last executing test programs: 1m16.302333889s ago: executing program 0 (id=40): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) memfd_create(0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1m15.972966842s ago: executing program 0 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f0000000780), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/125, 0x7d}], 0x1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1m15.770809929s ago: executing program 0 (id=44): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m15.616477489s ago: executing program 0 (id=45): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000980)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000001,dots,flush,allow_utime=00000000000000000077777,dmask=00000000000000000075344,debug,umask=00000000000000000000004,quiet,dots,umask=00000000000000000000007,nodots,nfs,nodots,usefree,check=normal,pcr=00000000000000000043,uid>', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB="9a7097e2d0c7702f12f17d6793362c00"], 0x1, 0x244, &(0x7f0000000580)="$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") vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000a40)}], 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x193042, 0x41) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x138) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m13.90820363s ago: executing program 0 (id=59): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x40, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2060, &(0x7f0000000080)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2}, 0x80) 1m13.191933614s ago: executing program 0 (id=67): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x2, 0x1, "8baa00000500c30000000006000000000000000000000000000400", 0x5160305}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000040)={0x1, 0xf0b5, @status={[0x4, 0x5, 0x2, 0x8000000000000000, 0x8, 0xa033]}, [0x0, 0xb, 0x4, 0xfffffffffffffffd, 0x1, 0x7, 0xa, 0xd3, 0x0, 0x570, 0x3, 0x18, 0x3, 0xcc, 0x0, 0x6, 0x7f, 0x1, 0xfffffffffffffffb, 0x0, 0x80000000, 0x4, 0x8, 0x400, 0xfffffffffffffffc, 0x1000, 0x9, 0xfffffffffffffff8, 0x1, 0xfffffffffffffffe, 0x6000000000, 0x100000000, 0x6b, 0x37a, 0x4, 0x10000, 0x9, 0x8000000000000000, 0x4e0, 0xffffffffffffffff, 0x6, 0x4, 0xc, 0x6, 0x9, 0x800, 0x1, 0x7, 0x3, 0x9, 0x4, 0xfffffffffffffffe, 0x2, 0x6, 0x8, 0x2712, 0x0, 0x7, 0x8000000000000000, 0x1, 0x6, 0x10001, 0x3, 0x6]}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 1m13.052976191s ago: executing program 32 (id=67): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x2, 0x1, "8baa00000500c30000000006000000000000000000000000000400", 0x5160305}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000040)={0x1, 0xf0b5, @status={[0x4, 0x5, 0x2, 0x8000000000000000, 0x8, 0xa033]}, [0x0, 0xb, 0x4, 0xfffffffffffffffd, 0x1, 0x7, 0xa, 0xd3, 0x0, 0x570, 0x3, 0x18, 0x3, 0xcc, 0x0, 0x6, 0x7f, 0x1, 0xfffffffffffffffb, 0x0, 0x80000000, 0x4, 0x8, 0x400, 0xfffffffffffffffc, 0x1000, 0x9, 0xfffffffffffffff8, 0x1, 0xfffffffffffffffe, 0x6000000000, 0x100000000, 0x6b, 0x37a, 0x4, 0x10000, 0x9, 0x8000000000000000, 0x4e0, 0xffffffffffffffff, 0x6, 0x4, 0xc, 0x6, 0x9, 0x800, 0x1, 0x7, 0x3, 0x9, 0x4, 0xfffffffffffffffe, 0x2, 0x6, 0x8, 0x2712, 0x0, 0x7, 0x8000000000000000, 0x1, 0x6, 0x10001, 0x3, 0x6]}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 47.9394608s ago: executing program 2 (id=252): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 47.51211566s ago: executing program 2 (id=256): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5f, 0x3}) 47.179468513s ago: executing program 2 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)}, 0x20) 46.383060523s ago: executing program 2 (id=264): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInllM1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmJuaDAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX8znd/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHG9+X3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//OwzmfQ==") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 45.578980054s ago: executing program 2 (id=272): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x0, 0x3, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x81, 0x3, 0x0, 0xc2}, {0x5e000, 0xffff1000, 0x9, 0xfd, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x1, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x15}, {0xdddd1000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x10, 0x0, 0x14}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xffff}, 0xfdf8fffb, 0x0, 0x0, 0x120, 0x1, 0x6d01, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000340)="71298935bec5dd15718bbae166579fac9613e2518f0f5a0eec3b074ccd8dbfcb43c4c83135509f331820fb5691f38abf3e02b6e4a373419b6893091882bf14b031890478a570e9c6f808084b9b5bbd015a18aa1ddd528b8b059a65db15ba5a0337e96c78aec4cae4256e15c3f3d8da7343ff984b03bfdf997a03", 0x7a, 0xfffffffffffffffb}]) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 42.378541625s ago: executing program 2 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='6', 0x1, 0x240000c5, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) shutdown(r0, 0x1) 42.105945687s ago: executing program 33 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='6', 0x1, 0x240000c5, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) shutdown(r0, 0x1) 40.530165313s ago: executing program 5 (id=308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 40.254262115s ago: executing program 5 (id=311): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000280), &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x194, 0x65, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_ACT={0x164, 0x1, [@m_bpf={0xa4, 0x11, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x599, 0x20000000, 0x93e9, 0x1}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xbd, 0x1, 0x9}]}]}, {0x49, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a885"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xbc, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x65, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 39.261279631s ago: executing program 5 (id=318): set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff97422012, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x160) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40806685, 0x0) 38.799380878s ago: executing program 5 (id=320): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00), 0x7, 0x9896, &(0x7f0000009c00)="$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") setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000640)=ANY=[@ANYBLOB="05"], 0x2d6, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20044001) creat(&(0x7f0000000040)='./bus\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000cc0)={0x0, 0xfb, 0x70d, 0x2, 0x8, "67ceecce19a100", "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"}, 0x70d, 0x0) 35.786641484s ago: executing program 5 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 35.080106467s ago: executing program 5 (id=328): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x128}, {r1, 0x288}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40186e8d, &(0x7f0000000080)={@desc={0x200000, 0x0, @desc1}}) 20.025027456s ago: executing program 34 (id=328): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x128}, {r1, 0x288}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40186e8d, &(0x7f0000000080)={@desc={0x200000, 0x0, @desc1}}) 4.480420898s ago: executing program 3 (id=495): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) 4.166373378s ago: executing program 3 (id=497): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 3.926992332s ago: executing program 3 (id=502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x83}, 0x8010) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.843509758s ago: executing program 4 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000640)={0x0, 0xcd19, 0x2000, 0x1000000, 0x27f}, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_disconnect(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2.82062302s ago: executing program 1 (id=510): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0xc0c6) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10499, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 2.648074723s ago: executing program 1 (id=512): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 2.487836223s ago: executing program 3 (id=513): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = fanotify_init(0x1, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x41, 0x8000038, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x40002002}) poll(&(0x7f00000001c0)=[{r1, 0x2691}], 0x1, 0x8) 2.398511849s ago: executing program 4 (id=515): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/140) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x27580a, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8, 0x8, 0x2001c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000000}, 0x50) 2.376004234s ago: executing program 7 (id=516): madvise(&(0x7f0000000000/0x2000)=nil, 0xffffffffdfffffff, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000040)='./sys\x00', 0x2000775) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents(r3, &(0x7f0000000200)=""/4096, 0x1000) 2.295075089s ago: executing program 3 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) 2.252650687s ago: executing program 7 (id=519): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.869158819s ago: executing program 7 (id=520): futex(&(0x7f0000001580)=0x2, 0xc, 0x1, &(0x7f00000015c0)={0x0, 0x989680}, &(0x7f0000001600), 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b70000000000000d7f0a0000000000001d000000010000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff25}, 0x21) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='source\x00', &(0x7f0000000900)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='addr\x00', &(0x7f0000000b00)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000e00)='vers\x00', &(0x7f0000000f00)='4.2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.281896969s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000240)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) 1.281399729s ago: executing program 7 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200)=0x4, 0x4) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 1.264075323s ago: executing program 3 (id=523): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.252483875s ago: executing program 4 (id=524): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x6, 0x8, 0x40, 0x42, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r2, 0x6000, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.230286699s ago: executing program 6 (id=525): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640040000000500010006000000050005000200000005000400000000000900020073797a31000d00000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x200088c4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sync_file_range(r2, 0x20000007, 0x0, 0x3) 1.126696549s ago: executing program 1 (id=526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.1191262s ago: executing program 6 (id=527): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) 909.548699ms ago: executing program 6 (id=528): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x1) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181040, 0x0) sendfile(r2, r1, 0x0, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 836.031313ms ago: executing program 1 (id=529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0xcc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}], 0x38) 797.27144ms ago: executing program 4 (id=530): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, 0x8) 745.08878ms ago: executing program 6 (id=531): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 689.06242ms ago: executing program 1 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x0, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) 605.243827ms ago: executing program 4 (id=533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001ac1414bb0000000000003c0a0000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x48010) sendmsg$nl_xfrm(r1, 0x0, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 469.801732ms ago: executing program 6 (id=534): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) readlinkat(r0, &(0x7f0000000000)='./mysys/file0\x00', &(0x7f0000000340)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 467.289963ms ago: executing program 4 (id=535): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 342.553116ms ago: executing program 6 (id=536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x17}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 167.677938ms ago: executing program 7 (id=537): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x9, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(0xffffffffffffffff, 0x0, 0x0) capget(0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 7 (id=538): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="0400"/700, 0x2bc, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/test\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)='test payload data for ecryptfs lower\x00', 0x25) close(r0) mount(&(0x7f0000000100)=@filename='./lower\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=syz0,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/test\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/128, 0x80) close(r1) kernel console output (not intermixed with test programs): : batadv_slave_0: link becomes ready [ 66.604312][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.613336][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.622591][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.633753][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.642556][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.651545][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.659981][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.668721][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.679337][ T4186] device veth0_vlan entered promiscuous mode [ 66.689324][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.709506][ T4193] device veth1_macvtap entered promiscuous mode [ 66.717743][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.726003][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.751871][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.770185][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.778320][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.789478][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.802072][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.811523][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.820395][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.829453][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.844550][ T4186] device veth1_vlan entered promiscuous mode [ 66.857989][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.891828][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.903139][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.914777][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.924974][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.935631][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.948861][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.971437][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.984930][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.994287][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.003954][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.013111][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.022152][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.033232][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.043453][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.052571][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.062708][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.133124][ T4186] device veth0_macvtap entered promiscuous mode [ 67.148442][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.157138][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.169652][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.178392][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.188526][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.197116][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.206838][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.221352][ T4186] device veth1_macvtap entered promiscuous mode [ 67.271992][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.280935][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.300751][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.312262][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.322520][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.333404][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.344650][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.372161][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.380793][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.389478][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.399336][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.408603][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.417116][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.435255][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.443577][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.453452][ T4195] device veth0_vlan entered promiscuous mode [ 67.460601][ T4188] device veth0_vlan entered promiscuous mode [ 67.471371][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.479657][ T4188] device veth1_vlan entered promiscuous mode [ 67.487005][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.488736][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.495482][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.512520][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.516837][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.534185][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.544891][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.558996][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.573305][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.582318][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.591885][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.601161][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.612748][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.623949][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.632862][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.642379][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.651350][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.660285][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.674187][ T4195] device veth1_vlan entered promiscuous mode [ 67.713408][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.721891][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.724625][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.730177][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.746074][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.755597][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.773332][ T4188] device veth0_macvtap entered promiscuous mode [ 67.791770][ T4188] device veth1_macvtap entered promiscuous mode [ 67.825523][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.860988][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.873974][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.891144][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.904744][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.919577][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.932434][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.943639][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.964578][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.981460][ T4195] device veth0_macvtap entered promiscuous mode [ 67.998258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.012234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.022893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.033357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.041859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.051951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.063835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.072849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.083445][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 68.098438][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 68.105248][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 68.107669][ T4195] device veth1_macvtap entered promiscuous mode [ 68.117741][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 68.123943][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 68.133604][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.144487][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.157636][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.170389][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.180976][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.192221][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.204006][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.216107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.241738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.251394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.263836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.297050][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.299842][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.317962][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.340275][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.349789][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.358526][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.370969][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.431543][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.448921][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.462345][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.473153][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.484076][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.494858][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.505619][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.519619][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.531153][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.545336][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.572881][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.596585][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.613982][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.616256][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.641982][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.656388][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.667020][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.678143][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.688718][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.698563][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.709347][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.724189][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.738366][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.749611][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.762894][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.831261][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.847940][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.857725][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.866548][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.883057][ T4283] overlayfs: failed to clone lowerpath [ 68.982757][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.994994][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.042255][ T4287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 69.059728][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.139677][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.179858][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.251693][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.266928][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.285798][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.303804][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.324813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.337128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.377003][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.390828][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.446784][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.497737][ T4298] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 69.554884][ T4298] device wlan0 entered promiscuous mode [ 69.598622][ T4302] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 69.661087][ T4302] Zero length message leads to an empty skb [ 69.667350][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 69.804121][ T4310] loop3: detected capacity change from 0 to 1024 [ 69.979392][ T4310] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.086452][ T4310] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,nolazytime,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xfffff. Quota mode: none. [ 70.168562][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 70.174836][ T4238] Bluetooth: hci1: command 0x0419 tx timeout [ 70.183631][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 70.190405][ T4238] Bluetooth: hci4: command 0x0419 tx timeout [ 70.196674][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 70.869131][ T4339] sctp: [Deprecated]: syz.0.20 (pid 4339) Use of int in maxseg socket option. [ 70.869131][ T4339] Use struct sctp_assoc_value instead [ 70.917541][ T4344] loop3: detected capacity change from 0 to 2048 [ 71.240760][ T4360] loop3: detected capacity change from 0 to 256 [ 71.441306][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.458568][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.987878][ T4326] loop1: detected capacity change from 0 to 32768 [ 72.169237][ T4326] (syz.1.18,4326,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "jourVÎl_async_com" or missing value [ 72.213919][ T4394] netlink: 15143 bytes leftover after parsing attributes in process `syz.3.36'. [ 72.304969][ T4326] (syz.1.18,4326,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 72.497889][ T4399] loop3: detected capacity change from 0 to 4096 [ 72.582598][ T4399] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 73.824199][ T4435] loop0: detected capacity change from 0 to 512 [ 73.937820][ T4435] ======================================================= [ 73.937820][ T4435] WARNING: The mand mount option has been deprecated and [ 73.937820][ T4435] and is ignored by this kernel. Remove the mand [ 73.937820][ T4435] option from the mount to silence this warning. [ 73.937820][ T4435] ======================================================= [ 74.126172][ T4435] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 74.242744][ T4446] loop3: detected capacity change from 0 to 512 [ 74.256347][ T4448] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 74.323646][ T4435] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 74.373876][ T4435] FAT-fs (loop0): Filesystem has been set read-only [ 74.386952][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=remount-ro,. Quota mode: none. [ 74.459956][ T4454] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.528281][ T4446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.47: bg 0: block 67: padding at end of block bitmap is not set [ 74.549917][ T4435] FAULT_INJECTION: forcing a failure. [ 74.549917][ T4435] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 74.564420][ T4435] CPU: 1 PID: 4435 Comm: syz.0.45 Not tainted syzkaller #0 [ 74.572167][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.582242][ T4435] Call Trace: [ 74.582335][ T4435] [ 74.582343][ T4435] dump_stack_lvl+0x188/0x250 [ 74.582368][ T4435] ? show_regs_print_info+0x20/0x20 [ 74.582384][ T4435] ? load_image+0x410/0x410 [ 74.582404][ T4435] ? uncharge_page+0x490/0x490 [ 74.603254][ T4435] should_fail+0x383/0x4b0 [ 74.603280][ T4435] prepare_alloc_pages+0x1e3/0x5b0 [ 74.603302][ T4435] __alloc_pages+0x11b/0x480 [ 74.603318][ T4435] ? zone_statistics+0x170/0x170 [ 74.622298][ T4435] ? rcu_lock_acquire+0x30/0x30 [ 74.632054][ T4435] ? alloc_pages+0x452/0x560 [ 74.636997][ T4435] __get_free_pages+0x8/0x30 [ 74.641598][ T4435] __tlb_remove_page_size+0x1f2/0x3f0 [ 74.646986][ T4435] unmap_page_range+0xfcf/0x2410 [ 74.651968][ T4435] unmap_vmas+0x131/0x250 [ 74.656331][ T4435] ? unmap_page_range+0x2410/0x2410 [ 74.661534][ T4435] ? __mutex_lock_common+0x435/0x2400 [ 74.667053][ T4435] ? exit_mm_release+0x16/0x30 [ 74.667085][ T4435] exit_mmap+0x3b9/0x640 [ 74.667106][ T4435] ? vm_brk+0x20/0x20 [ 74.667134][ T4435] ? uprobe_clear_state+0x2f6/0x460 [ 74.685286][ T4435] __mmput+0x115/0x390 [ 74.689364][ T4435] exit_mm+0x632/0x7b0 [ 74.693438][ T4435] ? perf_pmu_migrate_context+0xb70/0xb70 [ 74.696331][ T4446] EXT4-fs (loop3): Remounting filesystem read-only [ 74.699172][ T4435] ? do_exit+0x2110/0x2110 [ 74.699200][ T4435] ? __ia32_sys_timer_delete+0x40/0x40 [ 74.699216][ T4435] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 74.699238][ T4435] ? tty_audit_exit+0x149/0x1f0 [ 74.699257][ T4435] do_exit+0x5b8/0x2110 [ 74.699278][ T4435] ? put_task_struct+0x80/0x80 [ 74.699293][ T4435] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.699315][ T4435] ? _raw_spin_lock_irq+0xb7/0xf0 [ 74.699338][ T4435] do_group_exit+0x12c/0x2f0 [ 74.699353][ T4435] ? lockdep_hardirqs_on+0x94/0x140 [ 74.699372][ T4435] get_signal+0x7eb/0x12e0 [ 74.699401][ T4435] arch_do_signal_or_restart+0xe6/0x12a0 [ 74.715744][ T4435] ? futex_exit_release+0x1c0/0x1c0 [ 74.726022][ T4435] ? get_sigframe_size+0x10/0x10 [ 74.726046][ T4435] ? __context_tracking_exit+0x4c/0x80 [ 74.735118][ T4435] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.735147][ T4435] ? exit_to_user_mode_loop+0x3b/0x130 [ 74.735165][ T4435] exit_to_user_mode_loop+0x9e/0x130 [ 74.750728][ T4435] exit_to_user_mode_prepare+0xee/0x180 [ 74.766226][ T4435] syscall_exit_to_user_mode+0x16/0x40 [ 74.777021][ T4435] do_syscall_64+0x58/0xa0 [ 74.789066][ T4435] ? clear_bhb_loop+0x30/0x80 [ 74.800408][ T4435] ? clear_bhb_loop+0x30/0x80 [ 74.800447][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.800485][ T4435] RIP: 0033:0x7fc7196a4159 [ 74.800500][ T4435] Code: Unable to access opcode bytes at RIP 0x7fc7196a412f. [ 74.811669][ T4435] RSP: 002b:00007fc7178fc0e8 EFLAGS: 00000246 [ 74.820939][ T4435] ORIG_RAX: 00000000000000ca [ 74.820951][ T4435] RAX: fffffffffffffe00 RBX: 00007fc71992bfa8 RCX: 00007fc7196a4159 [ 74.820961][ T4435] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc71992bfa8 [ 74.820971][ T4435] RBP: 00007fc71992bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 74.820979][ T4435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.820988][ T4435] R13: 00007fc71992c038 R14: 00007ffd66a1b130 R15: 00007ffd66a1b218 [ 74.821013][ T4435] [ 75.206203][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 75.443235][ T4188] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 75.464481][ T4188] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 75.631731][ T4202] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.890646][ T4492] loop2: detected capacity change from 0 to 16 [ 75.934382][ T4492] erofs: (device loop2): mounted with root inode @ nid 36. [ 76.082331][ T4188] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 76.189851][ T1319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.355635][ T1319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.532865][ T1319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.741089][ T1319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.152655][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.161897][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.343088][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.350257][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.359250][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.366339][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.589376][ T4538] device bridge0 entered promiscuous mode [ 77.801929][ T4538] syz.2.78 (4538) used greatest stack depth: 21072 bytes left [ 77.875266][ T4552] ODEBUG: Out of memory. ODEBUG disabled [ 78.203265][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 78.677857][ T4573] xt_hashlimit: max too large, truncated to 1048576 [ 78.797630][ T4230] Bluetooth: hci2: command 0x0409 tx timeout [ 78.824009][ T4580] netlink: 236 bytes leftover after parsing attributes in process `syz.4.89'. [ 78.876000][ T4520] chnl_net:caif_netlink_parms(): no params data found [ 79.118943][ C1] net_ratelimit: 61 callbacks suppressed [ 79.553427][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.574153][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.627933][ T4520] device bridge_slave_0 entered promiscuous mode [ 79.705669][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.720155][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.766375][ T4520] device bridge_slave_1 entered promiscuous mode [ 79.797372][ T4238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.024463][ T4520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.156328][ T4520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.225295][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 80.257808][ T4238] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.277376][ T4238] usb 5-1: config 1 has no interface number 0 [ 80.301277][ T4238] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 80.332608][ T4238] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 80.364558][ T4238] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 80.522070][ T4520] team0: Port device team_slave_0 added [ 80.570008][ T4520] team0: Port device team_slave_1 added [ 80.607725][ T4238] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 80.657989][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.666011][ T4238] usb 5-1: Product: syz [ 80.713368][ T4238] usb 5-1: Manufacturer: syz [ 80.733205][ T4238] usb 5-1: SerialNumber: syz [ 80.819886][ T4630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.100'. [ 80.859740][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.866732][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.894429][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 80.933539][ T4520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.954501][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.966949][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.009694][ T4520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.026738][ T4633] netlink: 52 bytes leftover after parsing attributes in process `syz.1.100'. [ 81.152399][ T1319] device hsr_slave_0 left promiscuous mode [ 81.183246][ T1319] device hsr_slave_1 left promiscuous mode [ 81.209914][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.235236][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.259079][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.297008][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.332598][ T1319] device bridge_slave_1 left promiscuous mode [ 81.347821][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.430722][ T1319] device bridge_slave_0 left promiscuous mode [ 81.437043][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.518368][ T1319] device veth1_macvtap left promiscuous mode [ 81.525226][ T1319] device veth0_macvtap left promiscuous mode [ 81.542710][ T1319] device veth1_vlan left promiscuous mode [ 81.552680][ T1319] device veth0_vlan left promiscuous mode [ 82.364499][ T4664] tipc: Failed to remove unknown binding: 66,1,1/0:2478523646/2478523648 [ 82.554160][ T1319] team0 (unregistering): Port device team_slave_1 removed [ 82.615921][ T1319] team0 (unregistering): Port device team_slave_0 removed [ 82.674519][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.759128][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.937580][ T4238] usb 5-1: 1:0 : does not exist [ 82.943320][ T4238] usb 5-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 82.967235][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 83.071354][ T1319] bond0 (unregistering): Released all slaves [ 83.127257][ T4238] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 83.159195][ T4238] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 83.207648][ T4238] snd_usb_pod 5-1:1.1: set_interface failed [ 83.214063][ T4238] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 83.236465][ T4238] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 83.292849][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.321997][ T4238] usb 5-1: USB disconnect, device number 2 [ 83.387789][ T4665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.395824][ T4665] IPv6: NLM_F_CREATE should be set when creating new route [ 83.679009][ T4520] device hsr_slave_0 entered promiscuous mode [ 83.709073][ T4520] device hsr_slave_1 entered promiscuous mode [ 83.753296][ T4520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.776388][ T4520] Cannot create hsr debugfs directory [ 84.407268][ C1] net_ratelimit: 56 callbacks suppressed [ 84.851039][ T4520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.915606][ T4520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.041321][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 85.058950][ T4520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.127556][ T4520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.433958][ T4714] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 85.514757][ T4714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.725429][ T4719] bond1: (slave geneve2): making interface the new active one [ 85.780715][ T4719] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 85.893948][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 86.015032][ T4520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.091041][ T4719] syz.2.116 (4719) used greatest stack depth: 19888 bytes left [ 86.129964][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.144698][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.184377][ T4520] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.232035][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.261962][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.285155][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.292316][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.346388][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.372387][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.402775][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.426615][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.433777][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.472042][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.517288][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.530080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.573397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.645563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.669166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.695032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.758766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.768842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.792930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.811238][ T1111] cfg80211: failed to load regulatory.db [ 86.832939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.870906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.898522][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.952490][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.047511][ T1108] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 87.227898][ T1108] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 87.244587][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.274142][ T1108] usb 2-1: Product: syz [ 87.285111][ T1108] usb 2-1: Manufacturer: syz [ 87.310317][ T1108] usb 2-1: SerialNumber: syz [ 87.358425][ T4734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.377671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.392980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.466359][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 87.571378][ T4520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.599520][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 87.769813][ T1108] usb 2-1: USB disconnect, device number 2 [ 88.227262][ T4782] udevd[4782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.325521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.372239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.426578][ T4520] device veth0_vlan entered promiscuous mode [ 88.465042][ T4806] loop1: detected capacity change from 0 to 256 [ 88.478267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.506357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.541277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.562610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.601142][ T4806] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 88.655206][ T4520] device veth1_vlan entered promiscuous mode [ 88.826526][ T4520] device veth0_macvtap entered promiscuous mode [ 88.886621][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.910399][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.935248][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.970663][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.035673][ T4520] device veth1_macvtap entered promiscuous mode [ 89.058946][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.105290][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.179208][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.229571][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.251949][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.267025][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.314991][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.351272][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.412445][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.477317][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.505812][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.529799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.560616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.586437][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.597278][ C1] net_ratelimit: 50 callbacks suppressed [ 89.618639][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.663074][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.701574][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.737275][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.781265][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.836272][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.871882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.895957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.929382][ T4520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.953809][ T4520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974012][ T4520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.984756][ T4520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.167407][ T4233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.281150][ T4643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.281251][ T4643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.310881][ T26] audit: type=1804 audit(1790273287.962:2): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.148" name="bus" dev="ramfs" ino=36027 res=1 errno=0 [ 90.434270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.480235][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.507848][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.598182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.607624][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.656367][ T4233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.798187][ T4233] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.842282][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.888617][ T4233] usb 5-1: SerialNumber: syz [ 90.934776][ T4874] process 'syz.3.152' launched '/dev/fd/7' with NULL argv: empty string added [ 90.945519][ T4839] loop2: detected capacity change from 0 to 32768 [ 91.247877][ T4233] usb 5-1: 0:2 : does not exist [ 91.338052][ T4233] usb 5-1: USB disconnect, device number 3 [ 91.353957][ T4884] netem: change failed [ 91.555232][ T4896] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 91.766573][ T4908] capability: warning: `syz.5.162' uses deprecated v2 capabilities in a way that may be insecure [ 92.027869][ T4919] tipc: Started in network mode [ 92.051677][ T4919] tipc: Node identity ac14140f, cluster identity 4711 [ 92.064212][ T4919] tipc: New replicast peer: 255.255.255.255 [ 92.107962][ T4919] tipc: Enabled bearer , priority 10 [ 92.265496][ T4939] netlink: 'syz.4.169': attribute type 5 has an invalid length. [ 92.709257][ T4960] mmap: syz.4.172 (4960) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 92.986121][ T4970] netlink: 'syz.5.175': attribute type 4 has an invalid length. [ 93.072534][ T4972] netlink: 'syz.5.175': attribute type 4 has an invalid length. [ 93.209255][ T4726] tipc: Node number set to 2886997007 [ 93.378534][ T4965] loop1: detected capacity change from 0 to 32768 [ 93.415745][ T4965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.173 (4965) [ 93.441784][ T4982] bridge0: port 3(netdevsim0) entered blocking state [ 93.483010][ T4982] bridge0: port 3(netdevsim0) entered disabled state [ 93.501316][ T4965] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 93.556158][ T4965] BTRFS info (device loop1): setting nodatasum [ 93.571457][ T4982] device netdevsim0 entered promiscuous mode [ 93.572529][ T4965] BTRFS info (device loop1): force zlib compression, level 3 [ 93.602068][ T4965] BTRFS info (device loop1): metadata ratio 1 [ 93.614994][ T4982] bridge0: port 3(netdevsim0) entered blocking state [ 93.622555][ T4982] bridge0: port 3(netdevsim0) entered forwarding state [ 93.624600][ T4965] BTRFS info (device loop1): turning on flush-on-commit [ 93.661790][ T4987] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 93.661992][ T4965] BTRFS info (device loop1): allowing degraded mounts [ 93.688426][ T4987] bridge0: port 3(netdevsim0) entered disabled state [ 93.695718][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.703677][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.741670][ T4987] bridge0: port 3(netdevsim0) entered blocking state [ 93.748493][ T4987] bridge0: port 3(netdevsim0) entered forwarding state [ 93.755588][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.762695][ T4987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.770190][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.777468][ T4987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.810884][ T4987] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.816892][ T4965] BTRFS info (device loop1): using free space tree [ 93.876961][ T4965] BTRFS info (device loop1): has skinny extents [ 94.269734][ T4965] BTRFS info (device loop1): enabling ssd optimizations [ 94.877869][ C1] net_ratelimit: 97 callbacks suppressed [ 94.949228][ T5041] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.424391][ T5068] loop3: detected capacity change from 0 to 1024 [ 95.509570][ T5068] EXT4-fs (loop3): inline encryption not supported [ 95.520870][ T5068] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 95.541229][ T5072] tipc: Started in network mode [ 95.562712][ T5068] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.589886][ T5072] tipc: Node identity 4e9e97b15a18, cluster identity 4711 [ 95.630001][ T5072] tipc: Enabled bearer , priority 0 [ 95.666757][ T5068] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,nojournal_checksum,sb=0x0000000000000007,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 95.704910][ T5068] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.717715][ T5072] device syzkaller0 entered promiscuous mode [ 95.762569][ T5070] tipc: Resetting bearer [ 95.796784][ T5070] tipc: Disabling bearer [ 95.906811][ T5068] netlink: 104 bytes leftover after parsing attributes in process `syz.3.191'. [ 96.007428][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.073316][ T5091] loop2: detected capacity change from 0 to 512 [ 96.090940][ T144] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 96.163712][ T144] EXT4-fs (loop3): Remounting filesystem read-only [ 96.190131][ T5091] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.267506][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 96.387470][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.442371][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.547557][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 96.567933][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.607387][ T1108] usb 5-1: SerialNumber: syz [ 96.701400][ T1108] usb 5-1: 0:2 : does not exist [ 97.614836][ T5130] syz.3.208[5130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.615026][ T5130] syz.3.208[5130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.810960][ T1108] usb 5-1: USB disconnect, device number 4 [ 97.982817][ T26] audit: type=1804 audit(1790273295.632:3): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.212" name=2321200A5854DE9422AB97CA0E43DE0A7956F703D038A068546AD861EC77F558BAC3ECA6C926A316 dev="ramfs" ino=35573 res=1 errno=0 [ 98.129037][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.322980][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.364067][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.414949][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.455746][ T5165] loop3: detected capacity change from 0 to 512 [ 98.563183][ T5165] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpquota,nouid32,stripe=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 98.588793][ T5165] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.622021][ T5171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.984025][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.019470][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.148401][ T5176] netlink: 'syz.4.223': attribute type 16 has an invalid length. [ 99.185011][ T5176] netlink: 'syz.4.223': attribute type 17 has an invalid length. [ 99.292478][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.307486][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.135217][ T5200] loop4: detected capacity change from 0 to 32768 [ 100.167264][ C1] net_ratelimit: 56 callbacks suppressed [ 100.178847][ T5200] xfs: Unknown parameter 'mtpt' [ 100.241206][ T4238] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.358858][ T5217] loop1: detected capacity change from 0 to 64 [ 100.587524][ T5223] Invalid ELF header magic: != ELF [ 100.649745][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.692968][ T4238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.745231][ T4238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.816258][ T4238] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.916027][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.952835][ T4238] usb 4-1: config 0 descriptor?? [ 100.970989][ T4233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.270357][ T5259] loop2: detected capacity change from 0 to 1024 [ 101.340871][ T5259] hfsplus: request for non-existent node 33554434 in B*Tree [ 101.349770][ T5259] hfsplus: request for non-existent node 33554434 in B*Tree [ 101.358561][ T5259] hfsplus: request for non-existent node 33554434 in B*Tree [ 101.365978][ T5259] hfsplus: request for non-existent node 33554434 in B*Tree [ 101.377148][ T5259] hfsplus: request for non-existent node 33554434 in B*Tree [ 101.385558][ T5259] hfsplus: request for non-existent node 33554434 in B*Tree [ 101.474674][ T4238] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 101.579456][ T4278] libceph: mon0 (1)127.0.0.1:20000 socket closed (con state V1_BANNER) [ 101.597611][ T4238] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 101.610898][ T5229] ceph: No mds server is up or the cluster is laggy [ 101.672684][ T4238] usb 4-1: USB disconnect, device number 2 [ 101.945483][ T5268] fido_id[5268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.065902][ T5274] overlayfs: failed to resolve './file0': -2 [ 102.634214][ T5297] FAULT_INJECTION: forcing a failure. [ 102.634214][ T5297] name failslab, interval 1, probability 0, space 0, times 1 [ 102.653263][ T5299] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.711530][ T5297] CPU: 1 PID: 5297 Comm: syz.3.262 Not tainted syzkaller #0 [ 102.718871][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.718887][ T5297] Call Trace: [ 102.718897][ T5297] [ 102.718904][ T5297] dump_stack_lvl+0x188/0x250 [ 102.718932][ T5297] ? show_regs_print_info+0x20/0x20 [ 102.718950][ T5297] ? load_image+0x410/0x410 [ 102.718970][ T5297] ? __lock_acquire+0x7b50/0x7b50 [ 102.733317][ T5297] should_fail+0x383/0x4b0 [ 102.741122][ T5297] should_failslab+0x5/0x20 [ 102.741148][ T5297] slab_pre_alloc_hook+0x51/0xc0 [ 102.741165][ T5297] ? __alloc_file+0x25/0x240 [ 102.741182][ T5297] kmem_cache_alloc+0x3d/0x280 [ 102.741200][ T5297] __alloc_file+0x25/0x240 [ 102.741221][ T5297] alloc_empty_file+0x90/0x180 [ 102.751411][ T5297] alloc_file+0x5c/0x510 [ 102.751441][ T5297] ? do_raw_spin_unlock+0x11d/0x230 [ 102.751463][ T5297] alloc_file_pseudo+0x180/0x200 [ 102.751483][ T5297] ? alloc_empty_file_noaccount+0x80/0x80 [ 102.760890][ T5297] ? do_raw_spin_unlock+0x11d/0x230 [ 102.760912][ T5297] ? put_pid+0xc3/0x120 [ 102.760937][ T5297] sock_alloc_file+0xb3/0x240 [ 102.760957][ T5297] __sys_socketpair+0x372/0x540 [ 102.760979][ T5297] __x64_sys_socketpair+0x97/0xb0 [ 102.760997][ T5297] do_syscall_64+0x4c/0xa0 [ 102.761012][ T5297] ? clear_bhb_loop+0x30/0x80 [ 102.761029][ T5297] ? clear_bhb_loop+0x30/0x80 [ 102.761049][ T5297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.761067][ T5297] RIP: 0033:0x7fbc41462159 [ 102.770709][ T5297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.770734][ T5297] RSP: 002b:00007fbc3f6ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 102.770753][ T5297] RAX: ffffffffffffffda RBX: 00007fbc416e9fa0 RCX: 00007fbc41462159 [ 102.770765][ T5297] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 102.770775][ T5297] RBP: 00007fbc414f906b R08: 0000000000000000 R09: 0000000000000000 [ 102.780970][ T5297] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 102.780991][ T5297] R13: 00007fbc416ea038 R14: 00007fbc416e9fa0 R15: 00007ffefd766e98 [ 102.781015][ T5297] [ 103.021087][ T5303] loop2: detected capacity change from 0 to 512 [ 103.140154][ T5303] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #11: comm syz.2.264: unexpected EA_INODE flag [ 103.166863][ T5303] EXT4-fs (loop2): Remounting filesystem read-only [ 103.217342][ T5303] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.264: couldn't read orphan inode 11 (err -117) [ 103.337245][ T5303] EXT4-fs (loop2): Remounting filesystem read-only [ 103.367308][ T5303] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 103.692219][ T4193] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 103.812486][ T4193] EXT4-fs (loop2): Remounting filesystem read-only [ 103.831431][ T4193] EXT4-fs error (device loop2): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag [ 103.871163][ T4193] EXT4-fs (loop2): Remounting filesystem read-only [ 103.902795][ T4193] EXT4-fs error (device loop2): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag [ 103.950833][ T4193] EXT4-fs (loop2): Remounting filesystem read-only [ 104.281928][ T5316] bridge0: port 3(netdevsim0) entered disabled state [ 104.289057][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.296314][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.406393][ T5315] loop5: detected capacity change from 0 to 40427 [ 104.529932][ T5315] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 104.553099][ T5315] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 104.590688][ T5315] F2FS-fs (loop5): invalid crc value [ 104.646882][ T5315] F2FS-fs (loop5): Found nat_bits in checkpoint [ 104.796536][ T5315] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 104.809370][ T5315] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 104.820892][ T5332] loop1: detected capacity change from 0 to 32768 [ 104.907364][ T5332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.276 (5332) [ 104.973475][ T5332] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 105.000771][ T5332] BTRFS info (device loop1): force clearing of disk cache [ 105.025071][ T26] audit: type=1804 audit(1790273302.672:4): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.268" name="/newroot/24/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 105.036379][ T5344] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 105.070640][ T5332] BTRFS info (device loop1): enabling auto defrag [ 105.077103][ T5332] BTRFS info (device loop1): setting nodatasum [ 105.077156][ T5332] BTRFS info (device loop1): max_inline at 0 [ 105.090677][ T5332] BTRFS info (device loop1): enabling disk space caching [ 105.106207][ T5336] loop4: detected capacity change from 0 to 32768 [ 105.113113][ T5332] BTRFS info (device loop1): use zlib compression, level 3 [ 105.147974][ T5332] BTRFS error (device loop1): unrecognized mount option 'fowner=00000000000000000000' [ 105.181906][ T5332] BTRFS error (device loop1): open_ctree failed: -22 [ 105.208014][ T5336] xfs: Unknown parameter 'smackfstransmute' [ 105.231096][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.349897][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.357392][ C1] net_ratelimit: 54 callbacks suppressed [ 106.197135][ T5362] FAULT_INJECTION: forcing a failure. [ 106.197135][ T5362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.220953][ T5362] CPU: 1 PID: 5362 Comm: syz.5.283 Not tainted syzkaller #0 [ 106.228275][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.228319][ T5362] Call Trace: [ 106.228327][ T5362] [ 106.228335][ T5362] dump_stack_lvl+0x188/0x250 [ 106.228362][ T5362] ? show_regs_print_info+0x20/0x20 [ 106.228382][ T5362] ? load_image+0x410/0x410 [ 106.250158][ T5362] ? __lock_acquire+0x7b50/0x7b50 [ 106.250184][ T5362] ? __vmalloc_node_range+0x2dd/0x8b0 [ 106.250203][ T5362] ? vzalloc+0x75/0x80 [ 106.250223][ T5362] should_fail+0x383/0x4b0 [ 106.250248][ T5362] prepare_alloc_pages+0x1e3/0x5b0 [ 106.260048][ T5362] __alloc_pages+0x11b/0x480 [ 106.260077][ T5362] ? zone_statistics+0x170/0x170 [ 106.260106][ T5362] ? alloc_pages+0x452/0x560 [ 106.270464][ T5362] __vmalloc_node_range+0x4b1/0x8b0 [ 106.270494][ T5362] ? n_tty_open+0x19/0x150 [ 106.279045][ T5362] vzalloc+0x75/0x80 [ 106.279065][ T5362] ? n_tty_open+0x19/0x150 [ 106.279084][ T5362] n_tty_open+0x19/0x150 [ 106.288749][ T5362] tty_ldisc_setup+0x1a3/0x250 [ 106.288770][ T5362] tty_init_dev+0x239/0x470 [ 106.298267][ T5362] ptmx_open+0xe1/0x2c0 [ 106.298288][ T5362] ? pty_start+0x140/0x140 [ 106.307875][ T5362] chrdev_open+0x585/0x5f0 [ 106.307899][ T5362] ? cd_forget+0x160/0x160 [ 106.316304][ T5362] ? fsnotify_perm+0x3a7/0x560 [ 106.325335][ T5362] ? cd_forget+0x160/0x160 [ 106.333970][ T5362] do_dentry_open+0x7f7/0xf90 [ 106.342820][ T5362] ? vfs_open+0x2b/0x80 [ 106.351978][ T5362] path_openat+0x2718/0x2fb0 [ 106.361071][ T5362] ? do_filp_open+0x400/0x400 [ 106.369791][ T5362] do_filp_open+0x1df/0x400 [ 106.379565][ T5362] ? vfs_tmpfile+0x300/0x300 [ 106.379617][ T5362] ? _raw_spin_unlock+0x24/0x40 [ 106.379636][ T5362] ? alloc_fd+0x59e/0x650 [ 106.379659][ T5362] do_sys_openat2+0x14b/0x500 [ 106.389348][ T5362] ? __lock_acquire+0x7b50/0x7b50 [ 106.389378][ T5362] ? do_sys_open+0xe0/0xe0 [ 106.389396][ T5362] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.389418][ T5362] ? lock_chain_count+0x20/0x20 [ 106.389440][ T5362] __x64_sys_openat+0x135/0x160 [ 106.400044][ T5362] do_syscall_64+0x4c/0xa0 [ 106.400078][ T5362] ? clear_bhb_loop+0x30/0x80 [ 106.400097][ T5362] ? clear_bhb_loop+0x30/0x80 [ 106.400117][ T5362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.410553][ T5362] RIP: 0033:0x7fe3da091159 [ 106.421633][ T5362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.431584][ T5362] RSP: 002b:00007fe3d82e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.431618][ T5362] RAX: ffffffffffffffda RBX: 00007fe3da318fa0 RCX: 00007fe3da091159 [ 106.431631][ T5362] RDX: 0000000000000041 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 106.431643][ T5362] RBP: 00007fe3da12806b R08: 0000000000000000 R09: 0000000000000000 [ 106.431655][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.441738][ T5362] R13: 00007fe3da319038 R14: 00007fe3da318fa0 R15: 00007ffcf92d5ec8 [ 106.441772][ T5362] [ 106.449694][ T5362] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 106.563403][ T5316] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.582675][ T5316] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.612207][ T5316] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.623709][ T5316] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.874510][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 106.949435][ T5316] syz.3.270 (5316) used greatest stack depth: 19792 bytes left [ 107.061122][ T4641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.154904][ T4641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.273816][ T4641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.429180][ T4641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.895467][ T4641] tipc: Left network mode [ 108.453739][ T5433] loop3: detected capacity change from 0 to 1024 [ 108.572676][ T5433] EXT4-fs (loop3): Ignoring removed orlov option [ 108.638685][ T5433] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 109.024854][ T5408] chnl_net:caif_netlink_parms(): no params data found [ 109.553513][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.567062][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.594480][ T5477] loop5: detected capacity change from 0 to 7 [ 109.611465][ T5408] device bridge_slave_0 entered promiscuous mode [ 109.623531][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.644862][ T4179] loop5: [ 109.651399][ T4179] loop5: partition table partially beyond EOD, truncated [ 109.664534][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.679776][ T5477] loop5: [ 109.683163][ T5477] loop5: partition table partially beyond EOD, truncated [ 109.703694][ T5408] device bridge_slave_1 entered promiscuous mode [ 109.921331][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.973201][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.997244][ T4726] Bluetooth: hci3: command 0x0409 tx timeout [ 110.225777][ T5408] team0: Port device team_slave_0 added [ 110.251091][ T5408] team0: Port device team_slave_1 added [ 110.405717][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.413656][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.477721][ T1352] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.478319][ T144] net_ratelimit: 49 callbacks suppressed [ 110.528193][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.615808][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.637582][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.808103][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.890740][ T4641] device hsr_slave_0 left promiscuous mode [ 110.921881][ T4641] device hsr_slave_1 left promiscuous mode [ 110.950323][ T4641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.999693][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.033820][ T4641] device bridge_slave_1 left promiscuous mode [ 111.061019][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.099016][ T4641] device bridge_slave_0 left promiscuous mode [ 111.119348][ T4641] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.192829][ T4641] device veth1_macvtap left promiscuous mode [ 111.217321][ T4641] device veth0_macvtap left promiscuous mode [ 111.241129][ T4641] device veth1_vlan left promiscuous mode [ 111.265408][ T4641] device veth0_vlan left promiscuous mode [ 111.501437][ T5512] loop5: detected capacity change from 0 to 32768 [ 111.657391][ T5512] XFS (loop5): Mounting V5 Filesystem [ 111.742243][ T4641] bond1 (unregistering): (slave geneve2): Releasing active interface [ 111.798858][ T4641] bond1 (unregistering): Released all slaves [ 111.804725][ T5512] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 111.871759][ T5512] XFS (loop5): Starting recovery (logdev: internal) [ 111.919737][ T5512] XFS (loop5): Ending recovery (logdev: internal) [ 112.024053][ T26] audit: type=1800 audit(1790273309.672:5): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.320" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 112.082102][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 112.105621][ T5532] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 112.134400][ T5532] XFS (loop5): Unmount and run xfs_repair [ 112.191351][ T5512] XFS (loop5): Internal error i != 1 at line 482 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x5e3/0x7f0 [ 112.248684][ T5512] CPU: 0 PID: 5512 Comm: syz.5.320 Not tainted syzkaller #0 [ 112.257131][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.257150][ T5512] Call Trace: [ 112.257158][ T5512] [ 112.257168][ T5512] dump_stack_lvl+0x188/0x250 [ 112.257191][ T5512] ? xfs_info+0x2c0/0x2c0 [ 112.257212][ T5512] ? show_regs_print_info+0x20/0x20 [ 112.257241][ T5512] xfs_corruption_error+0x117/0x170 [ 112.257261][ T5512] ? xfs_alloc_fixup_trees+0x5e3/0x7f0 [ 112.257285][ T5512] xfs_alloc_fixup_trees+0x642/0x7f0 [ 112.257304][ T5512] ? xfs_alloc_fixup_trees+0x5e3/0x7f0 [ 112.257323][ T5512] ? slab_post_alloc_hook+0x68/0x380 [ 112.257346][ T5512] ? xfs_alloc_fix_len+0x280/0x280 [ 112.257362][ T5512] ? xfs_alloc_ag_vextent_lastblock+0x431/0x6f0 [ 112.257378][ T5512] ? kmem_cache_alloc+0x189/0x280 [ 112.257401][ T5512] xfs_alloc_cur_finish+0xd5/0x470 [ 112.278604][ T5512] ? xfs_allocbt_init_cursor+0x6c/0x120 [ 112.278635][ T5512] xfs_alloc_ag_vextent_near+0xd1a/0x11e0 [ 112.278671][ T5512] ? xfs_alloc_ag_vextent_size+0x1740/0x1740 [ 112.288192][ T5512] ? __lock_acquire+0x7b50/0x7b50 [ 112.288229][ T5512] xfs_alloc_ag_vextent+0x94/0x760 [ 112.288248][ T5512] ? xfs_perag_get+0x1dd/0x340 [ 112.288266][ T5512] xfs_alloc_vextent+0x120c/0x1ad0 [ 112.288297][ T5512] xfs_bmap_btalloc+0xfee/0x1f50 [ 112.288327][ T5512] ? xfs_bmbt_lookup_first+0x40/0x40 [ 112.288355][ T5512] ? lock_chain_count+0x20/0x20 [ 112.288371][ T5512] ? __rwlock_init+0x140/0x140 [ 112.299923][ T5512] xfs_bmapi_allocate+0x4ab/0xe40 [ 112.299956][ T5512] ? xfs_bmapi_write+0x1040/0x1040 [ 112.315938][ T5512] ? xfs_iext_lookup_extent+0x41b/0x7f0 [ 112.315970][ T5512] ? xfs_iext_prev+0x346/0x360 [ 112.315988][ T5512] ? xfs_iext_get_extent+0x1b5/0x360 [ 112.316012][ T5512] xfs_bmapi_write+0x715/0x1040 [ 112.327345][ T5512] ? xfs_bmap_add_extent_hole_delay+0x870/0x870 [ 112.327371][ T5512] ? __x64_sys_setxattr+0xb7/0xd0 [ 112.337515][ T5512] ? lock_chain_count+0x20/0x20 [ 112.337548][ T5512] xfs_da_grow_inode_int+0x249/0x8e0 [ 112.369752][ T5512] ? xfs_da_compname+0xb0/0xb0 [ 112.379875][ T5512] ? xfs_buf_item_log+0x4a6/0x4e0 [ 112.379904][ T5512] xfs_da_grow_inode+0x160/0x360 [ 112.379927][ T5512] ? xfs_da_grow_inode_int+0x8e0/0x8e0 [ 112.379946][ T5512] ? xfs_attr3_leaf_add+0xc99/0x14e0 [ 112.390519][ T5512] xfs_attr3_leaf_to_node+0x1c6/0x9b0 [ 112.418354][ T5512] ? xfs_attr3_leaf_lookup_int+0xdc0/0xdc0 [ 112.418387][ T5512] ? xfs_attr3_leaf_to_shortform+0xa80/0xa80 [ 112.418420][ T5512] ? xfs_attr_leaf_try_add+0x261/0x470 [ 112.418441][ T5512] ? xfs_attr_sf_addname+0x310/0x310 [ 112.429425][ T5512] ? xfs_iext_get_extent+0x1b5/0x360 [ 112.445512][ T5512] xfs_attr_set_iter+0xe7a/0x1340 [ 112.455539][ T5512] ? xfs_attr_set_args+0x1b0/0x1b0 [ 112.481597][ T5512] xfs_attr_set_args+0xcd/0x1b0 [ 112.481626][ T5512] ? xfs_attr_set+0xf00/0x1370 [ 112.498837][ T5512] ? xfs_attr_get+0x420/0x420 [ 112.498864][ T5512] ? __lock_acquire+0x7b50/0x7b50 [ 112.498894][ T5512] ? do_raw_spin_unlock+0x11d/0x230 [ 112.498916][ T5512] xfs_attr_set+0xcb8/0x1370 [ 112.509486][ T5512] ? xfs_attr_remove_iter+0xd20/0xd20 [ 112.509522][ T5512] ? stack_trace_save+0xf0/0xf0 [ 112.509548][ T5512] xfs_xattr_set+0x13e/0x240 [ 112.509572][ T5512] ? xfs_xattr_get+0x1e0/0x1e0 [ 112.509589][ T5512] ? aa_get_newest_label+0xf5/0x5a0 [ 112.509622][ T5512] ? ima_inode_post_setattr+0x320/0x320 [ 112.509644][ T5512] ? xfs_xattr_get+0x1e0/0x1e0 [ 112.509664][ T5512] __vfs_setxattr+0x3d8/0x410 [ 112.509695][ T5512] __vfs_setxattr_noperm+0x126/0x5e0 [ 112.509718][ T5512] vfs_setxattr+0x167/0x2e0 [ 112.509738][ T5512] ? xattr_permission+0x510/0x510 [ 112.509753][ T5512] ? _copy_from_user+0x111/0x170 [ 112.509772][ T5512] ? setxattr+0x22b/0x360 [ 112.534128][ T5512] setxattr+0x2cb/0x360 [ 112.548899][ T5512] ? path_setxattr+0x290/0x290 [ 112.548946][ T5512] ? __mnt_want_write+0x1e2/0x260 [ 112.573656][ T5512] path_setxattr+0x147/0x290 [ 112.588685][ T5512] ? simple_xattr_list_add+0xf0/0xf0 [ 112.603802][ T5512] ? lock_chain_count+0x20/0x20 [ 112.626949][ T5512] __x64_sys_setxattr+0xb7/0xd0 [ 112.641662][ T5512] do_syscall_64+0x4c/0xa0 [ 112.651992][ T5512] ? clear_bhb_loop+0x30/0x80 [ 112.656694][ T5512] ? clear_bhb_loop+0x30/0x80 [ 112.661402][ T5512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.661425][ T5512] RIP: 0033:0x7fe3da091159 [ 112.661442][ T5512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.661456][ T5512] RSP: 002b:00007fe3d82e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 112.661477][ T5512] RAX: ffffffffffffffda RBX: 00007fe3da318fa0 RCX: 00007fe3da091159 [ 112.661489][ T5512] RDX: 0000200000000cc0 RSI: 0000200000000200 RDI: 0000200000000080 [ 112.661502][ T5512] RBP: 00007fe3da12806b R08: 0000000000000000 R09: 0000000000000000 [ 112.661512][ T5512] R10: 000000000000070d R11: 0000000000000246 R12: 0000000000000000 [ 112.661523][ T5512] R13: 00007fe3da319038 R14: 00007fe3da318fa0 R15: 00007ffcf92d5ec8 [ 112.661551][ T5512] [ 112.747387][ T5512] XFS (loop5): Corruption detected. Unmount and run xfs_repair [ 112.755474][ T5512] XFS (loop5): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_attr_set+0x93a/0x1370 [ 113.035092][ T5512] CPU: 0 PID: 5512 Comm: syz.5.320 Not tainted syzkaller #0 [ 113.042409][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.042422][ T5512] Call Trace: [ 113.042429][ T5512] [ 113.042436][ T5512] dump_stack_lvl+0x188/0x250 [ 113.042468][ T5512] ? show_regs_print_info+0x20/0x20 [ 113.042486][ T5512] ? xfs_attr_get+0x420/0x420 [ 113.042508][ T5512] ? __lock_acquire+0x7b50/0x7b50 [ 113.042528][ T5512] ? xfs_defer_cancel_list+0x5b7/0x5d0 [ 113.042549][ T5512] ? xfs_error_report+0x8e/0xc0 [ 113.042565][ T5512] ? xfs_attr_set+0x93a/0x1370 [ 113.055922][ T5512] ? xfs_attr_set+0x93a/0x1370 [ 113.055951][ T5512] xfs_trans_cancel+0x1c1/0x420 [ 113.063546][ T5512] ? xfs_attr_set+0x93a/0x1370 [ 113.063576][ T5512] xfs_attr_set+0x93a/0x1370 [ 113.074152][ T5512] ? xfs_attr_remove_iter+0xd20/0xd20 [ 113.084601][ T5512] ? stack_trace_save+0xf0/0xf0 [ 113.084632][ T5512] xfs_xattr_set+0x13e/0x240 [ 113.094400][ T5512] ? xfs_xattr_get+0x1e0/0x1e0 [ 113.103970][ T5512] ? aa_get_newest_label+0xf5/0x5a0 [ 113.113295][ T5512] ? ima_inode_post_setattr+0x320/0x320 [ 113.123471][ T5512] ? xfs_xattr_get+0x1e0/0x1e0 [ 113.133310][ T5512] __vfs_setxattr+0x3d8/0x410 [ 113.144058][ T5512] __vfs_setxattr_noperm+0x126/0x5e0 [ 113.153490][ T5512] vfs_setxattr+0x167/0x2e0 [ 113.163245][ T5512] ? xattr_permission+0x510/0x510 [ 113.168278][ T5512] ? _copy_from_user+0x111/0x170 [ 113.173235][ T5512] ? setxattr+0x22b/0x360 [ 113.177594][ T5512] setxattr+0x2cb/0x360 [ 113.181858][ T5512] ? path_setxattr+0x290/0x290 [ 113.186653][ T5512] ? __mnt_want_write+0x1e2/0x260 [ 113.191696][ T5512] path_setxattr+0x147/0x290 [ 113.196302][ T5512] ? simple_xattr_list_add+0xf0/0xf0 [ 113.201593][ T5512] ? lock_chain_count+0x20/0x20 [ 113.206492][ T5512] __x64_sys_setxattr+0xb7/0xd0 [ 113.211350][ T5512] do_syscall_64+0x4c/0xa0 [ 113.215796][ T5512] ? clear_bhb_loop+0x30/0x80 [ 113.220487][ T5512] ? clear_bhb_loop+0x30/0x80 [ 113.221008][ T4641] team0 (unregistering): Port device team_slave_1 removed [ 113.225170][ T5512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.238179][ T5512] RIP: 0033:0x7fe3da091159 [ 113.242615][ T5512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.262315][ T5512] RSP: 002b:00007fe3d82e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 113.262339][ T5512] RAX: ffffffffffffffda RBX: 00007fe3da318fa0 RCX: 00007fe3da091159 [ 113.262351][ T5512] RDX: 0000200000000cc0 RSI: 0000200000000200 RDI: 0000200000000080 [ 113.262363][ T5512] RBP: 00007fe3da12806b R08: 0000000000000000 R09: 0000000000000000 [ 113.262373][ T5512] R10: 000000000000070d R11: 0000000000000246 R12: 0000000000000000 [ 113.262384][ T5512] R13: 00007fe3da319038 R14: 00007fe3da318fa0 R15: 00007ffcf92d5ec8 [ 113.262410][ T5512] [ 113.377040][ T5512] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1da/0x420 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 113.412652][ T4641] team0 (unregistering): Port device team_slave_0 removed [ 113.495272][ T5512] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 113.520922][ T4641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.564453][ T4520] XFS (loop5): Unmounting Filesystem [ 113.644864][ T4641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.023375][ T5538] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 114.155051][ T4641] bond0 (unregistering): Released all slaves [ 114.161453][ T5044] Bluetooth: hci3: command 0x040f tx timeout [ 114.506088][ T5408] device hsr_slave_0 entered promiscuous mode [ 114.553777][ T5408] device hsr_slave_1 entered promiscuous mode [ 114.584584][ T5408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.613326][ T5408] Cannot create hsr debugfs directory [ 114.798826][ T5565] netlink: 156 bytes leftover after parsing attributes in process `syz.4.332'. [ 114.850058][ T5567] netlink: 156 bytes leftover after parsing attributes in process `syz.4.332'. [ 114.901915][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 115.113158][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 115.280249][ T5575] : renamed from veth0_to_bond [ 115.302518][ T5575] device  entered promiscuous mode [ 115.418026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 115.548834][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 115.598154][ T144] net_ratelimit: 36 callbacks suppressed [ 115.724500][ T5594] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 115.771775][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'. [ 115.852306][ T5408] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 115.869393][ T5408] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 115.887032][ T5408] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 115.913203][ T5408] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 116.145425][ T5594] bond1: (slave bridge1): making interface the new active one [ 116.175275][ T5594] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 116.237412][ T5047] Bluetooth: hci3: command 0x0419 tx timeout [ 116.669355][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.710524][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.754069][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.790168][ T5590] loop4: detected capacity change from 0 to 32768 [ 116.820977][ T5408] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.859667][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.879198][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.966276][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.973390][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.043202][ T26] audit: type=1800 audit(1790273314.692:6): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.337" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 117.082121][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.118504][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.139319][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.167911][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.174992][ T4643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.285427][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.356540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.402369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.445027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.509494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.581052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.634382][ T5408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.754572][ T5408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.799500][ T26] audit: type=1800 audit(1790273315.452:7): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.337" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 117.827067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.844326][ T5652] FAULT_INJECTION: forcing a failure. [ 117.844326][ T5652] name failslab, interval 1, probability 0, space 0, times 0 [ 117.864578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.875730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.889905][ T5652] CPU: 0 PID: 5652 Comm: syz.1.349 Not tainted syzkaller #0 [ 117.899718][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.909984][ T5652] Call Trace: [ 117.913284][ T5652] [ 117.916247][ T5652] dump_stack_lvl+0x188/0x250 [ 117.920950][ T5652] ? show_regs_print_info+0x20/0x20 [ 117.928003][ T5652] ? load_image+0x410/0x410 [ 117.933355][ T5652] ? __might_sleep+0xf0/0xf0 [ 117.938158][ T5652] ? __lock_acquire+0x7b50/0x7b50 [ 117.943226][ T5652] should_fail+0x383/0x4b0 [ 117.947761][ T5652] should_failslab+0x5/0x20 [ 117.952278][ T5652] slab_pre_alloc_hook+0x51/0xc0 [ 117.952307][ T5652] __kmalloc_node+0x6d/0x3a0 [ 117.952323][ T5652] ? __vmalloc_node_range+0x2dd/0x8b0 [ 117.962829][ T5652] __vmalloc_node_range+0x2dd/0x8b0 [ 117.962880][ T5652] ? __do_replace+0xa8/0x9f0 [ 117.962898][ T5652] vzalloc+0x75/0x80 [ 117.982101][ T5652] ? __do_replace+0xa8/0x9f0 [ 117.982126][ T5652] __do_replace+0xa8/0x9f0 [ 117.982152][ T5652] ? translate_compat_table+0x20a0/0x20a0 [ 117.997220][ T5652] ? _copy_from_user+0x111/0x170 [ 117.997249][ T5652] do_ipt_set_ctl+0xa9b/0xd70 [ 117.997273][ T5652] ? nf_setsockopt+0x218/0x280 [ 117.997292][ T5652] ? ipt_unregister_table_exit+0x220/0x220 [ 117.997309][ T5652] ? __lock_acquire+0x7b50/0x7b50 [ 117.997328][ T5652] ? __mutex_lock_common+0x435/0x2400 [ 117.997353][ T5652] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 117.997372][ T5652] ? mutex_unlock+0x10/0x10 [ 118.007141][ T5652] ? __local_bh_enable_ip+0x136/0x1c0 [ 118.007164][ T5652] ? lockdep_hardirqs_on+0x94/0x140 [ 118.007187][ T5652] ? __local_bh_enable_ip+0x136/0x1c0 [ 118.007206][ T5652] nf_setsockopt+0x25f/0x280 [ 118.007228][ T5652] ip_setsockopt+0x29c3/0x31e0 [ 118.022976][ T5652] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 118.038731][ T5652] ? aa_sk_perm+0x7dc/0x910 [ 118.038763][ T5652] ? aa_af_perm+0x340/0x340 [ 118.059549][ T5652] ? __fget_files+0x402/0x470 [ 118.059576][ T5652] ? aa_sock_opt_perm+0x74/0x100 [ 118.059597][ T5652] ? udp_setsockopt+0x77/0xa0 [ 118.078793][ T5652] ? sock_common_recvmsg+0x1c0/0x1c0 [ 118.078821][ T5652] __sys_setsockopt+0x2bf/0x3d0 [ 118.078845][ T5652] __x64_sys_setsockopt+0xb1/0xc0 [ 118.103206][ T5652] do_syscall_64+0x4c/0xa0 [ 118.112803][ T5652] ? clear_bhb_loop+0x30/0x80 [ 118.117494][ T5652] ? clear_bhb_loop+0x30/0x80 [ 118.117517][ T5652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.117536][ T5652] RIP: 0033:0x7f7fbcc4a159 [ 118.117555][ T5652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.117568][ T5652] RSP: 002b:00007f7fbaea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.117585][ T5652] RAX: ffffffffffffffda RBX: 00007f7fbced1fa0 RCX: 00007f7fbcc4a159 [ 118.117596][ T5652] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 118.117604][ T5652] RBP: 00007f7fbcce106b R08: 00000000000003d0 R09: 0000000000000000 [ 118.128845][ T5652] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 118.128861][ T5652] R13: 00007f7fbced2038 R14: 00007f7fbced1fa0 R15: 00007ffc9aaae6b8 [ 118.128885][ T5652] [ 118.223648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.233061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.241836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.691978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.711866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.758198][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.440733][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 119.537706][ T5687] device veth1_macvtap left promiscuous mode [ 119.690030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.714518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.854875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.914233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.998853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.018944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.041577][ T5408] device veth0_vlan entered promiscuous mode [ 120.082847][ T5408] device veth1_vlan entered promiscuous mode [ 120.213832][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.242039][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.300290][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.362815][ T1319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.425343][ T5408] device veth0_macvtap entered promiscuous mode [ 120.480678][ T5408] device veth1_macvtap entered promiscuous mode [ 120.637228][ C0] net_ratelimit: 27 callbacks suppressed [ 120.665251][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.717261][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.778192][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.830895][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.888970][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.984548][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.077415][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.089948][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.119269][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.181201][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.224072][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.263418][ T5724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.295023][ T5731] device geneve1 entered promiscuous mode [ 121.309846][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.342600][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.397454][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.415947][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.427450][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.444386][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.463679][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.482881][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.496868][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.549066][ T5408] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.612447][ T5408] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.646384][ T5408] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.674534][ T5753] loop1: detected capacity change from 0 to 256 [ 121.684296][ T5408] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.974126][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.990992][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.042812][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.194064][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.236066][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.318970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.061310][ T5758] loop4: detected capacity change from 0 to 32768 [ 123.346516][ T5758] XFS (loop4): Mounting V5 Filesystem [ 123.430853][ T5758] XFS (loop4): Ending clean mount [ 123.703669][ T4187] XFS (loop4): Unmounting Filesystem [ 125.131640][ T5848] bond0: (slave bridge0): Releasing backup interface [ 125.199952][ T5848] device bridge_slave_0 left promiscuous mode [ 125.206210][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.299372][ T5848] device bridge_slave_1 left promiscuous mode [ 125.305634][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.412428][ T5829] loop4: detected capacity change from 0 to 32768 [ 125.435823][ T5848] bond0: (slave bond_slave_0): Releasing backup interface [ 125.455812][ T5829] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.378 (5829) [ 125.484322][ T5848] bond0: (slave bond_slave_1): Releasing backup interface [ 125.510758][ T5829] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 125.522591][ T5829] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.538219][ T5829] BTRFS info (device loop4): use zstd compression, level 3 [ 125.557801][ T5848] team0: Failed to send options change via netlink (err -105) [ 125.569440][ T5829] BTRFS info (device loop4): using free space tree [ 125.582589][ T5848] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 125.582837][ T5829] BTRFS info (device loop4): has skinny extents [ 125.616710][ T5848] team0: Port device team_slave_0 removed [ 125.643140][ T5848] team0: Failed to send options change via netlink (err -105) [ 125.670416][ T5848] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 125.702206][ T5848] team0: Port device team_slave_1 removed [ 125.726922][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.732333][ T5829] BTRFS info (device loop4): enabling ssd optimizations [ 125.751199][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.773482][ T5848] device netdevsim0 left promiscuous mode [ 125.797487][ T5848] bridge0: port 3(netdevsim0) entered disabled state [ 125.830322][ T5853] team0: Failed to send options change via netlink (err -105) [ 125.841083][ T162] net_ratelimit: 64 callbacks suppressed [ 125.873798][ T5853] team0: Mode changed to "activebackup" [ 125.922256][ T5829] device lo entered promiscuous mode [ 125.987356][ T5829] device tunl0 entered promiscuous mode [ 126.033338][ T5829] device gre0 entered promiscuous mode [ 126.052178][ T5884] loop6: detected capacity change from 0 to 1024 [ 126.113933][ T5884] EXT4-fs (loop6): Ignoring removed orlov option [ 126.189673][ T5829] device gretap0 entered promiscuous mode [ 126.199983][ T5884] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 126.232903][ T5829] device erspan0 entered promiscuous mode [ 126.257983][ T5829] device ip_vti0 entered promiscuous mode [ 126.276321][ T5829] device ip6_vti0 entered promiscuous mode [ 126.345668][ T5829] device sit0 entered promiscuous mode [ 126.422100][ T5829] device ip6tnl0 entered promiscuous mode [ 126.462974][ T5829] device ip6gre0 entered promiscuous mode [ 126.472674][ T5829] device syz_tun entered promiscuous mode [ 126.496723][ T5829] device ip6gretap0 entered promiscuous mode [ 126.517750][ T5829] device bridge0 entered promiscuous mode [ 126.539467][ T5829] device vcan0 entered promiscuous mode [ 126.553431][ T5829] device bond0 entered promiscuous mode [ 126.564624][ T5829] device bond_slave_0 entered promiscuous mode [ 126.572200][ T5829] device bond_slave_1 entered promiscuous mode [ 126.593439][ T5829] device team0 entered promiscuous mode [ 126.599174][ T5829] device team_slave_0 entered promiscuous mode [ 126.605480][ T5829] device team_slave_1 entered promiscuous mode [ 126.626028][ T5829] device dummy0 entered promiscuous mode [ 126.646430][ T5829] device nlmon0 entered promiscuous mode [ 126.654260][ T5829] device caif0 entered promiscuous mode [ 126.666852][ T5829] device batadv0 entered promiscuous mode [ 126.687841][ T5829] device vxcan0 entered promiscuous mode [ 126.698275][ T5829] device vxcan1 entered promiscuous mode [ 126.709189][ T5829] device veth0 entered promiscuous mode [ 126.729277][ T5829] device veth1 entered promiscuous mode [ 126.748959][ T5829] device wg0 entered promiscuous mode [ 126.763993][ T5829] device wg1 entered promiscuous mode [ 126.778516][ T5829] device wg2 entered promiscuous mode [ 126.793872][ T5829] device veth0_to_bridge entered promiscuous mode [ 126.822129][ T5829] device veth1_to_bridge entered promiscuous mode [ 126.855126][ T5829] device veth1_to_bond entered promiscuous mode [ 126.880577][ T5829] device veth0_to_team entered promiscuous mode [ 126.909374][ T5829] device veth1_to_team entered promiscuous mode [ 126.936376][ T5829] device veth0_to_batadv entered promiscuous mode [ 126.945231][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.964760][ T5829] device batadv_slave_0 entered promiscuous mode [ 126.986431][ T5829] device veth1_to_batadv entered promiscuous mode [ 127.003150][ T5829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.014529][ T5829] device batadv_slave_1 entered promiscuous mode [ 127.034017][ T5829] device xfrm0 entered promiscuous mode [ 127.051736][ T5829] device veth0_to_hsr entered promiscuous mode [ 127.079937][ T5829] device veth1_to_hsr entered promiscuous mode [ 127.109229][ T5829] device hsr0 entered promiscuous mode [ 127.128420][ T5829] device veth1_virt_wifi entered promiscuous mode [ 127.148119][ T5829] device veth0_virt_wifi entered promiscuous mode [ 127.156662][ T5829] device virt_wifi0 entered promiscuous mode [ 127.203543][ T5829] device vlan0 entered promiscuous mode [ 127.217567][ T5829] device vlan1 entered promiscuous mode [ 127.235289][ T5829] device macvlan0 entered promiscuous mode [ 127.254465][ T5829] device macvlan1 entered promiscuous mode [ 127.262540][ T5829] device ipvlan0 entered promiscuous mode [ 127.277509][ T5829] device ipvlan1 entered promiscuous mode [ 127.284565][ T5829] device veth1_macvtap entered promiscuous mode [ 127.315974][ T5829] device macvtap0 entered promiscuous mode [ 127.334566][ T5829] device geneve0 entered promiscuous mode [ 127.352248][ T5829] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.361407][ T5829] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.370642][ T5829] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.379592][ T5829] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.388642][ T5829] device geneve1 entered promiscuous mode [ 127.407130][ T5829] device netdevsim0 entered promiscuous mode [ 127.421487][ T5829] device netdevsim1 entered promiscuous mode [ 127.434824][ T5829] device netdevsim2 entered promiscuous mode [ 127.450160][ T5829] device netdevsim3 entered promiscuous mode [ 127.467389][ T5829] device wlan0 entered promiscuous mode [ 127.484127][ T5829] device wlan1 entered promiscuous mode [ 127.496323][ T5829] device syzkaller0 entered promiscuous mode [ 127.502647][ T5829] device ip6erspan0 entered promiscuous mode [ 127.509225][ T5829] device bridge0.257 entered promiscuous mode [ 127.515541][ T5829] device ip6tnl1 entered promiscuous mode [ 127.527984][ T5891] netlink: 'syz.3.390': attribute type 4 has an invalid length. [ 127.549528][ T5893] netlink: 'syz.3.390': attribute type 4 has an invalid length. [ 127.582152][ T5896] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 127.868659][ T5900] netlink: 'syz.6.393': attribute type 1 has an invalid length. [ 128.716988][ T5954] tipc: Started in network mode [ 128.732988][ T5954] tipc: Node identity 4, cluster identity 4711 [ 128.740762][ T5954] tipc: Node number set to 4 [ 129.789962][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 130.422762][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.446805][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.471394][ T5965] device bridge_slave_0 entered promiscuous mode [ 130.502086][ T5985] chnl_net:caif_netlink_parms(): no params data found [ 130.563973][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.592267][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.615823][ T5965] device bridge_slave_1 entered promiscuous mode [ 130.864160][ T6030] device syzkaller0 left promiscuous mode [ 130.900368][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.008818][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.037298][ T5912] Bluetooth: hci4: command 0x0409 tx timeout [ 131.207219][ C1] net_ratelimit: 28 callbacks suppressed [ 131.309756][ T5965] team0: Port device team_slave_0 added [ 131.333305][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.364024][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.419439][ T5985] device bridge_slave_0 entered promiscuous mode [ 131.454228][ T5965] team0: Port device team_slave_1 added [ 131.637055][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.660146][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.799873][ T5985] device bridge_slave_1 entered promiscuous mode [ 131.863194][ T5914] Bluetooth: hci5: command 0x0409 tx timeout [ 132.428583][ T6061] loop6: detected capacity change from 0 to 16 [ 132.466177][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.483732][ T6061] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 10000) [ 132.495288][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.551721][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.583470][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.597435][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.629535][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.669521][ T5985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.743910][ T5985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.879899][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.886328][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.993682][ T5965] device hsr_slave_0 entered promiscuous mode [ 133.016955][ T5965] device hsr_slave_1 entered promiscuous mode [ 133.041667][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.077734][ T5965] Cannot create hsr debugfs directory [ 133.104462][ T5985] team0: Port device team_slave_0 added [ 133.127421][ T2302] Bluetooth: hci4: command 0x041b tx timeout [ 133.256649][ T5985] team0: Port device team_slave_1 added [ 133.499927][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.516133][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.664836][ T5985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.788571][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.795576][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.873205][ T5985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.951115][ T3852] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.992191][ T3852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.015704][ T3852] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.024119][ T3852] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.032477][ T3852] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.040782][ T3852] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.049467][ T3852] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.058836][ T3852] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.315850][ T5985] device hsr_slave_0 entered promiscuous mode [ 134.343062][ T5985] device hsr_slave_1 entered promiscuous mode [ 134.378043][ T5985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.402841][ T5985] Cannot create hsr debugfs directory [ 134.487506][ T5044] Bluetooth: hci5: command 0x041b tx timeout [ 134.670018][ T26] audit: type=1804 audit(1790273332.322:8): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.443" name="/newroot/106/file0" dev="fuse" ino=1 res=1 errno=0 [ 135.198340][ T5044] Bluetooth: hci4: command 0x040f tx timeout [ 135.392949][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.442582][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.495394][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.974355][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.252611][ T5985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 136.477234][ C1] net_ratelimit: 23 callbacks suppressed [ 136.526317][ T5985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 136.597783][ T2302] Bluetooth: hci5: command 0x040f tx timeout [ 136.864927][ T5985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 137.184485][ T5985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 137.303578][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 137.406708][ T6150] loop4: detected capacity change from 0 to 128 [ 137.445109][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.462948][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.498262][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.506641][ T6150] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.530897][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.539766][ T6150] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 137.567477][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.576112][ T6150] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.655689][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.674222][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.681381][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.761233][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.770118][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.778667][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.785864][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.883504][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.454'. [ 137.908535][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.958846][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.979552][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.036736][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.071044][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.110263][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.155320][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.166226][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.181442][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.454'. [ 138.204378][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.213580][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.234465][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.455'. [ 138.267438][ T6170] device ip6gre1 entered promiscuous mode [ 138.295532][ T6178] netlink: 'syz.4.455': attribute type 6 has an invalid length. [ 138.348377][ T6178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.455'. [ 138.412050][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.428062][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.473860][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.522661][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.647995][ T5047] Bluetooth: hci5: command 0x0419 tx timeout [ 138.661679][ T5985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.721411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.735927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.775294][ T5985] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.811462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.846008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.896729][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.903842][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.973193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.997940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.025298][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.032462][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.088223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.096555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.142658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.169061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.199871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.234097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.277144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.325801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.341812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.369497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.404057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.466970][ T6220] netlink: 'syz.4.465': attribute type 28 has an invalid length. [ 139.504700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.545988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.566759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.597465][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.718668][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.734751][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.774359][ T6205] syz.6.463 (6205) used greatest stack depth: 17520 bytes left [ 139.791985][ T6208] syz.6.463 (6208) used greatest stack depth: 17296 bytes left [ 139.859641][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.885446][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.923780][ T5965] device veth0_vlan entered promiscuous mode [ 139.955653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.975129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.013649][ T5965] device veth1_vlan entered promiscuous mode [ 140.069941][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.090231][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.115640][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.140788][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.178034][ T5965] device veth0_macvtap entered promiscuous mode [ 140.216228][ T5985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.255346][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.272908][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.300300][ T5965] device veth1_macvtap entered promiscuous mode [ 140.347655][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.384616][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.441680][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.474955][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.550438][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.587430][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.626301][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.683464][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.736539][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.764297][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.778373][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.845420][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.887798][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.919411][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.960226][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.990713][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.005872][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.032793][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.075152][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.091212][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.132443][ T5965] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.177703][ T5965] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.192846][ T5965] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.217529][ T5965] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.227273][ T6282] FAULT_INJECTION: forcing a failure. [ 141.227273][ T6282] name failslab, interval 1, probability 0, space 0, times 0 [ 141.261957][ T6282] CPU: 1 PID: 6282 Comm: syz.4.477 Not tainted syzkaller #0 [ 141.269633][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.269649][ T6282] Call Trace: [ 141.269657][ T6282] [ 141.269665][ T6282] dump_stack_lvl+0x188/0x250 [ 141.269691][ T6282] ? show_regs_print_info+0x20/0x20 [ 141.269707][ T6282] ? load_image+0x410/0x410 [ 141.269727][ T6282] ? __might_sleep+0xf0/0xf0 [ 141.269744][ T6282] ? __lock_acquire+0x7b50/0x7b50 [ 141.269768][ T6282] should_fail+0x383/0x4b0 [ 141.269791][ T6282] should_failslab+0x5/0x20 [ 141.269807][ T6282] slab_pre_alloc_hook+0x51/0xc0 [ 141.269826][ T6282] __kmalloc_node_track_caller+0x68/0x3a0 [ 141.284777][ T6282] ? alloc_skb_with_frags+0xa7/0x720 [ 141.284802][ T6282] ? __alloc_skb+0xf4/0x750 [ 141.284823][ T6282] ? alloc_skb_with_frags+0xa7/0x720 [ 141.284840][ T6282] __alloc_skb+0x22c/0x750 [ 141.284859][ T6282] alloc_skb_with_frags+0xa7/0x720 [ 141.293301][ T6282] ? __schedule+0x11cb/0x4350 [ 141.293333][ T6282] sock_alloc_send_pskb+0x87f/0x9a0 [ 141.293357][ T6282] ? lockdep_hardirqs_on+0x94/0x140 [ 141.293384][ T6282] ? sock_kzfree_s+0x50/0x50 [ 141.308164][ T6282] ? mark_lock+0x94/0x320 [ 141.308186][ T6282] ? __lock_acquire+0x1305/0x7b50 [ 141.308211][ T6282] __ip_append_data+0x2089/0x3320 [ 141.308246][ T6282] ? verify_lock_unused+0x140/0x140 [ 141.317849][ T6282] ? ip_skb_dst_mtu+0x860/0x860 [ 141.317879][ T6282] ? ip_setup_cork+0x870/0x870 [ 141.317899][ T6282] ? ip_setup_cork+0x48f/0x870 [ 141.317917][ T6282] ip_make_skb+0x227/0x440 [ 141.317936][ T6282] ? __lock_acquire+0x7b50/0x7b50 [ 141.317957][ T6282] ? ip_skb_dst_mtu+0x860/0x860 [ 141.317973][ T6282] ? ip_flush_pending_frames+0x250/0x250 [ 141.317999][ T6282] ? rt_is_expired+0x220/0x2a0 [ 141.318020][ T6282] ? ipv4_dst_check+0x57/0x80 [ 141.318042][ T6282] udp_sendmsg+0x1a85/0x2350 [ 141.318065][ T6282] ? aa_sk_perm+0x910/0x910 [ 141.318094][ T6282] ? ip_skb_dst_mtu+0x860/0x860 [ 141.318113][ T6282] ? udp_cmsg_send+0x350/0x350 [ 141.318147][ T6282] ? aa_sk_perm+0x7dc/0x910 [ 141.318174][ T6282] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 141.318200][ T6282] ? sock_rps_record_flow+0x17/0x3b0 [ 141.318223][ T6282] ? inet_sendmsg+0x7a/0x2a0 [ 141.318239][ T6282] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 141.327673][ T6282] ? inet_send_prepare+0x250/0x250 [ 141.327700][ T6282] ____sys_sendmsg+0x5be/0x8f0 [ 141.327726][ T6282] ? __sys_sendmsg_sock+0x30/0x30 [ 141.327745][ T6282] ? rcu_is_watching+0x11/0xa0 [ 141.327765][ T6282] ? import_iovec+0x6f/0xa0 [ 141.338747][ T6282] ___sys_sendmsg+0x236/0x2e0 [ 141.338779][ T6282] ? __sys_sendmsg+0x290/0x290 [ 141.338822][ T6282] ? __might_fault+0xb3/0x110 [ 141.338842][ T6282] __sys_sendmmsg+0x2ba/0x500 [ 141.348610][ T6282] ? __ia32_sys_sendmsg+0x80/0x80 [ 141.348652][ T6282] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 141.348677][ T6282] ? lock_chain_count+0x20/0x20 [ 141.348700][ T6282] __x64_sys_sendmmsg+0x9c/0xb0 [ 141.348719][ T6282] do_syscall_64+0x4c/0xa0 [ 141.348737][ T6282] ? clear_bhb_loop+0x30/0x80 [ 141.348756][ T6282] ? clear_bhb_loop+0x30/0x80 [ 141.348774][ T6282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.358279][ T6282] RIP: 0033:0x7f132a130159 [ 141.358305][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.358319][ T6282] RSP: 002b:00007f1328388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.358339][ T6282] RAX: ffffffffffffffda RBX: 00007f132a3b7fa0 RCX: 00007f132a130159 [ 141.358351][ T6282] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000004 [ 141.358362][ T6282] RBP: 00007f132a1c706b R08: 0000000000000000 R09: 0000000000000000 [ 141.358373][ T6282] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 141.358385][ T6282] R13: 00007f132a3b8038 R14: 00007f132a3b7fa0 R15: 00007ffd10ae9438 [ 141.358411][ T6282] [ 141.736232][ T5965] net_ratelimit: 25 callbacks suppressed [ 141.819292][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.829725][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.010257][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.028855][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.065764][ T4643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.079769][ T5985] device veth0_vlan entered promiscuous mode [ 142.095227][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.123985][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.138435][ T4643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.175436][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.213992][ T6293] FAULT_INJECTION: forcing a failure. [ 142.213992][ T6293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.227407][ T6293] CPU: 0 PID: 6293 Comm: syz.6.482 Not tainted syzkaller #0 [ 142.234701][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.244757][ T6293] Call Trace: [ 142.248033][ T6293] [ 142.248042][ T6293] dump_stack_lvl+0x188/0x250 [ 142.248066][ T6293] ? show_regs_print_info+0x20/0x20 [ 142.248083][ T6293] ? load_image+0x410/0x410 [ 142.255676][ T6293] ? mark_lock+0x94/0x320 [ 142.255698][ T6293] should_fail+0x383/0x4b0 [ 142.255718][ T6293] prepare_alloc_pages+0x1e3/0x5b0 [ 142.266316][ T6293] __alloc_pages+0x11b/0x480 [ 142.266355][ T6293] ? zone_statistics+0x170/0x170 [ 142.275090][ T6293] ? rcu_lock_acquire+0x30/0x30 [ 142.289685][ T6293] ? alloc_pages+0x452/0x560 [ 142.299103][ T6293] __get_free_pages+0x8/0x30 [ 142.303793][ T6293] __tlb_remove_page_size+0x1f2/0x3f0 [ 142.303824][ T6293] unmap_page_range+0xfcf/0x2410 [ 142.314138][ T6293] unmap_vmas+0x131/0x250 [ 142.318477][ T6293] ? unmap_page_range+0x2410/0x2410 [ 142.323996][ T6293] ? __mutex_lock_common+0x435/0x2400 [ 142.324025][ T6293] ? exit_mm_release+0x16/0x30 [ 142.334237][ T6293] exit_mmap+0x3b9/0x640 [ 142.338503][ T6293] ? vm_brk+0x20/0x20 [ 142.342506][ T6293] ? uprobe_clear_state+0x2f6/0x460 [ 142.347719][ T6293] __mmput+0x115/0x390 [ 142.347740][ T6293] exit_mm+0x632/0x7b0 [ 142.347756][ T6293] ? perf_pmu_migrate_context+0xb70/0xb70 [ 142.355881][ T6293] ? do_exit+0x2110/0x2110 [ 142.365976][ T6293] ? __ia32_sys_timer_delete+0x40/0x40 [ 142.365998][ T6293] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 142.366022][ T6293] ? tty_audit_exit+0x149/0x1f0 [ 142.376937][ T6293] do_exit+0x5b8/0x2110 [ 142.385915][ T6293] ? put_task_struct+0x80/0x80 [ 142.390686][ T6293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 142.396674][ T6293] ? _raw_spin_lock_irq+0xb7/0xf0 [ 142.396698][ T6293] do_group_exit+0x12c/0x2f0 [ 142.396715][ T6293] ? lockdep_hardirqs_on+0x94/0x140 [ 142.396737][ T6293] get_signal+0x7eb/0x12e0 [ 142.407157][ T6293] arch_do_signal_or_restart+0xe6/0x12a0 [ 142.416754][ T6293] ? rcu_lock_release+0x9/0x20 [ 142.416786][ T6293] ? futex_exit_release+0x1c0/0x1c0 [ 142.427941][ T6293] ? get_sigframe_size+0x10/0x10 [ 142.438043][ T6293] ? __context_tracking_exit+0x4c/0x80 [ 142.443525][ T6293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 142.449522][ T6293] ? exit_to_user_mode_loop+0x3b/0x130 [ 142.454996][ T6293] exit_to_user_mode_loop+0x9e/0x130 [ 142.460297][ T6293] exit_to_user_mode_prepare+0xee/0x180 [ 142.465862][ T6293] syscall_exit_to_user_mode+0x16/0x40 [ 142.471343][ T6293] do_syscall_64+0x58/0xa0 [ 142.475775][ T6293] ? clear_bhb_loop+0x30/0x80 [ 142.480473][ T6293] ? clear_bhb_loop+0x30/0x80 [ 142.485165][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.491067][ T6293] RIP: 0033:0x7f8089ef9159 [ 142.495490][ T6293] Code: Unable to access opcode bytes at RIP 0x7f8089ef912f. [ 142.502859][ T6293] RSP: 002b:00007f80881510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 142.511284][ T6293] RAX: fffffffffffffe00 RBX: 00007f808a180fa8 RCX: 00007f8089ef9159 [ 142.519570][ T6293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f808a180fa8 [ 142.527553][ T6293] RBP: 00007f808a180fa0 R08: 0000000000000000 R09: 0000000000000000 [ 142.535532][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.543523][ T6293] R13: 00007f808a181038 R14: 00007ffe55dbbe20 R15: 00007ffe55dbbf08 [ 142.551523][ T6293] [ 142.600984][ T5985] device veth1_vlan entered promiscuous mode [ 142.660203][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.697913][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.758058][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.782521][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.814068][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.835462][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.857705][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.878925][ T5985] device veth0_macvtap entered promiscuous mode [ 142.947091][ T5985] device veth1_macvtap entered promiscuous mode [ 142.990727][ T6302] netlink: 'syz.1.483': attribute type 2 has an invalid length. [ 143.028776][ T6302] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.483'. [ 143.091790][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.127645][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.154648][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.177378][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.194664][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.205913][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.274015][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.300211][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.330025][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.366629][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.396613][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.419074][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.437262][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.469992][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.490906][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.517213][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.547199][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.564129][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.587835][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.620016][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.641303][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.658045][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.685564][ T5985] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.723085][ T5985] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.752156][ T5985] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.768870][ T5985] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.130408][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.163362][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.220133][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.279819][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.301315][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.358280][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.600165][ T6349] loop1: detected capacity change from 0 to 256 [ 144.666544][ T6349] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.704480][ T6349] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 144.885306][ T6355] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.925817][ T6349] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 145.079644][ T6362] netlink: 'syz.7.496': attribute type 1 has an invalid length. [ 145.152426][ T6362] netlink: 'syz.7.496': attribute type 10 has an invalid length. [ 145.197874][ T6362] netlink: 40 bytes leftover after parsing attributes in process `syz.7.496'. [ 145.237655][ T6362] device dummy0 entered promiscuous mode [ 145.624730][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.665993][ T6385] syz.7.505 uses obsolete (PF_INET,SOCK_PACKET) [ 145.726581][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.762914][ T6380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.793101][ T6387] netlink: 'syz.7.505': attribute type 10 has an invalid length. [ 145.858776][ T6387] device syz_tun entered promiscuous mode [ 146.371041][ T6398] device bridge0 entered promiscuous mode [ 146.652325][ T2302] kernel write not supported for file bpf-prog (pid: 2302 comm: kworker/1:3) [ 146.797259][ C1] net_ratelimit: 111 callbacks suppressed [ 147.040111][ T6417] loop4: detected capacity change from 0 to 164 [ 147.121711][ T6422] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.277441][ T6428] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.137651][ T6435] netlink: 'syz.7.522': attribute type 12 has an invalid length. [ 148.952214][ T26] audit: type=1326 audit(1790273346.602:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.4.535" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f132a130159 code=0x0 [ 149.079102][ T5044] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.126195][ T6473] x86/PAT: syz.6.534:6473 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 149.140516][ T6473] x86/PAT: syz.6.534:6473 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 149.498717][ T5044] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 149.522511][ T5044] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 149.567668][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.605592][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 149.608402][ C0] ------------[ cut here ]------------ [ 149.622014][ C0] WARNING: CPU: 0 PID: 14 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x615/0x730 [ 149.631387][ C0] Modules linked in: [ 149.635297][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 149.635885][ T5044] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 149.642629][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.642648][ C0] RIP: 0010:inet_sock_destruct+0x615/0x730 [ 149.642678][ C0] Code: 00 00 41 0f b6 74 24 12 48 c7 c7 80 e0 29 8b 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 80 3c 01 e8 fb 02 ff f8 <0f> 0b e9 64 fe ff ff e8 ef 02 ff f8 0f 0b e9 99 fe ff ff e8 e3 02 [ 149.642693][ C0] RSP: 0018:ffffc90000d379e8 EFLAGS: 00010246 [ 149.642711][ C0] RAX: ffffffff887a11a5 RBX: dffffc0000000000 RCX: ffff88813fe29dc0 [ 149.677240][ T5044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.687370][ C0] RDX: 0000000000000100 RSI: 00000000000001e1 RDI: 0000000000000000 [ 149.687389][ C0] RBP: 00000000000001e1 R08: ffff88801fe3b38b R09: 1ffff11003fc7671 [ 149.687400][ C0] R10: dffffc0000000000 R11: ffffed1003fc7672 R12: ffff88801fe3b180 [ 149.687412][ C0] R13: ffff88801fe3b180 R14: ffff88801fe3b388 R15: 1ffff11003fc7632 [ 149.687425][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 149.687439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.687451][ C0] CR2: 00007fe0f1141000 CR3: 000000002c276000 CR4: 00000000003506f0 [ 149.687466][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.687476][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.687487][ C0] Call Trace: [ 149.687494][ C0] [ 149.687502][ C0] ? __phys_addr+0xb6/0x170 [ 149.687525][ C0] ? sctp_wfree+0x720/0x720 [ 149.687547][ C0] __sk_destruct+0x4f/0x840 [ 149.687565][ C0] sctp_endpoint_destroy_rcu+0x9d/0xe0 [ 149.687586][ C0] rcu_core+0x96e/0x1650 [ 149.687614][ C0] ? local_bh_disable+0x20/0x20 [ 149.687636][ C0] ? rcu_qs+0xd0/0x170 [ 149.687653][ C0] ? rcu_softirq_qs+0x290/0x290 [ 149.687676][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.687702][ C0] ? lock_chain_count+0x20/0x20 [ 149.687717][ C0] ? rcu_softirq_qs+0x75/0x290 [ 149.687734][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 149.717899][ C0] ? handle_softirqs+0x209/0x830 [ 149.750835][ C0] handle_softirqs+0x336/0x830 [ 149.750872][ C0] ? run_ksoftirqd+0xa4/0x100 [ 149.750893][ C0] ? do_softirq+0x210/0x210 [ 149.750910][ C0] ? run_ksoftirqd+0x81/0x100 [ 149.750925][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 149.750947][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 149.781882][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 149.801642][ C0] run_ksoftirqd+0xa4/0x100 [ 149.835470][ T4174] nf_conntrack: normal packet for ffff8880781ca480 [ 149.836022][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 149.836058][ C0] smpboot_thread_fn+0x520/0x990 [ 149.840972][ T4174] tcp_in_window: START [ 149.846373][ C0] kthread+0x42e/0x520 [ 149.846396][ C0] ? cpu_report_death+0x180/0x180 [ 149.851354][ T4174] tcp_in_window: [ 149.856091][ C0] ? kthread_blkcg+0xd0/0xd0 [ 149.860765][ T4174] seq=3801745907 ack=2271751058+(0) sack=2271751058+(0) win=17571 end=3801746291 [ 149.865260][ C0] ret_from_fork+0x1f/0x30 [ 149.869946][ T4174] tcp_in_window: sender end=3801745907 maxend=3804890483 maxwin=2249088 scale=7 receiver end=2271751058 maxend=2274000146 maxwin=3144576 scale=7 [ 149.875128][ C0] [ 149.880400][ T4174] tcp_in_window: [ 149.880411][ T4174] seq=3801745907 ack=2271751058+(0) sack=2271751058+(0) win=17571 end=3801746291 [ 149.885625][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 149.890111][ T4174] tcp_in_window: sender end=3801745907 maxend=3804890483 maxwin=2249088 scale=7 receiver end=2271751058 maxend=2274000146 maxwin=3144576 scale=7 [ 149.896575][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 149.901776][ T4174] tcp_in_window: I=1 II=1 III=1 IV=1 [ 149.906662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.910732][ T4174] tcp_in_window: res=1 sender end=3801746291 maxend=3804890483 maxwin=2249088 receiver end=2271751058 maxend=2274000146 maxwin=3144576 [ 149.914755][ C0] Call Trace: [ 149.919767][ T4174] tcp_conntracks: [ 149.923363][ C0] [ 149.927947][ T4174] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 149.937020][ C0] dump_stack_lvl+0x188/0x250 [ 149.946923][ T5044] usb 2-1: No ACPI support [ 149.956061][ C0] ? show_regs_print_info+0x20/0x20 [ 149.956089][ C0] ? load_image+0x410/0x410 [ 149.956117][ C0] panic+0x2f8/0x850 [ 149.962403][ T4187] send_to_group: group=ffff88807ea0b800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807aaff190 data_type=1 dir=0000000000000000 cookie=0 [ 149.962828][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 149.962865][ C0] ? ret_from_fork+0x1f/0x30 [ 149.993078][ T4187] inotify_handle_inode_event: group=ffff88807ea0b800 mark=ffff888075254578 mask=8 [ 149.993893][ C0] ? inet_sock_destruct+0x615/0x730 [ 150.001738][ T5965] send_to_group: group=ffff88807ea0b800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888023b4a790 data_type=1 dir=0000000000000000 cookie=0 [ 150.006435][ C0] __warn+0x248/0x2b0 [ 150.006462][ C0] ? inet_sock_destruct+0x615/0x730 [ 150.006484][ C0] report_bug+0x1b9/0x2e0 [ 150.018216][ T5044] bus: 'usb': add device 2-1 [ 150.030350][ C0] handle_bug+0x3a/0x70 [ 150.030379][ C0] exc_invalid_op+0x16/0x40 [ 150.030396][ C0] asm_exc_invalid_op+0x16/0x20 [ 150.030415][ C0] RIP: 0010:inet_sock_destruct+0x615/0x730 [ 150.030435][ C0] Code: 00 00 41 0f b6 74 24 12 48 c7 c7 80 e0 29 8b 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 80 3c 01 e8 fb 02 ff f8 <0f> 0b e9 64 fe ff ff e8 ef 02 ff f8 0f 0b e9 99 fe ff ff e8 e3 02 [ 150.030450][ C0] RSP: 0018:ffffc90000d379e8 EFLAGS: 00010246 [ 150.030466][ C0] RAX: ffffffff887a11a5 RBX: dffffc0000000000 RCX: ffff88813fe29dc0 [ 150.030479][ C0] RDX: 0000000000000100 RSI: 00000000000001e1 RDI: 0000000000000000 [ 150.030491][ C0] RBP: 00000000000001e1 R08: ffff88801fe3b38b R09: 1ffff11003fc7671 [ 150.030502][ C0] R10: dffffc0000000000 R11: ffffed1003fc7672 R12: ffff88801fe3b180 [ 150.030516][ C0] R13: ffff88801fe3b180 R14: ffff88801fe3b388 R15: 1ffff11003fc7632 [ 150.030536][ C0] ? inet_sock_destruct+0x615/0x730 [ 150.030562][ C0] ? inet_sock_destruct+0x615/0x730 [ 150.030581][ C0] ? __phys_addr+0xb6/0x170 [ 150.030596][ C0] ? sctp_wfree+0x720/0x720 [ 150.030617][ C0] __sk_destruct+0x4f/0x840 [ 150.030637][ C0] sctp_endpoint_destroy_rcu+0x9d/0xe0 [ 150.030660][ C0] rcu_core+0x96e/0x1650 [ 150.030691][ C0] ? local_bh_disable+0x20/0x20 [ 150.030713][ C0] ? rcu_qs+0xd0/0x170 [ 150.030730][ C0] ? rcu_softirq_qs+0x290/0x290 [ 150.030752][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 150.030778][ C0] ? lock_chain_count+0x20/0x20 [ 150.030797][ C0] ? rcu_softirq_qs+0x75/0x290 [ 150.030815][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 150.030834][ C0] ? handle_softirqs+0x209/0x830 [ 150.030857][ C0] handle_softirqs+0x336/0x830 [ 150.030879][ C0] ? run_ksoftirqd+0xa4/0x100 [ 150.030902][ C0] ? do_softirq+0x210/0x210 [ 150.030920][ C0] ? run_ksoftirqd+0x81/0x100 [ 150.030943][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 150.030963][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 150.030983][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 150.042404][ T4187] fsnotify_insert_event: group=ffff88807ea0b800 event=ffff88801e5ed180 [ 150.046253][ C0] run_ksoftirqd+0xa4/0x100 [ 150.046279][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 150.046306][ C0] smpboot_thread_fn+0x520/0x990 [ 150.057768][ T5044] PM: Adding info for usb:2-1 [ 150.060566][ C0] kthread+0x42e/0x520 [ 150.060591][ C0] ? cpu_report_death+0x180/0x180 [ 150.066329][ T5965] inotify_handle_inode_event: group=ffff88807ea0b800 mark=ffff8880606b2d48 mask=8 [ 150.068950][ C0] ? kthread_blkcg+0xd0/0xd0 [ 150.068976][ C0] ret_from_fork+0x1f/0x30 [ 150.069006][ C0] [ 150.094346][ T5044] kobject: '2-1' (ffff8880546e10a8): kobject_uevent_env [ 150.102409][ C0] Kernel Offset: disabled [ 150.406067][ C0] Rebooting in 86400 seconds..