last executing test programs: 3m33.825348578s ago: executing program 32 (id=148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd0fffc02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) 3m30.998149495s ago: executing program 33 (id=161): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) 3m6.769845049s ago: executing program 34 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) 1m56.346429007s ago: executing program 7 (id=745): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x2010006, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000340)={0xa, 0x4e24, 0x8, @loopback, 0x8004}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="88", 0x1}], 0x1}, 0x4048043) write$P9_RAUTH(r1, &(0x7f0000000400)={0x14, 0x67, 0x2, {0x4, 0x3, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000540)={0x7, 0x1b, 0x1}, 0x44201030) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0xfe, 0x1, 0x2}]}, 0x10) splice(r2, 0x0, r0, 0x0, 0x20000000000001, 0x6) 1m55.33872994s ago: executing program 7 (id=751): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000240)=""/157, 0x9d) 1m55.055200567s ago: executing program 7 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="03030800030016000c004f"], 0x665) 1m54.318667425s ago: executing program 7 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x2f}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x2) statx(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2000, 0x800, 0x0) 1m54.09234015s ago: executing program 7 (id=761): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1m53.148603113s ago: executing program 7 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2ca60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.714674205s ago: executing program 35 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2ca60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m36.836141036s ago: executing program 6 (id=909): syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1, 0x4, 0xc2, 0x4f, 0x40, 0x1, 0x80, 0x1, 0x7f, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa7f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x22, 0x6, 0x1}, {0x1ff, 0x7, 0xa, 0x0, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x68, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0x38c9, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x4, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m36.25986867s ago: executing program 6 (id=913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6, {[@window={0xe, 0x3}, @md5sig={0x13, 0x12, "e0ca6871dbaba79b85d051e74708a16c"}]}}}}}}, 0x4e) 1m35.800145101s ago: executing program 6 (id=915): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x3}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000180)='asymmetric\x00', 0x25c0, &(0x7f00000001c0)={@_ha_fsid={[0xe3a, 0x9]}, {0x3, 0xfc4, 0x8}}, 0x9, &(0x7f0000000780), &(0x7f00000007c0)}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 1m35.191666216s ago: executing program 6 (id=916): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f00000001c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '\\*&}{@'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@uid_eq}]}, 0x1, 0x539, &(0x7f0000002d40)="$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") mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000b00)='./file0/../file0\x00', &(0x7f0000000b40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000b80)='./file0/../file0\x00', &(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000c00)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000c40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000d00)={0x2020}, 0x2020) 1m34.865883014s ago: executing program 6 (id=918): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001a80)={0x1, &(0x7f0000001ac0)=[{0x6, 0x7, 0x8}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000580)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 1m34.393499905s ago: executing program 5 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x46, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x9, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0x200000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.308053757s ago: executing program 6 (id=925): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x5514, &(0x7f0000000180)={0x0, 0xd1d6, 0x400, 0xfffefffe, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x10000}}, 0x18) syz_open_dev$usbfs(&(0x7f0000001100), 0x1ff, 0x402) syz_open_procfs(0x0, &(0x7f0000002680)='fd/3\x00') syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000026c0)={0x8, 0x8001, 0x103, 0x300, 0x8, 0x1, 0x9c28}, 0x0, &(0x7f0000002700)={0x3ff, 0x4000000000002, 0x8000000000000, 0xe078, 0x0, 0xfffffffffffffffe, 0x3, 0x9}, 0x0, 0x0) 1m33.839094598s ago: executing program 36 (id=925): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x5514, &(0x7f0000000180)={0x0, 0xd1d6, 0x400, 0xfffefffe, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x10000}}, 0x18) syz_open_dev$usbfs(&(0x7f0000001100), 0x1ff, 0x402) syz_open_procfs(0x0, &(0x7f0000002680)='fd/3\x00') syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000026c0)={0x8, 0x8001, 0x103, 0x300, 0x8, 0x1, 0x9c28}, 0x0, &(0x7f0000002700)={0x3ff, 0x4000000000002, 0x8000000000000, 0xe078, 0x0, 0xfffffffffffffffe, 0x3, 0x9}, 0x0, 0x0) 1m33.81460581s ago: executing program 5 (id=928): socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681) r0 = syz_ublk_setup_io_uring(0x18, &(0x7f0000000500)={0x0, 0x970b, 0x1000, 0x7ffffff, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x3, 0x253}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x4c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 1m32.654707247s ago: executing program 5 (id=934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 1m31.816186598s ago: executing program 5 (id=939): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x44000, 0x0) 1m31.549064844s ago: executing program 5 (id=942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0x1, 0x15, 0x9, 0x6, 0x1000, 0x4b, 0x0, 0x4, 0x0, 0x5, 0x2, 0xf9, 0x5, 0xfffffffffffffffe, 0x4], 0x0, 0x1019c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m31.000189937s ago: executing program 5 (id=944): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x1, &(0x7f00000012c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)='N', 0x1, 0x200000000004}]) 1m30.630824046s ago: executing program 37 (id=944): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x1, &(0x7f00000012c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)='N', 0x1, 0x200000000004}]) 1m1.585884486s ago: executing program 4 (id=1136): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004506, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10a) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) 1m1.061152128s ago: executing program 4 (id=1141): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) close(r1) 1m0.616177779s ago: executing program 4 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x147) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000240)) 1m0.16140232s ago: executing program 4 (id=1147): pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000001bc0)='./file0\x00', 0x8052, &(0x7f0000001c00)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x1, 0x4e1, &(0x7f0000001c80)="$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") r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x14000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x17f) r3 = syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0xa0, &(0x7f0000000500)=ANY=[], 0x1, 0x0, 0x0) getdents(r3, 0x0, 0x0) 58.810359413s ago: executing program 4 (id=1154): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x300884c, &(0x7f0000000240)={[{@debug}]}, 0x3, 0x515, &(0x7f0000000b40)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x16) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) fallocate(0xffffffffffffffff, 0x10, 0x10c01, 0x8000) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x8000) 58.028510031s ago: executing program 4 (id=1160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000940)="96", 0x1) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x20) 57.317119709s ago: executing program 38 (id=1160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) setsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f0000000940)="96", 0x1) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x20) 19.474752041s ago: executing program 8 (id=1306): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000f80)='system.posix_acl_access\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000001000)=[0xee00]) setregid(0x0, r2) fchmodat(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0xffffffd3) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x20400a, &(0x7f0000000580)=ANY=[@ANYRES64=r3, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="8c53bab0232c512502286773e51165e0f3c7c37ba8c9755c0af1398ffe6bd124ad8f9dd168f38a31f809e453409ed9cca6adb7b17256e63ab71dc38d53c6f0fc09949dd93241cd5be403f5c019c1c7cd4515a2a531d7178d7c06f75d721d4a536ce6db8fee1540e47e17a0f8d9144778e43542707a94757271823576f7be28aabd313daa80dc4387c81f67d13f6175356185ae439af5dad005305fee416d20376db7a032a47630bbafdc1bb75d63f067310880ee687e3af9592bdd76efad7c5ab1ea3c8bef4dc09af00a68dccfd2d82ad28c74ffe61df3fb978d67e273b5dc53bc355a"], 0x1, 0x1fb, &(0x7f0000000380)="$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") 19.09621793s ago: executing program 8 (id=1312): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f0000000400)=""/185, &(0x7f00000004c0)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000540)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000580)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000780)=0x1) 16.685237798s ago: executing program 8 (id=1316): socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4002014) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 15.537597645s ago: executing program 8 (id=1320): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000600)='cgroup2\x00', 0x3000096, 0x0) chroot(&(0x7f0000000640)='./file0\x00') mount$bind(&(0x7f0000000680)='.\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0/../file0/../file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x58) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20004804) 15.007249349s ago: executing program 8 (id=1325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@flat=@binder={0x73622a85, 0x100a, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}], 0x17, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000640)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 13.968315223s ago: executing program 8 (id=1327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="292e725035522c3872b2c0ccaf78eb76a08db44ebc", 0x15) write$binfmt_script(r2, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.967975943s ago: executing program 39 (id=1327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="292e725035522c3872b2c0ccaf78eb76a08db44ebc", 0x15) write$binfmt_script(r2, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.71451679s ago: executing program 2 (id=1341): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x800) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c80010000c0001000b01080002000000180000"], 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x10, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[], 0x15) syz_emit_vhci(0x0, 0x18) 8.71285958s ago: executing program 9 (id=1342): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x200008, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0xfd, 0x392, &(0x7f0000000580)="$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") r1 = open(&(0x7f0000000940)='./bus\x00', 0x14507e, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000980)={0x90, 0x0, 0x0, {0x3, 0x1, 0x8, 0xffffffffffffffc0, 0x9, 0x9, {0x4, 0xffffffffffffffff, 0x7, 0x7fffffff, 0x7fffffff, 0x3ff, 0x74e, 0x17d2, 0x65, 0xa000, 0xfffffff9, 0x0, 0x0, 0x4, 0x7}}}, 0x90) mkdir(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd0939199c36b4d28) syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000c80)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x6c) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 7.814920891s ago: executing program 0 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7.298400384s ago: executing program 1 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000940)='0', 0x1, 0x40000, &(0x7f0000000980)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 7.297611074s ago: executing program 2 (id=1345): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000440)='proc\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000500)={r2, r2, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x2, 0x8, 'syz1\x00'}) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffffffc, 0x1, 0x800, 0xfffffffffffffffd, 0x3, 0x100}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0) 7.275938995s ago: executing program 9 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0x5', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)="05010906a101050719e029e715", 0xd) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 7.275758955s ago: executing program 3 (id=1162): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='attr/keycreate\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x80040, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000b00)={0x11, 0x17, r1, 0x1, 0xf}, 0x14) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) 6.555408762s ago: executing program 0 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6.031841315s ago: executing program 1 (id=1347): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 6.031334215s ago: executing program 2 (id=1348): r0 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) fcntl$notify(r2, 0x402, 0x6) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) 6.030003895s ago: executing program 9 (id=1349): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002280)="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", 0x2000, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004340)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004400)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004480)="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", 0x2000, &(0x7f0000006480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006540)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xffffffffffffeffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r3, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000006600)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r0, r1, 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') 6.029843665s ago: executing program 3 (id=1162): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='attr/keycreate\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x80040, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000b00)={0x11, 0x17, r1, 0x1, 0xf}, 0x14) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) 5.311308092s ago: executing program 0 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.58994467s ago: executing program 1 (id=1350): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x400, 0x3, 0x3cf}, 0x0, 0x0, 0x0) 4.58895131s ago: executing program 2 (id=1351): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000008a000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x2, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x5b9e, 0x7], 0x0, 0x341b82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.578176829s ago: executing program 9 (id=1352): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) io_pgetevents(0x0, 0x6, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x41}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@ipv6_newaddr={0x2c, 0x14, 0x5, 0x0, 0x0, {0xa, 0x40, 0x82, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x1000) 4.55675749s ago: executing program 3 (id=1162): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='attr/keycreate\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x80040, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000b00)={0x11, 0x17, r1, 0x1, 0xf}, 0x14) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) 3.893643676s ago: executing program 0 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.347346649s ago: executing program 1 (id=1353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x200080f1}, 0x4008000) 3.346896419s ago: executing program 2 (id=1354): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [], {}, [], {}, {0x20, 0x6}}, 0x24, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10008, &(0x7f0000000480)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000780)="$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") nanosleep(0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000c80)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) 3.346316699s ago: executing program 9 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/nmi_watchdog\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) write(r0, &(0x7f0000000140)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n', 0x2) write(r1, &(0x7f0000000180)='1\n', 0x2) write(r1, &(0x7f0000000140)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='20', 0x2) 3.33051189s ago: executing program 3 (id=1162): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='attr/keycreate\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x80040, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000b00)={0x11, 0x17, r1, 0x1, 0xf}, 0x14) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) 2.137894478s ago: executing program 0 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.535878153s ago: executing program 1 (id=1356): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) r2 = epoll_create(0x9346) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x55, 0x9, 0x1, {0x569142f7, 0x8, 0x4, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x4, 0x4, 0x8004, 0x9, 0x0, "2af287e393000000000000000400008863796a", 0x0, 0x8}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r3 = syz_open_pts(r0, 0x80) dup3(r3, r0, 0x80000) read(r0, &(0x7f00000003c0)=""/227, 0xe3) 1.533984573s ago: executing program 2 (id=1357): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x800010, &(0x7f0000000540), 0xff, 0x507, &(0x7f0000000580)="$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") mount$9p_rdma(0x0, 0x0, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x98) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./file1\x00', 0x21081e, &(0x7f0000000c40), 0x1, 0x4fa, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x1fb) creat(&(0x7f00000011c0)='./file1\x00', 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x22004, 0x100007f) 1.516992833s ago: executing program 9 (id=1358): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1d) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x6f) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000005c0)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000640)={{}, 0x1, 0x1d, 0x1}, 0x18) write$input_event(r0, &(0x7f0000000680)={{}, 0x1, 0x38, 0x1}, 0x18) write$input_event(r0, &(0x7f00000006c0)={{}, 0x1, 0x6f, 0x1}, 0x18) write$input_event(r0, &(0x7f0000000700), 0x18) 1.516737963s ago: executing program 3 (id=1162): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='attr/keycreate\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x80040, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000b00)={0x11, 0x17, r1, 0x1, 0xf}, 0x14) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) 605.458625ms ago: executing program 0 (id=1337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 14.79108ms ago: executing program 1 (id=1359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="0f20e0c744240009000000c744240200300000c7442406000000000f011c240f22e0460f85000000000f20d835200000000f22d83e0f017cbd00b92f0800000f9932dd32dd83f30f51647e3bc4017b10aa1b8630c28fa810cc2d0b00000000b9800000c00f3235008000000f30", 0x6d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8900) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=1162): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='attr/keycreate\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x80040, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000b00)={0x11, 0x17, r1, 0x1, 0xf}, 0x14) pipe2(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) kernel console output (not intermixed with test programs): using dummy_hcd [ 170.848533][ T6245] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.858577][ T6245] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.868543][ T6245] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.878810][ T6245] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.888199][ T4260] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 170.899830][ T4260] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 170.911245][ T4260] usb 7-1: config 0 interface 0 has no altsetting 0 [ 170.932086][ T4260] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.946679][ T4260] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.955925][ T4260] usb 7-1: Product: syz [ 170.960192][ T4260] usb 7-1: Manufacturer: syz [ 170.964842][ T4260] usb 7-1: SerialNumber: syz [ 170.986336][ T4260] usb 7-1: config 0 descriptor?? [ 170.993317][ T6274] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 171.008568][ T4260] usb 7-1: selecting invalid altsetting 0 [ 171.545368][ T4392] usb 7-1: USB disconnect, device number 4 [ 172.022578][ T4344] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 172.050444][ T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 172.225032][ T4344] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 172.244739][ T4344] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.255953][ T7] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.277456][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.289191][ T4344] usb 8-1: Product: syz [ 172.298018][ T4344] usb 8-1: Manufacturer: syz [ 172.308700][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.330337][ T4344] usb 8-1: SerialNumber: syz [ 172.339491][ T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.359523][ T4344] usb 8-1: config 0 descriptor?? [ 172.375968][ T7] usb 2-1: Product: syz [ 172.390722][ T4344] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 172.402633][ T7] usb 2-1: Manufacturer: syz [ 172.414707][ T7] usb 2-1: SerialNumber: syz [ 172.466718][ T7] usb 2-1: config 0 descriptor?? [ 172.507152][ T7] usb 2-1: selecting invalid altsetting 0 [ 172.695967][ T4946] usb 2-1: USB disconnect, device number 8 [ 173.724511][ T6339] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 173.753309][ T6344] overlayfs: failed to clone upperpath [ 174.003640][ T4344] gspca_stk1135: reg_w 0x200 err -71 [ 174.010108][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.026692][ T4344] gspca_stk1135: Sensor write failed [ 174.060455][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.066865][ T4344] gspca_stk1135: Sensor write failed [ 174.086093][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.122620][ T4344] gspca_stk1135: Sensor read failed [ 174.127956][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.160290][ T4344] gspca_stk1135: Sensor read failed [ 174.165581][ T4344] gspca_stk1135: Detected sensor type unknown (0x0) [ 174.200363][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.207727][ T4344] gspca_stk1135: Sensor read failed [ 174.220214][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.237213][ T4344] gspca_stk1135: Sensor read failed [ 174.259677][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.276704][ T4344] gspca_stk1135: Sensor write failed [ 174.286486][ T4344] gspca_stk1135: serial bus timeout: status=0x00 [ 174.299451][ T4344] gspca_stk1135: Sensor write failed [ 174.331797][ T4344] stk1135: probe of 8-1:0.0 failed with error -71 [ 174.374827][ T4344] usb 8-1: USB disconnect, device number 3 [ 175.115624][ T22] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 175.319002][ T22] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 175.339480][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.407807][ T6349] overlayfs: failed to clone upperpath [ 175.609610][ T22] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 175.692906][ T6396] ip_tables: iptables: counters copy to user failed while replacing table [ 175.806256][ T6402] loop6: detected capacity change from 0 to 256 [ 175.864860][ T6402] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 176.318536][ T6420] 9pnet_fd: Insufficient options for proto=fd [ 176.435360][ T22] usb 8-1: USB disconnect, device number 4 [ 177.167629][ T6445] loop7: detected capacity change from 0 to 1024 [ 177.213867][ T6445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.301980][ T6445] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 177.458883][ T26] audit: type=1800 audit(1791995242.571:19): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.560" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 177.648250][ T5501] EXT4-fs (loop7): unmounting filesystem. [ 177.884833][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 177.931330][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.938877][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.995258][ T6484] device bridge_slave_1 left promiscuous mode [ 178.021520][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.076423][ T6484] device bridge_slave_0 left promiscuous mode [ 178.090282][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 178.101006][ T4392] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 178.102515][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.132788][ T22] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 178.162736][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.187715][ T22] usb 6-1: Product: syz [ 178.202526][ T22] usb 6-1: Manufacturer: syz [ 178.221462][ T22] usb 6-1: SerialNumber: syz [ 178.258090][ T22] usb 6-1: config 0 descriptor?? [ 178.276859][ T22] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 178.322360][ T4392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.353853][ T4392] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.387150][ T4392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.428978][ T4392] usb 8-1: config 0 descriptor?? [ 178.658384][ T4392] usbhid 8-1:0.0: can't add hid device: -71 [ 178.680877][ T4392] usbhid: probe of 8-1:0.0 failed with error -71 [ 178.691115][ T6502] fuse: Bad value for 'fd' [ 178.700641][ T4392] usb 8-1: USB disconnect, device number 5 [ 178.793134][ T6506] loop1: detected capacity change from 0 to 1024 [ 178.920449][ T6506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.958212][ T6506] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.310565][ T4392] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 179.339961][ T6527] overlayfs: failed to clone upperpath [ 179.355868][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.576'. [ 179.502292][ T4392] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.530649][ T4392] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 179.560247][ T4392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.592498][ T4392] usb 8-1: config 0 descriptor?? [ 179.900757][ T22] gspca_ov534_9: reg_w failed -71 [ 180.036393][ T6545] loop6: detected capacity change from 0 to 128 [ 180.095108][ T6545] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 180.194021][ T6545] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.250411][ T22] gspca_ov534_9: Unknown sensor 0000 [ 180.250482][ T22] ov534_9: probe of 6-1:0.0 failed with error -22 [ 180.298226][ T22] usb 6-1: USB disconnect, device number 6 [ 180.401216][ T4995] EXT4-fs (loop6): unmounting filesystem. [ 180.421773][ T4392] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 180.460567][ T4392] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input8 [ 180.786499][ T6560] netlink: 7 bytes leftover after parsing attributes in process `syz.5.586'. [ 180.839965][ T7] usb 8-1: USB disconnect, device number 6 [ 180.840007][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 181.736576][ T26] audit: type=1800 audit(1791995246.851:20): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.572" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 182.509875][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 182.670387][ T4946] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 182.782229][ T6626] loop5: detected capacity change from 0 to 256 [ 182.793641][ T6605] loop7: detected capacity change from 0 to 32768 [ 182.834044][ T6626] exfat: Deprecated parameter 'utf8' [ 182.872610][ T4946] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.902555][ T6626] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 182.907164][ T4946] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.947973][ T4946] usb 7-1: config 0 interface 0 has no altsetting 0 [ 182.982889][ T6605] JBD2: Ignoring recovery information on journal [ 182.994038][ T4946] usb 7-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 183.058705][ T4946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.080758][ T6605] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 183.151221][ T4946] usb 7-1: config 0 descriptor?? [ 183.525596][ T26] audit: type=1800 audit(1791995248.641:21): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.594" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 183.574558][ T4946] usbhid 7-1:0.0: can't add hid device: -71 [ 183.594471][ T4946] usbhid: probe of 7-1:0.0 failed with error -71 [ 183.632984][ T4946] usb 7-1: USB disconnect, device number 5 [ 183.855276][ T5501] ocfs2: Unmounting device (7,7) on (node local) [ 184.187615][ T6659] loop1: detected capacity change from 0 to 16 [ 184.231765][ T6659] erofs: Unknown parameter '18446744073709551615' [ 184.675048][ T6674] netlink: 'syz.2.612': attribute type 5 has an invalid length. [ 184.692144][ T6671] loop7: detected capacity change from 0 to 4096 [ 184.716338][ T6671] EXT4-fs: Ignoring removed nobh option [ 184.725989][ T6671] EXT4-fs: Ignoring removed bh option [ 184.769440][ T6671] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 185.157939][ T6688] netlink: 'syz.6.615': attribute type 10 has an invalid length. [ 185.199673][ T5501] EXT4-fs (loop7): unmounting filesystem. [ 185.233150][ T6688] device syz_tun entered promiscuous mode [ 185.288235][ T6691] ip_tables: iptables: counters copy to user failed while replacing table [ 185.309194][ T6688] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 185.329839][ T4308] bond0: (slave bond_slave_0): interface is now down [ 185.363552][ T4308] bond0: (slave bond_slave_1): interface is now down [ 185.398205][ T4308] bond0: (slave syz_tun): interface is now down [ 185.498214][ T4308] bond0: now running without any active interface! [ 185.768218][ T6711] netlink: 148 bytes leftover after parsing attributes in process `syz.2.620'. [ 185.869817][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.619'. [ 185.915392][ T6710] device netdevsim0 entered promiscuous mode [ 185.946348][ T6710] device netdevsim0 left promiscuous mode [ 185.994922][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.619'. [ 186.084486][ T6712] device netdevsim0 entered promiscuous mode [ 186.098754][ T6712] device netdevsim0 left promiscuous mode [ 186.680042][ T6735] loop6: detected capacity change from 0 to 2048 [ 186.736647][ T6738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 186.779293][ T6735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.406623][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 188.461201][ T6775] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.470772][ T6775] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.479542][ T6775] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.488349][ T6775] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.604903][ T6775] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.614611][ T6775] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.623606][ T6775] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.632589][ T6775] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.821082][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 188.858849][ T6775] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.868069][ T6775] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.876881][ T6775] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.885691][ T6775] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.960759][ T6775] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.969787][ T6775] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.979099][ T6775] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.988090][ T6775] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.794069][ T6818] loop0: detected capacity change from 0 to 3904 [ 189.909381][ T6818] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 189.957782][ T6818] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 189.991899][ T6818] loop0: [ 190.750581][ T6836] tipc: Started in network mode [ 190.755529][ T6836] tipc: Node identity 4, cluster identity 4711 [ 190.801211][ T6836] tipc: Node number set to 4 [ 190.806910][ T6840] tipc: Enabled bearer , priority 0 [ 191.256857][ T6849] FAULT_INJECTION: forcing a failure. [ 191.256857][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 191.302282][ T6849] CPU: 0 PID: 6849 Comm: syz.7.658 Not tainted syzkaller #0 [ 191.309658][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.319766][ T6849] Call Trace: [ 191.323087][ T6849] [ 191.326062][ T6849] dump_stack_lvl+0x188/0x24e [ 191.330806][ T6849] ? show_regs_print_info+0x12/0x12 [ 191.336089][ T6849] ? load_image+0x410/0x410 [ 191.340649][ T6849] ? __might_sleep+0xd0/0xd0 [ 191.345328][ T6849] ? __lock_acquire+0x7ea0/0x7ea0 [ 191.350430][ T6849] should_fail_ex+0x390/0x4c0 [ 191.355176][ T6849] should_failslab+0x5/0x20 [ 191.359735][ T6849] slab_pre_alloc_hook+0x59/0x300 [ 191.364824][ T6849] ? get_mountpoint+0x205/0x440 [ 191.369737][ T6849] __kmem_cache_alloc_node+0x4f/0x270 [ 191.375175][ T6849] ? get_mountpoint+0x205/0x440 [ 191.380082][ T6849] kmalloc_trace+0x26/0xe0 [ 191.384551][ T6849] get_mountpoint+0x205/0x440 [ 191.389319][ T6849] lock_mount+0xb4/0x2a0 [ 191.393610][ T6849] ? mnt_warn_timestamp_expiry+0x12f/0x2c0 [ 191.399482][ T6849] do_new_mount+0x380/0xa40 [ 191.404057][ T6849] __se_sys_mount+0x2e3/0x3d0 [ 191.408801][ T6849] ? __x64_sys_mount+0xc0/0xc0 [ 191.413622][ T6849] ? lockdep_hardirqs_on+0x94/0x140 [ 191.418902][ T6849] ? __x64_sys_mount+0x1c/0xc0 [ 191.423746][ T6849] do_syscall_64+0x4c/0xa0 [ 191.428213][ T6849] ? clear_bhb_loop+0x60/0xb0 [ 191.432944][ T6849] ? clear_bhb_loop+0x60/0xb0 [ 191.437679][ T6849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.443633][ T6849] RIP: 0033:0x7fc1a5d9e559 [ 191.448128][ T6849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.467792][ T6849] RSP: 002b:00007fc1a6ccf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.476263][ T6849] RAX: ffffffffffffffda RBX: 00007fc1a6025fa0 RCX: 00007fc1a5d9e559 [ 191.484291][ T6849] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 191.492321][ T6849] RBP: 00007fc1a5e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 191.500354][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.508378][ T6849] R13: 00007fc1a6026038 R14: 00007fc1a6025fa0 R15: 00007ffc96b55d38 [ 191.516472][ T6849] [ 191.609877][ T4939] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 191.801938][ T4939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 191.832754][ T4939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 191.898689][ T4939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.949347][ T4939] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.981027][ T4939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.015135][ T4939] usb 6-1: config 0 descriptor?? [ 192.033823][ T6847] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 192.456585][ T4939] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 192.472896][ T4939] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 192.485922][ T6883] FAULT_INJECTION: forcing a failure. [ 192.485922][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 192.515189][ T4939] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 192.573520][ T6883] CPU: 0 PID: 6883 Comm: syz.7.666 Not tainted syzkaller #0 [ 192.580895][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 192.590997][ T6883] Call Trace: [ 192.594322][ T6883] [ 192.597298][ T6883] dump_stack_lvl+0x188/0x24e [ 192.602030][ T6883] ? show_regs_print_info+0x12/0x12 [ 192.607316][ T6883] ? load_image+0x410/0x410 [ 192.611881][ T6883] ? __might_sleep+0xd0/0xd0 [ 192.616516][ T6883] ? __lock_acquire+0x7ea0/0x7ea0 [ 192.621594][ T6883] should_fail_ex+0x390/0x4c0 [ 192.626336][ T6883] should_failslab+0x5/0x20 [ 192.630891][ T6883] slab_pre_alloc_hook+0x59/0x300 [ 192.635999][ T6883] kmem_cache_alloc+0x56/0x2f0 [ 192.640810][ T6883] ? fuse_simple_background+0x92/0x890 [ 192.646335][ T6883] fuse_simple_background+0x92/0x890 [ 192.651681][ T6883] fuse_send_init+0x39c/0x640 [ 192.656416][ T6883] fuse_fill_super+0x1be/0x1f0 [ 192.661244][ T6883] ? fuse_reconfigure+0xb0/0xb0 [ 192.666191][ T6883] get_tree_nodev+0xb0/0x160 [ 192.670842][ T6883] fuse_get_tree+0x2d7/0x4d0 [ 192.675477][ T6883] vfs_get_tree+0x88/0x270 [ 192.679939][ T6883] do_new_mount+0x247/0xa40 [ 192.684498][ T6883] __se_sys_mount+0x2e3/0x3d0 [ 192.689231][ T6883] ? __x64_sys_mount+0xc0/0xc0 [ 192.694048][ T6883] ? lockdep_hardirqs_on+0x94/0x140 [ 192.699331][ T6883] ? __x64_sys_mount+0x1c/0xc0 [ 192.704169][ T6883] do_syscall_64+0x4c/0xa0 [ 192.708642][ T6883] ? clear_bhb_loop+0x60/0xb0 [ 192.713408][ T6883] ? clear_bhb_loop+0x60/0xb0 [ 192.718260][ T6883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.724212][ T6883] RIP: 0033:0x7fc1a5d9e559 [ 192.728672][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.748349][ T6883] RSP: 002b:00007fc1a6ccf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.756802][ T6883] RAX: ffffffffffffffda RBX: 00007fc1a6025fa0 RCX: 00007fc1a5d9e559 [ 192.764804][ T6883] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 192.772799][ T6883] RBP: 00007fc1a5e358b0 R08: 00002000000003c0 R09: 0000000000000000 [ 192.780794][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.788785][ T6883] R13: 00007fc1a6026038 R14: 00007fc1a6025fa0 R15: 00007ffc96b55d38 [ 192.796800][ T6883] [ 192.893237][ T6889] overlayfs: failed to clone upperpath [ 192.903032][ T4942] usb 6-1: USB disconnect, device number 7 [ 193.035287][ T6886] fido_id[6886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 193.348348][ T6900] overlayfs: failed to clone upperpath [ 193.648041][ T6913] loop5: detected capacity change from 0 to 256 [ 193.768745][ T6913] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 193.854441][ T6919] fuse: Bad value for 'fd' [ 194.133792][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.140388][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.166714][ T6923] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.384422][ T4939] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 194.579282][ T4939] usb 6-1: Using ep0 maxpacket: 8 [ 194.586647][ T4939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 194.639248][ T4939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 194.699459][ T4939] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 194.735531][ T4939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.791737][ T4939] usb 6-1: config 0 descriptor?? [ 195.223451][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.259210][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.266253][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.301574][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.308631][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.351377][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.358433][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.404479][ T4939] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 195.448039][ T4939] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 196.089069][ T4939] lenovo 0003:17EF:6047.0008: Sensitivity setting failed: -71 [ 196.120739][ T4939] usb 6-1: USB disconnect, device number 8 [ 196.570866][ T6976] fido_id[6976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 198.789230][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 198.836702][ T7048] device bond1 entered promiscuous mode [ 198.850984][ T7048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.900222][ T7048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.907511][ T7048] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 198.919583][ T7048] bond1: (slave sit1): Error -95 calling set_mac_address [ 199.245482][ T7066] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 199.288854][ T7066] device syz_tun entered promiscuous mode [ 199.322815][ T7066] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 199.482736][ T7039] loop7: detected capacity change from 0 to 32768 [ 199.527183][ T7039] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.701 (7039) [ 199.630473][ T7039] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.678545][ T7039] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 199.718974][ T7039] BTRFS info (device loop7): setting nodatacow, compression disabled [ 199.744967][ T7039] BTRFS info (device loop7): setting datasum, datacow enabled [ 199.769493][ T7039] BTRFS info (device loop7): force clearing of disk cache [ 199.805492][ T7039] BTRFS info (device loop7): enabling ssd optimizations [ 199.829697][ T7039] BTRFS info (device loop7): using spread ssd allocation scheme [ 199.868143][ T7039] BTRFS info (device loop7): turning on sync discard [ 199.940998][ T7039] BTRFS info (device loop7): turning on flush-on-commit [ 199.948047][ T7039] BTRFS info (device loop7): not using ssd optimizations [ 199.955014][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.717'. [ 200.062382][ T7039] BTRFS info (device loop7): not using spread ssd allocation scheme [ 200.120153][ T7039] BTRFS info (device loop7): using free space tree [ 200.465435][ T7039] BTRFS info (device loop7): rebuilding free space tree [ 200.645197][ T7128] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.937472][ T26] audit: type=1804 audit(1791995522.053:22): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.724" name="/newroot/99/file0/file1" dev="overlay" ino=594 res=1 errno=0 [ 201.328582][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 201.338837][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 201.574750][ T4942] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 201.777540][ T4942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.801952][ T4942] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.837103][ T4942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.862499][ T7039] BTRFS info (device loop7: state M): balance: start -d -m [ 201.887479][ T4942] usb 7-1: config 0 descriptor?? [ 201.955842][ T4942] pwc: Askey VC010 type 2 USB webcam detected. [ 201.981756][ T7039] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata [ 202.285738][ T7039] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata [ 202.351775][ T4942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 202.365652][ T4942] pwc: recv_control_msg error -32 req 02 val 2700 [ 202.404692][ T4942] pwc: recv_control_msg error -32 req 02 val 2c00 [ 202.414225][ T4942] pwc: recv_control_msg error -32 req 04 val 1000 [ 202.453031][ T4942] pwc: recv_control_msg error -32 req 04 val 1300 [ 202.495062][ T4942] pwc: recv_control_msg error -32 req 04 val 1400 [ 202.718752][ T4942] pwc: recv_control_msg error -71 req 02 val 2100 [ 202.774747][ T4942] pwc: recv_control_msg error -71 req 04 val 1500 [ 202.906650][ T4942] pwc: recv_control_msg error -71 req 02 val 2500 [ 203.001499][ T4942] pwc: recv_control_msg error -71 req 02 val 2400 [ 203.099419][ T4942] pwc: recv_control_msg error -71 req 02 val 2600 [ 203.192379][ T4942] pwc: recv_control_msg error -71 req 02 val 2900 [ 203.320966][ T4942] pwc: recv_control_msg error -71 req 02 val 2800 [ 203.426278][ T4942] pwc: recv_control_msg error -71 req 04 val 1100 [ 203.523085][ T7178] syz.5.732 (7178) used greatest stack depth: 16864 bytes left [ 203.578438][ T4942] pwc: recv_control_msg error -71 req 04 val 1200 [ 203.679412][ T4942] pwc: Registered as video103. [ 203.724803][ T4942] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 203.793971][ T7039] BTRFS info (device loop7): found 7 extents, stage: move data extents [ 203.838982][ T4942] usb 7-1: USB disconnect, device number 6 [ 203.944186][ T7039] BTRFS info (device loop7): balance: canceled [ 203.983912][ T7183] input: syz0 as /devices/virtual/input/input11 [ 204.327237][ T5501] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.035798][ T7293] tipc: Started in network mode [ 208.055921][ T7293] tipc: Node identity ac1414aa, cluster identity 4711 [ 208.093894][ T7293] tipc: New replicast peer: 172.20.20.187 [ 208.105135][ T7293] tipc: Enabled bearer , priority 10 [ 208.116095][ T4348] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 208.298892][ T4348] usb 6-1: not running at top speed; connect to a high speed hub [ 208.312701][ T4348] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.346559][ T4348] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 208.393172][ T4348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.445354][ T4348] usb 6-1: Found UVC 1.00 device (046d:0825) [ 208.633352][ T4348] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 208.656543][ T4348] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 208.674771][ T4348] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 208.726523][ T4348] usb 6-1: USB disconnect, device number 9 [ 208.872831][ T7321] loop6: detected capacity change from 0 to 512 [ 208.922412][ T7321] EXT4-fs: Ignoring removed i_version option [ 208.967502][ T7321] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.032910][ T7321] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.768: corrupted in-inode xattr [ 209.080465][ T7321] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.768: couldn't read orphan inode 15 (err -117) [ 209.094541][ T7321] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 209.217533][ T4348] tipc: Node number set to 2886997162 [ 209.335638][ T4995] EXT4-fs (loop6): unmounting filesystem. [ 209.436039][ T4348] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 209.476617][ T4348] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.453541][ T7373] ip_tables: iptables: counters copy to user failed while replacing table [ 211.399534][ T7399] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 211.457418][ T7399] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 213.175408][ T7444] loop6: detected capacity change from 0 to 164 [ 213.240265][ T4382] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.734036][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.807'. [ 213.890366][ T7473] overlayfs: failed to clone upperpath [ 215.335276][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 215.355876][ T7527] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.365232][ T7527] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.374369][ T7527] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.383183][ T7527] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.400640][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 215.413843][ T7527] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.423043][ T7527] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.432012][ T7527] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.440972][ T7527] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.517124][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 215.531506][ T7527] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.540739][ T7527] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.549543][ T7527] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.558308][ T7527] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.569171][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 215.579966][ T7527] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.589085][ T7527] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.598146][ T7527] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.607609][ T7527] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.696387][ T7531] loop6: detected capacity change from 0 to 128 [ 215.743105][ T7531] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 215.763044][ T7531] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.857095][ T7535] overlayfs: failed to clone upperpath [ 216.377231][ T4995] EXT4-fs (loop6): unmounting filesystem. [ 218.718717][ T7626] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.221748][ T7650] loop5: detected capacity change from 0 to 2048 [ 219.240778][ T7650] EXT4-fs: Ignoring removed orlov option [ 219.256047][ T7650] EXT4-fs: Ignoring removed i_version option [ 219.317356][ T7650] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 219.330686][ T7650] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.723230][ T7650] EXT4-fs (loop5): unmounting filesystem. [ 219.917699][ T7674] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.342177][ T7690] loop6: detected capacity change from 0 to 512 [ 220.743727][ T7704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.110407][ T7721] af_packet: packet size is too long (4294901760 > 1504) [ 222.741611][ T7773] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 222.817765][ T7773] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 222.840067][ T7773] team0: Failed to send options change via netlink (err -105) [ 222.858351][ T7773] team0: Port device netdevsim0 added [ 223.567715][ T7797] overlayfs: failed to clone upperpath [ 223.796180][ T7806] netlink: 'syz.2.902': attribute type 10 has an invalid length. [ 223.912540][ T7808] loop5: detected capacity change from 0 to 8 [ 223.998696][ T7806] team0 (unregistering): Port device team_slave_0 removed [ 224.007248][ T7808] SQUASHFS error: Failed to read block 0x8f: -5 [ 224.028500][ T7806] team0 (unregistering): Port device team_slave_1 removed [ 224.051141][ T26] audit: type=1800 audit(1791995545.166:23): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.903" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 224.103125][ T7806] team0 (unregistering): Port device netdevsim0 removed [ 224.167368][ T7810] SQUASHFS error: Failed to read block 0x285: -5 [ 224.179069][ T7808] SQUASHFS error: Unable to read directory block [1d0:26] [ 224.189634][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.197741][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 224.204743][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 224.213362][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.221063][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 224.229370][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 224.257191][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.278241][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.294392][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 224.311224][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 224.320722][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 224.327395][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.334883][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 224.342052][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.359947][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 224.370090][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 224.389455][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 224.402055][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.445910][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 224.475892][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.507549][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 224.543072][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 224.561039][ T7815] netlink: 'syz.2.905': attribute type 11 has an invalid length. [ 224.573049][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 224.576675][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 224.596079][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.654290][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.674595][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 224.681827][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 224.770292][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 224.772323][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 224.814743][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.821381][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 224.898975][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 224.945860][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 224.952736][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 224.956043][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 224.982727][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.013903][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 225.053469][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.061176][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 225.125548][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 225.180949][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.193921][ T7825] overlayfs: failed to clone upperpath [ 225.199184][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 225.244050][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 225.284264][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.312399][ T7810] SQUASHFS error: Failed to read block 0x0: -5 [ 225.346233][ T7810] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.353650][ T7810] SQUASHFS error: read_indexes: reading block [283:0] [ 225.379106][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 225.392305][ T5501] tipc: Disabling bearer [ 225.423390][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 225.442605][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.489667][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 225.506687][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 225.513019][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.541580][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.553631][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.563187][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.580161][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.589831][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.597777][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.607069][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 225.635180][ T7812] SQUASHFS error: Failed to read block 0x0: -5 [ 225.645202][ T7831] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.649735][ T7812] SQUASHFS error: Unable to read metadata cache entry [283] [ 225.715922][ T7812] SQUASHFS error: read_indexes: reading block [283:0] [ 226.337992][ T7857] ip_tables: iptables: counters copy to user failed while replacing table [ 226.373256][ T7831] chnl_net:caif_netlink_parms(): no params data found [ 226.380625][ T26] audit: type=1326 audit(1791995547.486:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.5.914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbdcf9e559 code=0x0 [ 226.433206][ T7859] FAULT_INJECTION: forcing a failure. [ 226.433206][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 226.476716][ T7859] CPU: 0 PID: 7859 Comm: syz.6.915 Not tainted syzkaller #0 [ 226.484085][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 226.494190][ T7859] Call Trace: [ 226.497526][ T7859] [ 226.500505][ T7859] dump_stack_lvl+0x188/0x24e [ 226.505243][ T7859] ? show_regs_print_info+0x12/0x12 [ 226.510495][ T7859] ? load_image+0x410/0x410 [ 226.515048][ T7859] ? __might_sleep+0xd0/0xd0 [ 226.519685][ T7859] ? __lock_acquire+0x7ea0/0x7ea0 [ 226.524786][ T7859] should_fail_ex+0x390/0x4c0 [ 226.529534][ T7859] should_failslab+0x5/0x20 [ 226.534080][ T7859] slab_pre_alloc_hook+0x59/0x300 [ 226.539165][ T7859] ? public_key_verify_signature+0x888/0xd20 [ 226.545195][ T7859] ? x509_check_for_self_signed+0x317/0x420 [ 226.551146][ T7859] ? x509_cert_parse+0x59c/0x7a0 [ 226.556154][ T7859] ? mpi_alloc+0x4e/0x130 [ 226.560543][ T7859] __kmem_cache_alloc_node+0x4f/0x270 [ 226.565972][ T7859] ? mpi_alloc+0x4e/0x130 [ 226.570355][ T7859] kmalloc_trace+0x26/0xe0 [ 226.574819][ T7859] mpi_alloc+0x4e/0x130 [ 226.579029][ T7859] mpi_read_raw_from_sgl+0x2c9/0x640 [ 226.584368][ T7859] ? mpi_write_to_sgl+0x790/0x790 [ 226.589451][ T7859] ? memset+0x1e/0x40 [ 226.593484][ T7859] rsa_enc+0x14d/0x3c0 [ 226.597629][ T7859] ? crypto_dh_decode_key+0x680/0x680 [ 226.603054][ T7859] ? __virt_addr_valid+0x188/0x540 [ 226.608215][ T7859] ? __virt_addr_valid+0x188/0x540 [ 226.613373][ T7859] ? __virt_addr_valid+0x467/0x540 [ 226.618538][ T7859] pkcs1pad_verify+0x3f9/0x5e0 [ 226.623367][ T7859] public_key_verify_signature+0x888/0xd20 [ 226.629216][ T7859] ? x509_cert_parse+0x53a/0x7a0 [ 226.634204][ T7859] ? x509_key_preparse+0x60/0x660 [ 226.639290][ T7859] ? public_key_free+0x80/0x80 [ 226.644152][ T7859] ? asymmetric_key_generate_id+0x52/0xd0 [ 226.649910][ T7859] ? asymmetric_key_id_same+0x63/0xe0 [ 226.655333][ T7859] x509_check_for_self_signed+0x317/0x420 [ 226.661110][ T7859] x509_cert_parse+0x59c/0x7a0 [ 226.665931][ T7859] x509_key_preparse+0x60/0x660 [ 226.670837][ T7859] ? down_read+0x1a8/0x2d0 [ 226.675307][ T7859] asymmetric_key_preparse+0xa5/0x140 [ 226.680733][ T7859] key_create_or_update+0x432/0xa40 [ 226.685978][ T7859] ? security_key_permission+0x7c/0xa0 [ 226.691498][ T7859] ? key_type_put+0x20/0x20 [ 226.696053][ T7859] ? lookup_user_key_possessed+0x40/0x40 [ 226.701757][ T7859] ? __might_fault+0xc2/0x120 [ 226.706490][ T7859] ? __might_fault+0xa6/0x120 [ 226.711215][ T7859] __se_sys_add_key+0x34b/0x410 [ 226.716122][ T7859] ? __x64_sys_add_key+0xc0/0xc0 [ 226.721117][ T7859] ? lockdep_hardirqs_on+0x94/0x140 [ 226.726367][ T7859] ? __x64_sys_add_key+0x1c/0xc0 [ 226.731372][ T7859] do_syscall_64+0x4c/0xa0 [ 226.735841][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 226.740571][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 226.745301][ T7859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.751270][ T7859] RIP: 0033:0x7fa63499e559 [ 226.755744][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.775396][ T7859] RSP: 002b:00007fa635798028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 226.783944][ T7859] RAX: ffffffffffffffda RBX: 00007fa634c25fa0 RCX: 00007fa63499e559 [ 226.791987][ T7859] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 226.800001][ T7859] RBP: 00007fa634a358b0 R08: 000000001ace881e R09: 0000000000000000 [ 226.808018][ T7859] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 226.816040][ T7859] R13: 00007fa634c26038 R14: 00007fa634c25fa0 R15: 00007ffe9a8ddc78 [ 226.824071][ T7859] [ 226.970798][ T7870] loop6: detected capacity change from 0 to 512 [ 226.978475][ T7870] ext4: Unknown parameter 'fsmagic' [ 226.994444][ T7831] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.019356][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.029799][ T4382] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.048205][ T7831] device bridge_slave_0 entered promiscuous mode [ 227.081174][ T7831] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.108911][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.140371][ T7831] device bridge_slave_1 entered promiscuous mode [ 227.254808][ T7831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.318035][ T7831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.457653][ T7831] team0: Port device team_slave_0 added [ 227.633839][ T4995] bond0: (slave syz_tun): Releasing backup interface [ 227.652203][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 227.702243][ T7831] team0: Port device team_slave_1 added [ 227.775080][ T7831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.842905][ T7831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.919073][ T7831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.982221][ T7831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.004115][ T7831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.043613][ T7831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.147602][ T7831] device hsr_slave_0 entered promiscuous mode [ 228.170725][ T7831] device hsr_slave_1 entered promiscuous mode [ 228.186989][ T7831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.214840][ T7831] Cannot create hsr debugfs directory [ 228.724423][ T7831] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 228.776865][ T7831] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 228.812307][ T7831] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 228.854400][ T7831] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 229.089997][ T7831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.141547][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.160977][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.168985][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.178160][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.202344][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.210251][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.210727][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.225266][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.279543][ T7831] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.309855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.332459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.351602][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.358814][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.410065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.428506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.465930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.475547][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.482696][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.548096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.558348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.591491][ T7915] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.608245][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 229.725678][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 229.899859][ T7831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.910419][ T7831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.926183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.950012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.974618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.986430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.996230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.005579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.014321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.023645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.039555][ T7926] device ip6gre1 entered promiscuous mode [ 230.055651][ T7926] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 230.079093][ T7926] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 230.102182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.117825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.731681][ T7915] chnl_net:caif_netlink_parms(): no params data found [ 230.941195][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.965578][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.005101][ T7831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.131215][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.147728][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.166162][ T7915] device bridge_slave_0 entered promiscuous mode [ 231.275733][ T5218] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.325207][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 231.337768][ T7915] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.354912][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.373448][ T7915] device bridge_slave_1 entered promiscuous mode [ 231.583658][ T5218] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.627843][ T7915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.670420][ T7915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.810959][ T5218] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.821790][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 231.981877][ T5218] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.075765][ T7915] team0: Port device team_slave_0 added [ 232.108834][ T7915] team0: Port device team_slave_1 added [ 232.184152][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.225250][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.334886][ T7915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.364334][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.406571][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.467563][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.477987][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.488235][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.498082][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.507355][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.514914][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.590938][ T7915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.652449][ T7915] device hsr_slave_0 entered promiscuous mode [ 232.667325][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.691751][ T7915] device hsr_slave_1 entered promiscuous mode [ 232.710391][ T7915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.718293][ T7915] Cannot create hsr debugfs directory [ 232.853193][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.865900][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.875069][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.888754][ T7992] rxe_eth0 speed is unknown, defaulting to 1000 [ 232.972579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.001059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.050819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.069109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.089835][ T7831] device veth0_vlan entered promiscuous mode [ 233.191269][ T7831] device veth1_vlan entered promiscuous mode [ 233.404632][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 233.643036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.662911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.770379][ T7831] device veth0_macvtap entered promiscuous mode [ 233.904550][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 233.927154][ T7831] device veth1_macvtap entered promiscuous mode [ 234.002842][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.032896][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.076004][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.088961][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.099732][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.110495][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.134668][ T7831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.191577][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.206421][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.226699][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 234.243772][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.253296][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.270611][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.297981][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.318336][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.332446][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.342751][ T7831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.353724][ T7831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.365626][ T7831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.414896][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.442027][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.485103][ T7831] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.493889][ T7831] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.506121][ T7831] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.517869][ T7831] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.529084][ T7915] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 234.604747][ T7915] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 234.612182][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 234.726414][ T7915] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 234.753866][ T7915] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 234.871872][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 234.896913][ T8049] ip_tables: iptables: counters copy to user failed while replacing table [ 235.056269][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.064157][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.145116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.224122][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.261612][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.353521][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.431615][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.446044][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.477956][ T7992] device bridge_slave_0 entered promiscuous mode [ 235.484864][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 235.522034][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.549888][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.567122][ T7992] device bridge_slave_1 entered promiscuous mode [ 235.694671][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.722840][ T8066] overlayfs: failed to clone upperpath [ 235.741817][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.803617][ T7915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.908098][ T5218] device hsr_slave_0 left promiscuous mode [ 235.938985][ T5218] device hsr_slave_1 left promiscuous mode [ 235.959277][ T5218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.977743][ T5218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.018176][ T5218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.034386][ T5218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.045466][ T5218] device bridge_slave_1 left promiscuous mode [ 236.051801][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.094893][ T5218] device bridge_slave_0 left promiscuous mode [ 236.111418][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.245814][ T5218] device veth1_macvtap left promiscuous mode [ 236.251925][ T5218] device veth0_macvtap left promiscuous mode [ 236.280328][ T5218] device veth1_vlan left promiscuous mode [ 236.300239][ T5218] device veth0_vlan left promiscuous mode [ 236.657935][ T5218] bond1 (unregistering): Released all slaves [ 236.684350][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 236.794952][ T8099] FAULT_INJECTION: forcing a failure. [ 236.794952][ T8099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.815054][ T8099] CPU: 0 PID: 8099 Comm: syz.8.973 Not tainted syzkaller #0 [ 236.822419][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.832863][ T8099] Call Trace: [ 236.836188][ T8099] [ 236.839151][ T8099] dump_stack_lvl+0x188/0x24e [ 236.843887][ T8099] ? show_regs_print_info+0x12/0x12 [ 236.849138][ T8099] ? load_image+0x410/0x410 [ 236.853698][ T8099] ? __lock_acquire+0x7ea0/0x7ea0 [ 236.858821][ T8099] should_fail_ex+0x390/0x4c0 [ 236.863578][ T8099] prepare_alloc_pages+0x1e1/0x5b0 [ 236.868782][ T8099] __alloc_pages+0x130/0x4f0 [ 236.873437][ T8099] ? zone_statistics+0x170/0x170 [ 236.878455][ T8099] ? verify_lock_unused+0x140/0x140 [ 236.883711][ T8099] __folio_alloc+0xe/0x30 [ 236.888107][ T8099] vma_alloc_folio+0x499/0x900 [ 236.892927][ T8099] wp_page_copy+0x27a/0x1660 [ 236.897577][ T8099] ? __lock_acquire+0x7ea0/0x7ea0 [ 236.902640][ T8099] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 236.908302][ T8099] ? do_raw_spin_unlock+0x11d/0x230 [ 236.913525][ T8099] ? _raw_spin_unlock+0x24/0x40 [ 236.918399][ T8099] ? do_wp_page+0xb8f/0x16b0 [ 236.923019][ T8099] handle_mm_fault+0x1b1b/0x3d40 [ 236.928015][ T8099] ? mt_find+0x157/0x830 [ 236.932298][ T8099] ? numa_migrate_prep+0x250/0x250 [ 236.937446][ T8099] ? lock_chain_count+0x20/0x20 [ 236.942331][ T8099] ? lock_mm_and_find_vma+0xae/0x2f0 [ 236.947669][ T8099] do_user_addr_fault+0x58e/0xb20 [ 236.952737][ T8099] exc_page_fault+0x60/0x100 [ 236.957358][ T8099] ? clear_bhb_loop+0x60/0xb0 [ 236.962071][ T8099] asm_exc_page_fault+0x22/0x30 [ 236.966955][ T8099] RIP: 0033:0x7fced9d5e345 [ 236.971398][ T8099] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 236.991034][ T8099] RSP: 002b:00007fcedad43de0 EFLAGS: 00010293 [ 236.997131][ T8099] RAX: 0000000000000008 RBX: 00007fcedab57e20 RCX: 0000000000000000 [ 237.005122][ T8099] RDX: 0000000000000000 RSI: 00007fced9e32fe0 RDI: 00007fcedab57e20 [ 237.013121][ T8099] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 237.021111][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fced9e52f40 [ 237.029103][ T8099] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007fced9e32fe0 [ 237.037113][ T8099] [ 237.114622][ T8099] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 237.564163][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 238.370438][ T8147] loop8: detected capacity change from 0 to 256 [ 238.773795][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 238.783162][ T5218] team0 (unregistering): Port device team_slave_1 removed [ 238.887469][ T5218] team0 (unregistering): Port device team_slave_0 removed [ 239.009441][ T5218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.157373][ T5218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.902952][ T5218] bond0 (unregistering): Released all slaves [ 240.041620][ T7915] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.053621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.099510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.159135][ T7992] team0: Port device team_slave_0 added [ 240.185090][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.227025][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.267775][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.274982][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.286608][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.331232][ T7992] team0: Port device team_slave_1 added [ 240.353419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.375847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.414548][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.421755][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.474110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.502840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.546993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.606430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.635251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.713935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.745282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.768717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.796255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.816304][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.844721][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.872025][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 240.960334][ T7992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.985178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.000288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.059461][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.073637][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.161775][ T7992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.365249][ T7992] device hsr_slave_0 entered promiscuous mode [ 241.414671][ T7992] device hsr_slave_1 entered promiscuous mode [ 241.434868][ T7992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.442517][ T7992] Cannot create hsr debugfs directory [ 242.330389][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.348434][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.638853][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.743017][ T7992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.796011][ T7992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.833557][ T7992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.851045][ T7992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.011203][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.024942][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.181718][ T7915] device veth0_vlan entered promiscuous mode [ 244.232899][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.254175][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.290870][ T7915] device veth1_vlan entered promiscuous mode [ 244.334970][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.349674][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.380839][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.451352][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.507765][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.544248][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.561031][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.594087][ T7915] device veth0_macvtap entered promiscuous mode [ 244.632647][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.660238][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.694230][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.724560][ T7915] device veth1_macvtap entered promiscuous mode [ 244.736771][ T7992] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.780107][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.795916][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.827857][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.858184][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.863147][ C0] sched: RT throttling activated [ 244.870414][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.944573][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.068684][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.151538][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.231194][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.246093][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.263248][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.293225][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.322095][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.370142][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.389639][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.424055][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.461302][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.500569][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.507799][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.545173][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.575978][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.596146][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.620168][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.638007][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.652209][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.692865][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.731678][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.751880][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.795272][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.862306][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.884271][ T7915] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.909988][ T8280] loop8: detected capacity change from 0 to 512 [ 245.917303][ T7915] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.928914][ T7915] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.945529][ T7915] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.962822][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 245.987607][ T8280] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.1015: corrupted in-inode xattr [ 246.028093][ T8280] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.1015: couldn't read orphan inode 15 (err -117) [ 246.071611][ T8280] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 246.097417][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.118767][ T8280] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 3: comm syz.8.1015: lblock 0 mapped to illegal pblock 3 (length 1) [ 246.152031][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.167008][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.193055][ T8280] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1015: error -117 reading directory block [ 246.205863][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.208310][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.240899][ T8291] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 3: comm syz.8.1015: lblock 0 mapped to illegal pblock 3 (length 1) [ 246.281469][ T7992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.329652][ T7992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.349870][ T8291] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1015: error -117 reading directory block [ 246.391549][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.408131][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.425874][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.442364][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.453286][ T8289] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #2: block 3: comm syz.8.1015: lblock 0 mapped to illegal pblock 3 (length 1) [ 246.487989][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.545685][ T8289] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.1015: error -117 reading directory block [ 246.580397][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.633084][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.641972][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.717995][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.728392][ T7831] EXT4-fs (loop8): unmounting filesystem. [ 246.744340][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.783389][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.501478][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.519808][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.573088][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.726845][ T8332] loop8: detected capacity change from 0 to 512 [ 247.797235][ T8332] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 247.813205][ T8332] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.106071][ T7831] EXT4-fs (loop8): unmounting filesystem. [ 248.630816][ T8358] loop9: detected capacity change from 0 to 4096 [ 248.751118][ T8358] EXT4-fs: Ignoring removed orlov option [ 248.862424][ T8358] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 248.909206][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.941974][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.048292][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.088199][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.134417][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.182771][ T7915] EXT4-fs (loop9): unmounting filesystem. [ 249.187998][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.256349][ T7992] device veth0_vlan entered promiscuous mode [ 249.338456][ T7992] device veth1_vlan entered promiscuous mode [ 249.474936][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.489213][ T8379] kvm [8377]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 249.513573][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.565396][ T7992] device veth0_macvtap entered promiscuous mode [ 249.605447][ T7992] device veth1_macvtap entered promiscuous mode [ 249.689421][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.730515][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.784232][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.829626][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.860240][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.912785][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.010877][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.091970][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.127357][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.150941][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.170145][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.203669][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.244182][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.276280][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.302637][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.314157][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.370642][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.386168][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.407169][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.427939][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.459027][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.496751][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.510472][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.520892][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.568898][ T7992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.589531][ T7992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.604726][ T7992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.633398][ T7992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.931826][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.967673][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.024037][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 251.047316][ T8404] FAULT_INJECTION: forcing a failure. [ 251.047316][ T8404] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 251.074039][ T8404] CPU: 0 PID: 8404 Comm: syz.8.1046 Not tainted syzkaller #0 [ 251.074204][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.081504][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.081534][ T8404] Call Trace: [ 251.081544][ T8404] [ 251.081556][ T8404] dump_stack_lvl+0x188/0x24e [ 251.110456][ T8404] ? show_regs_print_info+0x12/0x12 [ 251.115713][ T8404] ? load_image+0x410/0x410 [ 251.120274][ T8404] ? __lock_acquire+0x7ea0/0x7ea0 [ 251.125368][ T8404] should_fail_ex+0x390/0x4c0 [ 251.130118][ T8404] _copy_from_user+0x2c/0x170 [ 251.134861][ T8404] __se_sys_mount+0x175/0x3d0 [ 251.139637][ T8404] ? __x64_sys_mount+0xc0/0xc0 [ 251.144495][ T8404] ? lockdep_hardirqs_on+0x94/0x140 [ 251.149745][ T8404] ? __x64_sys_mount+0x1c/0xc0 [ 251.152887][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.154544][ T8404] do_syscall_64+0x4c/0xa0 [ 251.166298][ T8404] ? clear_bhb_loop+0x60/0xb0 [ 251.171068][ T8404] ? clear_bhb_loop+0x60/0xb0 [ 251.175806][ T8404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.181749][ T8404] RIP: 0033:0x7fced9d9e559 [ 251.186240][ T8404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.205900][ T8404] RSP: 002b:00007fcedad45028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.214366][ T8404] RAX: ffffffffffffffda RBX: 00007fceda025fa0 RCX: 00007fced9d9e559 [ 251.219146][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.222383][ T8404] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 251.222405][ T8404] RBP: 00007fced9e358b0 R08: 0000200000000140 R09: 0000000000000000 [ 251.222421][ T8404] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 251.222436][ T8404] R13: 00007fceda026038 R14: 00007fceda025fa0 R15: 00007fff0724b998 [ 251.222471][ T8404] [ 251.999492][ T8436] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.102942][ T8442] loop8: detected capacity change from 0 to 128 [ 252.191814][ T8442] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 252.211333][ T8442] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.242900][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.618302][ T7831] EXT4-fs (loop8): unmounting filesystem. [ 253.396650][ T26] audit: type=1800 audit(1791995574.520:25): pid=8485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1067" name="subclass" dev="configfs" ino=51697 res=0 errno=0 [ 253.486158][ T26] audit: type=1800 audit(1791995574.550:26): pid=8485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1067" name="protocol" dev="configfs" ino=51698 res=0 errno=0 [ 253.506523][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.842377][ T8499] netlink: 'syz.1.1073': attribute type 12 has an invalid length. [ 254.716076][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.575585][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.582107][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.147530][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'. [ 256.178438][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.799562][ T8599] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (263401) [ 256.872043][ T8579] futex_wake_op: syz.1.1094 tries to shift op by 144; fix this program [ 256.896436][ T8579] futex_wake_op: syz.1.1094 tries to shift op by 144; fix this program [ 257.455026][ T8624] loop5: detected capacity change from 0 to 7 [ 257.507457][ T8624] loop5: [ 257.538011][ T8624] loop5: partition table partially beyond EOD, truncated [ 258.255970][ T8647] loop9: detected capacity change from 0 to 256 [ 258.319941][ T8647] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 258.730837][ T8660] device syz_tun entered promiscuous mode [ 258.796727][ T8660] device vlan2 entered promiscuous mode [ 259.194294][ T8671] kvm: pic: level sensitive irq not supported [ 259.195123][ T8671] kvm: pic: single mode not supported [ 259.224738][ T8671] kvm: pic: single mode not supported [ 259.248020][ T8671] kvm: pic: level sensitive irq not supported [ 259.648444][ T8685] input: syz0 as /devices/virtual/input/input12 [ 260.354647][ T8708] CacheFiles: Failed to register: -95 [ 260.574777][ T8689] loop8: detected capacity change from 0 to 32768 [ 260.608779][ T8689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1126 (8689) [ 260.672739][ T8689] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.736566][ T8689] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 260.769519][ T8689] BTRFS info (device loop8): setting nodatasum [ 260.795025][ T8689] BTRFS info (device loop8): force zlib compression, level 3 [ 260.833024][ T26] audit: type=1804 audit(1791995581.951:27): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1136" name="/newroot/13/file0" dev="fuse" ino=1 res=1 errno=0 [ 260.854274][ T8689] BTRFS info (device loop8): turning on flush-on-commit [ 260.869026][ T8689] BTRFS info (device loop8): max_inline at 4096 [ 260.885668][ T8689] BTRFS info (device loop8): using free space tree [ 260.937012][ T8689] BTRFS info (device loop8): enabling ssd optimizations [ 261.003104][ T4348] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 261.181798][ T8752] overlayfs: failed to clone upperpath [ 261.202578][ T8749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 261.224076][ T4348] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 261.259401][ T4348] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.318419][ T4348] usb 10-1: config 0 descriptor?? [ 261.694653][ T7831] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.772415][ T4348] wacom 0003:056A:0331.000A: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.9-1/input0 [ 262.022103][ T8721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.122955][ T8778] loop9: detected capacity change from 0 to 1024 [ 262.322357][ T8778] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 262.453428][ T22] usb 10-1: USB disconnect, device number 2 [ 262.660685][ T8786] loop4: detected capacity change from 0 to 512 [ 262.703547][ T8786] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1147: invalid indirect mapped block 4294967295 (level 1) [ 262.829198][ T8786] EXT4-fs (loop4): Remounting filesystem read-only [ 262.861447][ T8786] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1147: invalid indirect mapped block 4294967295 (level 1) [ 262.939142][ T8786] EXT4-fs (loop4): Remounting filesystem read-only [ 262.966672][ T8786] EXT4-fs (loop4): 2 truncates cleaned up [ 262.981077][ T8786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.100528][ T7915] EXT4-fs (loop9): unmounting filesystem. [ 263.282682][ T7992] EXT4-fs error (device loop4): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 263.340814][ T8805] ip_tables: iptables: counters copy to user failed while replacing table [ 263.380545][ T7992] EXT4-fs (loop4): Remounting filesystem read-only [ 263.397146][ T7992] EXT4-fs error (device loop4): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 263.448608][ T7992] EXT4-fs (loop4): Remounting filesystem read-only [ 264.009975][ T7992] EXT4-fs (loop4): unmounting filesystem. [ 264.317201][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.565661][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.755159][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.952332][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.908221][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.921651][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.940305][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.949068][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.958674][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.966296][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 266.237013][ T8869] rxe_eth0 speed is unknown, defaulting to 1000 [ 266.660714][ T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 266.870731][ T22] usb 9-1: Using ep0 maxpacket: 16 [ 266.879186][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.914200][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 266.973883][ T22] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 267.000616][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.036900][ T22] usb 9-1: Product: syz [ 267.056790][ T22] usb 9-1: Manufacturer: syz [ 267.063418][ T22] usb 9-1: SerialNumber: syz [ 267.099641][ T22] usb 9-1: config 0 descriptor?? [ 267.195514][ T8902] overlayfs: failed to clone upperpath [ 267.356267][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 267.415716][ T22] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input16 [ 267.523648][ T22] imon:send_packet: packet tx failed (-71) [ 267.560695][ T22] imon 9-1:0.0: panel buttons/knobs setup failed [ 267.790455][ T22] rc_core: IR keymap rc-imon-pad not found [ 267.796388][ T22] Registered IR keymap rc-empty [ 267.827143][ T22] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 267.870979][ T22] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 267.899849][ T22] imon:send_packet: packet tx failed (-71) [ 267.940493][ T22] imon 9-1:0.0: remote input dev register failed [ 267.947044][ T22] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 268.046340][ T8869] chnl_net:caif_netlink_parms(): no params data found [ 268.053912][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 268.083528][ T22] imon 9-1:0.0: unable to initialize intf0, err 0 [ 268.141409][ T22] imon:imon_probe: failed to initialize context! [ 268.147832][ T22] imon 9-1:0.0: unable to register, err -19 [ 268.216795][ T22] usb 9-1: USB disconnect, device number 2 [ 268.308218][ T47] device hsr_slave_0 left promiscuous mode [ 268.321898][ T47] device hsr_slave_1 left promiscuous mode [ 268.329677][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.337335][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.345324][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.352854][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.360752][ T47] device bridge_slave_1 left promiscuous mode [ 268.367237][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.376345][ T47] device bridge_slave_0 left promiscuous mode [ 268.383043][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.429671][ T47] device veth1_macvtap left promiscuous mode [ 268.435878][ T47] device veth0_macvtap left promiscuous mode [ 268.450562][ T47] device veth1_vlan left promiscuous mode [ 268.456452][ T47] device veth0_vlan left promiscuous mode [ 268.590498][ T22] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 268.792344][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 268.824274][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 268.846724][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 268.875371][ T22] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 268.902712][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.927470][ T22] usb 9-1: Product: syz [ 268.938577][ T22] usb 9-1: Manufacturer: syz [ 268.961525][ T22] usb 9-1: SerialNumber: syz [ 268.987832][ T22] usb 9-1: config 0 descriptor?? [ 269.009966][ T8887] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 269.266048][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 269.277442][ T22] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input18 [ 269.401031][ T8940] loop9: detected capacity change from 0 to 32768 [ 269.780367][ T22] rc_core: IR keymap rc-imon-pad not found [ 269.786268][ T22] Registered IR keymap rc-empty [ 269.800947][ T22] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 269.820323][ T22] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 269.883610][ T22] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 269.897484][ T22] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input19 [ 269.915784][ T22] imon 9-1:0.0: iMON device (15c2:0045, intf0) on usb<9:3> initialized [ 270.120763][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 270.613504][ T4350] usb 9-1: USB disconnect, device number 3 [ 270.623442][ T8887] imon:send_packet: packet tx failed (-71) [ 270.658452][ T8887] imon:lcd_write: send packet failed! [ 271.113483][ T47] team0 (unregistering): Port device team_slave_1 removed [ 271.346363][ T47] team0 (unregistering): Port device team_slave_0 removed [ 271.547935][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.734791][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.202891][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 272.684560][ T47] bond0 (unregistering): Released all slaves [ 272.865479][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.897900][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.938862][ T8869] device bridge_slave_0 entered promiscuous mode [ 273.087847][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.110730][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.158111][ T8869] device bridge_slave_1 entered promiscuous mode [ 273.159077][ T9019] input: syz1 as /devices/virtual/input/input20 [ 273.405834][ T8869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.478263][ T8869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.688560][ T8869] team0: Port device team_slave_0 added [ 273.738294][ T8869] team0: Port device team_slave_1 added [ 273.959196][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.969466][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.033516][ T8869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.047160][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.054711][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.159806][ T8869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.279645][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 274.365874][ T8869] device hsr_slave_0 entered promiscuous mode [ 274.449745][ T26] audit: type=1326 audit(1791995595.582:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.1.1214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe76b9e559 code=0x0 [ 274.488515][ T8869] device hsr_slave_1 entered promiscuous mode [ 274.504166][ T8869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.543737][ T8869] Cannot create hsr debugfs directory [ 274.718410][ T9060] binder: 9059:9060 ioctl c0306201 200000000080 returned -14 [ 274.768026][ T9060] binder: 9059:9060 ioctl c0306201 2000000003c0 returned -14 [ 275.813649][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1221'. [ 276.888157][ T9115] loop8: detected capacity change from 0 to 1024 [ 276.938455][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 276.954052][ T9115] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.069393][ T9115] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 277.184057][ T8869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.194422][ T8869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.213411][ T8869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.248189][ T8869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.312218][ T9121] loop9: detected capacity change from 0 to 128 [ 277.372377][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 277.400790][ T9121] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 277.431008][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 277.495302][ T9121] input: syz1 as /devices/virtual/input/input21 [ 277.622225][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.657611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.686414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.724105][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.750125][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.767099][ T7831] EXT4-fs (loop8): unmounting filesystem. [ 277.785901][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.820559][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 277.831071][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.838252][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.881258][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 277.927473][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.942470][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 277.956786][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.986949][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 278.030880][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.084577][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.091878][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.136835][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.162383][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.197822][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.249274][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.267169][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.293278][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.312145][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.329448][ T4938] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 278.356472][ T8869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.388437][ T8869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.441981][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.464702][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.500384][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.527770][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.541066][ T4938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.552506][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.579166][ T4938] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.628973][ T4938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.678165][ T4938] usb 10-1: config 0 descriptor?? [ 278.916401][ T4938] usbhid 10-1:0.0: can't add hid device: -71 [ 278.929721][ T4938] usbhid: probe of 10-1:0.0 failed with error -71 [ 278.977871][ T4938] usb 10-1: USB disconnect, device number 3 [ 279.401832][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.411356][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.441714][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.555502][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.575487][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.589298][ T4938] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 279.659602][ T8869] device veth0_vlan entered promiscuous mode [ 279.666400][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.699277][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.719330][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 279.739624][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.778061][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.791356][ T4938] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.834402][ T8869] device veth1_vlan entered promiscuous mode [ 279.857974][ T4938] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 279.919423][ T4938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.959426][ T4938] usb 10-1: config 0 descriptor?? [ 280.012473][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.031099][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.089994][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.100784][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.139470][ T8869] device veth0_macvtap entered promiscuous mode [ 280.209272][ T8869] device veth1_macvtap entered promiscuous mode [ 280.300630][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.335404][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.353930][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.375277][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.399121][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.441186][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.463261][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.481080][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.506149][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.532761][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.551612][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.599657][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.649937][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.701410][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.730185][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.764011][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.789854][ T4938] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 280.818412][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.849140][ T4938] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input22 [ 280.905842][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.973652][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.033810][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.088898][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.148699][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.184010][ T4350] usb 10-1: USB disconnect, device number 4 [ 281.184197][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 281.228921][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.300559][ T9031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.342524][ T8869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.373098][ T8869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.408663][ T8869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.456931][ T8869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.681313][ T30] tipc: Left network mode [ 282.744366][ T9198] loop9: detected capacity change from 0 to 512 [ 282.778380][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 282.790361][ T9198] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.873522][ T9198] EXT4-fs error (device loop9): ext4_iget_extra_inode:4763: inode #15: comm syz.9.1246: corrupted in-inode xattr [ 282.890936][ T9198] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.1246: couldn't read orphan inode 15 (err -117) [ 282.913882][ T9218] md: md0 stopped. [ 282.927236][ T9198] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 283.318163][ T7915] EXT4-fs (loop9): unmounting filesystem. [ 283.373196][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 283.417839][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 283.638500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 284.183538][ T9244] loop9: detected capacity change from 0 to 8 [ 284.249757][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 284.658478][ T22] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 284.818534][ T22] usb 10-1: device descriptor read/64, error -71 [ 285.088373][ T22] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 285.280470][ T22] usb 10-1: device descriptor read/64, error -71 [ 285.399517][ T22] usb usb10-port1: attempt power cycle [ 285.564376][ T30] device hsr_slave_0 left promiscuous mode [ 285.588884][ T30] device hsr_slave_1 left promiscuous mode [ 285.607136][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.636249][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.666922][ T30] device bridge_slave_1 left promiscuous mode [ 285.684570][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.722566][ T30] device bridge_slave_0 left promiscuous mode [ 285.741978][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.808434][ T22] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 285.852110][ T22] usb 10-1: device descriptor read/8, error -71 [ 286.138269][ T22] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 286.182659][ T22] usb 10-1: device descriptor read/8, error -71 [ 286.314711][ T22] usb usb10-port1: unable to enumerate USB device [ 287.274888][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 287.334423][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 287.913101][ T30] team0 (unregistering): Port device team_slave_1 removed [ 287.978927][ T30] team0 (unregistering): Port device team_slave_0 removed [ 288.043012][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.110323][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.005495][ T30] team0 (unregistering): Port device dummy0 removed [ 289.080936][ T30] bond0 (unregistering): Released all slaves [ 290.247462][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.464635][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.711623][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.899045][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.947622][ T4946] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 291.144365][ T4946] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.167135][ T4946] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.195268][ T4946] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 291.246955][ T4946] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.281824][ T4946] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 291.308187][ T4946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.326575][ T4946] usb 10-1: Product: syz [ 291.331794][ T4946] usb 10-1: Manufacturer: syz [ 291.336566][ T4946] usb 10-1: SerialNumber: syz [ 291.378415][ T4946] usbserial_generic 10-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 291.407577][ T4946] usbserial_generic 10-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 291.426351][ T4946] usbserial_generic 10-1:1.0: generic converter detected [ 291.449087][ T4946] usb 10-1: generic converter now attached to ttyUSB0 [ 292.440461][ T22] usb 10-1: USB disconnect, device number 9 [ 292.530767][ T22] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 292.565068][ T22] usbserial_generic 10-1:1.0: device disconnected [ 293.328986][ T30] device hsr_slave_0 left promiscuous mode [ 293.342124][ T30] device hsr_slave_1 left promiscuous mode [ 293.389392][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.437835][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.485743][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.516445][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.626601][ T30] device bridge_slave_1 left promiscuous mode [ 293.638781][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.693364][ T30] device bridge_slave_0 left promiscuous mode [ 293.711421][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.883299][ T30] device veth1_macvtap left promiscuous mode [ 293.905745][ T30] device veth0_macvtap left promiscuous mode [ 293.924301][ T30] device veth1_vlan left promiscuous mode [ 293.944180][ T30] device veth0_vlan left promiscuous mode [ 294.868323][ T9439] pit: kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 294.909484][ T9439] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 294.938405][ T9439] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 294.957970][ T9439] pit: kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 294.977836][ T9439] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 295.005124][ T9439] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 295.034583][ T9439] pit: kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 295.068616][ T9439] pit: kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 295.103425][ T9439] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 295.132283][ T9439] pit: kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 295.910216][ T30] team0 (unregistering): Port device team_slave_1 removed [ 295.968125][ T30] team0 (unregistering): Port device team_slave_0 removed [ 296.040542][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.102492][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.559259][ T30] bond0 (unregistering): Released all slaves [ 296.727803][ T9467] loop8: detected capacity change from 0 to 164 [ 296.737505][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 296.802715][ T9467] ISOFS: Unable to identify CD-ROM format. [ 296.870137][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 296.912360][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 297.763236][ T9505] loop8: detected capacity change from 0 to 2048 [ 297.783235][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 297.849460][ T9505] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 298.186821][ T14] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 298.404107][ T14] usb 9-1: not running at top speed; connect to a high speed hub [ 298.414631][ T14] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.479679][ T14] usb 9-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 298.516741][ T14] usb 9-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 298.525165][ T14] usb 9-1: Product: syz [ 298.548499][ T14] usb 9-1: Manufacturer: syz [ 298.583244][ T14] usb 9-1: Found UVC 1.00 device syz (225a:e1d4) [ 298.776143][ T14] usb 9-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 298.803928][ T14] uvcvideo 9-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 298.820468][ T14] uvcvideo 9-1:1.1: Failed to initialize the device (-5). [ 298.863337][ T14] usb 9-1: USB disconnect, device number 4 [ 299.440719][ T7831] EXT4-fs (loop8): unmounting filesystem. [ 299.513678][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 299.571837][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 299.585270][ T9529] device wlan0 entered promiscuous mode [ 299.885730][ T4274] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 300.049192][ T9540] netlink: 'syz.8.1301': attribute type 1 has an invalid length. [ 300.841707][ T9540] device bond1 entered promiscuous mode [ 300.916870][ T9540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.067113][ T9546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.197070][ T9546] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 301.326442][ T9546] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 301.408743][ T9546] bond1: (slave wireguard0): making interface the new active one [ 301.508428][ T9546] device wireguard0 entered promiscuous mode [ 301.549366][ T9546] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 301.626739][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 302.771993][ T9593] loop8: detected capacity change from 0 to 16 [ 302.792974][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 302.819260][ T26] audit: type=1326 audit(1791995623.956:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 302.839047][ T9593] erofs: (device loop8): mounted with root inode @ nid 36. [ 302.929055][ T26] audit: type=1326 audit(1791995623.986:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.013302][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 303.049146][ T26] audit: type=1326 audit(1791995623.986:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.080890][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 303.130678][ T26] audit: type=1326 audit(1791995623.986:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.224502][ T26] audit: type=1326 audit(1791995623.986:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.299774][ T26] audit: type=1326 audit(1791995623.986:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.384427][ T26] audit: type=1326 audit(1791995623.986:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.466539][ T26] audit: type=1326 audit(1791995623.986:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.546579][ T26] audit: type=1326 audit(1791995623.986:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.653961][ T26] audit: type=1326 audit(1791995623.986:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.1307" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe76b9e559 code=0x7fc00000 [ 303.679117][ T9620] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 303.865555][ T9626] FAULT_INJECTION: forcing a failure. [ 303.865555][ T9626] name failslab, interval 1, probability 0, space 0, times 0 [ 303.908022][ T9626] CPU: 0 PID: 9626 Comm: nl80211 Not tainted syzkaller #0 [ 303.915229][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.925334][ T9626] Call Trace: [ 303.928704][ T9626] [ 303.931674][ T9626] dump_stack_lvl+0x188/0x24e [ 303.936415][ T9626] ? show_regs_print_info+0x12/0x12 [ 303.941723][ T9626] ? load_image+0x410/0x410 [ 303.946282][ T9626] ? __might_sleep+0xd0/0xd0 [ 303.950922][ T9626] ? __lock_acquire+0x7ea0/0x7ea0 [ 303.956043][ T9626] should_fail_ex+0x390/0x4c0 [ 303.960792][ T9626] should_failslab+0x5/0x20 [ 303.965337][ T9626] slab_pre_alloc_hook+0x59/0x300 [ 303.970417][ T9626] kmem_cache_alloc+0x56/0x2f0 [ 303.975229][ T9626] ? getname_flags+0xb7/0x500 [ 303.979953][ T9626] getname_flags+0xb7/0x500 [ 303.984499][ T9626] ? syscall_enter_from_user_mode+0x21/0x80 [ 303.990452][ T9626] __x64_sys_unlink+0x38/0x50 [ 303.995183][ T9626] do_syscall_64+0x4c/0xa0 [ 303.999656][ T9626] ? clear_bhb_loop+0x60/0xb0 [ 304.004385][ T9626] ? clear_bhb_loop+0x60/0xb0 [ 304.009122][ T9626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.015062][ T9626] RIP: 0033:0x7f43c079e559 [ 304.019529][ T9626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.039188][ T9626] RSP: 002b:00007f43c1641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 304.047662][ T9626] RAX: ffffffffffffffda RBX: 00007f43c0a25fa0 RCX: 00007f43c079e559 [ 304.055684][ T9626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.063707][ T9626] RBP: 00007f43c08358b0 R08: 0000000000000000 R09: 0000000000000000 [ 304.071729][ T9626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.079773][ T9626] R13: 00007f43c0a26038 R14: 00007f43c0a25fa0 R15: 00007ffed5736418 [ 304.087825][ T9626] [ 305.499166][ T9672] loop9: detected capacity change from 0 to 512 [ 305.520929][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 305.640666][ T9676] overlayfs: failed to clone upperpath [ 305.651945][ T9678] Bluetooth: MGMT ver 1.22 [ 305.683255][ T9676] overlayfs: failed to clone upperpath [ 305.772288][ T9672] EXT4-fs error (device loop9): ext4_quota_enable:7045: comm syz.9.1319: Bad quota inum: 1, type: 2 [ 305.804087][ T9672] EXT4-fs warning (device loop9): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 305.944280][ T9672] EXT4-fs (loop9): mount failed [ 306.623052][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 306.703039][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 306.763728][ T9686] loop8: detected capacity change from 0 to 1024 [ 306.783752][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 306.786802][ T9686] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 306.851179][ T9686] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 306.908150][ T9686] EXT4-fs error (device loop8): ext4_get_journal_inode:5762: inode #5: comm syz.8.1320: unexpected bad inode w/o EXT4_IGET_BAD [ 306.961671][ T9686] EXT4-fs (loop8): no journal found [ 306.971480][ T9686] EXT4-fs (loop8): can't get journal size [ 307.008978][ T9686] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 307.027931][ T9696] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 307.097328][ T7831] EXT4-fs error (device loop8): __ext4_iget:5102: inode #15: block 1803188595: comm syz-executor: invalid block [ 307.119978][ T7831] EXT4-fs error (device loop8): __ext4_iget:5102: inode #15: block 1803188595: comm syz-executor: invalid block [ 307.189318][ T9696] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 307.599207][ T7831] EXT4-fs (loop8): unmounting filesystem. [ 307.648368][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 307.702374][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 308.366502][ T9721] netlink: 'syz.2.1329': attribute type 1 has an invalid length. [ 308.450165][ T9721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.229891][ T9726] bond2: (slave veth5): Enslaving as an active interface with a down link [ 309.457165][ T9728] bond2: (slave veth0_to_bond): making interface the new active one [ 309.497530][ T9728] device veth0_to_bond entered promiscuous mode [ 309.535661][ T9728] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 309.545867][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 311.439751][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.470782][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.500983][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.537806][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.552180][ T4274] Bluetooth: Wrong link type (-22) [ 311.561578][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.590610][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.610777][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.644620][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.674964][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 311.707762][ T9768] lwtunnel_output(): recursion limit reached on datapath [ 313.493974][ T9820] loop9: detected capacity change from 0 to 512 [ 313.598759][ T9821] udevd[9821]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 313.620077][ T26] audit: type=1800 audit(1791995634.747:39): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1342" name="bus" dev="loop9" ino=1048751 res=0 errno=0 [ 313.897836][ T9821] udevd[9821]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 313.926117][ T9821] udevd[9821]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 314.921936][ T26] audit: type=1800 audit(1791995636.047:40): pid=9855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1346" name="report_desc" dev="configfs" ino=56876 res=0 errno=0 [ 316.997861][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.004255][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.705645][ T9031] device veth0_to_bond left promiscuous mode [ 320.714256][T10015] input: syz0 as /devices/virtual/input/input23 SYZFAIL: open(/dev/rfkill) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=1162 state=3 status=67 (errno 32: Broken pipe) [ 322.942550][ T4285] bond0: (slave syz_tun): Releasing backup interface [ 323.088215][ T4354] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.274536][ T4354] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.379588][ T4354] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.508152][ T4354] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.774604][ T6488] bond0: (slave syz_tun): Releasing backup interface [ 325.211425][ T4354] device hsr_slave_0 left promiscuous mode [ 325.218218][ T4354] device hsr_slave_1 left promiscuous mode [ 325.229658][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.239208][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.251153][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.259050][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.267391][ T4354] device bridge_slave_1 left promiscuous mode [ 325.274082][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.283228][ T4354] device bridge_slave_0 left promiscuous mode [ 325.290191][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.327865][ T4354] device veth1_macvtap left promiscuous mode [ 325.334248][ T4354] device veth0_macvtap left promiscuous mode [ 325.340409][ T4354] device veth1_vlan left promiscuous mode [ 325.349914][ T4354] device veth0_vlan left promiscuous mode [ 326.080188][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 326.146747][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 326.206677][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.269940][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.746120][ T4354] bond0 (unregistering): Released all slaves [ 329.107043][ T4354] device hsr_slave_0 left promiscuous mode [ 329.114091][ T4354] device hsr_slave_1 left promiscuous mode [ 329.120723][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.133913][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.141825][ T4354] device bridge_slave_0 left promiscuous mode [ 329.150954][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.819388][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 329.882598][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 329.942592][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.012291][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.394285][ T4354] bond0 (unregistering): Released all slaves