 R15: 00007ffc1ced7ea8 [ 546.240704][T11449] [ 546.432626][ C0] net_ratelimit: 34 callbacks suppressed [ 549.143224][T11487] FAULT_INJECTION: forcing a failure. [ 549.143224][T11487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.204303][T11487] CPU: 1 PID: 11487 Comm: syz.8.1489 Not tainted syzkaller #0 [ 549.211902][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.221988][T11487] Call Trace: [ 549.222001][T11487] [ 549.222013][T11487] dump_stack_lvl+0x18c/0x250 [ 549.233009][T11487] ? show_regs_print_info+0x20/0x20 [ 549.238276][T11487] ? load_image+0x420/0x420 [ 549.242831][T11487] ? __might_fault+0xaa/0x120 [ 549.247559][T11487] ? __lock_acquire+0x7d80/0x7d80 [ 549.252631][T11487] should_fail_ex+0x394/0x4c0 [ 549.257349][T11487] _copy_from_user+0x2f/0xe0 [ 549.261970][T11487] __sys_bpf+0x23e/0x890 [ 549.266270][T11487] ? bpf_link_show_fdinfo+0x560/0x560 [ 549.271697][T11487] ? __sys_getsockname+0x19e/0x2d0 [ 549.276881][T11487] ? lock_chain_count+0x20/0x20 [ 549.281798][T11487] __x64_sys_bpf+0x7c/0x90 [ 549.286272][T11487] do_syscall_64+0x55/0xb0 [ 549.290751][T11487] ? clear_bhb_loop+0x40/0x90 [ 549.295494][T11487] ? clear_bhb_loop+0x40/0x90 [ 549.300234][T11487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.306286][T11487] RIP: 0033:0x7f676299e159 [ 549.311400][T11487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.331628][T11487] RSP: 002b:00007f6763911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.340114][T11487] RAX: ffffffffffffffda RBX: 00007f6762c25fa0 RCX: 00007f676299e159 [ 549.348153][T11487] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 549.356274][T11487] RBP: 00007f6762a3506b R08: 0000000000000000 R09: 0000000000000000 [ 549.364346][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.372554][T11487] R13: 00007f6762c26038 R14: 00007f6762c25fa0 R15: 00007ffc1ced7ea8 [ 549.380599][T11487] [ 549.962798][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 550.075601][T11484] loop7: detected capacity change from 0 to 32768 [ 550.166681][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 550.181487][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.197767][ T9] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 550.223177][ T9] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 550.243224][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.271103][T11484] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 550.521796][T11484] XFS (loop7): Ending clean mount [ 550.559563][T11484] XFS (loop7): Quotacheck needed: Please wait. [ 550.701099][T11484] XFS (loop7): Quotacheck: Done. [ 550.906379][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 551.793040][ C1] net_ratelimit: 37 callbacks suppressed [ 552.474694][T11492] loop9: detected capacity change from 0 to 32768 [ 552.543308][T11492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.1490 (11492) [ 552.741704][ T9950] usb 10-1: USB disconnect, device number 14 [ 553.110210][T11528] xt_bpf: check failed: parse error [ 554.611812][T11541] FAULT_INJECTION: forcing a failure. [ 554.611812][T11541] name fail_futex, interval 1, probability 0, space 0, times 0 [ 554.705081][T11541] CPU: 0 PID: 11541 Comm: syz.8.1499 Not tainted syzkaller #0 [ 554.712645][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.722774][T11541] Call Trace: [ 554.726130][T11541] [ 554.729123][T11541] dump_stack_lvl+0x18c/0x250 [ 554.733879][T11541] ? show_regs_print_info+0x20/0x20 [ 554.739162][T11541] ? load_image+0x420/0x420 [ 554.743743][T11541] ? plist_add+0x3db/0x490 [ 554.748236][T11541] ? verify_lock_unused+0x140/0x140 [ 554.753508][T11541] should_fail_ex+0x394/0x4c0 [ 554.758273][T11541] get_futex_key+0x136/0x1030 [ 554.763014][T11541] ? futex_unqueue+0xcb/0xf0 [ 554.767669][T11541] ? futex_wait+0x4a7/0x5c0 [ 554.772243][T11541] ? futex_setup_timer+0xc0/0xc0 [ 554.777260][T11541] futex_wake+0x127/0x4f0 [ 554.781673][T11541] ? __fget_files+0x28/0x460 [ 554.786346][T11541] ? futex_wake_mark+0x150/0x150 [ 554.791388][T11541] ? __fget_files+0x3fc/0x460 [ 554.796150][T11541] do_futex+0x35d/0x3e0 [ 554.800397][T11541] ? __ia32_sys_get_robust_list+0x110/0x110 [ 554.806364][T11541] ? __sys_getsockname+0x19e/0x2d0 [ 554.811561][T11541] __se_sys_futex+0x3a9/0x440 [ 554.816319][T11541] ? __x64_sys_futex+0xf0/0xf0 [ 554.821225][T11541] ? __x64_sys_futex+0x21/0xf0 [ 554.826067][T11541] do_syscall_64+0x55/0xb0 [ 554.830583][T11541] ? clear_bhb_loop+0x40/0x90 [ 554.835331][T11541] ? clear_bhb_loop+0x40/0x90 [ 554.840095][T11541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.846071][T11541] RIP: 0033:0x7f676299e159 [ 554.850574][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.870250][T11541] RSP: 002b:00007f67639110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.878741][T11541] RAX: ffffffffffffffda RBX: 00007f6762c25fa8 RCX: 00007f676299e159 [ 554.886776][T11541] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6762c25fac [ 554.894899][T11541] RBP: 00007f6762c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 554.902935][T11541] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 554.910969][T11541] R13: 00007f6762c26038 R14: 00007ffc1ced7dc0 R15: 00007ffc1ced7ea8 [ 554.919056][T11541] [ 556.908541][T11544] loop9: detected capacity change from 0 to 32768 [ 556.948901][ C1] net_ratelimit: 23 callbacks suppressed [ 557.063070][T11544] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 557.313215][T11544] XFS (loop9): Ending clean mount [ 557.338773][T11544] XFS (loop9): Quotacheck needed: Please wait. [ 557.482731][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 557.509862][T11544] XFS (loop9): Quotacheck: Done. [ 557.681256][T10301] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 557.722878][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 557.772977][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.786384][ T9] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 557.808384][ T9] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 557.842691][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.892910][T11584] FAULT_INJECTION: forcing a failure. [ 557.892910][T11584] name fail_futex, interval 1, probability 0, space 0, times 0 [ 557.944199][T11584] CPU: 0 PID: 11584 Comm: syz.2.1510 Not tainted syzkaller #0 [ 557.951734][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.951754][T11584] Call Trace: [ 557.951765][T11584] [ 557.951777][T11584] dump_stack_lvl+0x18c/0x250 [ 557.965182][T11584] ? show_regs_print_info+0x20/0x20 [ 557.965226][T11584] ? load_image+0x420/0x420 [ 557.972894][T11584] ? plist_add+0x3db/0x490 [ 557.972938][T11584] ? verify_lock_unused+0x140/0x140 [ 557.982668][T11584] should_fail_ex+0x394/0x4c0 [ 557.982715][T11584] get_futex_key+0x136/0x1030 [ 557.982739][T11584] ? futex_unqueue+0xcb/0xf0 [ 557.982763][T11584] ? futex_wait+0x4a7/0x5c0 [ 557.982791][T11584] ? futex_setup_timer+0xc0/0xc0 [ 557.982824][T11584] futex_wake+0x127/0x4f0 [ 557.982849][T11584] ? __fget_files+0x28/0x460 [ 557.982885][T11584] ? futex_wake_mark+0x150/0x150 [ 557.982922][T11584] ? __fget_files+0x3fc/0x460 [ 557.982956][T11584] do_futex+0x35d/0x3e0 [ 557.982984][T11584] ? __ia32_sys_get_robust_list+0x110/0x110 [ 557.983011][T11584] ? __sys_getsockname+0x19e/0x2d0 [ 557.983045][T11584] __se_sys_futex+0x3a9/0x440 [ 557.983076][T11584] ? __x64_sys_futex+0xf0/0xf0 [ 557.983107][T11584] ? __x64_sys_futex+0x21/0xf0 [ 557.983134][T11584] do_syscall_64+0x55/0xb0 [ 557.983164][T11584] ? clear_bhb_loop+0x40/0x90 [ 558.034893][T11584] ? clear_bhb_loop+0x40/0x90 [ 558.078371][T11584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.084333][T11584] RIP: 0033:0x7f735dd9e159 [ 558.088784][T11584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.108466][T11584] RSP: 002b:00007f735eba80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 558.116925][T11584] RAX: ffffffffffffffda RBX: 00007f735e025fa8 RCX: 00007f735dd9e159 [ 558.124937][T11584] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f735e025fac [ 558.132952][T11584] RBP: 00007f735e025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 558.140963][T11584] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 558.148971][T11584] R13: 00007f735e026038 R14: 00007ffe48e8d960 R15: 00007ffe48e8da48 [ 558.156992][T11584] [ 559.995422][T11607] xt_bpf: check failed: parse error [ 560.374021][T11587] Bluetooth: hci2: command 0x0406 tx timeout [ 560.999269][ T9950] usb 9-1: USB disconnect, device number 2 [ 561.845997][ T9950] IPVS: starting estimator thread 0... [ 561.992760][T11629] IPVS: using max 17 ests per chain, 40800 per kthread [ 562.402053][ C1] net_ratelimit: 29 callbacks suppressed [ 563.002061][T11647] loop9: detected capacity change from 0 to 512 [ 563.010346][T11647] EXT4-fs: Ignoring removed bh option [ 563.033080][T11647] EXT4-fs error (device loop9): ext4_iget_extra_inode:4752: inode #15: comm syz.9.1524: corrupted in-inode xattr: e_value size too large [ 563.049361][T11647] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.1524: couldn't read orphan inode 15 (err -117) [ 563.065599][T11647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.246211][T11620] loop7: detected capacity change from 0 to 32768 [ 563.323391][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.330207][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.357976][T11620] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 563.614896][T10301] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.979436][T11620] XFS (loop7): Ending clean mount [ 564.062307][T11620] XFS (loop7): Quotacheck needed: Please wait. [ 564.243160][T11620] XFS (loop7): Quotacheck: Done. [ 564.327765][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 565.539715][T11706] xt_bpf: check failed: parse error [ 567.453293][ C0] net_ratelimit: 36 callbacks suppressed [ 567.902878][T11728] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL) [ 567.935992][T11728] device-mapper: ioctl: error adding target to table [ 568.047603][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 568.162390][T11737] loop9: detected capacity change from 0 to 1024 [ 568.232062][T11737] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 568.313173][T11737] JBD2: no valid journal superblock found [ 568.351319][T11737] EXT4-fs (loop9): Could not load journal inode [ 568.435706][ T9887] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 568.759289][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 568.759304][ T28] audit: type=1326 audit(1790097113.644:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 568.825574][ T28] audit: type=1326 audit(1790097113.644:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.380147][ T28] audit: type=1326 audit(1790097113.704:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.512679][ T28] audit: type=1326 audit(1790097113.704:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.642904][ T28] audit: type=1326 audit(1790097113.714:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.747890][ T9950] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 569.758689][ T28] audit: type=1326 audit(1790097113.714:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.758770][ T28] audit: type=1326 audit(1790097113.724:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.842616][ T28] audit: type=1326 audit(1790097113.734:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.902874][ T28] audit: type=1326 audit(1790097113.734:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 569.998048][ T28] audit: type=1326 audit(1790097113.734:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11748 comm="syz.2.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f735dd9e159 code=0x7ffc0000 [ 570.035334][ T9950] usb 8-1: Using ep0 maxpacket: 8 [ 570.073110][ T9950] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.088986][ T9950] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 570.852725][ T9950] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 570.861858][ T9950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.880007][ T9950] kobil_sct 8-1:1.0: required endpoints missing [ 571.946564][T11774] xt_bpf: check failed: parse error [ 572.116054][T11777] serio: Serial port ttyS3 [ 572.832801][ C0] net_ratelimit: 29 callbacks suppressed [ 573.295307][ T9950] usb 8-1: USB disconnect, device number 10 [ 574.693289][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1549'. [ 575.635920][T11810] loop8: detected capacity change from 0 to 128 [ 575.721224][T11810] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 575.767961][T11810] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 575.817436][T11785] loop7: detected capacity change from 0 to 32768 [ 575.840223][T11785] Only 4K block size supported! [ 575.847325][T11785] Mount JFS Failure: -22 [ 575.873462][T11785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.190020][T10014] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.032739][ T9950] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 577.282960][ T9950] usb 8-1: Using ep0 maxpacket: 8 [ 577.300915][ T9950] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.332405][ T9950] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.382756][ T9950] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 577.430800][ T9950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.519837][ T9950] kobil_sct 8-1:1.0: required endpoints missing [ 578.112655][ C0] net_ratelimit: 24 callbacks suppressed [ 578.844074][T11824] loop7: detected capacity change from 0 to 32768 [ 578.887576][T11831] loop9: detected capacity change from 0 to 32768 [ 579.046469][T11824] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 579.069266][T11824] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 579.123438][T11824] BTRFS info (device loop7): setting nodatasum [ 579.171456][T11824] BTRFS info (device loop7): using free space tree [ 579.284664][T11831] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 579.558371][T11824] BTRFS info (device loop7): enabling ssd optimizations [ 579.612737][T11824] BTRFS info (device loop7): auto enabling async discard [ 579.676153][T11831] XFS (loop9): Ending clean mount [ 579.754500][T11831] XFS (loop9): Quotacheck needed: Please wait. [ 579.818393][ T9958] usb 8-1: USB disconnect, device number 11 [ 579.903549][ T9691] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 580.219819][T11831] XFS (loop9): Quotacheck: Done. [ 580.772093][T11587] Bluetooth: hci3: command 0x0406 tx timeout [ 580.919697][T10301] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 581.227681][T11910] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL) [ 581.275678][T11910] device-mapper: ioctl: error adding target to table [ 581.513370][T11916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1562'. [ 581.893188][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1560'. [ 581.960624][T11922] serio: Serial port ttyS3 [ 581.997883][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 583.152623][ C0] net_ratelimit: 55 callbacks suppressed [ 583.232822][ T27] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 583.432801][ T27] usb 10-1: Using ep0 maxpacket: 8 [ 583.458059][ T27] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.471728][ T27] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.512652][ T27] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.555721][ T27] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 583.582819][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.628014][ T27] kobil_sct 10-1:1.0: required endpoints missing [ 583.856037][T11924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.718394][T11943] loop9: detected capacity change from 0 to 32768 [ 584.755809][T11943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.1567 (11943) [ 584.922102][T11943] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 584.962398][T11943] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 584.976927][T11959] device-mapper: dirty region log: unrecognised sync argument to dirty region log: syn [ 585.028431][T11943] BTRFS info (device loop9): setting nodatasum [ 585.035368][T11959] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL) [ 585.057665][T11943] BTRFS info (device loop9): using free space tree [ 585.082065][T11959] device-mapper: ioctl: error adding target to table [ 585.323340][T11949] loop7: detected capacity change from 0 to 32768 [ 585.424001][T11943] BTRFS info (device loop9): enabling ssd optimizations [ 585.473157][T11943] BTRFS info (device loop9): auto enabling async discard [ 585.492264][T11949] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 585.578143][ T9961] usb 10-1: USB disconnect, device number 15 [ 585.605211][T11985] FAULT_INJECTION: forcing a failure. [ 585.605211][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 585.713091][T11985] CPU: 1 PID: 11985 Comm: syz.2.1571 Not tainted syzkaller #0 [ 585.720649][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.730764][T11985] Call Trace: [ 585.730779][T11985] [ 585.730791][T11985] dump_stack_lvl+0x18c/0x250 [ 585.737040][T11985] ? show_regs_print_info+0x20/0x20 [ 585.746935][T11985] ? load_image+0x420/0x420 [ 585.746968][T11985] ? __might_sleep+0xe0/0xe0 [ 585.756185][T11985] ? __lock_acquire+0x7d80/0x7d80 [ 585.756219][T11985] should_fail_ex+0x394/0x4c0 [ 585.765958][T11985] should_failslab+0x9/0x20 [ 585.765995][T11985] slab_pre_alloc_hook+0x59/0x300 [ 585.766038][T11985] kmem_cache_alloc+0x5a/0x2c0 [ 585.775576][T11985] ? __proc_create+0x373/0x8b0 [ 585.775609][T11985] __proc_create+0x373/0x8b0 [ 585.775644][T11985] ? proc_symlink+0x260/0x260 [ 585.785163][T11985] ? _raw_write_unlock+0x28/0x40 [ 585.794448][T11985] ? proc_register+0x5d5/0x7f0 [ 585.794485][T11985] _proc_mkdir+0x63/0x160 [ 585.794513][T11985] netfilter_net_init+0x2f6/0x350 [ 585.804230][T11985] ops_init+0x391/0x640 [ 585.804274][T11985] setup_net+0x3b6/0xa20 [ 585.813640][T11985] ? copy_net_ns+0x530/0x530 [ 585.813673][T11985] ? copy_net_ns+0x347/0x530 [ 585.813699][T11985] ? down_read_killable+0x1d0/0x340 [ 585.826728][T11985] copy_net_ns+0x361/0x530 [ 585.826770][T11985] create_new_namespaces+0x3ce/0x700 [ 585.837035][T11985] unshare_nsproxy_namespaces+0x11a/0x160 [ 585.837076][T11985] ksys_unshare+0x4fa/0x8f0 [ 585.846811][T11985] ? sighand_ctor+0x50/0x50 [ 585.857384][T11985] ? lock_chain_count+0x20/0x20 [ 585.866863][T11985] ? syscall_enter_from_user_mode+0x25/0x80 [ 585.866903][T11985] __x64_sys_unshare+0x38/0x40 [ 585.878168][T11985] do_syscall_64+0x55/0xb0 [ 585.882651][T11985] ? clear_bhb_loop+0x40/0x90 [ 585.887376][T11985] ? clear_bhb_loop+0x40/0x90 [ 585.892100][T11985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.898038][T11985] RIP: 0033:0x7f735dd9e159 [ 585.902500][T11985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.922144][T11985] RSP: 002b:00007f735eba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 585.930597][T11985] RAX: ffffffffffffffda RBX: 00007f735e025fa0 RCX: 00007f735dd9e159 [ 585.938600][T11985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 585.946607][T11985] RBP: 00007f735de3506b R08: 0000000000000000 R09: 0000000000000000 [ 585.954631][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.962627][T11985] R13: 00007f735e026038 R14: 00007f735e025fa0 R15: 00007ffe48e8da48 [ 585.970640][T11985] [ 586.038181][T11985] cannot create netfilter proc entry [ 586.305322][T11949] XFS (loop7): Ending clean mount [ 586.327685][T11949] XFS (loop7): Quotacheck needed: Please wait. [ 586.495058][T11949] XFS (loop7): Quotacheck: Done. [ 586.554316][T10301] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 586.775998][ T9691] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 587.162605][T12003] serio: Serial port ttyS3 [ 587.698606][T12000] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.130080][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1577'. [ 588.352651][ C1] net_ratelimit: 55 callbacks suppressed [ 589.184536][T12025] device-mapper: dirty region log: unrecognised sync argument to dirty region log: syn [ 589.221572][T12025] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL) [ 589.243161][T12025] device-mapper: ioctl: error adding target to table [ 589.593827][T12033] FAULT_INJECTION: forcing a failure. [ 589.593827][T12033] name failslab, interval 1, probability 0, space 0, times 0 [ 589.642750][T12033] CPU: 1 PID: 12033 Comm: syz.8.1580 Not tainted syzkaller #0 [ 589.650327][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.660451][T12033] Call Trace: [ 589.663785][T12033] [ 589.666774][T12033] dump_stack_lvl+0x18c/0x250 [ 589.671586][T12033] ? show_regs_print_info+0x20/0x20 [ 589.676858][T12033] ? load_image+0x420/0x420 [ 589.681421][T12033] ? __might_sleep+0xe0/0xe0 [ 589.686102][T12033] ? __lock_acquire+0x7d80/0x7d80 [ 589.691191][T12033] should_fail_ex+0x394/0x4c0 [ 589.695970][T12033] should_failslab+0x9/0x20 [ 589.700556][T12033] slab_pre_alloc_hook+0x59/0x300 [ 589.705686][T12033] kmem_cache_alloc+0x5a/0x2c0 [ 589.710511][T12033] ? __proc_create+0x373/0x8b0 [ 589.715356][T12033] __proc_create+0x373/0x8b0 [ 589.720009][T12033] ? proc_symlink+0x260/0x260 [ 589.724740][T12033] ? make_kgid+0x1c8/0x650 [ 589.729202][T12033] ? from_kuid_munged+0x6e0/0x6e0 [ 589.734264][T12033] ? rcu_is_watching+0x15/0xb0 [ 589.734300][T12033] _proc_mkdir+0x63/0x160 [ 589.734324][T12033] proc_net_ns_init+0x284/0x360 [ 589.734358][T12033] ops_init+0x391/0x640 [ 589.743487][T12033] setup_net+0x3b6/0xa20 [ 589.743520][T12033] ? copy_net_ns+0x530/0x530 [ 589.743549][T12033] ? copy_net_ns+0x347/0x530 [ 589.743573][T12033] ? down_read_killable+0x1d0/0x340 [ 589.752619][T12033] copy_net_ns+0x361/0x530 [ 589.752656][T12033] create_new_namespaces+0x3ce/0x700 [ 589.761530][T12033] unshare_nsproxy_namespaces+0x11a/0x160 [ 589.771332][T12033] ksys_unshare+0x4fa/0x8f0 [ 589.781069][T12033] ? sighand_ctor+0x50/0x50 [ 589.791326][T12033] ? lock_chain_count+0x20/0x20 [ 589.800777][T12033] ? syscall_enter_from_user_mode+0x25/0x80 [ 589.800817][T12033] __x64_sys_unshare+0x38/0x40 [ 589.811489][T12033] do_syscall_64+0x55/0xb0 [ 589.811527][T12033] ? clear_bhb_loop+0x40/0x90 [ 589.820784][T12033] ? clear_bhb_loop+0x40/0x90 [ 589.825534][T12033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.831494][T12033] RIP: 0033:0x7f676299e159 [ 589.835962][T12033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.855899][T12033] RSP: 002b:00007f6763911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.864385][T12033] RAX: ffffffffffffffda RBX: 00007f6762c25fa0 RCX: 00007f676299e159 [ 589.872428][T12033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 589.880461][T12033] RBP: 00007f6762a3506b R08: 0000000000000000 R09: 0000000000000000 [ 589.888487][T12033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.896530][T12033] R13: 00007f6762c26038 R14: 00007f6762c25fa0 R15: 00007ffc1ced7ea8 [ 589.904644][T12033] [ 590.469778][T12018] loop7: detected capacity change from 0 to 32768 [ 590.523010][T12018] Only 4K block size supported! [ 590.552740][T12018] Mount JFS Failure: -22 [ 590.597849][T12014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.706125][T12043] loop8: detected capacity change from 0 to 512 [ 590.808847][T12043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.859369][T12043] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.899191][T12049] serio: Serial port ttyS3 [ 591.221657][T12043] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 591.414345][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1586'. [ 591.637684][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.737162][T12066] loop7: detected capacity change from 0 to 128 [ 591.849662][T12066] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 591.883865][T12066] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 592.094908][T12075] device-mapper: dirty region log: unrecognised sync argument to dirty region log: syn [ 592.123005][T12075] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL) [ 592.161272][T12075] device-mapper: ioctl: error adding target to table [ 592.221800][ T9691] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 592.466224][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 592.692074][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1594'. [ 593.392625][ C0] net_ratelimit: 38 callbacks suppressed [ 594.043219][T12089] loop8: detected capacity change from 0 to 32768 [ 594.111921][T12089] Only 4K block size supported! [ 594.139551][T12089] Mount JFS Failure: -22 [ 594.167518][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.593909][T12130] device-mapper: table: 248:1: mirror: Invalid number of mirrors (-EINVAL) [ 595.612748][T12130] device-mapper: ioctl: error adding target to table [ 596.030666][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1605'. [ 596.255406][T12147] xt_bpf: check failed: parse error [ 598.512639][ C0] net_ratelimit: 27 callbacks suppressed [ 598.773432][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1608'. [ 599.383370][T12171] device-mapper: table: 248:1: mirror: Invalid number of mirrors (-EINVAL) [ 599.392170][T12171] device-mapper: ioctl: error adding target to table [ 600.002454][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1616'. [ 600.013625][T12184] loop7: detected capacity change from 0 to 512 [ 600.121200][T12160] loop9: detected capacity change from 0 to 32768 [ 600.142794][T12160] Only 4K block size supported! [ 600.150104][T12160] Mount JFS Failure: -22 [ 600.179985][T12184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.252670][ T9996] I/O error, dev loop9, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.305724][T12184] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.316777][T12191] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 600.509227][T12184] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 600.633756][ T9691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.914188][T12199] loop7: detected capacity change from 0 to 1024 [ 600.963464][T12199] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 600.985167][T12153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.017650][T12199] JBD2: no valid journal superblock found [ 601.030964][T12199] EXT4-fs (loop7): Could not load journal inode [ 601.753841][T12214] device-mapper: table: 248:1: mirror: Invalid number of mirrors (-EINVAL) [ 601.772758][T12214] device-mapper: ioctl: error adding target to table [ 601.995432][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 601.995447][ T28] audit: type=1326 audit(1790097146.904:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 602.093387][ T28] audit: type=1326 audit(1790097146.904:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 602.162668][ T28] audit: type=1326 audit(1790097146.944:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 602.234939][ T28] audit: type=1326 audit(1790097146.944:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 602.341333][ T28] audit: type=1326 audit(1790097146.944:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 602.903264][ T28] audit: type=1326 audit(1790097146.944:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 603.100369][ T28] audit: type=1326 audit(1790097146.944:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 603.130634][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1626'. [ 603.244268][ T28] audit: type=1326 audit(1790097146.944:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 603.362632][ T28] audit: type=1326 audit(1790097146.944:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 603.463140][ T9953] IPVS: starting estimator thread 0... [ 603.480224][ T28] audit: type=1326 audit(1790097146.944:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.7.1624" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdf59e159 code=0x7ffc0000 [ 603.602709][T12240] IPVS: using max 19 ests per chain, 45600 per kthread [ 603.632600][ C1] net_ratelimit: 36 callbacks suppressed [ 603.703317][T12244] FAULT_INJECTION: forcing a failure. [ 603.703317][T12244] name failslab, interval 1, probability 0, space 0, times 0 [ 603.771720][T12244] CPU: 0 PID: 12244 Comm: syz.2.1631 Not tainted syzkaller #0 [ 603.779296][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.789410][T12244] Call Trace: [ 603.792744][T12244] [ 603.795717][T12244] dump_stack_lvl+0x18c/0x250 [ 603.800466][T12244] ? show_regs_print_info+0x20/0x20 [ 603.805717][T12244] ? load_image+0x420/0x420 [ 603.805756][T12244] ? __might_sleep+0xe0/0xe0 [ 603.805787][T12244] ? __lock_acquire+0x7d80/0x7d80 [ 603.805821][T12244] should_fail_ex+0x394/0x4c0 [ 603.805861][T12244] should_failslab+0x9/0x20 [ 603.805893][T12244] slab_pre_alloc_hook+0x59/0x300 [ 603.805931][T12244] ? x509_cert_parse+0x9b/0x7b0 [ 603.805964][T12244] __kmem_cache_alloc_node+0x53/0x250 [ 603.815101][T12244] ? x509_cert_parse+0x9b/0x7b0 [ 603.815135][T12244] kmalloc_trace+0x2a/0xe0 [ 603.815170][T12244] x509_cert_parse+0x9b/0x7b0 [ 603.815206][T12244] x509_key_preparse+0x64/0x6c0 [ 603.863827][T12244] ? down_read+0x1ac/0x2e0 [ 603.868289][T12244] asymmetric_key_preparse+0xa9/0x140 [ 603.873706][T12244] __key_create_or_update+0x3a6/0xa60 [ 603.879127][T12244] ? key_create_or_update+0x60/0x60 [ 603.884370][T12244] ? bpf_lsm_key_permission+0x9/0x10 [ 603.889700][T12244] ? lookup_user_key+0xb66/0x1140 [ 603.894776][T12244] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 603.900801][T12244] key_create_or_update+0x42/0x60 [ 603.905877][T12244] __se_sys_add_key+0x34f/0x410 [ 603.910773][T12244] ? __x64_sys_add_key+0xc0/0xc0 [ 603.915760][T12244] ? lockdep_hardirqs_on+0x98/0x150 [ 603.920999][T12244] ? __x64_sys_add_key+0x20/0xc0 [ 603.925980][T12244] do_syscall_64+0x55/0xb0 [ 603.930452][T12244] ? clear_bhb_loop+0x40/0x90 [ 603.935172][T12244] ? clear_bhb_loop+0x40/0x90 [ 603.939935][T12244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.945870][T12244] RIP: 0033:0x7f735dd9e159 [ 603.950341][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.969985][T12244] RSP: 002b:00007f735eba8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 603.978444][T12244] RAX: ffffffffffffffda RBX: 00007f735e025fa0 RCX: 00007f735dd9e159 [ 603.986477][T12244] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 603.994482][T12244] RBP: 00007f735de3506b R08: ffffffffffffffff R09: 0000000000000000 [ 604.002495][T12244] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 604.010506][T12244] R13: 00007f735e026038 R14: 00007f735e025fa0 R15: 00007ffe48e8da48 [ 604.018565][T12244] [ 604.511743][T12261] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 604.596187][T12258] syz.9.1634 (12258) used greatest stack depth: 20312 bytes left [ 604.612099][T12261] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 604.985938][T12261] siw: device registration error -19 [ 605.615531][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1638'. [ 607.104274][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1649'. [ 607.333938][T12327] batman_adv: batadv0: Adding interface: syzkaller0 [ 607.340654][T12327] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.439793][T12327] batman_adv: batadv0: Interface activated: syzkaller0 [ 608.298600][T12332] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:2": -EINTR [ 608.730146][ C1] net_ratelimit: 34 callbacks suppressed [ 608.740320][T12342] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1655'. [ 608.816829][T12327] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 609.114652][T12327] batman_adv: batadv0: Removing interface: syzkaller0 [ 609.485878][T12361] loop8: detected capacity change from 0 to 512 [ 609.513993][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1661'. [ 609.646226][T12361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.778037][T12361] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.917383][T12361] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 610.237910][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.496754][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1666'. [ 612.140538][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 612.461119][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1675'. [ 612.513595][T12421] loop9: detected capacity change from 0 to 1024 [ 612.541973][T12421] EXT4-fs: quotafile must be on filesystem root [ 612.884068][T12433] FAULT_INJECTION: forcing a failure. [ 612.884068][T12433] name failslab, interval 1, probability 0, space 0, times 0 [ 612.920170][T12433] CPU: 1 PID: 12433 Comm: syz.9.1679 Not tainted syzkaller #0 [ 612.927721][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.937856][T12433] Call Trace: [ 612.941186][T12433] [ 612.944184][T12433] dump_stack_lvl+0x18c/0x250 [ 612.948938][T12433] ? show_regs_print_info+0x20/0x20 [ 612.954184][T12433] ? load_image+0x420/0x420 [ 612.958769][T12433] ? __might_sleep+0xe0/0xe0 [ 612.963447][T12433] ? __lock_acquire+0x7d80/0x7d80 [ 612.968518][T12433] should_fail_ex+0x394/0x4c0 [ 612.973242][T12433] should_failslab+0x9/0x20 [ 612.973277][T12433] slab_pre_alloc_hook+0x59/0x300 [ 612.973313][T12433] ? percpu_ref_put+0x12/0x100 [ 612.978169][T12433] ? alloc_pipe_info+0x1f9/0x4b0 [ 612.987983][T12433] ? alloc_pipe_info+0x1f9/0x4b0 [ 612.997872][T12433] __kmem_cache_alloc_node+0x53/0x250 [ 612.997913][T12433] ? __kmem_cache_alloc_node+0x194/0x250 [ 613.008930][T12433] ? alloc_pipe_info+0x1f9/0x4b0 [ 613.008967][T12433] __kmalloc+0xa7/0x240 [ 613.014268][T12433] alloc_pipe_info+0x1f9/0x4b0 [ 613.023216][T12433] splice_direct_to_actor+0x749/0x8e0 [ 613.023251][T12433] ? aa_file_perm+0x11b/0xee0 [ 613.033296][T12433] ? direct_file_splice_eof+0xb0/0xb0 [ 613.033325][T12433] ? aa_file_perm+0x3e3/0xee0 [ 613.043604][T12433] ? end_current_label_crit_section+0x149/0x170 [ 613.049917][T12433] ? warn_unsupported+0xc0/0xc0 [ 613.054845][T12433] ? common_file_perm+0x198/0x1f0 [ 613.059939][T12433] ? fsnotify_perm+0x5d/0x5e0 [ 613.064688][T12433] ? security_file_permission+0x79/0xa0 [ 613.070316][T12433] do_splice_direct+0x1d5/0x2f0 [ 613.075215][T12433] ? splice_direct_to_actor+0x8e0/0x8e0 [ 613.080860][T12433] ? do_splice_direct+0x2f0/0x2f0 [ 613.085956][T12433] ? common_file_perm+0x198/0x1f0 [ 613.091058][T12433] ? fsnotify_perm+0x5d/0x5e0 [ 613.095995][T12433] ? security_file_permission+0x79/0xa0 [ 613.101630][T12433] do_sendfile+0x52b/0xe80 [ 613.106126][T12433] ? __ia32_sys_get_robust_list+0x110/0x110 [ 613.112088][T12433] ? do_pwritev+0x3a0/0x3a0 [ 613.116695][T12433] __se_sys_sendfile64+0x145/0x1a0 [ 613.121882][T12433] ? lock_chain_count+0x20/0x20 [ 613.126794][T12433] ? __x64_sys_sendfile64+0xb0/0xb0 [ 613.132034][T12433] ? lockdep_hardirqs_on+0x98/0x150 [ 613.137299][T12433] do_syscall_64+0x55/0xb0 [ 613.141768][T12433] ? clear_bhb_loop+0x40/0x90 [ 613.146510][T12433] ? clear_bhb_loop+0x40/0x90 [ 613.151230][T12433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.157162][T12433] RIP: 0033:0x7f72f759e159 [ 613.161616][T12433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.181262][T12433] RSP: 002b:00007f72f843e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 613.189706][T12433] RAX: ffffffffffffffda RBX: 00007f72f7825fa0 RCX: 00007f72f759e159 [ 613.189730][T12433] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 613.205794][T12433] RBP: 00007f72f763506b R08: 0000000000000000 R09: 0000000000000000 [ 613.205815][T12433] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000000 [ 613.221788][T12433] R13: 00007f72f7826038 R14: 00007f72f7825fa0 R15: 00007ffefa886b08 [ 613.221845][T12433] [ 613.252803][ T9959] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 613.473134][ T9959] usb 9-1: Using ep0 maxpacket: 8 [ 613.486656][ T9959] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 613.549119][ T9959] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 613.612657][ T9959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.734781][ T9959] kobil_sct 9-1:1.0: required endpoints missing [ 613.743355][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1682'. [ 613.952596][ C0] net_ratelimit: 34 callbacks suppressed [ 615.047698][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1686'. [ 615.689251][T12474] loop7: detected capacity change from 0 to 512 [ 615.820322][T12474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.887212][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1691'. [ 615.902800][T12474] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.030410][T12474] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 616.159665][ T9691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.489741][T12486] loop7: detected capacity change from 0 to 512 [ 616.530422][T12486] EXT4-fs: Ignoring removed bh option [ 616.557229][ T969] usb 9-1: USB disconnect, device number 3 [ 616.591102][T12486] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 616.710744][T12486] EXT4-fs (loop7): 1 truncate cleaned up [ 616.764956][T12486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.886048][T12493] device-mapper: ioctl: populate_table: no targets specified [ 616.954033][T12486] EXT4-fs error (device loop7): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.7.1692: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 617.014470][T12486] EXT4-fs error (device loop7) in ext4_delete_entry:2802: Corrupt filesystem [ 617.055947][T12486] EXT4-fs warning (device loop7): ext4_rename_delete:3780: inode #2: comm syz.7.1692: Deleting old file: nlink 4, error=-117 [ 617.289215][ T9691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.447379][T12522] loop8: detected capacity change from 0 to 512 [ 618.544667][T12522] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.572365][T12522] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.665194][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1696'. [ 618.674657][T12490] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 618.764396][T12522] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 618.925244][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.163058][ T9959] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 619.532847][ T9959] usb 8-1: Using ep0 maxpacket: 8 [ 619.551300][ T9959] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.592905][ T9959] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 619.628101][ T9959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.641163][ T61] net_ratelimit: 37 callbacks suppressed [ 619.691124][ T9959] kobil_sct 8-1:1.0: required endpoints missing [ 620.238243][T12547] loop9: detected capacity change from 0 to 512 [ 620.274253][T12547] EXT4-fs: Ignoring removed bh option [ 620.318996][T12547] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 620.416695][T12547] EXT4-fs (loop9): 1 truncate cleaned up [ 620.434711][T12547] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.511948][T12547] EXT4-fs error (device loop9): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.9.1705: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 620.584244][T12547] EXT4-fs error (device loop9) in ext4_delete_entry:2802: Corrupt filesystem [ 620.603351][T12547] EXT4-fs warning (device loop9): ext4_rename_delete:3780: inode #2: comm syz.9.1705: Deleting old file: nlink 4, error=-117 [ 620.791580][T10301] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.236825][T12528] loop7: detected capacity change from 0 to 32768 [ 621.287651][T12528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1701 (12528) [ 621.345267][T12528] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 621.374283][T12528] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 621.461739][T12528] BTRFS info (device loop7): setting nodatasum [ 621.512724][T12528] BTRFS info (device loop7): using free space tree [ 622.203366][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 622.233133][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 622.236063][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 622.309878][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 622.310827][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 622.322644][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 622.343551][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 622.345515][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 622.365435][T12528] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 622.457007][T12528] BTRFS error (device loop7): open_ctree failed: -12 [ 622.589840][ T9887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by udevd (9887) [ 622.678981][ T9959] usb 8-1: USB disconnect, device number 12 [ 623.002929][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1709'. [ 623.059155][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1710'. [ 623.531167][T12599] device-mapper: ioctl: populate_table: no targets specified [ 623.960132][T12607] FAULT_INJECTION: forcing a failure. [ 623.960132][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 624.019263][T12607] CPU: 0 PID: 12607 Comm: syz.8.1714 Not tainted syzkaller #0 [ 624.026829][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.036970][T12607] Call Trace: [ 624.040317][T12607] [ 624.043298][T12607] dump_stack_lvl+0x18c/0x250 [ 624.048042][T12607] ? show_regs_print_info+0x20/0x20 [ 624.053309][T12607] ? load_image+0x420/0x420 [ 624.057884][T12607] ? __might_sleep+0xe0/0xe0 [ 624.062537][T12607] ? __lock_acquire+0x7d80/0x7d80 [ 624.067631][T12607] should_fail_ex+0x394/0x4c0 [ 624.072382][T12607] should_failslab+0x9/0x20 [ 624.076953][T12607] slab_pre_alloc_hook+0x59/0x300 [ 624.082051][T12607] ? kvmalloc_node+0x70/0x180 [ 624.086808][T12607] ? kvmalloc_node+0x70/0x180 [ 624.091553][T12607] __kmem_cache_alloc_node+0x53/0x250 [ 624.096997][T12607] ? lockdep_softirqs_off+0x440/0x440 [ 624.102443][T12607] ? kvmalloc_node+0x70/0x180 [ 624.107198][T12607] __kmalloc_node+0xa6/0x240 [ 624.111864][T12607] kvmalloc_node+0x70/0x180 [ 624.116442][T12607] rhashtable_init+0x529/0xa60 [ 624.121275][T12607] ipc_init_ids+0x7b/0x1f0 [ 624.125750][T12607] copy_ipcs+0x45d/0x500 [ 624.130059][T12607] create_new_namespaces+0x212/0x700 [ 624.135418][T12607] unshare_nsproxy_namespaces+0x11a/0x160 [ 624.141217][T12607] ksys_unshare+0x4fa/0x8f0 [ 624.145790][T12607] ? sighand_ctor+0x50/0x50 [ 624.150376][T12607] ? lock_chain_count+0x20/0x20 [ 624.155290][T12607] ? syscall_enter_from_user_mode+0x25/0x80 [ 624.161266][T12607] __x64_sys_unshare+0x38/0x40 [ 624.166118][T12607] do_syscall_64+0x55/0xb0 [ 624.170614][T12607] ? clear_bhb_loop+0x40/0x90 [ 624.175357][T12607] ? clear_bhb_loop+0x40/0x90 [ 624.180109][T12607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.186075][T12607] RIP: 0033:0x7f676299e159 [ 624.190541][T12607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.210215][T12607] RSP: 002b:00007f6763911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 624.218676][T12607] RAX: ffffffffffffffda RBX: 00007f6762c25fa0 RCX: 00007f676299e159 [ 624.226681][T12607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 624.234689][T12607] RBP: 00007f6762a3506b R08: 0000000000000000 R09: 0000000000000000 [ 624.242710][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.250717][T12607] R13: 00007f6762c26038 R14: 00007f6762c25fa0 R15: 00007ffc1ced7ea8 [ 624.258733][T12607] [ 624.761942][ C0] net_ratelimit: 58 callbacks suppressed [ 624.821765][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.835054][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.979961][ T23] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 625.702735][ T23] usb 10-1: Using ep0 maxpacket: 8 [ 625.722428][ T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 625.764903][ T23] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 625.794069][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.841843][ T23] kobil_sct 10-1:1.0: required endpoints missing [ 626.136792][T12632] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1719'. [ 627.293910][T12617] loop9: detected capacity change from 0 to 32768 [ 627.380556][T12617] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 627.412939][T12617] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 627.421719][T12617] BTRFS info (device loop9): setting nodatasum [ 627.455117][T12617] BTRFS info (device loop9): using free space tree [ 627.594803][T12617] BTRFS info (device loop9): enabling ssd optimizations [ 627.601980][T12617] BTRFS info (device loop9): auto enabling async discard [ 627.642435][ T9959] usb 10-1: USB disconnect, device number 16 [ 628.138861][T12673] device-mapper: ioctl: populate_table: no targets specified [ 628.290094][T12676] tap0: tun_chr_ioctl cmd 2147767520 [ 628.324094][T10301] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.677330][ T9887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop9 scanned by udevd (9887) [ 629.792773][ C0] net_ratelimit: 48 callbacks suppressed [ 630.525450][T12711] device-mapper: ioctl: populate_table: no targets specified [ 630.553191][ T9958] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 630.568686][T12715] loop8: detected capacity change from 0 to 512 [ 630.646773][T12715] EXT4-fs: Ignoring removed bh option [ 630.772905][ T9958] usb 8-1: Using ep0 maxpacket: 8 [ 630.836564][ T9958] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 630.898658][T12715] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1731: corrupted in-inode xattr: e_value size too large [ 630.944732][ T9958] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 630.975729][T12715] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1731: couldn't read orphan inode 15 (err -117) [ 631.018634][ T9958] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 631.058592][ T9958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.097675][ T9958] kobil_sct 8-1:1.0: KOBIL USB smart card terminal converter detected [ 631.150086][ T9958] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 631.311539][T12715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.576743][T12715] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.1731: Unrecognised inode hash code 4 [ 631.705114][T12715] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1731: Corrupt directory, running e2fsck is recommended [ 631.806876][T12715] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #12: comm syz.8.1731: corrupted in-inode xattr: bad e_name length [ 631.825084][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1738'. [ 633.685212][ T5780] usb 8-1: USB disconnect, device number 13 [ 633.774312][ T5780] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 633.829093][ T5780] kobil_sct 8-1:1.0: device disconnected [ 633.977122][T12764] device-mapper: ioctl: populate_table: no targets specified [ 635.236602][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1748'. [ 635.632584][ C1] net_ratelimit: 42 callbacks suppressed [ 640.469486][T12857] loop9: detected capacity change from 0 to 1024 [ 640.554505][T12857] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 640.625040][T12857] JBD2: no valid journal superblock found [ 640.702062][T12857] EXT4-fs (loop9): Could not load journal inode [ 640.752580][ C0] net_ratelimit: 36 callbacks suppressed [ 642.550658][T12879] syzkaller0: entered promiscuous mode [ 642.593106][T12879] syzkaller0: entered allmulticast mode [ 643.847277][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.432597][ C0] net_ratelimit: 38 callbacks suppressed [ 648.665145][T12927] C: renamed from team_slave_0 (while UP) [ 648.700944][T12927] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1780'. [ 651.552620][ C1] net_ratelimit: 34 callbacks suppressed [ 654.098860][T13012] 9pnet_virtio: no channels available for device syz [ 655.165452][T13022] jffs2: notice: (13022) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 656.107380][T13022] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 657.152572][ C1] net_ratelimit: 42 callbacks suppressed [ 657.441584][T13039] syz.9.1806 (13039) used obsolete PPPIOCDETACH ioctl [ 657.475298][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 659.385524][T13080] loop8: detected capacity change from 0 to 512 [ 659.507900][T13080] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.543025][T13080] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.679616][T13080] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 659.787795][T10014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.406143][T13115] ================================================================== [ 660.414366][T13115] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290 [ 660.421282][T13115] Read of size 1 at addr ffff888024627eb1 by task syz.8.1820/13115 [ 660.429223][T13115] [ 660.431592][T13115] CPU: 1 PID: 13115 Comm: syz.8.1820 Not tainted syzkaller #0 [ 660.439215][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.449324][T13115] Call Trace: [ 660.452694][T13115] [ 660.455646][T13115] dump_stack_lvl+0x18c/0x250 [ 660.460384][T13115] ? __lock_acquire+0x7d80/0x7d80 [ 660.460424][T13115] ? show_regs_print_info+0x20/0x20 [ 660.460457][T13115] ? load_image+0x420/0x420 [ 660.460483][T13115] ? __virt_addr_valid+0x10c/0x380 [ 660.460511][T13115] ? __virt_addr_valid+0x10c/0x380 [ 660.460539][T13115] ? __virt_addr_valid+0x10c/0x380 [ 660.470834][T13115] print_report+0xa8/0x210 [ 660.470900][T13115] ? string+0x204/0x290 [ 660.470923][T13115] kasan_report+0x117/0x150 [ 660.480597][T13115] ? string+0x204/0x290 [ 660.480636][T13115] string+0x204/0x290 [ 660.480664][T13115] vsnprintf+0xf72/0x1ba0 [ 660.480694][T13115] pointer+0x9ed/0x1150 [ 660.480718][T13115] ? verify_lock_unused+0x140/0x140 [ 660.490978][T13115] ? string+0x290/0x290 [ 660.491014][T13115] vsnprintf+0xdaa/0x1ba0 [ 660.491046][T13115] vprintk_store+0x3d9/0xd50 [ 660.491077][T13115] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 660.499700][T13115] ? printk_parse_prefix+0x3d0/0x3d0 [ 660.499745][T13115] ? finish_task_switch+0x262/0x8f0 [ 660.499770][T13115] ? lockdep_hardirqs_on+0x98/0x150 [ 660.499799][T13115] ? __schedule+0x15b6/0x4660 [ 660.508512][T13115] vprintk_emit+0x117/0x610 [ 660.508553][T13115] ? printk_sprint+0x460/0x460 [ 660.516904][T13115] ? asan.module_dtor+0x20/0x20 [ 660.516943][T13115] ? lockdep_hardirqs_on+0x98/0x150 [ 660.516967][T13115] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.517005][T13115] _printk+0xde/0x130 [ 660.526364][T13115] ? load_image+0x420/0x420 [ 660.534876][T13115] ? preempt_schedule_common+0x82/0xc0 [ 660.534919][T13115] ? preempt_schedule+0xc0/0xd0 [ 660.534952][T13115] ? schedule_preempt_disabled+0x20/0x20 [ 660.545559][T13115] ? __mutex_trylock_common+0x160/0x270 [ 660.545600][T13115] __dynamic_pr_debug+0x1a3/0x260 [ 660.545632][T13115] ? preempt_schedule_thunk+0x1a/0x30 [ 660.556170][T13115] ? param_get_dyndbg_classes+0x170/0x170 [ 660.556206][T13115] ? __mutex_lock+0x321/0xc80 [ 660.556240][T13115] ? llcp_sock_bind+0x370/0x710 [ 660.556361][T13115] ? rcu_is_watching+0x15/0xb0 [ 660.566249][T13115] nfc_llcp_get_sdp_ssap+0x3a4/0x3d0 [ 660.566353][T13115] llcp_sock_bind+0x3be/0x710 [ 660.566380][T13115] ? llcp_sock_recvmsg+0xcd0/0xcd0 [ 660.575687][T13115] ? bpf_lsm_socket_bind+0x9/0x10 [ 660.585759][T13115] ? security_socket_bind+0x80/0xa0 [ 660.585793][T13115] __sys_bind+0x2f0/0x3f0 [ 660.585824][T13115] ? __ia32_sys_socketpair+0xb0/0xb0 [ 660.585861][T13115] __x64_sys_bind+0x7a/0x90 [ 660.596022][T13115] do_syscall_64+0x55/0xb0 [ 660.596061][T13115] ? clear_bhb_loop+0x40/0x90 [ 660.596093][T13115] ? clear_bhb_loop+0x40/0x90 [ 660.606084][T13115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.606121][T13115] RIP: 0033:0x7f676299e159 [ 660.606141][T13115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.606161][T13115] RSP: 002b:00007f67638f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 660.606185][T13115] RAX: ffffffffffffffda RBX: 00007f6762c26090 RCX: 00007f676299e159 [ 660.606203][T13115] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 000000000000000b [ 660.606218][T13115] RBP: 00007f6762a3506b R08: 0000000000000000 R09: 0000000000000000 [ 660.606232][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.606246][T13115] R13: 00007f6762c26128 R14: 00007f6762c26090 R15: 00007ffc1ced7ea8 [ 660.606281][T13115] [ 660.616749][T13115] [ 660.616756][T13115] Allocated by task 13115: [ 660.616769][T13115] kasan_set_track+0x4e/0x70 [ 660.616797][T13115] __kasan_kmalloc+0x8f/0xa0 [ 660.627407][T13115] __kmalloc_node_track_caller+0xb4/0x230 [ 660.627444][T13115] kmemdup+0x2b/0x70 [ 660.627470][T13115] llcp_sock_bind+0x370/0x710 [ 660.627491][T13115] __sys_bind+0x2f0/0x3f0 [ 660.638618][T13115] __x64_sys_bind+0x7a/0x90 [ 660.638645][T13115] do_syscall_64+0x55/0xb0 [ 660.638672][T13115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.638701][T13115] [ 660.638706][T13115] The buggy address belongs to the object at ffff888024627eb0 [ 660.638706][T13115] which belongs to the cache kmalloc-8 of size 8 [ 660.638725][T13115] The buggy address is located 0 bytes to the right of [ 660.638725][T13115] allocated 1-byte region [ffff888024627eb0, ffff888024627eb1) [ 660.638748][T13115] [ 660.638754][T13115] The buggy address belongs to the physical page: [ 660.736438][T13115] page:ffffea00009189c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24627 [ 660.752829][T13115] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 660.769408][T13115] page_type: 0xffffffff() [ 660.778133][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.785421][T13115] raw: 00fff00000000800 ffff888017c41280 ffffea00007ac740 dead000000000002 [ 660.795493][T13115] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000 [ 660.795507][T13115] page dumped because: kasan: bad access detected [ 660.795530][T13115] page_owner tracks the page as allocated [ 660.795538][T13115] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 7221, tgid 7220 (syz.0.465), ts 220512259046, free_ts 220505052898 [ 660.795577][T13115] post_alloc_hook+0x1c1/0x200 [ 660.854854][T13115] get_page_from_freelist+0x2181/0x22a0 [ 660.854885][T13115] __alloc_pages+0x1f0/0x460 [ 660.854904][T13115] alloc_slab_page+0x5d/0x180 [ 660.854924][T13115] new_slab+0x87/0x2d0 [ 660.978697][T13115] ___slab_alloc+0xc5c/0x12f0 [ 660.983424][T13115] __kmem_cache_alloc_node+0x11f/0x250 [ 660.988937][T13115] __kmalloc_node_track_caller+0xa4/0x230 [ 660.994708][T13115] kstrdup+0x3b/0x80 [ 660.998651][T13115] __kernfs_new_node+0xaa/0x7f0 [ 661.003553][T13115] kernfs_new_node+0x14c/0x260 [ 661.008370][T13115] __kernfs_create_file+0x4b/0x2e0 [ 661.013522][T13115] sysfs_add_file_mode_ns+0x237/0x2f0 [ 661.018941][T13115] internal_create_group+0x431/0xd10 [ 661.024272][T13115] sysfs_create_groups+0x59/0x120 [ 661.029429][T13115] ib_setup_port_attrs+0x16e1/0x2370 [ 661.034934][T13115] page last free stack trace: [ 661.039650][T13115] free_unref_page_prepare+0x7d7/0x8f0 [ 661.045159][T13115] free_unref_page+0x32/0x2e0 [ 661.050052][T13115] vfree+0x1a7/0x340 [ 661.054004][T13115] delayed_vfree_work+0x55/0x80 [ 661.058918][T13115] process_scheduled_works+0xa60/0x1600 [ 661.064522][T13115] worker_thread+0xa5e/0xfe0 [ 661.069163][T13115] kthread+0x2fa/0x390 [ 661.073273][T13115] ret_from_fork+0x48/0x80 [ 661.077923][T13115] ret_from_fork_asm+0x11/0x20 [ 661.082760][T13115] [ 661.085137][T13115] Memory state around the buggy address: [ 661.090815][T13115] ffff888024627d80: fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc fc [ 661.098927][T13115] ffff888024627e00: fc fc fa fc fc fc fc fb fc fc fc fc fb fc fc fc [ 661.107043][T13115] >ffff888024627e80: fc fa fc fc fc fc 01 fc fc fc fc fb fc fc fc fc [ 661.115184][T13115] ^ [ 661.120863][T13115] ffff888024627f00: fb fc fc fc fc fa fc fc fc fc fa fc fc fc fc fb [ 661.128975][T13115] ffff888024627f80: fc fc fc fc fa fc fc fc fc fb fc fc fc fc fc fc [ 661.137072][T13115] ================================================================== [ 661.145201][T13115] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 661.152436][T13115] CPU: 1 PID: 13115 Comm: syz.8.1820 Not tainted syzkaller #0 [ 661.159938][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.170050][T13115] Call Trace: [ 661.173373][T13115] [ 661.176339][T13115] dump_stack_lvl+0x18c/0x250 [ 661.181078][T13115] ? show_regs_print_info+0x20/0x20 [ 661.186337][T13115] ? load_image+0x420/0x420 [ 661.190912][T13115] panic+0x2ca/0x720 [ 661.194873][T13115] ? bpf_jit_dump+0xd0/0xd0 [ 661.199465][T13115] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 661.205431][T13115] ? _raw_spin_unlock+0x40/0x40 [ 661.210340][T13115] ? print_memory_metadata+0x314/0x400 [ 661.215852][T13115] ? string+0x204/0x290 [ 661.220066][T13115] check_panic_on_warn+0x84/0xa0 [ 661.225063][T13115] ? string+0x204/0x290 [ 661.229293][T13115] end_report+0x6f/0x130 [ 661.233590][T13115] kasan_report+0x128/0x150 [ 661.238141][T13115] ? string+0x204/0x290 [ 661.242346][T13115] string+0x204/0x290 [ 661.246371][T13115] vsnprintf+0xf72/0x1ba0 [ 661.250751][T13115] pointer+0x9ed/0x1150 [ 661.254962][T13115] ? verify_lock_unused+0x140/0x140 [ 661.260225][T13115] ? string+0x290/0x290 [ 661.264439][T13115] vsnprintf+0xdaa/0x1ba0 [ 661.268825][T13115] vprintk_store+0x3d9/0xd50 [ 661.273466][T13115] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 661.279520][T13115] ? printk_parse_prefix+0x3d0/0x3d0 [ 661.284952][T13115] ? finish_task_switch+0x262/0x8f0 [ 661.290205][T13115] ? lockdep_hardirqs_on+0x98/0x150 [ 661.295539][T13115] ? __schedule+0x15b6/0x4660 [ 661.300281][T13115] vprintk_emit+0x117/0x610 [ 661.304843][T13115] ? printk_sprint+0x460/0x460 [ 661.309659][T13115] ? asan.module_dtor+0x20/0x20 [ 661.314564][T13115] ? lockdep_hardirqs_on+0x98/0x150 [ 661.319831][T13115] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.326050][T13115] _printk+0xde/0x130 [ 661.330101][T13115] ? load_image+0x420/0x420 [ 661.334648][T13115] ? preempt_schedule_common+0x82/0xc0 [ 661.340161][T13115] ? preempt_schedule+0xc0/0xd0 [ 661.345066][T13115] ? schedule_preempt_disabled+0x20/0x20 [ 661.350781][T13115] ? __mutex_trylock_common+0x160/0x270 [ 661.356380][T13115] __dynamic_pr_debug+0x1a3/0x260 [ 661.361463][T13115] ? preempt_schedule_thunk+0x1a/0x30 [ 661.366896][T13115] ? param_get_dyndbg_classes+0x170/0x170 [ 661.372702][T13115] ? __mutex_lock+0x321/0xc80 [ 661.377436][T13115] ? llcp_sock_bind+0x370/0x710 [ 661.382351][T13115] ? rcu_is_watching+0x15/0xb0 [ 661.387171][T13115] nfc_llcp_get_sdp_ssap+0x3a4/0x3d0 [ 661.392518][T13115] llcp_sock_bind+0x3be/0x710 [ 661.397244][T13115] ? llcp_sock_recvmsg+0xcd0/0xcd0 [ 661.402433][T13115] ? bpf_lsm_socket_bind+0x9/0x10 [ 661.407559][T13115] ? security_socket_bind+0x80/0xa0 [ 661.412804][T13115] __sys_bind+0x2f0/0x3f0 [ 661.417207][T13115] ? __ia32_sys_socketpair+0xb0/0xb0 [ 661.422576][T13115] __x64_sys_bind+0x7a/0x90 [ 661.427127][T13115] do_syscall_64+0x55/0xb0 [ 661.431595][T13115] ? clear_bhb_loop+0x40/0x90 [ 661.436327][T13115] ? clear_bhb_loop+0x40/0x90 [ 661.441068][T13115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.447038][T13115] RIP: 0033:0x7f676299e159 [ 661.451508][T13115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.471255][T13115] RSP: 002b:00007f67638f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 661.479732][T13115] RAX: ffffffffffffffda RBX: 00007f6762c26090 RCX: 00007f676299e159 [ 661.487754][T13115] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 000000000000000b [ 661.495765][T13115] RBP: 00007f6762a3506b R08: 0000000000000000 R09: 0000000000000000 [ 661.503781][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.511797][T13115] R13: 00007f6762c26128 R14: 00007f6762c26090 R15: 00007ffc1ced7ea8 [ 661.519828][T13115] [ 661.523477][T13115] Kernel Offset: disabled [ 661.527812][T13115] Rebooting in 86400 seconds..