last executing test programs: 20m5.02098289s ago: executing program 2 (id=188): inotify_init() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x493, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r4, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pk'], 0x0, &(0x7f00000004c0)=""/90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m59.750335688s ago: executing program 2 (id=192): setresgid(0xee00, 0x0, 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') bpf$PROG_LOAD(0x2, 0x0, 0x0) read$midi(r5, &(0x7f00000001c0)=""/70, 0xffffffd8) 19m58.334928815s ago: executing program 2 (id=196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) restart_syscall() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) write(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x8, 0x9d5f}, {0x524, 0x41}, 0xfffe, [0xde9a, 0x8e9, 0xc, 0x4000001d, 0x43, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x2]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 19m53.374900478s ago: executing program 2 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0x0100\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0123456789\n', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='syzkaller\n', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='dummy_udc', 0x9) 19m51.63096635s ago: executing program 32 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc6, &(0x7f0000000500)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x0, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000400)=0x1) 19m47.693036846s ago: executing program 2 (id=207): socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000100)='test\x00', 0x2) ftruncate(r6, 0x1000) fcntl$addseals(r6, 0x409, 0x2) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000200)={r6, 0x0, 0x0, 0x1000}) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x3, 0x11, r7, 0x0) 19m44.367929552s ago: executing program 2 (id=209): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0xa) syz_mount_image$fuse(0x0, 0x0, 0x1860, 0x0, 0x1, 0x0, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x800, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x82) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 19m29.214285745s ago: executing program 33 (id=209): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0xa) syz_mount_image$fuse(0x0, 0x0, 0x1860, 0x0, 0x1, 0x0, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x800, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x82) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14m53.689797717s ago: executing program 3 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='hist:', 0x5) 14m52.032792706s ago: executing program 3 (id=872): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000004) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000000240)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x40, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 14m50.977894225s ago: executing program 3 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) listen(0xffffffffffffffff, 0xff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='hist:', 0x5) 14m49.537741432s ago: executing program 3 (id=877): socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) fallocate(r1, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 14m46.134107183s ago: executing program 3 (id=883): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a6, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) clock_nanosleep(0x4, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x3) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000740)}], 0x2, 0x1, 0x407fffe) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd3a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2900}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 14m44.888964971s ago: executing program 3 (id=887): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) rmdir(&(0x7f0000010280)='./file0\x00') 14m29.644434599s ago: executing program 34 (id=887): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) rmdir(&(0x7f0000010280)='./file0\x00') 7m18.971906159s ago: executing program 0 (id=2639): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x05\x00\xaaI\x00\x00\x00$\x19\xaa\x00\x00\x00\t<\xe8u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd2.\xeb\xb5\xc2\xff\x9bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x83T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ{\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\xcc\xa4\xbb\xb0\xa3S\n\xe8\xb1p\xb9\x90\xe9\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xab,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video(0x0, 0xe, 0x8800) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8910, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x5, 0x1, [0xb4ca]}, 0xa) syz_io_uring_setup(0x5015, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, r3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x4000044) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7m18.826983996s ago: executing program 0 (id=2641): socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) fallocate(r1, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 7m18.225823854s ago: executing program 0 (id=2646): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 7m17.862861961s ago: executing program 0 (id=2649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./cifs\x00', 0x200840, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x9, 0x445a, &(0x7f0000004480)="$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") r1 = accept(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/117, 0x75, 0x0, 0x0, 0x0) 7m13.421863387s ago: executing program 0 (id=2669): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 7m8.986692383s ago: executing program 0 (id=2670): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 6m54.400502162s ago: executing program 35 (id=2670): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 6m46.407050383s ago: executing program 7 (id=2706): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x433b, 0x4) sendto$inet(r2, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) r3 = dup(r0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r5, @ANYRES8=r5, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r5, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r5, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x10000}}, 0xa) writev(r6, &(0x7f0000000040)=[{0x0}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x7, 0x1, 0xf07, 0x4003, 0x94, 0x800, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r9, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r8, 0x0, r0, 0x0, 0xffff, 0x2) 6m45.040609857s ago: executing program 7 (id=2713): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) 6m38.675981123s ago: executing program 7 (id=2720): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x3) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./cifs\x00', 0x200840, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x9, 0x445a, &(0x7f0000004480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, 0x0, 0x128) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read(r3, &(0x7f0000000280)=""/151, 0x97) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000440)=@mmap={0x2, 0xd, 0x4, 0x10, 0x40ed, {0x0, 0x2710}, {0x5, 0x1, 0x3, 0x8, 0x3, 0x2, "54db967e"}, 0x7fffffff, 0x1, {}, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = accept(r0, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/117, 0x75, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000a237920fbd442b8245bc3f7505306f1c000000000011907800733eeca2fd15abc1004e2000"], 0x0) sendto$inet(r4, &(0x7f0000002100)="00000078fe534d4240000100160000c001000100", 0x14, 0x0, 0x0, 0x0) 6m33.291738493s ago: executing program 7 (id=2729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x3) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./cifs\x00', 0x200840, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x9, 0x445a, &(0x7f0000004480)="$eJzs3c9vG2kZAOB3Jt5uUrYl3d3DIiFhiZVACEXpnoCsRJOmzSa7oWhhV4iL6ySmDThxlTiIQw/hVokTEoeKQwUSt5yqHLiWP4ELx3KuRA9cKiFVBNkep56JrbhV3ND2eQ4Z+/v5Ju/M528OzqSZ5s317fL6drm6WW6s/mL7o/KvG/WdjVqko1eKiPz8sfsy5+c5jOI8OcVz74137fLVn3z5UcTf1v7x6ODg4CBaStHXxZ7XT/59e7X32JUW+rTGPTrSuf4TvJCfR8T7R+JqGYuIn/01IomI2axsLjtORMT56NR9eft318snFM39h7WPK0+X7+zPfLi0d2//yO8+0X2RRPyx/rXv3tj41zfHZv75nROaHgAAAAAAAAAAAAAAAACAV9zC59e++PH0xXiQRGkvOfp93YXsOOj7sQcn5huj/2UBAAAAAAAAAAAAAAAAAADg/9Sz7/+Xk3f7fP9/PjteGtD/4Iejj5HRWfzRtfkr0xez578nR+q/lxU9nh2LC32e+158/vtsoX//578fnedFdePrzjsZSTreUz8ZaTo1FfHn7MHvHyRn03pjuxQRO5trJxbGKyuf/87T+3PZyR7oP2z+5wrj98//SXrvyNnUen/95E6x11o+/2MD2/3lt8lQ+b+c73Z3RGH3eG/0U7zG8vkvtcsmehu83Tm08v/70vH5ny+MP6rr/3w3sCjnVoDWHqacDN6vkHcmevP/Vrsst3Rmf8hB1/9/Cvm/Uhj/tNb/3eIHEX3lr/8z7bLxXIvOBqCd//T46/9qYfzTyH8r/l2f/0PJ5z9bU0u5Ju2/5LDr/0Jh/D75H7zJeA5fpFmc55PcGbCXdMoH/b868vL5Hy9WH54Jj2fTofZ/nxQGGHD/99ZJxd+9/+vO27r/m+q5D/l20rn/o798/icGthv2+l8s9Bv1+n+pvf/jReXzf7Zdlt87T7Z/Dpv/pcL4o8p/e1cy3s3/s/X/v293yv9k/zeUfP6/0ilMe1vstn+293/J8fv/Twvjn8b+rxX/bjraWV8X+fy/M7BdK/9/z/LeWiWedD8qCvn/rNBv9PmPmB5irz/4k+3Nls//uYHt2tf/+PHr/3Kh36jz/61RDg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwCpjLjpORpFO592k6NRVxOXv/QZxNVqprlZV6Y/VX2xHzWXk53k1u1Bsr1XplfbOxVqtU6/XGasSVrP79GE+2641mZaN66+rhWBPJzVp1q7lSqzYjYiEr/3qc6461st7cqN6KiE8O676aNrZu3axuVtbWt34wPT09HYuHMVxIar9p1jabndk7tRFLh30nk57g2tWfHsbyTvLLxs7WZrXeLv+sp0+9sVqt9/RZzur+EBeS5tbO5mq1WavUGze6852mS9lxfvHzn070qb+edI5zLzMoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7bg5nv342IUuddGhHlpPXizID29x/WPq48Xb6zP/Ph0t69/UcRkbzMeAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhV26R4kgCMIAWt0KGnoMo2EmMx1RRANHBE+gx/AwehQv4R0MDEwNloXdHljmB5aBTZb3koL+qK6GLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOzd1z9/JUNxEpzldnEV9v3z+7+UOpH9fT/ScLZp4u6OEw7h+7m9u6Kf+eRvlVOfpt8yb9/3t/jYna+xzsyXCftsZzhub2be59/dyLSLmKiLbklynnqtrvLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANbswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VtH0bcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+tWFmQ=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, 0x0, 0x128) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read(r3, &(0x7f0000000280)=""/151, 0x97) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000440)=@mmap={0x2, 0xd, 0x4, 0x10, 0x40ed, {0x0, 0x2710}, {0x5, 0x1, 0x3, 0x8, 0x3, 0x2, "54db967e"}, 0x7fffffff, 0x1, {}, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = accept(r0, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000"/117, 0x75, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000a237920fbd442b8245bc3f7505306f1c000000000011907800733eeca2fd15abc1004e2000"], 0x0) 6m31.909895208s ago: executing program 7 (id=2735): r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xe1, 0x80) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x479}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r2, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000100)) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r6}, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) unshare(0x22020400) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6m21.654180254s ago: executing program 7 (id=2743): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x202441, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f000050f000/0x1000)=nil, 0x1000, 0x200000a, 0x40010, r1, 0x2f10d000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x3a, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x73622a85, 0x7fffc, 0x0, 0x6d, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x2000}], 0xfffffffffffffff3, 0x0, 0x0}) 6m6.2491672s ago: executing program 36 (id=2743): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x202441, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f000050f000/0x1000)=nil, 0x1000, 0x200000a, 0x40010, r1, 0x2f10d000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x3a, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x73622a85, 0x7fffc, 0x0, 0x6d, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x2000}], 0xfffffffffffffff3, 0x0, 0x0}) 6m5.159538381s ago: executing program 4 (id=2760): r0 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x0, 0x100, 0x0) bind$inet6(r1, 0x0, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x4008010) 6m4.102952001s ago: executing program 4 (id=2763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="034888a8ae000500"], 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/12], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') pread64(r6, &(0x7f0000000600)=""/4093, 0x1049, 0xfffffffd) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200f66edd4c3bae0000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB="fdffffff00"/20, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="00000000feff0700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509f8ff00", @ANYRES32=r8], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x5, 0x3}, &(0x7f0000000240)=0x18) close_range(r0, 0xffffffffffffffff, 0x0) 6m3.381553784s ago: executing program 4 (id=2767): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 6m2.865148638s ago: executing program 4 (id=2770): r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xe1, 0x80) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x479}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r2, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000100)) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r6}, 0xc) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x22020400) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x5}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6m2.355028231s ago: executing program 4 (id=2772): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 5m54.63763228s ago: executing program 4 (id=2775): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 5m39.563919241s ago: executing program 37 (id=2775): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.937477553s ago: executing program 9 (id=4783): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989", @ANYRES32=r0], 0x1000f) 2.557718521s ago: executing program 9 (id=4789): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa5e06dd59957e3ec) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, 0x0) 2.225900847s ago: executing program 1 (id=4793): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r2, r2) write(r0, &(0x7f0000000400)='3', 0x1) 1.947517479s ago: executing program 9 (id=4797): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 1.893922882s ago: executing program 1 (id=4798): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x884) 1.746532779s ago: executing program 8 (id=4800): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd", 0x1f}], 0x2}}], 0x1, 0x2090) write(r0, &(0x7f0000001e00)="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", 0x37b) close(0x3) 1.669661253s ago: executing program 5 (id=4801): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1.595268896s ago: executing program 9 (id=4802): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x128}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="3c0033008000e100ffffffffffff0802110000005050505050500000deaf00000008"], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum64={0x2, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x1, 0x3, 0xa}, {0xa, 0x9, 0x2}, {0x2, 0x6, 0xa}, {0x7, 0x2, 0xc11}]}, @struct={0x4, 0x2, 0x0, 0x4, 0x0, 0xd, [{0x0, 0x3, 0x3}, {0x2, 0x0, 0x401}]}]}}, &(0x7f0000000600)=""/197, 0x96, 0xc5, 0x0, 0x92, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x15}, @map_fd={0x18, 0xa}, @generic={0x3, 0x2, 0x1, 0x3, 0x1832}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, @ldst={0x0, 0x1, 0x2, 0xb, 0x7, 0x30}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x84, &(0x7f0000000240)=""/132, 0x41100, 0xa, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x181f, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x2, 0x3, 0xc}], 0x10, 0x3}, 0x94) 1.560519907s ago: executing program 6 (id=4803): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x1000f) 1.49698732s ago: executing program 5 (id=4804): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x20132, 0xffffffffffffffff, 0x4c7ac000) r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(r1, &(0x7f0000000140)="b8c4", 0x2, 0xfff) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 1.339850437s ago: executing program 8 (id=4805): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff", 0x46}], 0x1) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='?'], 0xdd12}], 0x1}, 0x200400d1) 1.339506377s ago: executing program 1 (id=4806): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.265843361s ago: executing program 5 (id=4807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 1.248645602s ago: executing program 6 (id=4808): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r2, r2) write(r0, 0x0, 0x0) 1.205084814s ago: executing program 9 (id=4809): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa5e06dd59957e3ec) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, 0x0) 1.07193065s ago: executing program 8 (id=4810): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff00", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7, 0x5, 0xb4, 0x1, 0x80, 0x9, 0x81, 0x800}}}}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x9}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 948.137246ms ago: executing program 6 (id=4811): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 931.698907ms ago: executing program 1 (id=4812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 840.385281ms ago: executing program 5 (id=4813): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 767.248715ms ago: executing program 8 (id=4814): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x101, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) 635.339601ms ago: executing program 6 (id=4815): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0x0, r1, {0x7, 0x2d, 0x7fff, 0x1004000, 0xe, 0xc781, 0xff, 0x5850, 0x0, 0x0, 0x8, 0xffffffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000002400)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x2, 0xffff, 0x0, 0xf88, 0x0, 0x0, 0x2, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 575.816693ms ago: executing program 1 (id=4816): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 452.158609ms ago: executing program 8 (id=4817): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd", 0x1f}], 0x2}}], 0x1, 0x2090) write(r0, &(0x7f0000001e00)="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", 0x37b) close(0x3) 426.54583ms ago: executing program 5 (id=4818): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x1000f) 347.520314ms ago: executing program 6 (id=4819): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x128}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="3c0033008000e100ffffffffffff0802110000005050505050500000deaf00000008000064000348"], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x2}, @enum64={0x2, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x1, 0x3, 0xa}, {0xa, 0x9, 0x2}, {0x2, 0x6, 0xa}, {0x7, 0x2, 0xc11}]}, @struct={0x4, 0x2, 0x0, 0x4, 0x0, 0xd, [{0x0, 0x3, 0x3}, {0x2, 0x0, 0x401}]}]}}, &(0x7f0000000600)=""/197, 0x96, 0xc5, 0x0, 0x92, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x15}, @map_fd={0x18, 0xa}, @generic={0x3, 0x2, 0x1, 0x3, 0x1832}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, @ldst={0x0, 0x1, 0x2, 0xb, 0x7, 0x30}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x84, &(0x7f0000000240)=""/132, 0x41100, 0xa, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x181f, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x2, 0x3, 0xc}], 0x10, 0x3}, 0x94) 252.574579ms ago: executing program 1 (id=4820): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff", 0x46}], 0x1) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='?'], 0xdd12}], 0x1}, 0x200400d1) 252.027399ms ago: executing program 9 (id=4821): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x884) 89.204696ms ago: executing program 5 (id=4822): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 68.509997ms ago: executing program 8 (id=4823): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x20132, 0xffffffffffffffff, 0x4c7ac000) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwrite64(r1, &(0x7f0000000140)="b8c4", 0x2, 0xfff) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 0s ago: executing program 6 (id=4824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered blocking state [ 1112.930326][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.565418][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1113.946210][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1113.972106][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1113.991291][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.998593][ T4746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.105294][T15252] CIFS: Attempting to mount \\127.0.0.1\share [ 1114.128340][T15252] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1114.153020][T15252] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1114.216781][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1114.228591][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1114.373455][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1114.383163][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1114.392596][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1114.410608][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1114.420255][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1114.432985][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1114.746312][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1114.764683][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1114.774831][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1114.784234][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1114.795586][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1114.826575][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1114.840514][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1114.865137][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1114.885053][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1114.928062][T14832] device veth0_vlan entered promiscuous mode [ 1114.958263][T14906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1115.012550][T14832] device veth1_vlan entered promiscuous mode [ 1115.275561][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1115.333733][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1115.376984][T14832] device veth0_macvtap entered promiscuous mode [ 1115.709239][T14832] device veth1_macvtap entered promiscuous mode [ 1115.742754][T14937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1116.069776][T15288] CIFS: Attempting to mount \\127.0.0.1\share [ 1116.080488][T15288] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1116.095455][T15288] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1116.130035][T14937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1116.173372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1116.182317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1116.301783][T14937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1116.369039][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.405984][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.455649][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.487832][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.502082][T15301] tmpfs: Unknown parameter 'quota' [ 1116.538056][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.591119][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.609071][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.625464][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.638189][T14832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.649871][T14937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1116.686267][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1116.717621][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1116.749310][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.799561][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.824547][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.844631][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.870027][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.899466][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.912514][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.923626][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.939148][T14832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.022976][ T4333] device hsr_slave_0 left promiscuous mode [ 1117.068096][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.080297][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.095684][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.103980][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.118391][ T4333] device bridge_slave_1 left promiscuous mode [ 1117.133391][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.163956][ T4333] device bridge_slave_0 left promiscuous mode [ 1117.175400][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.245135][ T4333] device hsr_slave_0 left promiscuous mode [ 1117.284728][ T4333] device hsr_slave_1 left promiscuous mode [ 1117.359617][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.400596][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.422641][ T4333] device bridge_slave_1 left promiscuous mode [ 1117.436499][T15321] tmpfs: Unknown parameter 'quota' [ 1117.469163][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.493368][ T4333] device bridge_slave_0 left promiscuous mode [ 1117.517441][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.602434][ T4333] device hsr_slave_0 left promiscuous mode [ 1117.673705][ T4333] device hsr_slave_1 left promiscuous mode [ 1117.694935][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.703038][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.712182][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.719934][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.741873][ T4333] device bridge_slave_1 left promiscuous mode [ 1117.748285][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.786137][ T4333] device bridge_slave_0 left promiscuous mode [ 1117.792614][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.805666][T15329] CIFS: Attempting to mount \\127.0.0.1\share [ 1117.832361][T15329] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1117.865981][T15329] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1117.959167][ T4333] device veth1_macvtap left promiscuous mode [ 1117.967840][ T4333] device veth0_macvtap left promiscuous mode [ 1117.981905][ T4333] device veth0_vlan left promiscuous mode [ 1118.027307][ T4333] device veth1_macvtap left promiscuous mode [ 1118.065187][ T4333] device veth0_macvtap left promiscuous mode [ 1118.075475][ T4333] device veth0_vlan left promiscuous mode [ 1118.502726][ T4333] bond5 (unregistering): Released all slaves [ 1118.534321][ T4333] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1118.577017][ T4333] bond4 (unregistering): Released all slaves [ 1118.635808][ T4333] bond3 (unregistering): Released all slaves [ 1118.688625][ T4333] bond2 (unregistering): Released all slaves [ 1118.734381][ T4333] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1118.809557][ T4333] bond1 (unregistering): Released all slaves [ 1119.924116][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 1120.026084][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 1120.098373][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.197664][T15367] CIFS: Attempting to mount \\127.0.0.1\share [ 1120.205128][T15367] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1120.213405][T15367] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1120.263403][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.742316][ T4333] bond0 (unregistering): (slave team0): Releasing backup interface [ 1120.751930][T15065] infiniband syz1: ib_query_port failed (-19) [ 1120.803365][ T4333] bond0 (unregistering): Released all slaves [ 1121.359343][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 1121.429630][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 1121.494004][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.556983][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.861369][ T4333] bond0 (unregistering): Released all slaves [ 1122.647932][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 1122.708956][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 1122.733754][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.740202][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.785428][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.854325][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.361848][ T4333] bond0 (unregistering): Released all slaves [ 1123.512297][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.522132][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1123.533668][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1123.547750][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1123.583316][T14832] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.596782][T14832] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.607624][T14832] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.618032][T14832] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.646015][ T4359] bond0 speed is unknown, defaulting to 1000 [ 1123.674460][T14906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.021494][ T4745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.045218][ T4745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.113501][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1124.155065][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.174537][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.186912][T14937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.293966][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1124.389383][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1124.422021][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1124.505914][T14937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.628031][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1124.663535][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1124.727856][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.735145][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.852269][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1124.872123][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1124.913455][T15395] syz.9.2755: attempt to access beyond end of device [ 1124.913455][T15395] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1124.941990][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1124.971647][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.979436][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.064073][T15401] tmpfs: Unknown parameter 'quota' [ 1125.815259][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1125.836404][T15400] tmpfs: Unknown parameter 'quota' [ 1126.023313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1126.059098][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1126.131124][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1126.152113][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1126.195751][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1126.207004][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1126.231335][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1126.259157][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1126.305943][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1126.320520][T15413] tmpfs: Unknown parameter 'quota' [ 1126.339105][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1126.394507][T14937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1126.412605][T15417] CIFS: Attempting to mount \\127.0.0.1\share [ 1126.422950][T15417] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1126.450189][T15417] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1127.110961][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1127.224249][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1127.884083][T15439] CIFS: Attempting to mount \\127.0.0.1\share [ 1128.367497][T14906] device veth0_vlan entered promiscuous mode [ 1128.397688][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1128.408256][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1128.431924][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1128.456357][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1128.535715][T14906] device veth1_vlan entered promiscuous mode [ 1128.633025][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1128.650444][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1128.712389][T14906] device veth0_macvtap entered promiscuous mode [ 1128.777495][T15439] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1128.789394][T14906] device veth1_macvtap entered promiscuous mode [ 1128.943136][T15452] tmpfs: Unknown parameter 'quota' [ 1129.020118][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.147880][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.193853][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.206942][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.240930][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.275941][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.307882][T14906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.362715][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1129.372112][T15460] syz.9.2919: attempt to access beyond end of device [ 1129.372112][T15460] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1129.386307][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1129.417091][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1129.515493][T15465] tmpfs: Unknown parameter 'quota' [ 1130.302622][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1130.341522][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.402211][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.412428][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.423180][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.433622][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.461119][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.523868][T14906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.548340][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1130.586251][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1130.625708][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1130.646996][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1130.660468][T15472] syz.9.2922: attempt to access beyond end of device [ 1130.660468][T15472] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1130.670329][T15474] CIFS: Attempting to mount \\127.0.0.1\share [ 1130.683945][T15474] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1130.693115][T14906] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.702025][T15474] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1130.716474][T14906] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.755825][T14906] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.782053][T14906] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.387390][T14937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.880487][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1131.932630][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1132.076217][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1132.089077][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1132.118568][T14937] device veth0_vlan entered promiscuous mode [ 1132.133224][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1132.164589][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1132.227089][T14937] device veth1_vlan entered promiscuous mode [ 1132.276889][ T4745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.294065][ T4745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.387992][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1132.412003][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1132.459842][ T4745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.478262][ T4745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.524774][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1132.557659][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1132.637441][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1132.655414][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1132.702764][T14937] device veth0_macvtap entered promiscuous mode [ 1132.745973][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1132.785052][T14937] device veth1_macvtap entered promiscuous mode [ 1132.922595][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.977691][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.020619][T15494] tmpfs: Unknown parameter 'quota' [ 1133.037020][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.095293][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.136158][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.156543][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.211066][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.246137][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.073064][T14937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.181429][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1134.232152][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1134.469017][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.525732][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.539338][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.567243][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.624366][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.664737][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.699280][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.719814][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.737441][T14937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.754578][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1134.785763][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1134.785778][T15514] CIFS: Attempting to mount \\127.0.0.1\share [ 1134.806469][T15514] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1134.870667][T15514] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1134.882541][T14937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.896822][T14937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.941008][T14937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.990551][T14937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.018060][T15522] syz.9.2934: attempt to access beyond end of device [ 1135.018060][T15522] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1135.321935][T15527] syz.8.2935: attempt to access beyond end of device [ 1135.321935][T15527] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1135.444751][T15528] tmpfs: Unknown parameter 'quota' [ 1137.595101][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.677004][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.786780][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1137.969080][ T9052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.086738][ T9052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.122909][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1142.477678][T15575] CIFS: Attempting to mount \\127.0.0.1\share [ 1142.502342][T15575] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1142.517357][T15576] syz.1.2786: attempt to access beyond end of device [ 1142.517357][T15576] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1142.520554][T15575] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1142.563171][T15579] syz.9.2947: attempt to access beyond end of device [ 1142.563171][T15579] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1142.661379][T15583] tmpfs: Unknown parameter 'quota' [ 1143.497125][T15582] tmpfs: Unknown parameter 'quota' [ 1143.927842][T15590] syz.9.2949: attempt to access beyond end of device [ 1143.927842][T15590] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1145.198477][T15603] loop8: detected capacity change from 0 to 164 [ 1145.388894][T15609] syz.1.2953: attempt to access beyond end of device [ 1145.388894][T15609] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1145.405416][T15611] CIFS: Attempting to mount \\127.0.0.1\share [ 1147.187909][T15611] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1148.481182][T15639] syz.1.2960: attempt to access beyond end of device [ 1148.481182][T15639] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1148.755043][T15645] CIFS: Attempting to mount \\127.0.0.1\share [ 1148.768278][T15645] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1148.777062][T15646] syz.9.2961: attempt to access beyond end of device [ 1148.777062][T15646] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1148.790584][T15645] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1148.875564][T15650] tmpfs: Unknown parameter 'quota' [ 1150.672557][T15669] syz.9.2967: attempt to access beyond end of device [ 1150.672557][T15669] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1151.552187][T15680] tmpfs: Unknown parameter 'quota' [ 1152.166907][T15688] loop9: detected capacity change from 0 to 164 [ 1152.285464][T15691] tmpfs: Unknown parameter 'quota' [ 1152.797983][T15706] CIFS: Attempting to mount \\127.0.0.1\share [ 1153.759896][T15706] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1153.800384][T15706] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1154.062826][T15718] syz.1.2979: attempt to access beyond end of device [ 1154.062826][T15718] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1154.143011][T15723] syz.9.2981: attempt to access beyond end of device [ 1154.143011][T15723] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1156.718386][T15746] syz.8.2986: attempt to access beyond end of device [ 1156.718386][T15746] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1156.809866][T15746] tmpfs: Unknown parameter 'quota' [ 1156.882405][T15752] syz.9.2987: attempt to access beyond end of device [ 1156.882405][T15752] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1158.874900][T15776] syz.9.2992: attempt to access beyond end of device [ 1158.874900][T15776] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1158.980603][T15770] tmpfs: Unknown parameter 'quota' [ 1159.023420][T15779] CIFS: Attempting to mount \\127.0.0.1\share [ 1159.111431][T15779] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1159.148091][T15779] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1159.264487][T15788] syz.9.2995: attempt to access beyond end of device [ 1159.264487][T15788] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1160.208644][T15788] tmpfs: Unknown parameter 'quota' [ 1160.441047][T15796] loop8: detected capacity change from 0 to 164 [ 1162.673830][T15827] syz.9.3004: attempt to access beyond end of device [ 1162.673830][T15827] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1163.594737][T15830] tmpfs: Unknown parameter 'quota' [ 1167.149622][T15861] syz.1.3011: attempt to access beyond end of device [ 1167.149622][T15861] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1168.692465][T15861] tmpfs: Unknown parameter 'quota' [ 1169.207795][T15871] tmpfs: Unknown parameter 'quota' [ 1173.134967][T15910] syz.1.3025: attempt to access beyond end of device [ 1173.134967][T15910] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1173.346624][T15918] tmpfs: Unknown parameter 'quota' [ 1174.462133][T15930] tmpfs: Unknown parameter 'quota' [ 1177.897890][T15955] CIFS: Attempting to mount \\127.0.0.1\share [ 1179.133594][T15966] loop9: detected capacity change from 0 to 164 [ 1179.998755][T15955] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1180.291897][T15982] loop9: detected capacity change from 0 to 164 [ 1181.380607][T15992] syz.8.3046: attempt to access beyond end of device [ 1181.380607][T15992] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1181.542010][T15995] tmpfs: Unknown parameter 'quota' [ 1181.797193][T16004] tmpfs: Unknown parameter 'quota' [ 1182.046684][T16009] syz.9.3050: attempt to access beyond end of device [ 1182.046684][T16009] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1182.130356][T16010] tmpfs: Unknown parameter 'quota' [ 1182.304940][T16018] tmpfs: Unknown parameter 'quota' [ 1182.487422][T16022] syz.1.3055: attempt to access beyond end of device [ 1182.487422][T16022] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1182.713384][T16024] tmpfs: Unknown parameter 'quota' [ 1182.740056][T16025] syz.9.3054: attempt to access beyond end of device [ 1182.740056][T16025] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1182.801916][T16028] CIFS: Attempting to mount \\127.0.0.1\share [ 1182.837289][T16025] tmpfs: Unknown parameter 'quota' [ 1183.333934][T16036] CIFS mount error: No usable UNC path provided in device string! [ 1183.333934][T16036] [ 1183.372179][T16036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1183.455961][T16042] syz.9.3060: attempt to access beyond end of device [ 1183.455961][T16042] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1184.164723][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.171399][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.440102][T16028] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1184.484092][T16052] tmpfs: Unknown parameter 'quota' [ 1184.508819][T16042] tmpfs: Unknown parameter 'quota' [ 1184.899538][T16063] syz.8.3063: attempt to access beyond end of device [ 1184.899538][T16063] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1184.948999][T16071] syz.1.3067: attempt to access beyond end of device [ 1184.948999][T16071] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1186.146669][T16087] tmpfs: Unknown parameter 'quota' [ 1186.485078][T16093] loop8: detected capacity change from 0 to 164 [ 1186.545466][T16092] loop1: detected capacity change from 0 to 164 [ 1186.643224][T16104] CIFS mount error: No usable UNC path provided in device string! [ 1186.643224][T16104] [ 1186.653687][T16104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1186.985113][T16110] CIFS: Attempting to mount \\127.0.0.1\share [ 1187.472460][T16119] syz.1.3076: attempt to access beyond end of device [ 1187.472460][T16119] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1187.746306][T16124] tmpfs: Unknown parameter 'quota' [ 1187.801132][T16110] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1187.837735][T16126] CIFS: Attempting to mount \\127.0.0.1\share [ 1188.038707][T16132] syz.9.3078: attempt to access beyond end of device [ 1188.038707][T16132] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1188.245179][T16132] tmpfs: Unknown parameter 'quota' [ 1188.619104][T16126] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1189.606895][T16156] syz.8.3084: attempt to access beyond end of device [ 1189.606895][T16156] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1189.785278][T16158] tmpfs: Unknown parameter 'quota' [ 1190.202056][T16171] CIFS mount error: No usable UNC path provided in device string! [ 1190.202056][T16171] [ 1190.233577][T16172] syz.8.3089: attempt to access beyond end of device [ 1190.233577][T16172] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1190.240447][T16171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1190.355439][T16178] tmpfs: Unknown parameter 'quota' [ 1190.817541][T16189] syz.8.3090: attempt to access beyond end of device [ 1190.817541][T16189] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1190.967590][T16192] tmpfs: Unknown parameter 'quota' [ 1191.360903][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 1193.814511][T16206] syz.9.3094: attempt to access beyond end of device [ 1193.814511][T16206] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1194.119218][T16214] tmpfs: Unknown parameter 'quota' [ 1194.699579][T16227] syz.1.3097: attempt to access beyond end of device [ 1194.699579][T16227] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1194.865368][T16230] tmpfs: Unknown parameter 'quota' [ 1195.723797][T16240] syz.8.3101: attempt to access beyond end of device [ 1195.723797][T16240] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1195.806919][T16241] tmpfs: Unknown parameter 'quota' [ 1196.799634][T16246] tmpfs: Unknown parameter 'quota' [ 1196.996256][T16253] syz.1.3104: attempt to access beyond end of device [ 1196.996256][T16253] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1197.230223][T16253] tmpfs: Unknown parameter 'quota' [ 1198.168575][T16274] syz.1.3108: attempt to access beyond end of device [ 1198.168575][T16274] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1198.795670][T16274] tmpfs: Unknown parameter 'quota' [ 1198.826455][T16279] tmpfs: Unknown parameter 'quota' [ 1199.376850][T16292] syz.8.3114: attempt to access beyond end of device [ 1199.376850][T16292] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1199.443770][T16293] tmpfs: Unknown parameter 'quota' [ 1199.512684][T16294] tmpfs: Unknown parameter 'quota' [ 1201.037068][T16309] syz.8.3116: attempt to access beyond end of device [ 1201.037068][T16309] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1203.091382][T16314] tmpfs: Unknown parameter 'quota' [ 1203.101861][T16316] syz.1.3117: attempt to access beyond end of device [ 1203.101861][T16316] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1203.647408][T16324] CIFS: Attempting to mount \\127.0.0.1\share [ 1204.149048][T16333] syz.8.3121: attempt to access beyond end of device [ 1204.149048][T16333] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1204.781866][T16335] tmpfs: Unknown parameter 'quota' [ 1204.802749][T16342] syz.9.3122: attempt to access beyond end of device [ 1204.802749][T16342] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1206.374653][T16341] tmpfs: Unknown parameter 'quota' [ 1206.625808][T16342] tmpfs: Unknown parameter 'quota' [ 1206.967012][T16324] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1207.404259][T16361] syz.9.3126: attempt to access beyond end of device [ 1207.404259][T16361] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1207.452081][T16361] tmpfs: Unknown parameter 'quota' [ 1207.531087][T16365] syz.8.3127: attempt to access beyond end of device [ 1207.531087][T16365] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1207.589861][T16369] syz.1.3128: attempt to access beyond end of device [ 1207.589861][T16369] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1207.617030][T16365] tmpfs: Unknown parameter 'quota' [ 1207.712969][T16372] tmpfs: Unknown parameter 'quota' [ 1208.918407][T16386] tmpfs: Unknown parameter 'quota' [ 1209.317893][T16398] syz.9.3134: attempt to access beyond end of device [ 1209.317893][T16398] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1209.490176][T16401] tmpfs: Unknown parameter 'quota' [ 1210.072760][T16408] syz.1.3138: attempt to access beyond end of device [ 1210.072760][T16408] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1210.159102][T16409] tmpfs: Unknown parameter 'quota' [ 1211.355592][T16415] syz.9.3139: attempt to access beyond end of device [ 1211.355592][T16415] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1211.433130][T16416] loop1: detected capacity change from 0 to 164 [ 1211.778755][T16419] tmpfs: Unknown parameter 'quota' [ 1211.914414][T16415] tmpfs: Unknown parameter 'quota' [ 1212.010906][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 1213.171740][T16423] tmpfs: Unknown parameter 'quota' [ 1214.194290][T16439] tmpfs: Unknown parameter 'quota' [ 1214.546740][T16448] syz.1.3146: attempt to access beyond end of device [ 1214.546740][T16448] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1214.852417][T16454] syz.8.3150: attempt to access beyond end of device [ 1214.852417][T16454] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1215.041921][T16456] tmpfs: Unknown parameter 'quota' [ 1215.048711][T16451] tmpfs: Unknown parameter 'quota' [ 1215.818245][T16474] tmpfs: Unknown parameter 'quota' [ 1216.784382][T16497] tmpfs: Unknown parameter 'quota' [ 1217.088812][T16505] syz.9.3159: attempt to access beyond end of device [ 1217.088812][T16505] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1217.102527][T16500] loop1: detected capacity change from 0 to 164 [ 1217.223962][T16505] tmpfs: Unknown parameter 'quota' [ 1218.087762][T16511] tmpfs: Unknown parameter 'quota' [ 1218.425066][T16524] tmpfs: Unknown parameter 'quota' [ 1218.686448][T16532] syz.8.3165: attempt to access beyond end of device [ 1218.686448][T16532] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1218.749635][T16531] syz.1.3163: attempt to access beyond end of device [ 1218.749635][T16531] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1218.831322][T16535] tmpfs: Unknown parameter 'quota' [ 1219.637212][T16534] tmpfs: Unknown parameter 'quota' [ 1219.910104][T16538] tmpfs: Unknown parameter 'quota' [ 1220.274223][T16550] syz.8.3169: attempt to access beyond end of device [ 1220.274223][T16550] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1220.350277][T16551] tmpfs: Unknown parameter 'quota' [ 1221.297991][T16555] syz.1.3171: attempt to access beyond end of device [ 1221.297991][T16555] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1221.397548][T16556] tmpfs: Unknown parameter 'quota' [ 1222.081020][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 1222.299067][T16553] tmpfs: Unknown parameter 'quota' [ 1223.384784][T16565] syz.1.3173: attempt to access beyond end of device [ 1223.384784][T16565] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1223.438227][T16563] tmpfs: Unknown parameter 'quota' [ 1223.631867][T16569] tmpfs: Unknown parameter 'quota' [ 1223.815303][T16580] tmpfs: Unknown parameter 'quota' [ 1224.117487][T16586] syz.1.3178: attempt to access beyond end of device [ 1224.117487][T16586] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1224.240961][T16588] tmpfs: Unknown parameter 'quota' [ 1225.465011][T16595] syz.1.3180: attempt to access beyond end of device [ 1225.465011][T16595] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1225.493215][T16598] tmpfs: Unknown parameter 'quota' [ 1225.546825][T16603] loop9: detected capacity change from 0 to 164 [ 1225.636150][T16606] tmpfs: Unknown parameter 'quota' [ 1226.467393][T16607] tmpfs: Unknown parameter 'quota' [ 1230.909637][T16624] syz.8.3188: attempt to access beyond end of device [ 1230.909637][T16624] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1232.042022][T16633] tmpfs: Unknown parameter 'quota' [ 1232.434679][T16645] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1232.474141][T16646] syz.9.3194: attempt to access beyond end of device [ 1232.474141][T16646] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1232.538341][T16645] CIFS: Attempting to mount \\127.0.0.1\share [ 1232.624626][T16645] CIFS: VFS: No username specified [ 1232.642179][T16649] tmpfs: Unknown parameter 'quota' [ 1233.059360][T16657] syz.8.3195: attempt to access beyond end of device [ 1233.059360][T16657] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1234.210313][T16659] tmpfs: Unknown parameter 'quota' [ 1234.658739][T16666] loop9: detected capacity change from 0 to 164 [ 1236.041593][T16679] tmpfs: Unknown parameter 'quota' [ 1236.479168][T16691] syz.1.3204: attempt to access beyond end of device [ 1236.479168][T16691] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1236.602829][T16697] tmpfs: Unknown parameter 'quota' [ 1238.028211][T16720] syz.1.3209: attempt to access beyond end of device [ 1238.028211][T16720] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1238.153454][T16720] tmpfs: Unknown parameter 'quota' [ 1238.998182][T16725] syz.9.3210: attempt to access beyond end of device [ 1238.998182][T16725] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1239.089194][T16726] tmpfs: Unknown parameter 'quota' [ 1239.985987][T16731] CIFS: Attempting to mount \\127.0.0.1\share [ 1239.992319][T16731] CIFS: VFS: No username specified [ 1240.927447][T16753] syz.8.3217: attempt to access beyond end of device [ 1240.927447][T16753] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1241.016608][T16756] tmpfs: Unknown parameter 'quota' [ 1241.905454][T16763] loop9: detected capacity change from 0 to 164 [ 1242.195106][T16765] syz.1.3220: attempt to access beyond end of device [ 1242.195106][T16765] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1242.348093][T16765] tmpfs: Unknown parameter 'quota' [ 1243.457201][T16776] syz.9.3224: attempt to access beyond end of device [ 1243.457201][T16776] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1243.484264][T16774] syz.1.3222: attempt to access beyond end of device [ 1243.484264][T16774] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1244.586356][T16774] tmpfs: Unknown parameter 'quota' [ 1245.092685][T16791] syz.9.3225: attempt to access beyond end of device [ 1245.092685][T16791] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1245.113166][T16789] CIFS: Attempting to mount \\127.0.0.1\share [ 1245.137116][T16789] CIFS: VFS: No username specified [ 1245.410361][T16798] tmpfs: Unknown parameter 'quota' [ 1245.477191][T16796] tmpfs: Unknown parameter 'quota' [ 1245.528414][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1245.543365][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1245.552490][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1245.560658][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1245.570228][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1245.578836][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1245.617285][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.623820][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.916024][T16809] tmpfs: Unknown parameter 'quota' [ 1246.007437][T16814] syz.9.3230: attempt to access beyond end of device [ 1246.007437][T16814] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1246.177055][T16815] tmpfs: Unknown parameter 'quota' [ 1246.914881][T16813] syz.8.3229: attempt to access beyond end of device [ 1246.914881][T16813] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1246.967082][T16820] syz.1.3231: attempt to access beyond end of device [ 1246.967082][T16820] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1247.137427][T16816] tmpfs: Unknown parameter 'quota' [ 1247.680964][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 1249.274602][T16846] loop9: detected capacity change from 0 to 164 [ 1249.678114][T16853] tmpfs: Unknown parameter 'quota' [ 1249.748165][T16800] chnl_net:caif_netlink_parms(): no params data found [ 1249.761159][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 1250.079799][T16861] syz.8.3238: attempt to access beyond end of device [ 1250.079799][T16861] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1250.113078][ T4384] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.137235][T16863] CIFS: Attempting to mount \\127.0.0.1\share [ 1251.059479][T16870] syz.9.3241: attempt to access beyond end of device [ 1251.059479][T16870] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1251.332093][T16872] tmpfs: Unknown parameter 'quota' [ 1251.363448][T16863] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1251.769221][ T4384] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.840890][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 1251.842101][T16884] syz.1.3243: attempt to access beyond end of device [ 1251.842101][T16884] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1251.881796][T16879] tmpfs: Unknown parameter 'quota' [ 1251.976224][T16889] tmpfs: Unknown parameter 'quota' [ 1252.791214][T16893] syz.8.3245: attempt to access beyond end of device [ 1252.791214][T16893] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1252.936137][T16895] tmpfs: Unknown parameter 'quota' [ 1253.921083][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 1254.997566][ T4384] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.133328][T16901] syz.8.3247: attempt to access beyond end of device [ 1255.133328][T16901] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1256.438279][ T4384] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.488163][T16913] syz.1.3249: attempt to access beyond end of device [ 1256.488163][T16913] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1256.637550][T16915] tmpfs: Unknown parameter 'quota' [ 1257.573310][T16800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.580498][T16800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.661288][T16800] device bridge_slave_0 entered promiscuous mode [ 1257.741945][T16800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.754546][T16800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.855971][T16800] device bridge_slave_1 entered promiscuous mode [ 1258.118419][T16926] CIFS: Attempting to mount \\127.0.0.1\share [ 1258.262854][T16800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.467904][T16800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.543655][T16926] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1259.983747][T16940] syz.9.3255: attempt to access beyond end of device [ 1259.983747][T16940] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1260.075398][T16800] team0: Port device team_slave_0 added [ 1261.034096][T16800] team0: Port device team_slave_1 added [ 1261.241068][T16947] loop1: detected capacity change from 0 to 164 [ 1261.400517][T16951] loop8: detected capacity change from 0 to 164 [ 1261.429740][T16800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.483142][T16800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.678903][T16800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.684094][T16956] tmpfs: Unknown parameter 'quota' [ 1261.855368][T16962] syz.9.3260: attempt to access beyond end of device [ 1261.855368][T16962] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1261.875515][T16800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.906507][T16800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.007983][T16963] tmpfs: Unknown parameter 'quota' [ 1262.595907][T16800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.993004][T16966] tmpfs: Unknown parameter 'quota' [ 1263.322243][T16974] syz.1.3263: attempt to access beyond end of device [ 1263.322243][T16974] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1263.712014][T16976] tmpfs: Unknown parameter 'quota' [ 1264.042250][T16983] tmpfs: Unknown parameter 'quota' [ 1264.125150][T16800] device hsr_slave_0 entered promiscuous mode [ 1264.152215][T16800] device hsr_slave_1 entered promiscuous mode [ 1264.186825][T16986] syz.9.3266: attempt to access beyond end of device [ 1264.186825][T16986] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1265.474403][T16997] syz.1.3268: attempt to access beyond end of device [ 1265.474403][T16997] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1265.626342][T16999] tmpfs: Unknown parameter 'quota' [ 1266.651553][T17003] CIFS: Attempting to mount \\127.0.0.1\share [ 1266.957966][T17011] loop9: detected capacity change from 0 to 32768 [ 1266.965398][T17011] (syz.9.3270,17011,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "" or missing value [ 1266.976542][T17011] (syz.9.3270,17011,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1267.468287][T16931] I/O error, dev loop9, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1269.076325][T17003] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1269.102542][T17012] CIFS: Attempting to mount \\127.0.0.1\share [ 1269.149788][T17012] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1269.316729][T17012] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1269.529509][ T4384] device hsr_slave_0 left promiscuous mode [ 1269.571782][ T4384] device hsr_slave_1 left promiscuous mode [ 1269.619196][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.630613][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.771625][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.791006][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.821071][T17037] CIFS: Attempting to mount \\127.0.0.1\share [ 1269.860297][ T4384] batman_adv: batadv0: Removing interface: bridge1 [ 1269.876790][T17038] syz.1.3275: attempt to access beyond end of device [ 1269.876790][T17038] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1269.892786][ T4384] device bridge_slave_1 left promiscuous mode [ 1269.899191][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.097024][T17040] loop8: detected capacity change from 0 to 32768 [ 1270.104601][T17040] (syz.8.3276,17040,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "" or missing value [ 1270.115711][T17040] (syz.8.3276,17040,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1270.210992][T16931] I/O error, dev loop8, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1270.879537][ T4384] device bridge_slave_0 left promiscuous mode [ 1271.051188][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.164209][T17039] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=16450 len=256) [ 1271.182405][T17037] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=16450 len=256) [ 1271.191873][T17039] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0xc0 [ 1271.236666][T17037] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 1272.311376][T17037] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1272.419475][ T4384] device veth1_macvtap left promiscuous mode [ 1272.481781][ T4384] device veth0_macvtap left promiscuous mode [ 1272.498420][ T4384] device veth0_vlan left promiscuous mode [ 1272.542762][T17063] syz.9.3281: attempt to access beyond end of device [ 1272.542762][T17063] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1272.699074][T17067] tmpfs: Unknown parameter 'quota' [ 1273.534524][T17065] tmpfs: Unknown parameter 'quota' [ 1273.765332][T17071] loop9: detected capacity change from 0 to 164 [ 1273.782186][T17073] syz.1.3283: attempt to access beyond end of device [ 1273.782186][T17073] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1273.835384][T17075] tmpfs: Unknown parameter 'quota' [ 1276.116083][ T4384] bond5 (unregistering): Released all slaves [ 1276.749581][ T4384] bond4 (unregistering): Released all slaves [ 1276.896037][ T4384] bond3 (unregistering): (slave bridge4): Releasing active interface [ 1276.966485][ T4384] bond3 (unregistering): Released all slaves [ 1277.096163][ T4384] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1277.213493][ T4384] bond2 (unregistering): Released all slaves [ 1277.279515][T17107] loop1: detected capacity change from 0 to 164 [ 1277.334415][ T4384] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1277.455436][ T4384] bond1 (unregistering): Released all slaves [ 1278.727400][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 1278.799240][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 1278.877961][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.978398][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.749262][ T4384] bond0 (unregistering): Released all slaves [ 1280.422785][T17128] syz.1.3301: attempt to access beyond end of device [ 1280.422785][T17128] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1281.771826][T17141] syz.9.3305: attempt to access beyond end of device [ 1281.771826][T17141] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1281.899655][T17143] tmpfs: Unknown parameter 'quota' [ 1282.125646][T17147] ip_tables: iptables: counters copy to user failed while replacing table [ 1282.877142][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3308'. [ 1283.070000][T16800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1283.103311][T16800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1283.186169][T16800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1283.237340][T16800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1283.673338][T16800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.736681][T17175] syz.1.3316: attempt to access beyond end of device [ 1283.736681][T17175] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1283.775454][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1283.800000][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1283.907931][T16800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.697932][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.718277][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.797795][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.805104][ T4517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.864542][T17181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1284.883857][T17181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1284.899540][T17181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1284.919276][T17181] device bridge_slave_0 left promiscuous mode [ 1284.949009][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.988655][T17181] device bridge_slave_1 left promiscuous mode [ 1284.999306][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.028692][T17181] bond0: (slave bond_slave_0): Releasing backup interface [ 1285.082642][T17181] bond0: (slave bond_slave_1): Releasing backup interface [ 1285.162274][T17181] team0: Port device team_slave_0 removed [ 1285.184960][T17181] team0: Port device team_slave_1 removed [ 1285.200268][T17181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.209016][T17181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.224079][T17181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.232169][T17181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.263228][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1285.308755][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1285.318061][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1285.349871][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.357178][ T4517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.372151][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1285.489228][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1285.509362][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1285.556953][T17197] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 1285.590525][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1285.637226][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1285.680341][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1285.729089][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1285.745036][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1285.758599][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1285.790904][T16800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1285.809471][T16800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1285.829413][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1285.856306][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1287.446982][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3336'. [ 1287.565388][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1287.575064][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1287.605719][T16800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.813696][T17242] xt_nfacct: accounting object `s' does not exist [ 1288.098097][T17249] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1288.566265][T17265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1288.596232][T17265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1288.623374][T17267] syz.9.3345: attempt to access beyond end of device [ 1288.623374][T17267] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1288.666519][T17265] device geneve2 entered promiscuous mode [ 1290.694005][T17281] team0: No ports can be present during mode change [ 1290.729055][T17284] syz.8.3347: attempt to access beyond end of device [ 1290.729055][T17284] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1291.132811][T17292] syz.1.3350: attempt to access beyond end of device [ 1291.132811][T17292] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1291.152376][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1291.233455][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1291.559448][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1291.580188][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1291.593394][T17307] netlink: 'syz.5.3353': attribute type 2 has an invalid length. [ 1291.625461][T16800] device veth0_vlan entered promiscuous mode [ 1291.693893][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1291.706331][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1291.759457][T16800] device veth1_vlan entered promiscuous mode [ 1291.806402][T17302] can: request_module (can-proto-0) failed. [ 1291.930405][T17313] ip_tables: iptables: counters copy to user failed while replacing table [ 1291.953594][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1292.050437][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1292.059269][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1292.080026][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1292.113335][T16800] device veth0_macvtap entered promiscuous mode [ 1292.152400][T17317] loop8: detected capacity change from 0 to 164 [ 1292.172987][T16800] device veth1_macvtap entered promiscuous mode [ 1292.280007][T16800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.343242][T16800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.399369][T16800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.436817][T17323] syz.9.3360: attempt to access beyond end of device [ 1292.436817][T17323] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1293.350885][T16800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.462663][T17326] CIFS: Attempting to mount \\127.0.0.1\share [ 1293.499749][T16800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.568930][T16800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.730870][T17328] loop1: detected capacity change from 0 to 32768 [ 1293.739755][T17328] (syz.1.3361,17328,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "" or missing value [ 1293.751118][T17328] (syz.1.3361,17328,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1293.776088][T16800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.806444][T16800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.890923][T16931] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1293.971013][T16800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.002174][T17336] syz.8.3363: attempt to access beyond end of device [ 1294.002174][T17336] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1294.053033][T16800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.208417][T17338] tmpfs: Unknown parameter 'quota' [ 1294.324340][T16800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.340863][T16800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.380704][T16800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.406949][T17342] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1294.425517][T16800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.447230][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1294.477924][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1294.525701][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1294.596024][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1294.634916][T16800] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.673067][T17326] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1294.686507][T16800] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.711693][T16800] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.720510][T16800] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.141980][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.149921][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.213781][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1295.319065][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.335589][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.362444][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1295.672179][T17375] netlink: 'syz.8.3373': attribute type 5 has an invalid length. [ 1295.805223][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3375'. [ 1296.118374][T17391] Bluetooth: MGMT ver 1.22 [ 1296.871117][T17409] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1299.233882][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1299.245944][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1299.255286][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1299.264966][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1299.272581][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1299.280031][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1299.618041][T17440] ip_tables: iptables: counters copy to user failed while replacing table [ 1300.009304][T17453] syz.1.3398: attempt to access beyond end of device [ 1300.009304][T17453] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1300.078646][T17435] chnl_net:caif_netlink_parms(): no params data found [ 1301.036027][T17459] CIFS: Attempting to mount \\127.0.0.1\share [ 1301.270977][T17461] loop8: detected capacity change from 0 to 32768 [ 1301.279240][T17461] (syz.8.3399,17461,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "" or missing value [ 1301.290876][T17461] (syz.8.3399,17461,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1301.361181][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 1301.388895][T17135] I/O error, dev loop8, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1302.394754][T17435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.417889][T17435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.478097][T17435] device bridge_slave_0 entered promiscuous mode [ 1302.511806][T17459] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1302.522086][T17435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.556090][T17435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.575358][T17435] device bridge_slave_1 entered promiscuous mode [ 1302.616381][T17477] syz.9.3403: attempt to access beyond end of device [ 1302.616381][T17477] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1302.691904][T17435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.784491][T17478] tmpfs: Unknown parameter 'quota' [ 1302.990213][T17435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.297034][T17435] team0: Port device team_slave_0 added [ 1303.328611][T17483] netlink: 'syz.8.3404': attribute type 12 has an invalid length. [ 1303.348297][T17483] netlink: 'syz.8.3404': attribute type 29 has an invalid length. [ 1303.395114][T17483] netlink: 'syz.8.3404': attribute type 2 has an invalid length. [ 1303.414519][T17483] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1303.440286][T17435] team0: Port device team_slave_1 added [ 1303.446776][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 1303.611703][T17435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.618769][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.778152][T17435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.811518][T17496] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 1303.829318][T17435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.902462][T17435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.985275][T17435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.146606][T17506] syz.8.3412: attempt to access beyond end of device [ 1304.146606][T17506] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1304.361100][T17509] tmpfs: Unknown parameter 'quota' [ 1304.457605][T17435] device hsr_slave_0 entered promiscuous mode [ 1304.681375][T17435] device hsr_slave_1 entered promiscuous mode [ 1304.721757][T17435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1304.755796][T17435] Cannot create hsr debugfs directory [ 1304.960243][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3417'. [ 1305.531951][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 1305.550431][ T4746] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.099803][ T4746] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.356991][ T4746] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.575579][ T4746] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.631584][T17568] batman_adv: batadv0: Adding interface: dummy0 [ 1306.640610][T17568] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.667814][T17568] batman_adv: batadv0: Interface activated: dummy0 [ 1306.686496][T17572] batadv0: mtu less than device minimum [ 1306.725646][T17568] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 1306.753117][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.766473][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.779078][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.791681][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.804022][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.816426][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.828943][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.841190][T17572] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1306.865860][T17576] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3437'. [ 1307.044945][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.051413][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.230651][T17583] syz.8.3440: attempt to access beyond end of device [ 1307.230651][T17583] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1307.603713][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 1307.614288][T17594] tmpfs: Unknown parameter 'quota' [ 1307.645876][T17593] device syzkaller1 entered promiscuous mode [ 1308.424346][T17609] loop8: detected capacity change from 0 to 164 [ 1309.696850][T17435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1309.928053][T17435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1310.003263][T17435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1310.035528][T17435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1310.209803][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3462'. [ 1310.410552][T17655] device ipvlan0 entered promiscuous mode [ 1310.506623][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3464'. [ 1310.740152][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3465'. [ 1310.976676][T17675] device syzkaller0 entered promiscuous mode [ 1311.037668][ T4746] device hsr_slave_0 left promiscuous mode [ 1311.052122][ T4746] device hsr_slave_1 left promiscuous mode [ 1311.074318][ T4746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.095855][ T4746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.117052][ T4746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.131286][ T4746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.147470][ T4746] device bridge_slave_1 left promiscuous mode [ 1311.166233][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.195178][ T4746] device bridge_slave_0 left promiscuous mode [ 1311.216646][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.333367][ T4746] device veth1_macvtap left promiscuous mode [ 1311.342372][ T4746] device veth0_macvtap left promiscuous mode [ 1311.356171][ T4746] device veth0_vlan left promiscuous mode [ 1311.676621][ T4746] bond8 (unregistering): Released all slaves [ 1311.739732][ T4746] bond7 (unregistering): Released all slaves [ 1311.782264][ T4746] bond6 (unregistering): Released all slaves [ 1311.808608][ T4746] bond5 (unregistering): (slave bridge3): Releasing active interface [ 1311.858513][ T4746] bond5 (unregistering): Released all slaves [ 1311.879698][ T4746] bond4 (unregistering): Released all slaves [ 1311.895211][ T4746] bond3 (unregistering): Released all slaves [ 1311.919957][ T4746] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1311.963957][ T4746] bond2 (unregistering): Released all slaves [ 1311.988391][ T4746] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1312.052406][ T4746] bond1 (unregistering): Released all slaves [ 1312.838513][ T4746] team0 (unregistering): Port device team_slave_1 removed [ 1312.900333][ T4746] team0 (unregistering): Port device team_slave_0 removed [ 1312.961239][ T4746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.023024][ T4746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.488162][ T4746] bond0 (unregistering): Released all slaves [ 1316.930193][T17435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.044325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1317.065743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1317.134514][T17435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.215034][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1317.258652][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1317.292076][ T9373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.299425][ T9373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.338028][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1317.360316][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1317.384002][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1317.437682][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.444970][ T9052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.501486][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1317.543516][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1317.574827][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1317.627129][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1317.764022][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1317.816776][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1317.860427][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1317.874619][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1317.902281][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1317.923985][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1317.942200][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1317.967609][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3479'. [ 1318.067231][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1318.202169][T17739] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1318.796564][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 1318.825773][T17760] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1319.028757][T17769] loop9: detected capacity change from 0 to 164 [ 1319.090549][T17769] isofs: Unable to find the ".." directory for NFS. [ 1319.166923][T17766] device bond1 entered promiscuous mode [ 1319.325597][T17775] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3492'. [ 1319.506663][T17783] loop6: detected capacity change from 0 to 16 [ 1319.563119][T17783] erofs: (device loop6): mounted with root inode @ nid 36. [ 1319.808556][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1319.860546][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1319.897774][T17435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.158893][T17800] loop8: detected capacity change from 0 to 128 [ 1320.249498][T17805] syz.6.3494: attempt to access beyond end of device [ 1320.249498][T17805] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1320.285775][T17805] syz.6.3494: attempt to access beyond end of device [ 1320.285775][T17805] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1320.387329][ T27] audit: type=1800 audit(1790129300.735:26): pid=17805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3494" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1320.547397][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'. [ 1320.592651][T17810] device bridge_slave_1 left promiscuous mode [ 1320.619585][T17810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.632015][T17810] device bridge_slave_0 left promiscuous mode [ 1320.656868][T17810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.516629][T17836] FAULT_INJECTION: forcing a failure. [ 1321.516629][T17836] name failslab, interval 1, probability 0, space 0, times 1 [ 1321.580294][T17836] CPU: 0 PID: 17836 Comm: syz.6.3511 Not tainted syzkaller #0 [ 1321.587879][T17836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1321.598033][T17836] Call Trace: [ 1321.601369][T17836] [ 1321.604354][T17836] dump_stack_lvl+0x188/0x24e [ 1321.609107][T17836] ? show_regs_print_info+0x12/0x12 [ 1321.614367][T17836] ? load_image+0x410/0x410 [ 1321.618948][T17836] ? __might_sleep+0xd0/0xd0 [ 1321.623632][T17836] ? __lock_acquire+0x7c40/0x7c40 [ 1321.628727][T17836] should_fail_ex+0x390/0x4c0 [ 1321.633634][T17836] should_failslab+0x5/0x20 [ 1321.638198][T17836] slab_pre_alloc_hook+0x59/0x300 [ 1321.643313][T17836] ? percpu_ref_init+0xc0/0x340 [ 1321.648224][T17836] __kmem_cache_alloc_node+0x4f/0x270 [ 1321.653666][T17836] ? percpu_ref_init+0xc0/0x340 [ 1321.658656][T17836] ? blk_timeout_work+0x10/0x10 [ 1321.663715][T17836] kmalloc_trace+0x26/0xe0 [ 1321.668196][T17836] percpu_ref_init+0xc0/0x340 [ 1321.672943][T17836] blk_alloc_queue+0x3fd/0x5b0 [ 1321.677776][T17836] __blk_mq_alloc_disk+0x84/0x1e0 [ 1321.682953][T17836] loop_add+0x326/0x9a0 [ 1321.687389][T17836] loop_control_ioctl+0x124/0x590 [ 1321.692475][T17836] ? loop_set_hw_queue_depth+0x60/0x60 [ 1321.698045][T17836] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1321.703134][T17836] ? security_file_ioctl+0x7c/0xa0 [ 1321.708435][T17836] ? loop_set_hw_queue_depth+0x60/0x60 [ 1321.713974][T17836] __se_sys_ioctl+0xfa/0x170 [ 1321.718643][T17836] do_syscall_64+0x4c/0xa0 [ 1321.723116][T17836] ? clear_bhb_loop+0x60/0xb0 [ 1321.727851][T17836] ? clear_bhb_loop+0x60/0xb0 [ 1321.732580][T17836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.738546][T17836] RIP: 0033:0x7fbd1479e159 [ 1321.743013][T17836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.762771][T17836] RSP: 002b:00007fbd156e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.771255][T17836] RAX: ffffffffffffffda RBX: 00007fbd14a25fa0 RCX: 00007fbd1479e159 [ 1321.779296][T17836] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1321.787420][T17836] RBP: 00007fbd1483506b R08: 0000000000000000 R09: 0000000000000000 [ 1321.795463][T17836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.803506][T17836] R13: 00007fbd14a26038 R14: 00007fbd14a25fa0 R15: 00007ffc8e6784f8 [ 1321.811562][T17836] [ 1321.971086][T17848] loop9: detected capacity change from 0 to 128 [ 1322.291748][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1322.331796][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1322.440357][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1322.469155][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1322.522259][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1322.551635][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1322.607157][T17435] device veth0_vlan entered promiscuous mode [ 1322.671296][T17435] device veth1_vlan entered promiscuous mode [ 1322.807504][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1322.829895][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1322.864668][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1322.919632][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1322.985095][T17435] device veth0_macvtap entered promiscuous mode [ 1323.020533][T17862] FAULT_INJECTION: forcing a failure. [ 1323.020533][T17862] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.080461][T17862] CPU: 0 PID: 17862 Comm: syz.9.3520 Not tainted syzkaller #0 [ 1323.088044][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1323.098172][T17862] Call Trace: [ 1323.101506][T17862] [ 1323.104496][T17862] dump_stack_lvl+0x188/0x24e [ 1323.109257][T17862] ? show_regs_print_info+0x12/0x12 [ 1323.114533][T17862] ? load_image+0x410/0x410 [ 1323.119143][T17862] ? __lock_acquire+0x7c40/0x7c40 [ 1323.124251][T17862] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1323.130223][T17862] should_fail_ex+0x390/0x4c0 [ 1323.135008][T17862] should_failslab+0x5/0x20 [ 1323.139571][T17862] slab_pre_alloc_hook+0x59/0x300 [ 1323.144673][T17862] ? tcf_block_get_ext+0x290/0x13c0 [ 1323.150115][T17862] __kmem_cache_alloc_node+0x4f/0x270 [ 1323.155558][T17862] ? tcf_block_get_ext+0x290/0x13c0 [ 1323.160823][T17862] kmalloc_trace+0x26/0xe0 [ 1323.165307][T17862] tcf_block_get_ext+0x290/0x13c0 [ 1323.170412][T17862] ? qdisc_alloc+0x8f/0xa40 [ 1323.175117][T17862] tcf_block_get+0x64/0x90 [ 1323.179691][T17862] ? tcf_block_get+0x90/0x90 [ 1323.184339][T17862] multiq_init+0x6e/0x2a0 [ 1323.188820][T17862] ? multiq_peek+0x300/0x300 [ 1323.193490][T17862] qdisc_create+0x7ef/0x10c0 [ 1323.198168][T17862] ? qdisc_notify+0x370/0x370 [ 1323.202917][T17862] ? lockdep_rtnl_is_held+0x22/0x30 [ 1323.208305][T17862] ? qdisc_lookup+0x35d/0x6b0 [ 1323.213046][T17862] tc_modify_qdisc+0xb43/0x1de0 [ 1323.217977][T17862] ? qdisc_offload_query_caps+0x150/0x150 [ 1323.223787][T17862] ? qdisc_offload_query_caps+0x150/0x150 [ 1323.229723][T17862] rtnetlink_rcv_msg+0x863/0xfb0 [ 1323.234789][T17862] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1323.239980][T17862] ? rtnetlink_bind+0x80/0x80 [ 1323.244720][T17862] ? __local_bh_enable_ip+0x136/0x1c0 [ 1323.250165][T17862] ? lockdep_hardirqs_on+0x94/0x140 [ 1323.255433][T17862] ? __local_bh_enable_ip+0x136/0x1c0 [ 1323.260877][T17862] ? _local_bh_enable+0xa0/0xa0 [ 1323.265788][T17862] ? __dev_queue_xmit+0x281/0x3810 [ 1323.271039][T17862] ? __dev_queue_xmit+0x281/0x3810 [ 1323.276222][T17862] ? __dev_queue_xmit+0x1d84/0x3810 [ 1323.281504][T17862] ? __dev_queue_xmit+0x281/0x3810 [ 1323.286814][T17862] ? ref_tracker_free+0x682/0x830 [ 1323.291939][T17862] ? refcount_inc+0x70/0x70 [ 1323.296535][T17862] ? memcpy+0x3c/0x60 [ 1323.300597][T17862] ? __copy_skb_header+0x3ba/0x4f0 [ 1323.305868][T17862] ? __skb_clone+0x446/0x6c0 [ 1323.310534][T17862] netlink_rcv_skb+0x1ef/0x440 [ 1323.315509][T17862] ? rtnetlink_bind+0x80/0x80 [ 1323.320264][T17862] ? netlink_ack+0x1160/0x1160 [ 1323.325105][T17862] ? netlink_deliver_tap+0x2e/0x1b0 [ 1323.330350][T17862] netlink_unicast+0x7ad/0x920 [ 1323.335201][T17862] netlink_sendmsg+0x8ad/0xbd0 [ 1323.340065][T17862] ? netlink_getsockopt+0x550/0x550 [ 1323.345368][T17862] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1323.351110][T17862] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1323.356489][T17862] ? security_socket_sendmsg+0x7c/0xa0 [ 1323.362089][T17862] ? netlink_getsockopt+0x550/0x550 [ 1323.367384][T17862] ____sys_sendmsg+0x5ed/0x9a0 [ 1323.372236][T17862] ? __sys_sendmsg_sock+0x30/0x30 [ 1323.377337][T17862] ? __import_iovec+0x306/0x510 [ 1323.382306][T17862] ? import_iovec+0x6f/0xa0 [ 1323.386964][T17862] ___sys_sendmsg+0x2a2/0x360 [ 1323.391726][T17862] ? __sys_sendmsg+0x2a0/0x2a0 [ 1323.396613][T17862] __se_sys_sendmsg+0x1c3/0x2b0 [ 1323.401528][T17862] ? __x64_sys_sendmsg+0x80/0x80 [ 1323.406580][T17862] ? lockdep_hardirqs_on+0x94/0x140 [ 1323.411873][T17862] do_syscall_64+0x4c/0xa0 [ 1323.416370][T17862] ? clear_bhb_loop+0x60/0xb0 [ 1323.421118][T17862] ? clear_bhb_loop+0x60/0xb0 [ 1323.425873][T17862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1323.431870][T17862] RIP: 0033:0x7f253619e159 [ 1323.436355][T17862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.456149][T17862] RSP: 002b:00007f25370ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.464662][T17862] RAX: ffffffffffffffda RBX: 00007f2536425fa0 RCX: 00007f253619e159 [ 1323.472713][T17862] RDX: 000000000004c840 RSI: 0000200000000140 RDI: 0000000000000004 [ 1323.480752][T17862] RBP: 00007f253623506b R08: 0000000000000000 R09: 0000000000000000 [ 1323.488806][T17862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.496894][T17862] R13: 00007f2536426038 R14: 00007f2536425fa0 R15: 00007ffd7c75b1c8 [ 1323.505042][T17862] [ 1323.720184][T17435] device veth1_macvtap entered promiscuous mode [ 1323.732580][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1323.770998][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1323.868088][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.939757][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.984901][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.038010][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.069621][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.107328][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.187850][T17435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.258910][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1324.282241][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1324.326542][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.378081][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.420192][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.452126][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.477351][T17435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.513466][T17435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.565304][T17435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.594399][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1324.642246][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1324.681726][T17435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.720859][T17435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.729672][T17435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.796661][T17435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.838071][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3527'. [ 1324.861689][T17891] bond0: option lp_interval: invalid value (18446744073709551612) [ 1324.889685][T17891] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1325.169826][ T4746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.188033][ T4746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.240970][T17902] FAULT_INJECTION: forcing a failure. [ 1325.240970][T17902] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.265944][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1325.305006][T17902] CPU: 0 PID: 17902 Comm: syz.8.3533 Not tainted syzkaller #0 [ 1325.312589][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1325.322705][T17902] Call Trace: [ 1325.326034][T17902] [ 1325.329009][T17902] dump_stack_lvl+0x188/0x24e [ 1325.333756][T17902] ? show_regs_print_info+0x12/0x12 [ 1325.339022][T17902] ? load_image+0x410/0x410 [ 1325.343599][T17902] ? __might_sleep+0xd0/0xd0 [ 1325.348334][T17902] ? __lock_acquire+0x7c40/0x7c40 [ 1325.353434][T17902] ? rcu_is_watching+0x11/0xa0 [ 1325.358273][T17902] should_fail_ex+0x390/0x4c0 [ 1325.363029][T17902] should_failslab+0x5/0x20 [ 1325.367591][T17902] slab_pre_alloc_hook+0x59/0x300 [ 1325.372678][T17902] kmem_cache_alloc+0x56/0x2f0 [ 1325.377502][T17902] ? prepare_creds+0x3c/0x610 [ 1325.382265][T17902] prepare_creds+0x3c/0x610 [ 1325.386839][T17902] prepare_exec_creds+0x14/0x220 [ 1325.391850][T17902] bprm_execve+0xf1/0x17e0 [ 1325.396338][T17902] ? get_arg_page+0x323/0x410 [ 1325.401087][T17902] ? up_write+0x1b6/0x410 [ 1325.405485][T17902] ? alloc_bprm+0x37a/0x710 [ 1325.410054][T17902] ? alloc_bprm+0x710/0x710 [ 1325.414619][T17902] ? put_arg_page+0xea/0x270 [ 1325.419284][T17902] ? copy_string_kernel+0x1e5/0x220 [ 1325.424559][T17902] do_execveat_common+0x501/0x6b0 [ 1325.429662][T17902] __x64_sys_execveat+0xc0/0xe0 [ 1325.434596][T17902] do_syscall_64+0x4c/0xa0 [ 1325.439115][T17902] ? clear_bhb_loop+0x60/0xb0 [ 1325.443891][T17902] ? clear_bhb_loop+0x60/0xb0 [ 1325.448632][T17902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1325.454605][T17902] RIP: 0033:0x7f5271f9e159 [ 1325.459077][T17902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.478749][T17902] RSP: 002b:00007f5272dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1325.487251][T17902] RAX: ffffffffffffffda RBX: 00007f5272225fa0 RCX: 00007f5271f9e159 [ 1325.495292][T17902] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1325.503352][T17902] RBP: 00007f527203506b R08: 0000000000001000 R09: 0000000000000000 [ 1325.511385][T17902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.519411][T17902] R13: 00007f5272226038 R14: 00007f5272225fa0 R15: 00007ffdbae18c58 [ 1325.527466][T17902] [ 1325.564546][ T4746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.602659][ T4746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.610367][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1326.402391][T17930] net_ratelimit: 12 callbacks suppressed [ 1326.402535][T17930] ip_tables: iptables: counters copy to user failed while replacing table [ 1326.427591][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.436357][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.444506][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.452510][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.460422][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.468409][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.476420][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.484377][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1326.492331][T17912] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1328.676450][T17988] loop1: detected capacity change from 0 to 8192 [ 1328.747576][T17988] loop1: p1 < > p2 < > p3 p4 < p5 > [ 1328.781279][T17988] loop1: partition table partially beyond EOD, truncated [ 1328.823299][T17988] loop1: p1 start 83886080 is beyond EOD, truncated [ 1328.866707][T17988] loop1: p2 start 16776960 is beyond EOD, truncated [ 1328.993458][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3565'. [ 1329.005503][T18009] FAULT_INJECTION: forcing a failure. [ 1329.005503][T18009] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.018634][T18009] CPU: 0 PID: 18009 Comm: syz.5.3567 Not tainted syzkaller #0 [ 1329.026183][T18009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1329.036311][T18009] Call Trace: [ 1329.039651][T18009] [ 1329.042654][T18009] dump_stack_lvl+0x188/0x24e [ 1329.047404][T18009] ? show_regs_print_info+0x12/0x12 [ 1329.052684][T18009] ? load_image+0x410/0x410 [ 1329.057288][T18009] ? __might_sleep+0xd0/0xd0 [ 1329.061971][T18009] ? __lock_acquire+0x7c40/0x7c40 [ 1329.067087][T18009] should_fail_ex+0x390/0x4c0 [ 1329.071849][T18009] should_failslab+0x5/0x20 [ 1329.076419][T18009] slab_pre_alloc_hook+0x59/0x300 [ 1329.081521][T18009] kmem_cache_alloc_lru+0x49/0x2e0 [ 1329.086721][T18009] ? __d_alloc+0x2e/0x6e0 [ 1329.091110][T18009] __d_alloc+0x2e/0x6e0 [ 1329.095294][T18009] ? d_alloc_pseudo+0xe/0x70 [ 1329.099952][T18009] d_alloc_pseudo+0x19/0x70 [ 1329.104519][T18009] alloc_file_pseudo+0xe0/0x200 [ 1329.109414][T18009] ? alloc_empty_file_noaccount+0x80/0x80 [ 1329.115216][T18009] ? pfn_swap_entry_to_page+0x390/0x390 [ 1329.120907][T18009] hugetlb_file_setup+0x3cc/0x610 [ 1329.126167][T18009] ksys_mmap_pgoff+0x1e2/0x720 [ 1329.131012][T18009] do_syscall_64+0x4c/0xa0 [ 1329.135503][T18009] ? clear_bhb_loop+0x60/0xb0 [ 1329.140268][T18009] ? clear_bhb_loop+0x60/0xb0 [ 1329.145001][T18009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1329.150960][T18009] RIP: 0033:0x7fb40739e159 [ 1329.155461][T18009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.175226][T18009] RSP: 002b:00007fb4081e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1329.183683][T18009] RAX: ffffffffffffffda RBX: 00007fb407625fa0 RCX: 00007fb40739e159 [ 1329.191705][T18009] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1329.199747][T18009] RBP: 00007fb40743506b R08: ffffffffffffffff R09: 0000000000000000 [ 1329.207774][T18009] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 1329.215792][T18009] R13: 00007fb407626038 R14: 00007fb407625fa0 R15: 00007ffd854baed8 [ 1329.223824][T18009] [ 1330.131258][T17701] udevd[17701]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1330.142931][T17774] udevd[17774]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 1330.157176][T17777] udevd[17777]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1330.323968][T18039] FAULT_INJECTION: forcing a failure. [ 1330.323968][T18039] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.381965][T18039] CPU: 0 PID: 18039 Comm: syz.6.3577 Not tainted syzkaller #0 [ 1330.389538][T18039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1330.399652][T18039] Call Trace: [ 1330.402985][T18039] [ 1330.405965][T18039] dump_stack_lvl+0x188/0x24e [ 1330.410714][T18039] ? show_regs_print_info+0x12/0x12 [ 1330.415978][T18039] ? load_image+0x410/0x410 [ 1330.420558][T18039] ? __might_sleep+0xd0/0xd0 [ 1330.425209][T18039] ? __lock_acquire+0x7c40/0x7c40 [ 1330.430304][T18039] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1330.436387][T18039] should_fail_ex+0x390/0x4c0 [ 1330.441148][T18039] should_failslab+0x5/0x20 [ 1330.445965][T18039] slab_pre_alloc_hook+0x59/0x300 [ 1330.451052][T18039] ? lockdep_hardirqs_on+0x94/0x140 [ 1330.456305][T18039] kmem_cache_alloc+0x56/0x2f0 [ 1330.461112][T18039] ? taskstats_exit+0x149/0xcd0 [ 1330.466127][T18039] taskstats_exit+0x149/0xcd0 [ 1330.470866][T18039] ? sysctl_delayacct+0x220/0x220 [ 1330.475948][T18039] ? rcu_is_watching+0x11/0xa0 [ 1330.480759][T18039] ? mm_trace_rss_stat+0xa7/0x250 [ 1330.485835][T18039] ? sync_mm_rss+0x211/0x350 [ 1330.490471][T18039] do_exit+0x94b/0x2570 [ 1330.494710][T18039] ? put_task_struct+0x80/0x80 [ 1330.499534][T18039] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1330.505561][T18039] ? lock_chain_count+0x20/0x20 [ 1330.510462][T18039] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1330.515547][T18039] do_group_exit+0x229/0x2e0 [ 1330.520190][T18039] ? lockdep_hardirqs_on+0x94/0x140 [ 1330.525430][T18039] get_signal+0x1259/0x1340 [ 1330.530033][T18039] arch_do_signal_or_restart+0xc4/0x1310 [ 1330.535721][T18039] ? __destroy_inode+0x463/0x610 [ 1330.540752][T18039] ? sock_alloc_inode+0xc0/0xc0 [ 1330.545648][T18039] ? do_futex+0x310/0x320 [ 1330.550027][T18039] ? get_sigframe_size+0x10/0x10 [ 1330.555009][T18039] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1330.560943][T18039] ? _raw_spin_unlock+0x24/0x40 [ 1330.565853][T18039] ? exit_to_user_mode_loop+0x3b/0x110 [ 1330.571367][T18039] exit_to_user_mode_loop+0x70/0x110 [ 1330.576711][T18039] exit_to_user_mode_prepare+0xee/0x180 [ 1330.582310][T18039] syscall_exit_to_user_mode+0x16/0x40 [ 1330.587855][T18039] do_syscall_64+0x58/0xa0 [ 1330.592319][T18039] ? clear_bhb_loop+0x60/0xb0 [ 1330.597152][T18039] ? clear_bhb_loop+0x60/0xb0 [ 1330.601871][T18039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1330.607861][T18039] RIP: 0033:0x7fbd1479e159 [ 1330.612323][T18039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.632004][T18039] RSP: 002b:00007fbd156e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1330.640487][T18039] RAX: fffffffffffffe00 RBX: 00007fbd14a25fa8 RCX: 00007fbd1479e159 [ 1330.648509][T18039] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd14a25fa8 [ 1330.656527][T18039] RBP: 00007fbd14a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1330.664560][T18039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.672578][T18039] R13: 00007fbd14a26038 R14: 00007ffc8e678410 R15: 00007ffc8e6784f8 [ 1330.680618][T18039] [ 1331.236603][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1331.350878][T18056] bond0: no command found in slaves file - use +ifname or -ifname [ 1331.890612][T18064] ipt_CLUSTERIP: Please specify destination IP [ 1332.328504][T18089] net_ratelimit: 45 callbacks suppressed [ 1332.328528][T18089] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1333.227742][T18117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3607'. [ 1333.343888][T18117] device bridge1 entered promiscuous mode [ 1333.447931][T18117] team0: Port device bridge1 added [ 1333.529450][T18119] bridge0: port 3(team0) entered blocking state [ 1333.558596][T18119] bridge0: port 3(team0) entered disabled state [ 1333.614207][T18119] device team0 entered promiscuous mode [ 1333.647824][T18119] device team_slave_0 entered promiscuous mode [ 1333.680226][T18119] device team_slave_1 entered promiscuous mode [ 1333.749880][T18119] bridge0: port 3(team0) entered blocking state [ 1333.757147][T18119] bridge0: port 3(team0) entered forwarding state [ 1333.796430][T18130] device bridge0 entered promiscuous mode [ 1333.831736][T18130] bridge0: port 3(macvlan2) entered blocking state [ 1333.858949][T18130] bridge0: port 3(macvlan2) entered disabled state [ 1333.873418][T18132] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 1333.918833][T18130] device bridge0 left promiscuous mode [ 1334.390164][T18143] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1334.665979][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3623'. [ 1334.694967][T18156] loop6: detected capacity change from 0 to 128 [ 1334.848059][T18158] syz.6.3625: attempt to access beyond end of device [ 1334.848059][T18158] loop6: rw=2049, sector=145, nr_sectors = 192 limit=128 [ 1335.099543][ T4333] kworker/u4:7: attempt to access beyond end of device [ 1335.099543][ T4333] loop6: rw=1, sector=145, nr_sectors = 192 limit=128 [ 1335.785163][T18186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 1336.342803][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3639'. [ 1336.368892][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3639'. [ 1336.903887][T18218] ip_tables: iptables: counters copy to user failed while replacing table [ 1337.455151][T18235] loop5: detected capacity change from 0 to 164 [ 1337.572642][T18235] Symlink component flag not implemented [ 1337.579989][T18235] Symlink component flag not implemented (7) [ 1337.657776][T18235] overlayfs: failed to resolve './file1': -5 [ 1338.349264][T18261] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 1338.925610][T18282] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 1338.947351][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 1338.957417][T18282] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 1338.966923][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 1338.976681][T18282] iwpm_send_hello: Unable to send a nlmsg [ 1339.261945][T18296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3678'. [ 1339.322211][T18296] device bridge1 entered promiscuous mode [ 1340.758622][T18347] loop6: detected capacity change from 0 to 512 [ 1340.958317][T18347] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1341.633534][T18373] loop1: detected capacity change from 0 to 256 [ 1342.098225][T18391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1342.344926][T18398] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 1343.473220][T18424] loop8: detected capacity change from 0 to 8192 [ 1343.696534][T18448] loop5: detected capacity change from 0 to 16 [ 1343.768759][T18448] erofs: (device loop5): mounted with root inode @ nid 36. [ 1344.964967][T18461] sctp: failed to load transform for md5: -2 [ 1345.343793][T18496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 1346.341571][T18531] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3766'. [ 1346.388334][T18531] device bridge2 entered promiscuous mode [ 1347.164612][T18560] FAULT_INJECTION: forcing a failure. [ 1347.164612][T18560] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.235252][T18560] CPU: 1 PID: 18560 Comm: syz.5.3777 Not tainted syzkaller #0 [ 1347.242850][T18560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1347.253011][T18560] Call Trace: [ 1347.256359][T18560] [ 1347.259343][T18560] dump_stack_lvl+0x188/0x24e [ 1347.264116][T18560] ? show_regs_print_info+0x12/0x12 [ 1347.269387][T18560] ? load_image+0x410/0x410 [ 1347.273971][T18560] ? __might_sleep+0xd0/0xd0 [ 1347.278629][T18560] ? __lock_acquire+0x7c40/0x7c40 [ 1347.283747][T18560] should_fail_ex+0x390/0x4c0 [ 1347.288514][T18560] should_failslab+0x5/0x20 [ 1347.293148][T18560] slab_pre_alloc_hook+0x59/0x300 [ 1347.298263][T18560] kmem_cache_alloc+0x56/0x2f0 [ 1347.303165][T18560] ? __alloc_file+0x25/0x230 [ 1347.307847][T18560] __alloc_file+0x25/0x230 [ 1347.312334][T18560] alloc_empty_file+0x90/0x180 [ 1347.317216][T18560] alloc_file+0x5b/0x5f0 [ 1347.321543][T18560] alloc_file_pseudo+0x180/0x200 [ 1347.326562][T18560] ? alloc_empty_file_noaccount+0x80/0x80 [ 1347.332353][T18560] ? do_raw_spin_unlock+0x11d/0x230 [ 1347.337684][T18560] ? put_pid+0xc3/0x120 [ 1347.341951][T18560] sock_alloc_file+0xb3/0x240 [ 1347.346845][T18560] __sys_socketpair+0x2cc/0x540 [ 1347.351828][T18560] __x64_sys_socketpair+0x97/0xb0 [ 1347.356936][T18560] do_syscall_64+0x4c/0xa0 [ 1347.361441][T18560] ? clear_bhb_loop+0x60/0xb0 [ 1347.366191][T18560] ? clear_bhb_loop+0x60/0xb0 [ 1347.370948][T18560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.376930][T18560] RIP: 0033:0x7fb40739e159 [ 1347.381427][T18560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.401110][T18560] RSP: 002b:00007fb4081e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1347.409608][T18560] RAX: ffffffffffffffda RBX: 00007fb407625fa0 RCX: 00007fb40739e159 [ 1347.417649][T18560] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1347.425683][T18560] RBP: 00007fb40743506b R08: 0000000000000000 R09: 0000000000000000 [ 1347.433725][T18560] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 1347.441765][T18560] R13: 00007fb407626038 R14: 00007fb407625fa0 R15: 00007ffd854baed8 [ 1347.449830][T18560] [ 1347.846456][T18576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1347.907932][T18576] device bridge0 entered promiscuous mode [ 1348.058273][T18572] loop8: detected capacity change from 0 to 8192 [ 1348.762815][T18602] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1348.986676][T18611] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3797'. [ 1349.069299][T18611] device bridge2 entered promiscuous mode [ 1349.179538][T18616] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1350.276333][T18627] loop8: detected capacity change from 0 to 512 [ 1350.335783][T18627] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1350.764866][T18638] xt_connbytes: Forcing CT accounting to be enabled [ 1350.811375][T18638] set match dimension is over the limit! [ 1350.845834][T18642] FAULT_INJECTION: forcing a failure. [ 1350.845834][T18642] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.899383][T18642] CPU: 0 PID: 18642 Comm: syz.9.3809 Not tainted syzkaller #0 [ 1350.906979][T18642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.917103][T18642] Call Trace: [ 1350.920439][T18642] [ 1350.923426][T18642] dump_stack_lvl+0x188/0x24e [ 1350.928180][T18642] ? show_regs_print_info+0x12/0x12 [ 1350.933450][T18642] ? load_image+0x410/0x410 [ 1350.938032][T18642] ? __might_sleep+0xd0/0xd0 [ 1350.942697][T18642] ? __lock_acquire+0x7c40/0x7c40 [ 1350.947829][T18642] should_fail_ex+0x390/0x4c0 [ 1350.952625][T18642] should_failslab+0x5/0x20 [ 1350.957193][T18642] slab_pre_alloc_hook+0x59/0x300 [ 1350.962303][T18642] ? tomoyo_encode+0x28a/0x550 [ 1350.967146][T18642] __kmem_cache_alloc_node+0x4f/0x270 [ 1350.972618][T18642] ? tomoyo_encode+0x28a/0x550 [ 1350.977477][T18642] __kmalloc+0xa3/0x240 [ 1350.981696][T18642] tomoyo_encode+0x28a/0x550 [ 1350.986345][T18642] tomoyo_realpath_from_path+0x578/0x5c0 [ 1350.992038][T18642] tomoyo_mount_permission+0x3d2/0x9b0 [ 1350.997548][T18642] ? tomoyo_mount_permission+0x2a1/0x9b0 [ 1351.003403][T18642] ? kmem_cache_free+0xf7/0x2a0 [ 1351.008365][T18642] ? tomoyo_get_name+0x520/0x520 [ 1351.013385][T18642] ? lockdep_hardirqs_on+0x94/0x140 [ 1351.018635][T18642] security_sb_mount+0x83/0xb0 [ 1351.023478][T18642] path_mount+0xb8/0xfb0 [ 1351.027829][T18642] __se_sys_mount+0x2e3/0x3d0 [ 1351.032565][T18642] ? __x64_sys_mount+0xc0/0xc0 [ 1351.037379][T18642] ? lockdep_hardirqs_on+0x94/0x140 [ 1351.042626][T18642] ? __x64_sys_mount+0x1c/0xc0 [ 1351.047456][T18642] do_syscall_64+0x4c/0xa0 [ 1351.051936][T18642] ? clear_bhb_loop+0x60/0xb0 [ 1351.056664][T18642] ? clear_bhb_loop+0x60/0xb0 [ 1351.061434][T18642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.067383][T18642] RIP: 0033:0x7f253619f3ca [ 1351.071842][T18642] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.091505][T18642] RSP: 002b:00007f25370ace58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1351.099972][T18642] RAX: ffffffffffffffda RBX: 00007f25370acee0 RCX: 00007f253619f3ca [ 1351.108004][T18642] RDX: 0000200000000200 RSI: 0000200000000240 RDI: 0000000000000000 [ 1351.116022][T18642] RBP: 0000200000000200 R08: 00007f25370acee0 R09: 0000000001000000 [ 1351.124033][T18642] R10: 0000000001000000 R11: 0000000000000246 R12: 0000200000000240 [ 1351.132105][T18642] R13: 00007f25370acea0 R14: 0000000000000000 R15: 0000200000000000 [ 1351.140253][T18642] [ 1351.410168][T18655] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3813'. [ 1351.494559][T18655] device bridge3 entered promiscuous mode [ 1351.649487][T18655] team0: Port device bridge3 added [ 1351.694866][T18656] bridge0: port 3(team0) entered blocking state [ 1351.721350][T18656] bridge0: port 3(team0) entered disabled state [ 1351.801232][T18656] device team0 entered promiscuous mode [ 1351.806933][T18656] device team_slave_0 entered promiscuous mode [ 1351.837251][T18656] device team_slave_1 entered promiscuous mode [ 1351.850184][T18656] bridge0: port 3(team0) entered blocking state [ 1351.856742][T18656] bridge0: port 3(team0) entered forwarding state [ 1351.875151][T18642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1351.918092][T18670] FAULT_INJECTION: forcing a failure. [ 1351.918092][T18670] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.990930][T18670] CPU: 1 PID: 18670 Comm: syz.1.3818 Not tainted syzkaller #0 [ 1351.998530][T18670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.008667][T18670] Call Trace: [ 1352.012026][T18670] [ 1352.015008][T18670] dump_stack_lvl+0x188/0x24e [ 1352.019757][T18670] ? show_regs_print_info+0x12/0x12 [ 1352.025024][T18670] ? load_image+0x410/0x410 [ 1352.029595][T18670] ? __might_sleep+0xd0/0xd0 [ 1352.034251][T18670] ? __lock_acquire+0x7c40/0x7c40 [ 1352.039375][T18670] should_fail_ex+0x390/0x4c0 [ 1352.044142][T18670] should_failslab+0x5/0x20 [ 1352.048807][T18670] slab_pre_alloc_hook+0x59/0x300 [ 1352.053915][T18670] ? slab_post_alloc_hook+0x67/0x490 [ 1352.059294][T18670] kmem_cache_alloc_bulk+0x42/0x4e0 [ 1352.064570][T18670] ? kmem_cache_alloc+0x1b2/0x2f0 [ 1352.069671][T18670] ? mas_alloc_nodes+0x2ec/0x880 [ 1352.074713][T18670] mas_alloc_nodes+0x449/0x880 [ 1352.079574][T18670] mas_preallocate+0x162/0x3b0 [ 1352.084426][T18670] do_mas_align_munmap+0x239/0x12d0 [ 1352.089722][T18670] ? do_mas_munmap+0x2b0/0x2b0 [ 1352.094632][T18670] ? mtree_range_walk+0x664/0x780 [ 1352.099755][T18670] ? mas_walk+0x15f/0x180 [ 1352.104170][T18670] ? mas_find+0x1ba/0x220 [ 1352.108588][T18670] do_mas_munmap+0x240/0x2b0 [ 1352.113266][T18670] do_munmap+0xeb/0x140 [ 1352.117504][T18670] ? do_mas_align_munmap+0x12d0/0x12d0 [ 1352.123066][T18670] ? mremap_userfaultfd_prep+0x10f/0x1f0 [ 1352.128831][T18670] move_vma+0x8c6/0xca0 [ 1352.133082][T18670] ? vma_expandable+0xf0/0xf0 [ 1352.137849][T18670] ? cap_mmap_addr+0x153/0x2c0 [ 1352.142691][T18670] ? bpf_lsm_mmap_addr+0x5/0x10 [ 1352.147618][T18670] ? security_mmap_addr+0x6e/0x90 [ 1352.152802][T18670] ? get_unmapped_area+0x2f0/0x360 [ 1352.158001][T18670] mremap_to+0x513/0x5c0 [ 1352.162345][T18670] __se_sys_mremap+0x691/0x1120 [ 1352.167289][T18670] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1352.173273][T18670] ? __x64_sys_mremap+0xc0/0xc0 [ 1352.178222][T18670] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1352.184304][T18670] ? lock_chain_count+0x20/0x20 [ 1352.189254][T18670] ? lockdep_hardirqs_on+0x94/0x140 [ 1352.194535][T18670] ? __x64_sys_mremap+0x1c/0xc0 [ 1352.199524][T18670] do_syscall_64+0x4c/0xa0 [ 1352.204019][T18670] ? clear_bhb_loop+0x60/0xb0 [ 1352.208781][T18670] ? clear_bhb_loop+0x60/0xb0 [ 1352.213539][T18670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.219526][T18670] RIP: 0033:0x7f12b1b9e159 [ 1352.224034][T18670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.243720][T18670] RSP: 002b:00007f12b2997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1352.252217][T18670] RAX: ffffffffffffffda RBX: 00007f12b1e25fa0 RCX: 00007f12b1b9e159 [ 1352.260335][T18670] RDX: 0000000000800000 RSI: 0000000000002000 RDI: 0000200000ceb000 [ 1352.268384][T18670] RBP: 00007f12b1c3506b R08: 0000200000130000 R09: 0000000000000000 [ 1352.276446][T18670] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1352.284497][T18670] R13: 00007f12b1e26038 R14: 00007f12b1e25fa0 R15: 00007ffc5eea2238 [ 1352.292567][T18670] [ 1352.866324][T18697] FAULT_INJECTION: forcing a failure. [ 1352.866324][T18697] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.891954][T18697] CPU: 0 PID: 18697 Comm: syz.5.3828 Not tainted syzkaller #0 [ 1352.899539][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.909663][T18697] Call Trace: [ 1352.912998][T18697] [ 1352.915980][T18697] dump_stack_lvl+0x188/0x24e [ 1352.920727][T18697] ? show_regs_print_info+0x12/0x12 [ 1352.926028][T18697] ? load_image+0x410/0x410 [ 1352.930610][T18697] ? __might_sleep+0xd0/0xd0 [ 1352.935258][T18697] ? __lock_acquire+0x7c40/0x7c40 [ 1352.940386][T18697] should_fail_ex+0x390/0x4c0 [ 1352.945161][T18697] should_failslab+0x5/0x20 [ 1352.949727][T18697] slab_pre_alloc_hook+0x59/0x300 [ 1352.954865][T18697] ? blk_stat_alloc_callback+0x92/0x210 [ 1352.960483][T18697] __kmem_cache_alloc_node+0x4f/0x270 [ 1352.965935][T18697] ? blk_stat_alloc_callback+0x92/0x210 [ 1352.971588][T18697] __kmalloc+0xa3/0x240 [ 1352.975868][T18697] ? blk_mq_init_allocated_queue+0x17f0/0x17f0 [ 1352.982091][T18697] ? blk_mq_poll_stats_fn+0x1e0/0x1e0 [ 1352.987545][T18697] blk_stat_alloc_callback+0x92/0x210 [ 1352.993001][T18697] ? blk_mq_init_allocated_queue+0x17f0/0x17f0 [ 1352.999246][T18697] ? blk_mq_poll_stats_fn+0x1e0/0x1e0 [ 1353.004738][T18697] blk_mq_init_allocated_queue+0x17b/0x17f0 [ 1353.010722][T18697] ? blk_mq_alloc_disk_for_queue+0x60/0x60 [ 1353.016603][T18697] ? blk_set_default_limits+0x17b/0x4b0 [ 1353.022234][T18697] ? blk_alloc_queue+0x4f6/0x5b0 [ 1353.027254][T18697] __blk_mq_alloc_disk+0xba/0x1e0 [ 1353.032338][T18697] loop_add+0x326/0x9a0 [ 1353.036570][T18697] loop_control_ioctl+0x124/0x590 [ 1353.041687][T18697] ? loop_set_hw_queue_depth+0x60/0x60 [ 1353.047222][T18697] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1353.052294][T18697] ? security_file_ioctl+0x7c/0xa0 [ 1353.057477][T18697] ? loop_set_hw_queue_depth+0x60/0x60 [ 1353.063026][T18697] __se_sys_ioctl+0xfa/0x170 [ 1353.067719][T18697] do_syscall_64+0x4c/0xa0 [ 1353.072199][T18697] ? clear_bhb_loop+0x60/0xb0 [ 1353.076944][T18697] ? clear_bhb_loop+0x60/0xb0 [ 1353.081695][T18697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.087680][T18697] RIP: 0033:0x7fb40739e159 [ 1353.092173][T18697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.111853][T18697] RSP: 002b:00007fb4081e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.120353][T18697] RAX: ffffffffffffffda RBX: 00007fb407625fa0 RCX: 00007fb40739e159 [ 1353.128423][T18697] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1353.136463][T18697] RBP: 00007fb40743506b R08: 0000000000000000 R09: 0000000000000000 [ 1353.144552][T18697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.152607][T18697] R13: 00007fb407626038 R14: 00007fb407625fa0 R15: 00007ffd854baed8 [ 1353.160687][T18697] [ 1353.676260][T18711] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3833'. [ 1353.712566][T18712] X.509: signatureAlgorithm (98) differs from tbsCertificate.signature (7) [ 1353.735666][T18711] device bridge4 entered promiscuous mode [ 1353.795227][T18711] team0: Port device bridge4 added [ 1354.046263][T18718] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3836'. [ 1354.148676][T18715] loop6: detected capacity change from 0 to 8192 [ 1354.509036][T18727] loop1: detected capacity change from 0 to 764 [ 1354.619615][T18727] Symlink component flag not implemented [ 1354.649052][T18727] Symlink component flag not implemented (15) [ 1354.701091][T18738] Symlink component flag not implemented (15) [ 1354.712690][T18730] device bond1 entered promiscuous mode [ 1355.066001][T18749] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3846'. [ 1355.139782][T18749] device bridge3 entered promiscuous mode [ 1355.379596][T18749] team0: Port device bridge3 added [ 1355.487958][T18764] FAULT_INJECTION: forcing a failure. [ 1355.487958][T18764] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.536093][T18764] CPU: 0 PID: 18764 Comm: syz.9.3852 Not tainted syzkaller #0 [ 1355.543682][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1355.553809][T18764] Call Trace: [ 1355.557153][T18764] [ 1355.560141][T18764] dump_stack_lvl+0x188/0x24e [ 1355.564897][T18764] ? show_regs_print_info+0x12/0x12 [ 1355.570168][T18764] ? load_image+0x410/0x410 [ 1355.574762][T18764] ? __might_sleep+0xd0/0xd0 [ 1355.579420][T18764] ? __lock_acquire+0x7c40/0x7c40 [ 1355.584530][T18764] ? lockdep_softirqs_off+0x430/0x430 [ 1355.589979][T18764] should_fail_ex+0x390/0x4c0 [ 1355.594753][T18764] should_failslab+0x5/0x20 [ 1355.599323][T18764] slab_pre_alloc_hook+0x59/0x300 [ 1355.604452][T18764] ? blk_mq_init_allocated_queue+0x216/0x17f0 [ 1355.610604][T18764] __kmem_cache_alloc_node+0x4f/0x270 [ 1355.616060][T18764] ? blk_mq_init_allocated_queue+0x216/0x17f0 [ 1355.622242][T18764] kmalloc_trace+0x26/0xe0 [ 1355.626737][T18764] blk_mq_init_allocated_queue+0x216/0x17f0 [ 1355.632768][T18764] ? blk_mq_alloc_disk_for_queue+0x60/0x60 [ 1355.638657][T18764] ? blk_set_default_limits+0x17b/0x4b0 [ 1355.644292][T18764] ? blk_alloc_queue+0x4f6/0x5b0 [ 1355.649302][T18764] __blk_mq_alloc_disk+0xba/0x1e0 [ 1355.654418][T18764] loop_add+0x326/0x9a0 [ 1355.658688][T18764] loop_control_ioctl+0x124/0x590 [ 1355.663797][T18764] ? loop_set_hw_queue_depth+0x60/0x60 [ 1355.669353][T18764] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1355.674372][T18764] ? security_file_ioctl+0x7c/0xa0 [ 1355.679560][T18764] ? loop_set_hw_queue_depth+0x60/0x60 [ 1355.685114][T18764] __se_sys_ioctl+0xfa/0x170 [ 1355.689792][T18764] do_syscall_64+0x4c/0xa0 [ 1355.694294][T18764] ? clear_bhb_loop+0x60/0xb0 [ 1355.699040][T18764] ? clear_bhb_loop+0x60/0xb0 [ 1355.703786][T18764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.709761][T18764] RIP: 0033:0x7f253619e159 [ 1355.714246][T18764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.734026][T18764] RSP: 002b:00007f25370ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.742523][T18764] RAX: ffffffffffffffda RBX: 00007f2536425fa0 RCX: 00007f253619e159 [ 1355.750568][T18764] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1355.758607][T18764] RBP: 00007f253623506b R08: 0000000000000000 R09: 0000000000000000 [ 1355.766653][T18764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.774705][T18764] R13: 00007f2536426038 R14: 00007f2536425fa0 R15: 00007ffd7c75b1c8 [ 1355.782770][T18764] [ 1356.429877][T18788] capability: warning: `syz.9.3861' uses 32-bit capabilities (legacy support in use) [ 1356.469093][T18783] device bond2 entered promiscuous mode [ 1356.729007][T18796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1356.766060][T18796] device bridge2 entered promiscuous mode [ 1356.909108][T18801] loop8: detected capacity change from 0 to 512 [ 1356.948963][T18796] team0: Port device bridge2 added [ 1356.986089][T18799] bridge0: port 1(team0) entered blocking state [ 1357.004493][T18799] bridge0: port 1(team0) entered disabled state [ 1357.022129][T18801] FAT-fs (loop8): error, corrupted file size (i_pos 51, 9216) [ 1357.037082][T18799] device team0 entered promiscuous mode [ 1357.062680][T18799] device team_slave_0 entered promiscuous mode [ 1357.069286][T18799] device team_slave_1 entered promiscuous mode [ 1357.948929][T18828] device bond1 entered promiscuous mode [ 1358.291723][T18840] loop1: detected capacity change from 0 to 16 [ 1358.388191][T18840] erofs: (device loop1): mounted with root inode @ nid 36. [ 1358.495419][T18840] syz.1.3883: attempt to access beyond end of device [ 1358.495419][T18840] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1358.610369][T18840] syz.1.3883: attempt to access beyond end of device [ 1358.610369][T18840] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1358.957446][T18858] loop8: detected capacity change from 0 to 512 [ 1360.458449][T18866] futex_wake_op: syz.6.3892 tries to shift op by 144; fix this program [ 1360.485601][T18866] futex_wake_op: syz.6.3892 tries to shift op by 144; fix this program [ 1360.723850][T18906] loop8: detected capacity change from 0 to 128 [ 1360.754933][T18906] FAT-fs (loop8): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1) [ 1361.025783][ T4333] FAT-fs (loop8): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1) [ 1361.489710][T18927] loop6: detected capacity change from 0 to 764 [ 1361.777495][T18930] device bond3 entered promiscuous mode [ 1362.130092][T18946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3921'. [ 1362.350548][T18955] loop8: detected capacity change from 0 to 512 [ 1362.478389][T18959] FAULT_INJECTION: forcing a failure. [ 1362.478389][T18959] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1362.508413][T18955] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1362.553060][T18959] CPU: 0 PID: 18959 Comm: syz.1.3926 Not tainted syzkaller #0 [ 1362.560652][T18959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1362.570787][T18959] Call Trace: [ 1362.574112][T18959] [ 1362.577109][T18959] dump_stack_lvl+0x188/0x24e [ 1362.581878][T18959] ? show_regs_print_info+0x12/0x12 [ 1362.587201][T18959] ? load_image+0x410/0x410 [ 1362.591782][T18959] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1362.597853][T18959] should_fail_ex+0x390/0x4c0 [ 1362.602643][T18959] get_futex_key+0x1b1/0x1000 [ 1362.607395][T18959] ? tomoyo_path_number_perm+0x205/0x650 [ 1362.613107][T18959] ? __lock_acquire+0x7c40/0x7c40 [ 1362.618219][T18959] ? slab_free_freelist_hook+0x133/0x1b0 [ 1362.623927][T18959] ? futex_setup_timer+0xc0/0xc0 [ 1362.628943][T18959] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1362.634651][T18959] ? __kmem_cache_free+0xb6/0x200 [ 1362.639755][T18959] futex_wake+0x123/0x4f0 [ 1362.644187][T18959] ? tomoyo_path_number_perm+0x205/0x650 [ 1362.649901][T18959] ? futex_wake_mark+0x150/0x150 [ 1362.654927][T18959] do_futex+0x2e2/0x320 [ 1362.659191][T18959] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1362.665194][T18959] __se_sys_futex+0x381/0x410 [ 1362.669965][T18959] ? __x64_sys_futex+0xf0/0xf0 [ 1362.674811][T18959] ? __x64_sys_futex+0x1d/0xf0 [ 1362.679652][T18959] do_syscall_64+0x4c/0xa0 [ 1362.684149][T18959] ? clear_bhb_loop+0x60/0xb0 [ 1362.688894][T18959] ? clear_bhb_loop+0x60/0xb0 [ 1362.693648][T18959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1362.699618][T18959] RIP: 0033:0x7f12b1b9e159 [ 1362.704089][T18959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.723817][T18959] RSP: 002b:00007f12b29970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1362.732312][T18959] RAX: ffffffffffffffda RBX: 00007f12b1e25fa8 RCX: 00007f12b1b9e159 [ 1362.740351][T18959] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12b1e25fac [ 1362.748387][T18959] RBP: 00007f12b1e25fa0 R08: 00197bc07f032f08 R09: 0000000000000000 [ 1362.756431][T18959] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1362.764469][T18959] R13: 00007f12b1e26038 R14: 00007ffc5eea2150 R15: 00007ffc5eea2238 [ 1362.772531][T18959] [ 1362.789911][T18955] FAT-fs (loop8): Filesystem has been set read-only [ 1362.797449][T18967] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1362.817207][T18967] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 1363.577575][T18987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3936'. [ 1364.202938][T19003] FAULT_INJECTION: forcing a failure. [ 1364.202938][T19003] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.250825][T19003] CPU: 0 PID: 19003 Comm: syz.5.3941 Not tainted syzkaller #0 [ 1364.258410][T19003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1364.268530][T19003] Call Trace: [ 1364.271887][T19003] [ 1364.274870][T19003] dump_stack_lvl+0x188/0x24e [ 1364.279615][T19003] ? show_regs_print_info+0x12/0x12 [ 1364.284873][T19003] ? load_image+0x410/0x410 [ 1364.289445][T19003] ? __might_sleep+0xd0/0xd0 [ 1364.294099][T19003] ? __lock_acquire+0x7c40/0x7c40 [ 1364.299200][T19003] should_fail_ex+0x390/0x4c0 [ 1364.303963][T19003] should_failslab+0x5/0x20 [ 1364.308528][T19003] slab_pre_alloc_hook+0x59/0x300 [ 1364.313641][T19003] ? security_prepare_creds+0x47/0x130 [ 1364.319164][T19003] __kmem_cache_alloc_node+0x4f/0x270 [ 1364.324625][T19003] ? security_prepare_creds+0x47/0x130 [ 1364.330167][T19003] __kmalloc+0xa3/0x240 [ 1364.334404][T19003] security_prepare_creds+0x47/0x130 [ 1364.339764][T19003] prepare_creds+0x450/0x610 [ 1364.344436][T19003] __sys_setreuid+0x101/0x980 [ 1364.349189][T19003] ? syscall_enter_from_user_mode+0x21/0x80 [ 1364.355150][T19003] ? lockdep_hardirqs_on+0x94/0x140 [ 1364.360417][T19003] do_syscall_64+0x4c/0xa0 [ 1364.364898][T19003] ? clear_bhb_loop+0x60/0xb0 [ 1364.369642][T19003] ? clear_bhb_loop+0x60/0xb0 [ 1364.374400][T19003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1364.380376][T19003] RIP: 0033:0x7fb40739e159 [ 1364.384850][T19003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.404525][T19003] RSP: 002b:00007fb4081e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1364.413025][T19003] RAX: ffffffffffffffda RBX: 00007fb407625fa0 RCX: 00007fb40739e159 [ 1364.421063][T19003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 1364.429130][T19003] RBP: 00007fb40743506b R08: 0000000000000000 R09: 0000000000000000 [ 1364.437199][T19003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1364.445271][T19003] R13: 00007fb407626038 R14: 00007fb407625fa0 R15: 00007ffd854baed8 [ 1364.453336][T19003] [ 1364.632554][T19015] device bridge5 entered promiscuous mode [ 1365.094715][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3949'. [ 1366.313313][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3963'. [ 1366.544410][T19070] loop5: detected capacity change from 0 to 256 [ 1366.671494][T19070] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 1366.718248][T19070] FAT-fs (loop5): Filesystem has been set read-only [ 1366.754756][T19074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1366.798971][T19070] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1367.390101][T19090] device bond2 entered promiscuous mode [ 1368.216547][T19120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1368.485103][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.491580][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.256527][T19147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1369.309788][T19156] loop9: detected capacity change from 0 to 256 [ 1369.327344][T19156] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 1369.345846][T19156] FAT-fs (loop9): Filesystem has been set read-only [ 1369.371605][T19156] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1369.399457][T19147] device bond2 entered promiscuous mode [ 1369.451586][T19147] team0: Failed to send options change via netlink (err -105) [ 1369.487462][T19147] team0: Port device bond2 added [ 1369.741436][T19165] loop9: detected capacity change from 0 to 512 [ 1369.791432][T19165] (unnamed net_device) (uninitialized): peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1369.865816][T19165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1370.781111][T19201] loop6: detected capacity change from 0 to 256 [ 1370.856274][T19205] FAULT_INJECTION: forcing a failure. [ 1370.856274][T19205] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.943787][T19205] CPU: 0 PID: 19205 Comm: syz.9.4011 Not tainted syzkaller #0 [ 1370.951379][T19205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1370.961506][T19205] Call Trace: [ 1370.964840][T19205] [ 1370.967844][T19205] dump_stack_lvl+0x188/0x24e [ 1370.972602][T19205] ? show_regs_print_info+0x12/0x12 [ 1370.977944][T19205] ? load_image+0x410/0x410 [ 1370.982522][T19205] ? __might_sleep+0xd0/0xd0 [ 1370.987171][T19205] ? __lock_acquire+0x7c40/0x7c40 [ 1370.992274][T19205] should_fail_ex+0x390/0x4c0 [ 1370.997037][T19205] should_failslab+0x5/0x20 [ 1371.001598][T19205] slab_pre_alloc_hook+0x59/0x300 [ 1371.006694][T19205] kmem_cache_alloc+0x56/0x2f0 [ 1371.011524][T19205] ? sk_prot_alloc+0x57/0x210 [ 1371.016269][T19205] sk_prot_alloc+0x57/0x210 [ 1371.020864][T19205] ? sk_alloc+0x20/0x330 [ 1371.025174][T19205] sk_alloc+0x36/0x330 [ 1371.029313][T19205] inet6_create+0x7ad/0x11b0 [ 1371.034080][T19205] ? inet6_create+0x7c/0x11b0 [ 1371.038836][T19205] __sock_create+0x49a/0x940 [ 1371.043507][T19205] __sys_socket+0xc4/0x190 [ 1371.047990][T19205] __x64_sys_socket+0x76/0x80 [ 1371.052744][T19205] do_syscall_64+0x4c/0xa0 [ 1371.057220][T19205] ? clear_bhb_loop+0x60/0xb0 [ 1371.061970][T19205] ? clear_bhb_loop+0x60/0xb0 [ 1371.066712][T19205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.072681][T19205] RIP: 0033:0x7f253619e159 [ 1371.077150][T19205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.096829][T19205] RSP: 002b:00007f25370ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1371.105318][T19205] RAX: ffffffffffffffda RBX: 00007f2536425fa0 RCX: 00007f253619e159 [ 1371.113404][T19205] RDX: 00000000000000ff RSI: 0000000000000003 RDI: 000000000000000a [ 1371.121447][T19205] RBP: 00007f253623506b R08: 0000000000000000 R09: 0000000000000000 [ 1371.129499][T19205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.137542][T19205] R13: 00007f2536426038 R14: 00007f2536425fa0 R15: 00007ffd7c75b1c8 [ 1371.145591][T19205] [ 1372.175088][T19236] loop1: detected capacity change from 0 to 256 [ 1372.362562][T19240] loop5: detected capacity change from 0 to 16 [ 1372.416473][T19240] erofs: (device loop5): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 1372.475218][T19240] device-mapper: ioctl: Invalid ioctl structure: name 6OD6:*, dev d79aa2b79dcada71 [ 1373.746823][T19277] loop6: detected capacity change from 0 to 256 [ 1373.857832][T19278] device bond3 entered promiscuous mode [ 1376.070202][T19339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1376.171760][T19339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1376.790351][T19361] FAULT_INJECTION: forcing a failure. [ 1376.790351][T19361] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1376.860984][T19361] CPU: 0 PID: 19361 Comm: syz.1.4073 Not tainted syzkaller #0 [ 1376.868583][T19361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1376.878711][T19361] Call Trace: [ 1376.882066][T19361] [ 1376.885050][T19361] dump_stack_lvl+0x188/0x24e [ 1376.889801][T19361] ? release_firmware_map_entry+0x187/0x187 [ 1376.895773][T19361] ? show_regs_print_info+0x12/0x12 [ 1376.901044][T19361] ? load_image+0x410/0x410 [ 1376.905634][T19361] ? preempt_schedule_common+0xa5/0xd0 [ 1376.911181][T19361] ? verify_lock_unused+0x140/0x140 [ 1376.916495][T19361] should_fail_ex+0x390/0x4c0 [ 1376.921296][T19361] get_futex_key+0x1b1/0x1000 [ 1376.926049][T19361] ? futex_setup_timer+0xc0/0xc0 [ 1376.931056][T19361] ? bpf_obj_get_next_id+0x11a/0x1c0 [ 1376.936536][T19361] futex_wake+0x123/0x4f0 [ 1376.940954][T19361] ? _local_bh_enable+0xa0/0xa0 [ 1376.945883][T19361] ? futex_wake_mark+0x150/0x150 [ 1376.950945][T19361] ? bpf_obj_get_next_id+0x15d/0x1c0 [ 1376.956325][T19361] ? bpf_prog_test_run+0x390/0x390 [ 1376.961524][T19361] do_futex+0x2e2/0x320 [ 1376.965756][T19361] ? security_bpf+0x7a/0xa0 [ 1376.970393][T19361] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1376.976382][T19361] ? bpf_link_show_fdinfo+0x380/0x380 [ 1376.981863][T19361] __se_sys_futex+0x381/0x410 [ 1376.986631][T19361] ? __x64_sys_futex+0xf0/0xf0 [ 1376.991485][T19361] ? __x64_sys_futex+0x1d/0xf0 [ 1376.996332][T19361] do_syscall_64+0x4c/0xa0 [ 1377.000868][T19361] ? clear_bhb_loop+0x60/0xb0 [ 1377.005629][T19361] ? clear_bhb_loop+0x60/0xb0 [ 1377.010396][T19361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.016380][T19361] RIP: 0033:0x7f12b1b9e159 [ 1377.020871][T19361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.040551][T19361] RSP: 002b:00007f12b29970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1377.049053][T19361] RAX: ffffffffffffffda RBX: 00007f12b1e25fa8 RCX: 00007f12b1b9e159 [ 1377.057142][T19361] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12b1e25fac [ 1377.065213][T19361] RBP: 00007f12b1e25fa0 R08: 002bf5fb07e9e6d2 R09: 0000000000000000 [ 1377.073257][T19361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1377.081301][T19361] R13: 00007f12b1e26038 R14: 00007ffc5eea2150 R15: 00007ffc5eea2238 [ 1377.089361][T19361] [ 1378.049300][T19387] device bridge0 entered promiscuous mode [ 1378.445650][T19398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1378.557996][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4085'. [ 1378.586273][T19403] device bridge_slave_1 left promiscuous mode [ 1378.626142][T19403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.680329][T19403] device bridge_slave_0 left promiscuous mode [ 1378.718001][T19403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.875791][T19409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1379.550362][T19433] netlink: 'syz.6.4096': attribute type 1 has an invalid length. [ 1379.590848][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4096'. [ 1379.642235][T19433] netlink: 'syz.6.4096': attribute type 1 has an invalid length. [ 1379.680242][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4096'. [ 1379.716556][T19433] iwpm_send_hello: Unable to send a nlmsg [ 1379.760630][T19438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1380.251609][T19455] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 1380.725127][T19475] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1380.910143][T19479] netlink: 'syz.9.4115': attribute type 1 has an invalid length. [ 1380.919004][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4115'. [ 1380.945493][T19479] netlink: 'syz.9.4115': attribute type 1 has an invalid length. [ 1380.987211][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4115'. [ 1381.088555][T19479] iwpm_send_hello: Unable to send a nlmsg [ 1381.799303][T19513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1382.449634][T19533] FAULT_INJECTION: forcing a failure. [ 1382.449634][T19533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.494216][T19533] CPU: 1 PID: 19533 Comm: syz.5.4135 Not tainted syzkaller #0 [ 1382.501805][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1382.511927][T19533] Call Trace: [ 1382.515259][T19533] [ 1382.518246][T19533] dump_stack_lvl+0x188/0x24e [ 1382.522999][T19533] ? show_regs_print_info+0x12/0x12 [ 1382.528258][T19533] ? load_image+0x410/0x410 [ 1382.532833][T19533] ? __lock_acquire+0x7c40/0x7c40 [ 1382.537959][T19533] should_fail_ex+0x390/0x4c0 [ 1382.542718][T19533] _copy_from_user+0x2c/0x170 [ 1382.547464][T19533] __sys_bpf+0x2ea/0x780 [ 1382.551777][T19533] ? bpf_link_show_fdinfo+0x380/0x380 [ 1382.557229][T19533] ? lock_chain_count+0x20/0x20 [ 1382.562169][T19533] __x64_sys_bpf+0x78/0x90 [ 1382.566694][T19533] do_syscall_64+0x4c/0xa0 [ 1382.571164][T19533] ? clear_bhb_loop+0x60/0xb0 [ 1382.575894][T19533] ? clear_bhb_loop+0x60/0xb0 [ 1382.580649][T19533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.586635][T19533] RIP: 0033:0x7fb40739e159 [ 1382.591112][T19533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.610807][T19533] RSP: 002b:00007fb4081e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1382.619309][T19533] RAX: ffffffffffffffda RBX: 00007fb407625fa0 RCX: 00007fb40739e159 [ 1382.627392][T19533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 1382.635424][T19533] RBP: 00007fb40743506b R08: 0000000000000000 R09: 0000000000000000 [ 1382.643458][T19533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.651507][T19533] R13: 00007fb407626038 R14: 00007fb407625fa0 R15: 00007ffd854baed8 [ 1382.659562][T19533] [ 1382.862666][T19545] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1383.895768][T19583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1384.281825][T19597] FAULT_INJECTION: forcing a failure. [ 1384.281825][T19597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.340851][T19597] CPU: 1 PID: 19597 Comm: syz.5.4157 Not tainted syzkaller #0 [ 1384.348430][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1384.358567][T19597] Call Trace: [ 1384.361900][T19597] [ 1384.364891][T19597] dump_stack_lvl+0x188/0x24e [ 1384.369634][T19597] ? show_regs_print_info+0x12/0x12 [ 1384.374901][T19597] ? load_image+0x410/0x410 [ 1384.379490][T19597] ? __lock_acquire+0x7c40/0x7c40 [ 1384.384607][T19597] should_fail_ex+0x390/0x4c0 [ 1384.389364][T19597] _copy_from_user+0x2c/0x170 [ 1384.394168][T19597] __sys_bpf+0x2ea/0x780 [ 1384.398495][T19597] ? bpf_link_show_fdinfo+0x380/0x380 [ 1384.403955][T19597] ? lock_chain_count+0x20/0x20 [ 1384.408892][T19597] __x64_sys_bpf+0x78/0x90 [ 1384.413387][T19597] do_syscall_64+0x4c/0xa0 [ 1384.417870][T19597] ? clear_bhb_loop+0x60/0xb0 [ 1384.422602][T19597] ? clear_bhb_loop+0x60/0xb0 [ 1384.427341][T19597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.433321][T19597] RIP: 0033:0x7fb40739e159 [ 1384.437868][T19597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.457544][T19597] RSP: 002b:00007fb4081e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1384.466029][T19597] RAX: ffffffffffffffda RBX: 00007fb407625fa0 RCX: 00007fb40739e159 [ 1384.474055][T19597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 1384.482078][T19597] RBP: 00007fb40743506b R08: 0000000000000000 R09: 0000000000000000 [ 1384.490106][T19597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.498137][T19597] R13: 00007fb407626038 R14: 00007fb407625fa0 R15: 00007ffd854baed8 [ 1384.506190][T19597] [ 1384.802501][T19604] loop8: detected capacity change from 0 to 8192 [ 1384.918538][T19614] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4163'. [ 1385.214808][T19621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1385.597166][T19634] FAULT_INJECTION: forcing a failure. [ 1385.597166][T19634] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.644270][T19634] CPU: 1 PID: 19634 Comm: syz.9.4171 Not tainted syzkaller #0 [ 1385.651863][T19634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1385.661985][T19634] Call Trace: [ 1385.665317][T19634] [ 1385.668337][T19634] dump_stack_lvl+0x188/0x24e [ 1385.673139][T19634] ? show_regs_print_info+0x12/0x12 [ 1385.678403][T19634] ? load_image+0x410/0x410 [ 1385.682972][T19634] ? __might_sleep+0xd0/0xd0 [ 1385.687629][T19634] ? __lock_acquire+0x7c40/0x7c40 [ 1385.692731][T19634] should_fail_ex+0x390/0x4c0 [ 1385.697486][T19634] should_failslab+0x5/0x20 [ 1385.702048][T19634] slab_pre_alloc_hook+0x59/0x300 [ 1385.707139][T19634] ? __se_sys_memfd_create+0xee/0x340 [ 1385.712617][T19634] __kmem_cache_alloc_node+0x4f/0x270 [ 1385.718086][T19634] ? __se_sys_memfd_create+0xee/0x340 [ 1385.723525][T19634] __kmalloc+0xa3/0x240 [ 1385.727772][T19634] __se_sys_memfd_create+0xee/0x340 [ 1385.733048][T19634] do_syscall_64+0x4c/0xa0 [ 1385.737521][T19634] ? clear_bhb_loop+0x60/0xb0 [ 1385.742252][T19634] ? clear_bhb_loop+0x60/0xb0 [ 1385.746992][T19634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1385.752955][T19634] RIP: 0033:0x7f253619e159 [ 1385.757428][T19634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.777096][T19634] RSP: 002b:00007f25370ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1385.785560][T19634] RAX: ffffffffffffffda RBX: 00007f2536425fa0 RCX: 00007f253619e159 [ 1385.793574][T19634] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 1385.801583][T19634] RBP: 00007f253623506b R08: 0000000000000000 R09: 0000000000000000 [ 1385.809592][T19634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.817603][T19634] R13: 00007f2536426038 R14: 00007f2536425fa0 R15: 00007ffd7c75b1c8 [ 1385.825626][T19634] [ 1386.472997][T19651] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 1386.605066][T19656] FAULT_INJECTION: forcing a failure. [ 1386.605066][T19656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.663335][T19647] loop6: detected capacity change from 0 to 8192 [ 1386.675729][T19656] CPU: 0 PID: 19656 Comm: syz.8.4179 Not tainted syzkaller #0 [ 1386.683308][T19656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.693427][T19656] Call Trace: [ 1386.696764][T19656] [ 1386.699750][T19656] dump_stack_lvl+0x188/0x24e [ 1386.704492][T19656] ? show_regs_print_info+0x12/0x12 [ 1386.709769][T19656] ? load_image+0x410/0x410 [ 1386.714351][T19656] ? __lock_acquire+0x7c40/0x7c40 [ 1386.719451][T19656] should_fail_ex+0x390/0x4c0 [ 1386.724215][T19656] _copy_from_user+0x2c/0x170 [ 1386.728987][T19656] __sys_bpf+0x2ea/0x780 [ 1386.733305][T19656] ? bpf_link_show_fdinfo+0x380/0x380 [ 1386.738765][T19656] ? lock_chain_count+0x20/0x20 [ 1386.743715][T19656] __x64_sys_bpf+0x78/0x90 [ 1386.748210][T19656] do_syscall_64+0x4c/0xa0 [ 1386.752699][T19656] ? clear_bhb_loop+0x60/0xb0 [ 1386.757440][T19656] ? clear_bhb_loop+0x60/0xb0 [ 1386.762186][T19656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.768169][T19656] RIP: 0033:0x7f5271f9e159 [ 1386.772701][T19656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.792549][T19656] RSP: 002b:00007f5272dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1386.801028][T19656] RAX: ffffffffffffffda RBX: 00007f5272225fa0 RCX: 00007f5271f9e159 [ 1386.809066][T19656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 1386.817110][T19656] RBP: 00007f527203506b R08: 0000000000000000 R09: 0000000000000000 [ 1386.825162][T19656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.833225][T19656] R13: 00007f5272226038 R14: 00007f5272225fa0 R15: 00007ffdbae18c58 [ 1386.841279][T19656] [ 1387.146732][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1387.254088][T19661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1387.779787][T19690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4189'. [ 1388.039709][T19698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1388.118280][T19700] loop5: detected capacity change from 0 to 128 [ 1388.238880][T19703] device bond3 entered promiscuous mode [ 1388.920025][T19724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4203'. [ 1388.994931][T19730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1389.400170][T19742] device bond3 entered promiscuous mode [ 1389.957459][T19769] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4219'. [ 1389.985721][T19770] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1390.480563][T19787] device bond4 entered promiscuous mode [ 1391.007558][T19809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4235'. [ 1391.237804][T19815] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1391.712086][T19830] device bond4 entered promiscuous mode [ 1392.073863][T19858] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4251'. [ 1392.357498][T19869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1393.056165][T19888] device bond5 entered promiscuous mode [ 1393.084791][T19899] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4264'. [ 1393.377625][T19907] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1394.100442][T19934] device bond2 entered promiscuous mode [ 1394.269107][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1394.352511][T19948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4284'. [ 1394.377496][T19948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4284'. [ 1394.419795][T19948] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 1394.443745][T19950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1394.466966][T19948] iwpm_hello_cb: Unable to parse nlmsg [ 1394.803038][T19960] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 1395.294539][T19974] device bond5 entered promiscuous mode [ 1395.324331][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 1395.468137][T19989] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4300'. [ 1395.498606][T19989] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4300'. [ 1395.575744][T19989] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 1395.597755][T19992] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1395.623171][T19989] iwpm_hello_cb: Unable to parse nlmsg [ 1396.418857][T20016] device bond6 entered promiscuous mode [ 1396.461429][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4314'. [ 1396.718050][T20033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1396.794334][T20037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4318'. [ 1396.832869][T20037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4318'. [ 1396.864539][T20037] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 1396.940995][T20037] iwpm_hello_cb: Unable to parse nlmsg [ 1397.474960][T20056] device bond4 entered promiscuous mode [ 1397.633637][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4331'. [ 1397.937388][T20077] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1398.755195][T20110] device bond5 entered promiscuous mode [ 1398.768218][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4347'. [ 1399.129313][T20129] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1399.827431][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4365'. [ 1399.954669][T20159] device bond6 entered promiscuous mode [ 1400.204326][T20174] FAULT_INJECTION: forcing a failure. [ 1400.204326][T20174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1400.269354][T20174] CPU: 1 PID: 20174 Comm: syz.9.4370 Not tainted syzkaller #0 [ 1400.276926][T20174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1400.287047][T20174] Call Trace: [ 1400.290384][T20174] [ 1400.293365][T20174] dump_stack_lvl+0x188/0x24e [ 1400.298116][T20174] ? show_regs_print_info+0x12/0x12 [ 1400.303378][T20174] ? load_image+0x410/0x410 [ 1400.308005][T20174] ? __lock_acquire+0x7c40/0x7c40 [ 1400.313124][T20174] should_fail_ex+0x390/0x4c0 [ 1400.317877][T20174] _copy_from_user+0x2c/0x170 [ 1400.322628][T20174] __sys_bpf+0x2ea/0x780 [ 1400.326943][T20174] ? bpf_link_show_fdinfo+0x380/0x380 [ 1400.332405][T20174] ? lock_chain_count+0x20/0x20 [ 1400.337326][T20174] __x64_sys_bpf+0x78/0x90 [ 1400.341807][T20174] do_syscall_64+0x4c/0xa0 [ 1400.346287][T20174] ? clear_bhb_loop+0x60/0xb0 [ 1400.351041][T20174] ? clear_bhb_loop+0x60/0xb0 [ 1400.355791][T20174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.361767][T20174] RIP: 0033:0x7f253619e159 [ 1400.366247][T20174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.385924][T20174] RSP: 002b:00007f25370ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1400.394409][T20174] RAX: ffffffffffffffda RBX: 00007f2536425fa0 RCX: 00007f253619e159 [ 1400.402439][T20174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 1400.410489][T20174] RBP: 00007f253623506b R08: 0000000000000000 R09: 0000000000000000 [ 1400.418524][T20174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.426556][T20174] R13: 00007f2536426038 R14: 00007f2536425fa0 R15: 00007ffd7c75b1c8 [ 1400.434610][T20174] [ 1400.797369][T20194] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 1401.299444][T20209] FAULT_INJECTION: forcing a failure. [ 1401.299444][T20209] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.349311][T20209] CPU: 1 PID: 20209 Comm: syz.9.4379 Not tainted syzkaller #0 [ 1401.356920][T20209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1401.367066][T20209] Call Trace: [ 1401.370438][T20209] [ 1401.373415][T20209] dump_stack_lvl+0x188/0x24e [ 1401.378165][T20209] ? show_regs_print_info+0x12/0x12 [ 1401.383438][T20209] ? load_image+0x410/0x410 [ 1401.388024][T20209] ? __might_sleep+0xd0/0xd0 [ 1401.392687][T20209] ? __lock_acquire+0x7c40/0x7c40 [ 1401.397790][T20209] should_fail_ex+0x390/0x4c0 [ 1401.402545][T20209] should_failslab+0x5/0x20 [ 1401.407117][T20209] slab_pre_alloc_hook+0x59/0x300 [ 1401.412219][T20209] ? __se_sys_memfd_create+0xee/0x340 [ 1401.417673][T20209] __kmem_cache_alloc_node+0x4f/0x270 [ 1401.423126][T20209] ? __se_sys_memfd_create+0xee/0x340 [ 1401.428565][T20209] __kmalloc+0xa3/0x240 [ 1401.432807][T20209] __se_sys_memfd_create+0xee/0x340 [ 1401.438086][T20209] do_syscall_64+0x4c/0xa0 [ 1401.442579][T20209] ? clear_bhb_loop+0x60/0xb0 [ 1401.447345][T20209] ? clear_bhb_loop+0x60/0xb0 [ 1401.452089][T20209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.458072][T20209] RIP: 0033:0x7f253619e159 [ 1401.462545][T20209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.482223][T20209] RSP: 002b:00007f25370ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1401.490710][T20209] RAX: ffffffffffffffda RBX: 00007f2536425fa0 RCX: 00007f253619e159 [ 1401.498753][T20209] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 1401.506794][T20209] RBP: 00007f253623506b R08: 0000000000000000 R09: 0000000000000000 [ 1401.514832][T20209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.522865][T20209] R13: 00007f2536426038 R14: 00007f2536425fa0 R15: 00007ffd7c75b1c8 [ 1401.530922][T20209] [ 1401.552461][T20203] loop8: detected capacity change from 0 to 8192 [ 1401.883354][T20220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1402.811516][T20257] FAULT_INJECTION: forcing a failure. [ 1402.811516][T20257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1402.824704][T20257] CPU: 0 PID: 20257 Comm: syz.6.4401 Not tainted syzkaller #0 [ 1402.832240][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1402.833557][T20247] device bond7 entered promiscuous mode [ 1402.842329][T20257] Call Trace: [ 1402.842344][T20257] [ 1402.842356][T20257] dump_stack_lvl+0x188/0x24e [ 1402.842391][T20257] ? release_firmware_map_entry+0x187/0x187 [ 1402.842419][T20257] ? show_regs_print_info+0x12/0x12 [ 1402.842443][T20257] ? load_image+0x410/0x410 [ 1402.874739][T20257] ? preempt_schedule_common+0xa5/0xd0 [ 1402.880288][T20257] ? verify_lock_unused+0x140/0x140 [ 1402.885569][T20257] should_fail_ex+0x390/0x4c0 [ 1402.890331][T20257] get_futex_key+0x1b1/0x1000 [ 1402.895081][T20257] ? futex_setup_timer+0xc0/0xc0 [ 1402.900080][T20257] ? bpf_obj_get_next_id+0x11a/0x1c0 [ 1402.905536][T20257] futex_wake+0x123/0x4f0 [ 1402.909939][T20257] ? _local_bh_enable+0xa0/0xa0 [ 1402.914856][T20257] ? futex_wake_mark+0x150/0x150 [ 1402.919866][T20257] ? bpf_obj_get_next_id+0x15d/0x1c0 [ 1402.925227][T20257] ? bpf_prog_test_run+0x390/0x390 [ 1402.930412][T20257] do_futex+0x2e2/0x320 [ 1402.934630][T20257] ? security_bpf+0x7a/0xa0 [ 1402.939215][T20257] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1402.945187][T20257] ? bpf_link_show_fdinfo+0x380/0x380 [ 1402.950647][T20257] __se_sys_futex+0x381/0x410 [ 1402.955397][T20257] ? __x64_sys_futex+0xf0/0xf0 [ 1402.960229][T20257] ? __x64_sys_futex+0x1d/0xf0 [ 1402.965049][T20257] do_syscall_64+0x4c/0xa0 [ 1402.969519][T20257] ? clear_bhb_loop+0x60/0xb0 [ 1402.974254][T20257] ? clear_bhb_loop+0x60/0xb0 [ 1402.979004][T20257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1402.984994][T20257] RIP: 0033:0x7fbd1479e159 [ 1402.989459][T20257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.009131][T20257] RSP: 002b:00007fbd156e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1403.017621][T20257] RAX: ffffffffffffffda RBX: 00007fbd14a25fa8 RCX: 00007fbd1479e159 [ 1403.025690][T20257] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd14a25fac [ 1403.033728][T20257] RBP: 00007fbd14a25fa0 R08: 002dbfc069c56514 R09: 0000000000000000 [ 1403.041786][T20257] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1403.049833][T20257] R13: 00007fbd14a26038 R14: 00007ffc8e678410 R15: 00007ffc8e6784f8 [ 1403.057895][T20257] [ 1403.313604][T20266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1404.248018][T20300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1404.525977][T20313] FAULT_INJECTION: forcing a failure. [ 1404.525977][T20313] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1404.545737][T20304] device bond4 entered promiscuous mode [ 1404.593794][T20313] CPU: 0 PID: 20313 Comm: syz.1.4422 Not tainted syzkaller #0 [ 1404.601369][T20313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1404.611485][T20313] Call Trace: [ 1404.614812][T20313] [ 1404.617831][T20313] dump_stack_lvl+0x188/0x24e [ 1404.622593][T20313] ? release_firmware_map_entry+0x187/0x187 [ 1404.628572][T20313] ? show_regs_print_info+0x12/0x12 [ 1404.633838][T20313] ? load_image+0x410/0x410 [ 1404.638454][T20313] ? preempt_schedule_common+0xa5/0xd0 [ 1404.643984][T20313] ? verify_lock_unused+0x140/0x140 [ 1404.649265][T20313] should_fail_ex+0x390/0x4c0 [ 1404.654035][T20313] get_futex_key+0x1b1/0x1000 [ 1404.658777][T20313] ? futex_setup_timer+0xc0/0xc0 [ 1404.663778][T20313] ? bpf_obj_get_next_id+0x11a/0x1c0 [ 1404.669152][T20313] futex_wake+0x123/0x4f0 [ 1404.673565][T20313] ? _local_bh_enable+0xa0/0xa0 [ 1404.678488][T20313] ? futex_wake_mark+0x150/0x150 [ 1404.683552][T20313] ? bpf_obj_get_next_id+0x15d/0x1c0 [ 1404.688974][T20313] ? bpf_prog_test_run+0x390/0x390 [ 1404.694172][T20313] do_futex+0x2e2/0x320 [ 1404.698390][T20313] ? security_bpf+0x7a/0xa0 [ 1404.702972][T20313] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1404.708927][T20313] ? bpf_link_show_fdinfo+0x380/0x380 [ 1404.714394][T20313] __se_sys_futex+0x381/0x410 [ 1404.719141][T20313] ? __x64_sys_futex+0xf0/0xf0 [ 1404.724022][T20313] ? __x64_sys_futex+0x1d/0xf0 [ 1404.728884][T20313] do_syscall_64+0x4c/0xa0 [ 1404.733369][T20313] ? clear_bhb_loop+0x60/0xb0 [ 1404.738104][T20313] ? clear_bhb_loop+0x60/0xb0 [ 1404.742840][T20313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.748798][T20313] RIP: 0033:0x7f12b1b9e159 [ 1404.753260][T20313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.772912][T20313] RSP: 002b:00007f12b29970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1404.781370][T20313] RAX: ffffffffffffffda RBX: 00007f12b1e25fa8 RCX: 00007f12b1b9e159 [ 1404.789384][T20313] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f12b1e25fac [ 1404.797430][T20313] RBP: 00007f12b1e25fa0 R08: 001c76b4096d0a56 R09: 0000000000000000 [ 1404.805449][T20313] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1404.813462][T20313] R13: 00007f12b1e26038 R14: 00007ffc5eea2150 R15: 00007ffc5eea2238 [ 1404.821484][T20313] [ 1405.328138][T20335] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 1405.666428][T20346] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1406.599872][T20382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1407.023805][T20399] FAULT_INJECTION: forcing a failure. [ 1407.023805][T20399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1407.106734][T20399] CPU: 0 PID: 20399 Comm: syz.1.4457 Not tainted syzkaller #0 [ 1407.114350][T20399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1407.124472][T20399] Call Trace: [ 1407.127806][T20399] [ 1407.130791][T20399] dump_stack_lvl+0x188/0x24e [ 1407.135533][T20399] ? show_regs_print_info+0x12/0x12 [ 1407.140802][T20399] ? load_image+0x410/0x410 [ 1407.145387][T20399] ? __lock_acquire+0x7c40/0x7c40 [ 1407.150527][T20399] should_fail_ex+0x390/0x4c0 [ 1407.155293][T20399] _copy_from_user+0x2c/0x170 [ 1407.160040][T20399] __sys_bpf+0x2ea/0x780 [ 1407.164364][T20399] ? bpf_link_show_fdinfo+0x380/0x380 [ 1407.169832][T20399] ? lock_chain_count+0x20/0x20 [ 1407.174756][T20399] __x64_sys_bpf+0x78/0x90 [ 1407.179249][T20399] do_syscall_64+0x4c/0xa0 [ 1407.183730][T20399] ? clear_bhb_loop+0x60/0xb0 [ 1407.188475][T20399] ? clear_bhb_loop+0x60/0xb0 [ 1407.193231][T20399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.199216][T20399] RIP: 0033:0x7f12b1b9e159 [ 1407.203694][T20399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.223412][T20399] RSP: 002b:00007f12b2997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1407.231926][T20399] RAX: ffffffffffffffda RBX: 00007f12b1e25fa0 RCX: 00007f12b1b9e159 [ 1407.239962][T20399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 1407.247994][T20399] RBP: 00007f12b1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1407.256046][T20399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.264085][T20399] R13: 00007f12b1e26038 R14: 00007f12b1e25fa0 R15: 00007ffc5eea2238 [ 1407.272153][T20399] [ 1407.680331][T20420] ip6_tables: ip6tables: counters copy to user failed while replacing table serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.