last executing test programs: 8m0.630720173s ago: executing program 3 (id=29): socket(0x840000000002, 0x3, 0xff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newnexthop={0x70, 0x68, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @mcast1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', &(0x7f0000000240)='afs\x00', 0x20, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000400)}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000005c0)={0x500, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040040) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x802, 0x0, 0x0, 0x7}, 0x10) 7m59.410809858s ago: executing program 3 (id=32): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000c80)=[@ioring_restriction_register_op], 0x1) 7m59.043188145s ago: executing program 3 (id=35): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000016000000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="9723af4501000000010001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) 7m58.728039988s ago: executing program 3 (id=37): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x401, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f00000006c0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") mount$overlay(0x0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000001500)=""/4096, 0xc00) 7m57.43235859s ago: executing program 3 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000001bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r0, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000001c80)="b9ff0300600d698cff9e13f008004de7f9c764360000ff2100135433f6e31e17120000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m55.229393625s ago: executing program 3 (id=52): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000002c80)={[{@nolazytime}, {@nobh}, {@minixdf}]}, 0xfe, 0x59c, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101842, 0x15) pwrite64(r0, &(0x7f0000000980)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)) 7m53.90494215s ago: executing program 32 (id=52): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000002c80)={[{@nolazytime}, {@nobh}, {@minixdf}]}, 0xfe, 0x59c, &(0x7f0000000380)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101842, 0x15) pwrite64(r0, &(0x7f0000000980)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)) 5m28.400368781s ago: executing program 1 (id=894): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000004c0)={0x0, 'syz_tun\x00', {0x1}}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r4 = socket(0x1, 0x2, 0x10000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) syz_emit_ethernet(0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000021001122334455000a424203"], 0x0) mount(0x0, &(0x7f0000000000)='./gadget/dummy_udc\x00', &(0x7f0000000600)='sysfs\x00', 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x81, 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./gadget\x00', &(0x7f0000000700)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./gadget/dummy_udc\x00', 0x802, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="90fe64378b5bf59dc50e45f4b29699932d6504c9e75cc2002fbed28e293601f638fb1cbcb6e56de6b1d596c7895f657a1c018185a0cacc95b83f1872a3934e5930d461be2bb3e658bc1ba2b0ef5e3c1ef48cf51a9aee9deed4f2d2127eba267f585e77c6679cd31ecebe1edf48fb7f50b0d2baadfac2d90d1ed7f46e038f6947e91e1f45422c5af9a0ba4aed68ccdf2c51d4c99bb61b5e95df5a1feac4242bab62bc8d9adc34fb4e46af464d9d73c7bf13c40b50f0eb19799a1d0f2b3f2554bef54894ccc871cc99a82e5de7f0f37bde1083816a9e", 0xd5, 0x40, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10) write(r5, &(0x7f0000000780)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./gadget/ep1in-bulk\x00', 0x802, 0x104) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x2) 5m26.346049801s ago: executing program 1 (id=901): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x668, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x63c, 0x2, [@TCA_BPF_ACT={0x638, 0x1, [@m_mirred={0x4dc, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x44d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x158, 0x12, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}]}, {0xbf, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x668}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m25.435194374s ago: executing program 1 (id=903): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000740)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x5, 0x0, 0x1, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) 5m24.957155063s ago: executing program 1 (id=905): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./sys\x00', 0x210000, &(0x7f0000000640)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x8, &(0x7f0000000d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x2008820, &(0x7f0000000e00)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) 5m22.964389956s ago: executing program 1 (id=916): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5m19.293509761s ago: executing program 1 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x22004002, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x496, &(0x7f00000002c0)="$eJzs3LtvHMUfAPDv7tnO6+eH8guPPCAHARERsGMTIAUNCKQ0SEhQQGkcE4U4CYqNRKKIBISSEvEXACUSfwEVNAioQLTQI6QIpSFQoEV7txuf7bVzj5gj3OcjnW/mdvZmvjc79uzOrQMYWPX8RxKRRcRPETHezK4sUG8+3bh+ce6P6xfnksiyl39LGuV+v35xrixa7rejyBxMI9IPkthbUe/i+QunZhcW5s8V+aml029NLZ6/8PjJ07Mn5k/Mn5k5evTIE9NPPzXz5G2JczRv6553z+7bfey1j16cy+L1bz/P2/u/YntrHE0TPddZj/rKz7JhpPHz4Z7f/d9ltCWdDPWxIXSkFhF5dw03xv941GK588bjhff72jhgU2VZlm1Z82qtTFzOgP+wJPrdAqA/yj/0+flv+fgHpx99d+3Z5glQHveN4tHcMhRp/rS1ecY+ukn11yPi1ct/fpw/ovI6BADA7fVlPv95rGr+N5bc3VJurFgbmoiIQxGxMyL+HxG7IuKuiMjL3hMR93ZYf31Vfu3854dtXQXWpnz+90yxtrVy/peWRSZqRW60Ef9w8sbJhfnDxWdyMIa35PnpDer46vkfP1xvW+v8L3/k9ZdzwaIdvw6tukB3fHZptpeYW117L2LPUFX8yc2VgCQidkfEni7eP//MTj762b48PbZj7fZ9t4x/feNdtGe17NOIR5r9fzlWxV9Kmksk661PTm2NhfnDU+VRsdZ33195qTU/3JK+df9vZLibkFfI+3975fFfxF8Og3K9drHzOq78fHXdc5puj/+R5JVGeqR47Z3ZpaVz0xEjxQsrXp9Z3rfMl+Xz+A8eqIp/LNkZ8dcnxX57i2P1voi4PyL2F21/ICIejIgDG8T/zXMPvbnxJ9Rt//cuj/94Rf8ny4f/RNK6Xt9Fonbq6y/Wq7+9/j9yNWtZlWjn919e+aX8eXVzyri6PpoBAADgzpM2vgOfpJM302k6Odn8Dv+u2J4unF1cOlSPt88cb35XfiKG0/JK13jL9dDp4tpwmZ9ZlS+vVGXZtkZ+cu7swmatqQPt2bHO+M/9Uut364BN1879WjfLrL2jDbiDuV8TBpfxD4PL+IfBZfzD4Koa/5cibrRkN/UmDKB//P2HwWX8w+Ay/mFwGf8wkNbes19e6evmTv/lxM5jPe0+QIla1abydok23yet2NTB7suJbdF24aiq9E5JpJ3ttbXH/4BRndhfJLZERLt7Xeq8T7tM9O93EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO30dwAAAP//A/LVbQ==") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) r1 = getpid() syz_open_dev$vcsu(0x0, 0xd0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x81) sched_setscheduler(r1, 0x2, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0) capget(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bind$tipc(0xffffffffffffffff, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioprio_get$pid(0x3, r1) write(r0, &(0x7f0000000100)='2', 0x1) 5m18.839513197s ago: executing program 33 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x22004002, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x496, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) r1 = getpid() syz_open_dev$vcsu(0x0, 0xd0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x81) sched_setscheduler(r1, 0x2, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0) capget(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bind$tipc(0xffffffffffffffff, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioprio_get$pid(0x3, r1) write(r0, &(0x7f0000000100)='2', 0x1) 3m19.18448084s ago: executing program 6 (id=1426): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000002c80)={[{@nolazytime}, {@nobh}, {@minixdf}]}, 0xfe, 0x59c, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file2\x00', 0x942, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101842, 0x15) pwrite64(r1, &(0x7f0000000980)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000e40)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)) 2m43.13006503s ago: executing program 6 (id=1426): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000002c80)={[{@nolazytime}, {@nobh}, {@minixdf}]}, 0xfe, 0x59c, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file2\x00', 0x942, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101842, 0x15) pwrite64(r1, &(0x7f0000000980)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000e40)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)) 2m41.183603639s ago: executing program 6 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) socket(0x1, 0x2, 0x10000) syz_emit_ethernet(0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200002100112233445500"], 0x0) 2m40.456081953s ago: executing program 6 (id=1568): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./sys\x00', 0x210000, &(0x7f0000000640)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x8, &(0x7f0000000d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000d80), 0x0, 0x2008820, &(0x7f0000000e00)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) 2m39.837235446s ago: executing program 6 (id=1571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x22004002, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x496, &(0x7f00000002c0)="$eJzs3LtvHMUfAPDv7tnO6+eH8guPPCAHARERsGMTIAUNCKQ0SEhQQGkcE4U4CYqNRKKIBISSEvEXACUSfwEVNAioQLTQI6QIpSFQoEV7txuf7bVzj5gj3OcjnW/mdvZmvjc79uzOrQMYWPX8RxKRRcRPETHezK4sUG8+3bh+ce6P6xfnksiyl39LGuV+v35xrixa7rejyBxMI9IPkthbUe/i+QunZhcW5s8V+aml029NLZ6/8PjJ07Mn5k/Mn5k5evTIE9NPPzXz5G2JczRv6553z+7bfey1j16cy+L1bz/P2/u/YntrHE0TPddZj/rKz7JhpPHz4Z7f/d9ltCWdDPWxIXSkFhF5dw03xv941GK588bjhff72jhgU2VZlm1Z82qtTFzOgP+wJPrdAqA/yj/0+flv+fgHpx99d+3Z5glQHveN4tHcMhRp/rS1ecY+ukn11yPi1ct/fpw/ovI6BADA7fVlPv95rGr+N5bc3VJurFgbmoiIQxGxMyL+HxG7IuKuiMjL3hMR93ZYf31Vfu3854dtXQXWpnz+90yxtrVy/peWRSZqRW60Ef9w8sbJhfnDxWdyMIa35PnpDer46vkfP1xvW+v8L3/k9ZdzwaIdvw6tukB3fHZptpeYW117L2LPUFX8yc2VgCQidkfEni7eP//MTj762b48PbZj7fZ9t4x/feNdtGe17NOIR5r9fzlWxV9Kmksk661PTm2NhfnDU+VRsdZ33195qTU/3JK+df9vZLibkFfI+3975fFfxF8Og3K9drHzOq78fHXdc5puj/+R5JVGeqR47Z3ZpaVz0xEjxQsrXp9Z3rfMl+Xz+A8eqIp/LNkZ8dcnxX57i2P1voi4PyL2F21/ICIejIgDG8T/zXMPvbnxJ9Rt//cuj/94Rf8ny4f/RNK6Xt9Fonbq6y/Wq7+9/j9yNWtZlWjn919e+aX8eXVzyri6PpoBAADgzpM2vgOfpJM302k6Odn8Dv+u2J4unF1cOlSPt88cb35XfiKG0/JK13jL9dDp4tpwmZ9ZlS+vVGXZtkZ+cu7swmatqQPt2bHO+M/9Uut364BN1879WjfLrL2jDbiDuV8TBpfxD4PL+IfBZfzD4Koa/5cibrRkN/UmDKB//P2HwWX8w+Ay/mFwGf8wkNbes19e6evmTv/lxM5jPe0+QIla1abydok23yet2NTB7suJbdF24aiq9E5JpJ3ttbXH/4BRndhfJLZERLt7Xeq8T7tM9O93EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO30dwAAAP//A/LVbQ==") sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioprio_get$pid(0x3, r0) 2m37.35396626s ago: executing program 6 (id=1584): request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0xfffffffffffffffe) request_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, 0x0, 0x0) 2m35.759774802s ago: executing program 34 (id=1584): request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0xfffffffffffffffe) request_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, 0x0, 0x0) 2m35.725675296s ago: executing program 5 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) socket(0x1, 0x2, 0x10000) syz_emit_ethernet(0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000021001122334455000a42"], 0x0) 2m35.349181665s ago: executing program 5 (id=1591): syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60081, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f0000000300)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000006c0), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r1, &(0x7f0000000700)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = gettid() tkill(r2, 0x21) 2m34.798237591s ago: executing program 5 (id=1593): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000880), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000900)=@usbdevfs_connect) 2m34.347171317s ago: executing program 5 (id=1596): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./sys\x00', 0x210000, &(0x7f0000000640)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000c80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x8, &(0x7f0000000d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x2008820, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) 2m33.52835304s ago: executing program 5 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) socket(0x1, 0x2, 0x10000) syz_emit_ethernet(0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000021001122334455000a42"], 0x0) 2m27.045768062s ago: executing program 5 (id=1616): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19) 2m25.79264109s ago: executing program 35 (id=1616): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19) 48.028240869s ago: executing program 2 (id=2011): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003240), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000003280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000032c0)={&(0x7f0000003300)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000003340)=[{&(0x7f0000003380)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000033c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000003400)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000003500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000003540)='-v', 0x2) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000004f00)=[{&(0x7f0000001080)="ad", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000003a00)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d20"}, 0x3ef) close_range(r0, 0xffffffffffffffff, 0x0) 47.308494882s ago: executing program 2 (id=2014): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001300)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@multipath={0x0, 0x1818, 0x0, 0xb8, 'multipath\x00', {'2 queue_mode bio', 0x20, '0', 0x20, 0x1, 0x20, 0x1, [{0x20, 'round-robin 0', 0x20, 0x2, 0x20, '1', [{0x20, @ram_num={'1:', 0x1}}, {0x20, @ram_num={'1:', 0x0}}]}]}}]}) 43.01684235s ago: executing program 2 (id=2019): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x7f, r0, &(0x7f00000000c0), 0x0, 0x7d06, 0x0, 0x2, r0}]) 42.468268786s ago: executing program 2 (id=2024): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'lo\x00'}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000a80)=0x3) writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='\f', 0x1}, {&(0x7f0000000b40)="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", 0x800}], 0x2) 41.84045717s ago: executing program 2 (id=2027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4) 41.360336139s ago: executing program 2 (id=2030): syz_io_uring_setup(0x109f, &(0x7f0000000000)={0x0, 0xa74d, 0x940, 0xfffffffe, 0x94}, &(0x7f0000000080), 0x0, &(0x7f0000000100)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x4000087, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000dc0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xbf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\x02\x00\x00\x00\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xddW\xe6}\xc5\xa4\x8f\x98\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8\xac\x00P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\x01\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0m\xc9\x82<\xa9\xdc\xddRU\t\xe9\xbah\xb6\xb2\xea-{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DL\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9dn\x06\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96\xb71~2{@:\x97^\xbfcu9\x8c<^ll\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\xd7\x99\x19pn\xbe\xb8\f#\xe2\x8f\x02\xedk\x10\x1b\x9c\x10\xd5\xab\x95Yn\xe9\x00\xb5\xa29\xd7\xd1\bs\xd0x0\xf2F\xaam\xd8\\\x16\x98\x86\xbe\xbc|h+\t.\x0f\x1b?\xbf5\x9fW\xa7\x02\x14J\x16|TV\x1bW\xd6r\nR\x82\xe0\x88%\xfa\x1f\xae\xcb\xb5g\xd5\x9a\x17\xd2F3A\x03-\xe22\x1b\xb4\xb5\b\x8b\xe79\xbew#2\xbd`', 0x5) fcntl$addseals(r3, 0x409, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=@base={0x20, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x4}, 0x35) 25.978739819s ago: executing program 36 (id=2030): syz_io_uring_setup(0x109f, &(0x7f0000000000)={0x0, 0xa74d, 0x940, 0xfffffffe, 0x94}, &(0x7f0000000080), 0x0, &(0x7f0000000100)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x4000087, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000dc0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xbf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\x02\x00\x00\x00\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xddW\xe6}\xc5\xa4\x8f\x98\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8\xac\x00P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\x01\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0m\xc9\x82<\xa9\xdc\xddRU\t\xe9\xbah\xb6\xb2\xea-{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DL\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9dn\x06\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96\xb71~2{@:\x97^\xbfcu9\x8c<^ll\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\xd7\x99\x19pn\xbe\xb8\f#\xe2\x8f\x02\xedk\x10\x1b\x9c\x10\xd5\xab\x95Yn\xe9\x00\xb5\xa29\xd7\xd1\bs\xd0x0\xf2F\xaam\xd8\\\x16\x98\x86\xbe\xbc|h+\t.\x0f\x1b?\xbf5\x9fW\xa7\x02\x14J\x16|TV\x1bW\xd6r\nR\x82\xe0\x88%\xfa\x1f\xae\xcb\xb5g\xd5\x9a\x17\xd2F3A\x03-\xe22\x1b\xb4\xb5\b\x8b\xe79\xbew#2\xbd`', 0x5) fcntl$addseals(r3, 0x409, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=@base={0x20, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x4}, 0x35) 12.675889017s ago: executing program 8 (id=2115): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@bsdgroups}]}, 0x1, 0x4c0, &(0x7f0000000380)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") openat(0xffffffffffffff9c, 0x0, 0x58342, 0x0) io_destroy(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000cc0)='X', 0x1f, 0x0, &(0x7f0000000d00)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000d40)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000001040)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000010c0), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x1ff) shutdown(r0, 0x1) 11.260265771s ago: executing program 8 (id=2119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000130005000100", @ANYRES32=r2, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000180"], 0x4c}}, 0x0) 10.570630392s ago: executing program 4 (id=2121): r0 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) syz_open_dev$hidraw(0x0, 0x15e, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0100aa"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x8}, 0x94) close(0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x2000000000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 8.836270359s ago: executing program 7 (id=2122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x684, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x658, 0x2, [@TCA_BPF_ACT={0x654, 0x1, [@m_mirred={0x4dc, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x44d, 0x6, "54aa6579cf06a9e3ba2d57a0b3b58a5530eee176cab36463f36b167af47eaffcc5614168a068fcc4247c79c80796c574b4c2af8fdde088a7c88150f55d6194c6e715d3ba099779d80777b6c2ab8ffc343de4bf6ac9bf3141c933c502312f1d4289e195942ddc770951e9bcfdcea336c0bf0474b100872803fa14af615af6da6b063b01c50e9b21ca269b37702a2bce63fba39790cd2e6ae9de2e0206a3a406a8de8f9d43417fc1e6c6771acd645f2349e72126b899f4b2cdc57f230af5679ffd82fc07c607550881f253b3710c5898f406071830211caaa7b71a20bb9fe0385bf1c91e505e3f4a21227bc62630ee99db144595ad6fc3291ae966d1e2128f1e6b2f2726d3f3dfa41850be2b91ac77c5662e1e06ba8b0e121b1008a343e92b708444c195f8d7f46cc4cf73f6d164cabc61bc7ac9ddb5530feacc09aa773720b9e4a533ed55c556b0b76add10945963618aa76433793e7a39ef3f931eb6fc30d04e6737841828e1771c547a6acf68bcf85652f4aac8aa4e7abe5eaddd2ae75756d2f18c4ad6fef07be7489eda7c55a53bd694c68bb54e282e065ca5d9cea36dcd0e0c9dca08fbbaf0d62123f74ae45ef71e47b74e8070fd637cb968ae9804da49bb42f657abc1f73e5a77acde27e0f5320610c098f9f82b5ae6a0812efbd91f2dd0ab6035645aa8da106c7d6b7e81d74eb6b6a1d5840d7811d7759c1badfdf04e55178153ee55ce3f91f94a826e35b114aab35c4eeeb4041893f4d55fe8168bb3d40350fb1ad952b2f6249eb1d26801bcaa623bbb04f5e1cbbd0cbb9ac12a8ad4cd7cf08125b67c9c1a72efab3c73fe9270687b7f10f3a594a4b789e03dd7ffb3b6350dde0280e85df41d9634d26c8686013d49ae4fcb8c456b876af55f4d18b9bdb8935c4b30a7129e3bd776e4c1accc0a95a11b27b786984368989438deea6b22eb6881944dc700357d1367845d9fa20bf2cc0893c72c080bca4dfbb90ae725297a01a08000dd4c7b5ce707b46675657c3c3a9b08bfb7a85732e9fb386f270d381dbb6039421286a79419f58181d8f15927a782297342f00393c492b83f6f830e2388802c4653e41703ce5ed84e8f6a800d213a36763d39ede3079b04101c5577d6d5ae97a7bb225543bc860be7a7476c41ae7fbadc1b811c3783fa6a11445950b2a05cae74808c19433f02ee39d3e1cbafc366e813129df0e8e097858144d1bdcc926ac2978e4e72f097bee562e21b8db59c66e1d43cc7691193036efcc0da1dfedc0bcac2d2418643385114de7e3c592a0a7976388271129f4092dfa7e54fae057a91713e82f6e17d673e0221782ded9c3f7413871ee1bf0e87b73fc99cca64b52eed094277e430743f484f3475b68ee57258f375aba6f6cad6a6656243a04dd4920d8c94098ea748aed043d64aa363dd5891f4ffcdc8d4cfc21f52265ba695c6f4b58ec63e4aecbd849bb4db37b9686c1aa7c8e495d35514674b1740fc276e5a56dd7c2ccee9fbe5216213b0ee43356d08dcbf5740b41a819da2278d16a3218b6e7e2a1a1180dbc5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x174, 0x12, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}]}, {0xd9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.468043776s ago: executing program 4 (id=2123): getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'veth0_vlan\x00', @remote}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0b031120"], 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) accept4$inet6(r4, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac2814aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 7.895372205s ago: executing program 8 (id=2124): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000015c0)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001600)={0x1000001d}) epoll_pwait(r0, &(0x7f0000001640)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) 7.600351755s ago: executing program 7 (id=2125): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000002580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002600)={0x10, 0xffffffffffffffda}, 0x10) 7.248428501s ago: executing program 7 (id=2126): syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r1], 0x1, 0x392, &(0x7f0000000300)="$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") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mtd(&(0x7f00000006c0), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000740)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 6.898539686s ago: executing program 4 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) write(r0, &(0x7f0000000440), 0x0) 6.437461894s ago: executing program 8 (id=2129): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@bsdgroups}]}, 0x1, 0x4c0, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, 0x0, 0x58342, 0x0) io_destroy(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000cc0)='X', 0x1f, 0x0, &(0x7f0000000d00)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000d40)={0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xd, 0x4, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000001040)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000010c0)='1', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x1ff) shutdown(r0, 0x1) 6.221431836s ago: executing program 7 (id=2130): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000186dd6012000800183a00fe8000"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 5.658155513s ago: executing program 0 (id=2131): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4806}, 0x0) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000500)=@str='clear', 0x5) 5.530370106s ago: executing program 4 (id=2132): ioctl$DM_LIST_DEVICES(0xffffffffffffffff, 0xc138fd02, &(0x7f0000007f40)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x0, 0x0, 0x4000, 0x0, 0x0, {}, "4775f727a3ee0e24235fd40191d1a4e25b376dd2caa38489e464dc7a8b6423f66e9960b6d5ce00ed3d020f0cde007c76958e512a3064a6effbb4fd1de6b7a8915f27c995cd653dde956e77ecdb3602da01c47de78987119a396b49cab55496ac80587f015cde80ad5c3e"}) 5.29346123s ago: executing program 0 (id=2133): r0 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) syz_open_dev$hidraw(0x0, 0x15e, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0100aa"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000008c0)={0x0, 0x1}, 0x8}, 0x94) close(0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x2000000000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5.012206509s ago: executing program 4 (id=2134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x684, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x658, 0x2, [@TCA_BPF_ACT={0x654, 0x1, [@m_mirred={0x4dc, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x44d, 0x6, "54aa6579cf06a9e3ba2d57a0b3b58a5530eee176cab36463f36b167af47eaffcc5614168a068fcc4247c79c80796c574b4c2af8fdde088a7c88150f55d6194c6e715d3ba099779d80777b6c2ab8ffc343de4bf6ac9bf3141c933c502312f1d4289e195942ddc770951e9bcfdcea336c0bf0474b100872803fa14af615af6da6b063b01c50e9b21ca269b37702a2bce63fba39790cd2e6ae9de2e0206a3a406a8de8f9d43417fc1e6c6771acd645f2349e72126b899f4b2cdc57f230af5679ffd82fc07c607550881f253b3710c5898f406071830211caaa7b71a20bb9fe0385bf1c91e505e3f4a21227bc62630ee99db144595ad6fc3291ae966d1e2128f1e6b2f2726d3f3dfa41850be2b91ac77c5662e1e06ba8b0e121b1008a343e92b708444c195f8d7f46cc4cf73f6d164cabc61bc7ac9ddb5530feacc09aa773720b9e4a533ed55c556b0b76add10945963618aa76433793e7a39ef3f931eb6fc30d04e6737841828e1771c547a6acf68bcf85652f4aac8aa4e7abe5eaddd2ae75756d2f18c4ad6fef07be7489eda7c55a53bd694c68bb54e282e065ca5d9cea36dcd0e0c9dca08fbbaf0d62123f74ae45ef71e47b74e8070fd637cb968ae9804da49bb42f657abc1f73e5a77acde27e0f5320610c098f9f82b5ae6a0812efbd91f2dd0ab6035645aa8da106c7d6b7e81d74eb6b6a1d5840d7811d7759c1badfdf04e55178153ee55ce3f91f94a826e35b114aab35c4eeeb4041893f4d55fe8168bb3d40350fb1ad952b2f6249eb1d26801bcaa623bbb04f5e1cbbd0cbb9ac12a8ad4cd7cf08125b67c9c1a72efab3c73fe9270687b7f10f3a594a4b789e03dd7ffb3b6350dde0280e85df41d9634d26c8686013d49ae4fcb8c456b876af55f4d18b9bdb8935c4b30a7129e3bd776e4c1accc0a95a11b27b786984368989438deea6b22eb6881944dc700357d1367845d9fa20bf2cc0893c72c080bca4dfbb90ae725297a01a08000dd4c7b5ce707b46675657c3c3a9b08bfb7a85732e9fb386f270d381dbb6039421286a79419f58181d8f15927a782297342f00393c492b83f6f830e2388802c4653e41703ce5ed84e8f6a800d213a36763d39ede3079b04101c5577d6d5ae97a7bb225543bc860be7a7476c41ae7fbadc1b811c3783fa6a11445950b2a05cae74808c19433f02ee39d3e1cbafc366e813129df0e8e097858144d1bdcc926ac2978e4e72f097bee562e21b8db59c66e1d43cc7691193036efcc0da1dfedc0bcac2d2418643385114de7e3c592a0a7976388271129f4092dfa7e54fae057a91713e82f6e17d673e0221782ded9c3f7413871ee1bf0e87b73fc99cca64b52eed094277e430743f484f3475b68ee57258f375aba6f6cad6a6656243a04dd4920d8c94098ea748aed043d64aa363dd5891f4ffcdc8d4cfc21f52265ba695c6f4b58ec63e4aecbd849bb4db37b9686c1aa7c8e495d35514674b1740fc276e5a56dd7c2ccee9fbe5216213b0ee43356d08dcbf5740b41a819da2278d16a3218b6e7e2a1a1180dbc5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x174, 0x12, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}]}, {0xd9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.259767848s ago: executing program 0 (id=2135): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000002580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 2.698922055s ago: executing program 0 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001300050001000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000180"], 0x4c}}, 0x0) 2.644427621s ago: executing program 7 (id=2137): mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000009c0)='27', 0x2) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000a40)='devpts\x00', 0x22008d0, 0x0) 2.302798315s ago: executing program 4 (id=2138): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000240), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(r1, 0x0, 0x0) 2.205476275s ago: executing program 0 (id=2139): getpgid(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'veth0_vlan\x00', @remote}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0b031120"], 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) accept4$inet6(r4, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac2814aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 808.700808ms ago: executing program 8 (id=2140): syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r1], 0x1, 0x392, &(0x7f0000000300)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mtd(&(0x7f00000006c0), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000740)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 282.595282ms ago: executing program 0 (id=2141): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) write(r0, &(0x7f0000000440), 0x0) 191.314231ms ago: executing program 8 (id=2142): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4806}, 0x0) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000500)=@str='clear', 0x5) 0s ago: executing program 7 (id=2143): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioprio_get$pid(0x3, r0) kernel console output (not intermixed with test programs): 2.785825][ T4691] team0 (unregistering): Port device team_slave_1 removed [ 402.869970][ T4691] team0 (unregistering): Port device team_slave_0 removed [ 403.008707][ T4691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.125735][ T4691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.253205][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 404.200839][ T4691] bond0 (unregistering): Released all slaves [ 404.332396][ T9083] team0: Port device team_slave_1 added [ 404.416472][ T9198] FAULT_INJECTION: forcing a failure. [ 404.416472][ T9198] name failslab, interval 1, probability 0, space 0, times 0 [ 404.444894][ T9198] CPU: 1 PID: 9198 Comm: syz.5.1463 Not tainted syzkaller #0 [ 404.452375][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 404.462608][ T9198] Call Trace: [ 404.466387][ T9198] [ 404.469370][ T9198] dump_stack_lvl+0x188/0x24e [ 404.474316][ T9198] ? __lock_acquire+0x7ea0/0x7ea0 [ 404.479800][ T9198] ? show_regs_print_info+0x12/0x12 [ 404.485302][ T9198] ? load_image+0x410/0x410 [ 404.489892][ T9198] ? mark_lock+0x94/0x320 [ 404.494552][ T9198] ? __lock_acquire+0x142d/0x7ea0 [ 404.499639][ T9198] should_fail_ex+0x390/0x4c0 [ 404.504757][ T9198] should_failslab+0x5/0x20 [ 404.509853][ T9198] slab_pre_alloc_hook+0x59/0x300 [ 404.515136][ T9198] ? nsim_fib_event_nb+0xd8/0x1040 [ 404.520778][ T9198] __kmem_cache_alloc_node+0x4f/0x270 [ 404.526359][ T9198] ? nsim_fib_event_nb+0xd8/0x1040 [ 404.532345][ T9198] kmalloc_trace+0x26/0xe0 [ 404.536968][ T9198] nsim_fib_event_nb+0xd8/0x1040 [ 404.541981][ T9198] atomic_notifier_call_chain+0x17a/0x2b0 [ 404.547766][ T9198] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 404.553650][ T9198] call_fib_notifiers+0x2d/0x60 [ 404.559227][ T9198] fib_table_delete+0xc6a/0xfc0 [ 404.564954][ T9198] ? nexthop_get_nhc_lookup+0x400/0x400 [ 404.570656][ T9198] ? __queue_work+0xb00/0xee0 [ 404.575539][ T9198] ? l3mdev_fib_table+0x18/0x160 [ 404.580617][ T9198] ? l3mdev_fib_table+0x18/0x160 [ 404.586585][ T9198] ? fib_new_table+0x106/0x2d0 [ 404.593489][ T9198] fib_magic+0x2ea/0x3b0 [ 404.597966][ T9198] ? fib_add_ifaddr+0x5c0/0x5c0 [ 404.602920][ T9198] fib_del_ifaddr+0x10b2/0x14c0 [ 404.608018][ T9198] ? inetaddr_event+0xec/0x150 [ 404.614268][ T9198] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 404.623142][ T9198] ? fib_del_ifaddr+0x2f2/0x14c0 [ 404.628160][ T9198] fib_inetaddr_event+0xb7/0x1c0 [ 404.635221][ T9198] blocking_notifier_call_chain+0x103/0x1b0 [ 404.641423][ T9198] __inet_del_ifa+0xaac/0x1090 [ 404.647092][ T9198] devinet_ioctl+0x1367/0x1bf0 [ 404.653289][ T9198] inet_ioctl+0x2fa/0x460 [ 404.659205][ T9198] ? inet_shutdown+0x370/0x370 [ 404.665729][ T9198] ? slab_free_freelist_hook+0x133/0x1b0 [ 404.673521][ T9198] ? tomoyo_path_number_perm+0x4fb/0x650 [ 404.681112][ T9198] ? __kmem_cache_free+0xb6/0x200 [ 404.686486][ T9198] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 404.692305][ T9198] sock_do_ioctl+0xfb/0x320 [ 404.698737][ T9198] ? sock_show_fdinfo+0xb0/0xb0 [ 404.706260][ T9198] sock_ioctl+0x48a/0x700 [ 404.710897][ T9198] ? sock_poll+0x430/0x430 [ 404.717313][ T9198] ? bpf_lsm_file_ioctl+0x5/0x10 [ 404.723373][ T9198] ? security_file_ioctl+0x7c/0xa0 [ 404.730175][ T9198] ? sock_poll+0x430/0x430 [ 404.735524][ T9198] __se_sys_ioctl+0xfa/0x170 [ 404.741473][ T9198] do_syscall_64+0x4c/0xa0 [ 404.747146][ T9198] ? clear_bhb_loop+0x60/0xb0 [ 404.753900][ T9198] ? clear_bhb_loop+0x60/0xb0 [ 404.759856][ T9198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.766457][ T9198] RIP: 0033:0x7f0c6739f559 [ 404.771878][ T9198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.796758][ T9198] RSP: 002b:00007f0c68190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.806210][ T9198] RAX: ffffffffffffffda RBX: 00007f0c67625fa0 RCX: 00007f0c6739f559 [ 404.815402][ T9198] RDX: 0000200000000240 RSI: 0000000000008918 RDI: 0000000000000007 [ 404.825112][ T9198] RBP: 00007f0c67436b50 R08: 0000000000000000 R09: 0000000000000000 [ 404.833839][ T9198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.843404][ T9198] R13: 00007f0c67626038 R14: 00007f0c67625fa0 R15: 00007ffff82177c8 [ 404.851545][ T9198] [ 405.053389][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.064055][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.146328][ T9083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.223938][ T4350] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 405.249407][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.277419][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.334039][ T4350] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 405.471376][ T9083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.736319][ T9083] device hsr_slave_0 entered promiscuous mode [ 405.851291][ T9083] device hsr_slave_1 entered promiscuous mode [ 405.874047][ T9083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.912469][ T9083] Cannot create hsr debugfs directory [ 406.034254][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 406.520033][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.569591][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.591141][ T9115] device bridge_slave_0 entered promiscuous mode [ 406.621796][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.645304][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.676573][ T9115] device bridge_slave_1 entered promiscuous mode [ 406.693574][ T9247] loop5: detected capacity change from 0 to 512 [ 406.736326][ T9247] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1476: inode has both inline data and extents flags [ 406.762460][ T9247] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1476: couldn't read orphan inode 15 (err -117) [ 406.786066][ T9247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 406.896185][ T9250] FAULT_INJECTION: forcing a failure. [ 406.896185][ T9250] name fail_futex, interval 1, probability 0, space 0, times 0 [ 406.917332][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.945256][ T9250] CPU: 1 PID: 9250 Comm: syz.5.1476 Not tainted syzkaller #0 [ 406.953153][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 406.964891][ T9250] Call Trace: [ 406.968289][ T9250] [ 406.971287][ T9250] dump_stack_lvl+0x188/0x24e [ 406.976258][ T9250] ? kasan_quarantine_put+0xd4/0x210 [ 406.982205][ T9250] ? show_regs_print_info+0x12/0x12 [ 406.987868][ T9250] ? load_image+0x410/0x410 [ 406.992648][ T9250] should_fail_ex+0x390/0x4c0 [ 406.997721][ T9250] get_futex_key+0x1a6/0xe70 [ 407.002587][ T9250] ? futex_setup_timer+0xc0/0xc0 [ 407.007617][ T9250] futex_wake+0x123/0x4f0 [ 407.012446][ T9250] ? release_sock+0x2b/0x1b0 [ 407.017581][ T9250] ? futex_wake_mark+0x150/0x150 [ 407.022618][ T9250] ? print_unlock_imbalance_bug+0x160/0x160 [ 407.029208][ T9250] do_futex+0x2e2/0x320 [ 407.033457][ T9250] ? __ia32_sys_get_robust_list+0x100/0x100 [ 407.039426][ T9250] ? inet_shutdown+0x299/0x370 [ 407.045687][ T9250] __se_sys_futex+0x381/0x410 [ 407.050425][ T9250] ? __x64_sys_futex+0xf0/0xf0 [ 407.055341][ T9250] ? inet_shutdown+0x299/0x370 [ 407.060253][ T9250] ? __x64_sys_futex+0x1d/0xf0 [ 407.065337][ T9250] do_syscall_64+0x4c/0xa0 [ 407.070530][ T9250] ? clear_bhb_loop+0x60/0xb0 [ 407.076382][ T9250] ? clear_bhb_loop+0x60/0xb0 [ 407.081406][ T9250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.087687][ T9250] RIP: 0033:0x7f0c6739f559 [ 407.093354][ T9250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.115102][ T9250] RSP: 002b:00007f0c655f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 407.125572][ T9250] RAX: ffffffffffffffda RBX: 00007f0c67626098 RCX: 00007f0c6739f559 [ 407.133783][ T9250] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c6762609c [ 407.142435][ T9250] RBP: 00007f0c67626090 R08: 002f3457b44ead1c R09: 0000000000000000 [ 407.151777][ T9250] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 407.160067][ T9250] R13: 00007f0c67626128 R14: 00007ffff82176e0 R15: 00007ffff82177c8 [ 407.168573][ T9250] [ 407.279214][ T4691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.353700][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.490455][ T4691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.523796][ T7718] EXT4-fs (loop5): unmounting filesystem. [ 407.814500][ T4691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.880663][ T9115] team0: Port device team_slave_0 added [ 407.995270][ T9115] team0: Port device team_slave_1 added [ 408.070165][ T9262] loop5: detected capacity change from 0 to 512 [ 408.123808][ T4691] bond0: (slave netdevsim0): Releasing backup interface [ 408.169649][ T4691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.572531][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.595217][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.694930][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.727637][ T4721] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 408.759107][ T4721] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.799924][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.814913][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.923370][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.165687][ T9115] device hsr_slave_0 entered promiscuous mode [ 409.173545][ T9115] device hsr_slave_1 entered promiscuous mode [ 409.192851][ T9115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.219215][ T9115] Cannot create hsr debugfs directory [ 409.589440][ T9083] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.761082][ T9083] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.786616][ T9083] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.898589][ T9083] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 410.509922][ T9317] loop5: detected capacity change from 0 to 128 [ 410.915448][ T9083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.037887][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.056001][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.169692][ T9083] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.403424][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 411.424372][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.462103][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.469551][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.540100][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.616921][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 411.648680][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.691810][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.701115][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.756277][ T4352] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 411.824274][ T4352] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 412.165986][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.196471][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.217456][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.248395][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.266051][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.291904][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.315851][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 412.416267][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.456198][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.494103][ T9083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.554422][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 412.592813][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.631489][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.734495][ T4691] device hsr_slave_0 left promiscuous mode [ 412.760490][ T4691] device hsr_slave_1 left promiscuous mode [ 412.783524][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.811041][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.838556][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.869368][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.913869][ T4691] device bridge_slave_1 left promiscuous mode [ 412.940610][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.979222][ T4691] device bridge_slave_0 left promiscuous mode [ 412.985952][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.036891][ T4691] device veth1_macvtap left promiscuous mode [ 413.195286][ T4691] device veth0_macvtap left promiscuous mode [ 413.271139][ T4691] device veth1_vlan left promiscuous mode [ 413.400549][ T4691] device veth0_vlan left promiscuous mode [ 414.599213][ T9342] loop5: detected capacity change from 0 to 128 [ 414.660963][ T9342] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 414.703036][ T9342] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 414.866047][ T7718] EXT4-fs (loop5): unmounting filesystem. [ 416.108760][ T9363] overlayfs: failed to clone upperpath [ 416.409222][ T4691] team0 (unregistering): Port device team_slave_1 removed [ 416.866138][ T4691] team0 (unregistering): Port device team_slave_0 removed [ 417.236872][ T4691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.450477][ T4280] Bluetooth: hci4: link tx timeout [ 417.457687][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 417.562298][ T4691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.602795][ T4296] Bluetooth: hci4: link tx timeout [ 417.608974][ T4296] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 418.475522][ T9380] loop5: detected capacity change from 0 to 128 [ 418.552651][ T9380] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 418.573398][ T9380] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.757971][ T7718] EXT4-fs (loop5): unmounting filesystem. [ 418.872650][ T4691] bond0 (unregistering): Released all slaves [ 418.974473][ T9391] device-mapper: table: 248:6: snapshot: Cannot get origin device (-ENODEV) [ 419.034574][ T9115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 419.043200][ T9391] device-mapper: ioctl: error adding target to table [ 419.061024][ T9115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 419.378858][ T9115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 419.498001][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 420.180768][ T9115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 420.553206][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.609368][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.656667][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.696999][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.712978][ T7] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 420.775329][ T7] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 420.812076][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.830939][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.869148][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.876671][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.893864][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 420.906985][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 420.970852][ T9083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.035016][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.071849][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.115523][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.155983][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.163474][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.245587][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.295562][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.349132][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.420419][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.503244][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.530899][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.593685][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.652347][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.705711][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.772735][ T9115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.816875][ T9115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.856998][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.883689][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.265974][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.291872][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.397796][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.421700][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.512680][ T9083] device veth0_vlan entered promiscuous mode [ 423.532701][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.587104][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.611476][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.670307][ T9478] loop5: detected capacity change from 0 to 512 [ 423.689157][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.723679][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.771100][ T9083] device veth1_vlan entered promiscuous mode [ 423.869786][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.905294][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.977231][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.029728][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.191333][ T9115] device veth0_vlan entered promiscuous mode [ 424.235999][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.271686][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.317751][ T9083] device veth0_macvtap entered promiscuous mode [ 424.379129][ T9115] device veth1_vlan entered promiscuous mode [ 424.400375][ T9491] loop5: detected capacity change from 0 to 512 [ 424.413519][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.433288][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.455817][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.473753][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.510995][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.541028][ T9491] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 424.553682][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 424.602353][ T9083] device veth1_macvtap entered promiscuous mode [ 424.639707][ T9491] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 424.666884][ T9501] overlayfs: failed to resolve './file0': -2 [ 424.750074][ T9491] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.1544: iget: bad i_size value: 12154757448730 [ 424.775870][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.805850][ T9491] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1544: couldn't read orphan inode 13 (err -117) [ 424.839940][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.862790][ T9491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 424.871662][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.912483][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.954248][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.977787][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.021581][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.050691][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.085828][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.127051][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.147692][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.183216][ T9115] device veth0_macvtap entered promiscuous mode [ 425.226312][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.287906][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.334827][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.375032][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.405896][ T9083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.444936][ T9083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.487348][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.515501][ T9083] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.554850][ T9083] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.563982][ T9083] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.605102][ T9083] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.648873][ T9115] device veth1_macvtap entered promiscuous mode [ 425.673127][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.687154][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.716802][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.748606][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.817819][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.853290][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.886432][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.927840][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.954922][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.978857][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.016835][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.054929][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.096688][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.111578][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.149178][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.208459][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.274839][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.305841][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.328163][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.354909][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.383286][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.415221][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.457248][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.493390][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.531528][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.547896][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.570264][ T9115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.590746][ T9115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.631457][ T9115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.654832][ T9115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.723336][ T4599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.760354][ T4599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.816969][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 426.871771][ T4504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.892545][ T4504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.962788][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.021328][ T4691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.040816][ T4691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.077240][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 427.194685][ T4582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.223562][ T4582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.269819][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.316228][ T9534] loop6: detected capacity change from 0 to 1024 [ 427.348487][ T9534] EXT4-fs: Ignoring removed nobh option [ 427.437980][ T9534] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 427.475342][ T9534] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.529294][ T9534] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 3) [ 427.545845][ T9534] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 427.561064][ T9534] EXT4-fs (loop6): This should not happen!! Data will be lost [ 427.561064][ T9534] [ 427.576582][ T9534] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 427.615883][ T9534] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 427.658432][ T9532] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 427.691739][ T9534] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 427.722284][ T9532] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 427.777148][ T9543] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 427.837656][ T9543] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 427.994380][ T9534] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1426: lblock 3 mapped to illegal pblock 3 (length 1) [ 428.490555][ T9549] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 4: comm syz.6.1426: lblock 4 mapped to illegal pblock 4 (length 2) [ 428.517597][ T7718] EXT4-fs (loop5): unmounting filesystem. [ 428.708760][ T9550] loop2: detected capacity change from 0 to 1024 [ 428.795972][ T9550] EXT4-fs: Ignoring removed nobh option [ 428.839137][ T9550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 428.855253][ T9550] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.094505][ T4309] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 429.165434][ T4309] EXT4-fs (loop6): This should not happen!! Data will be lost [ 429.165434][ T4309] [ 429.175208][ T4599] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 1) [ 429.223284][ T9083] EXT4-fs (loop6): unmounting filesystem. [ 429.270825][ T4599] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 429.335594][ T4599] EXT4-fs (loop2): This should not happen!! Data will be lost [ 429.335594][ T4599] [ 429.376438][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 429.429279][ T9561] loop5: detected capacity change from 0 to 512 [ 429.540326][ T9561] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 429.600898][ T9566] loop2: detected capacity change from 0 to 128 [ 429.624945][ T9561] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.764143][ T9566] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 429.786456][ T9566] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 429.926820][ T7718] EXT4-fs (loop5): unmounting filesystem. [ 429.996913][ T9572] loop6: detected capacity change from 0 to 1024 [ 430.095105][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 430.108823][ T9572] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 430.457092][ T9083] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /2/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 430.577072][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 430.589556][ T9083] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /2/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 430.662671][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 430.706657][ T9083] EXT4-fs error (device loop6): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 430.786795][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 430.811249][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 430.845683][ T9083] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /2/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 430.926809][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 430.934464][ T9083] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /2/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 431.015271][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 431.043914][ T9083] EXT4-fs error (device loop6): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 431.089559][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 431.104980][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.150124][ T9083] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /2/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 431.193474][ T9592] loop5: detected capacity change from 0 to 1024 [ 431.227949][ T9592] EXT4-fs: Ignoring removed nobh option [ 431.257980][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 431.288455][ T9083] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /2/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 431.290365][ T9592] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 431.349621][ T9592] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.419094][ T9592] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.1574: lblock 3 mapped to illegal pblock 3 (length 3) [ 431.419435][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 431.442437][ T9083] EXT4-fs error (device loop6): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 431.471981][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 431.511607][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.531495][ T9083] EXT4-fs error (device loop6): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /2/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 431.555835][ T9592] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 431.590942][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.612378][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.633718][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.664527][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.703986][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.735246][ T9592] EXT4-fs (loop5): This should not happen!! Data will be lost [ 431.735246][ T9592] [ 431.753898][ T9602] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1574: lblock 3 mapped to illegal pblock 3 (length 1) [ 431.774431][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.846729][ T9083] EXT4-fs warning (device loop6): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 431.891039][ T9591] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1574: lblock 3 mapped to illegal pblock 3 (length 1) [ 432.085730][ T9591] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1574: lblock 3 mapped to illegal pblock 3 (length 1) [ 432.111451][ T9602] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1574: lblock 3 mapped to illegal pblock 3 (length 1) [ 432.162586][ T9592] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1574: lblock 3 mapped to illegal pblock 3 (length 1) [ 432.309531][ T9602] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1574: lblock 3 mapped to illegal pblock 3 (length 1) [ 432.310753][ T9617] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 4: comm syz.5.1574: lblock 4 mapped to illegal pblock 4 (length 2) [ 432.445578][ T9617] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 4: comm syz.5.1574: lblock 4 mapped to illegal pblock 4 (length 2) [ 432.526150][ T9620] loop2: detected capacity change from 0 to 128 [ 432.627766][ T9620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 432.650559][ T9620] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.818404][ T11] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 432.924584][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 432.948106][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 432.963642][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 432.963642][ T11] [ 433.110518][ T7718] EXT4-fs (loop5): unmounting filesystem. [ 433.138646][ T4364] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.421092][ T4364] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.012933][ T4364] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.593378][ T9645] loop2: detected capacity change from 0 to 1024 [ 434.631945][ T4364] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.698429][ T9645] EXT4-fs: Ignoring removed nobh option [ 434.789957][ T9645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 434.869580][ T9645] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.984179][ T9656] loop5: detected capacity change from 0 to 512 [ 435.111006][ T4691] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm kworker/u4:15: lblock 0 mapped to illegal pblock 0 (length 1) [ 435.213480][ T4691] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 435.286400][ T4691] EXT4-fs (loop2): This should not happen!! Data will be lost [ 435.286400][ T4691] [ 435.351908][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 435.713160][ T9664] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.1593' sets config #0 [ 435.976951][ T9670] loop2: detected capacity change from 0 to 512 [ 436.142744][ T9675] loop5: detected capacity change from 0 to 1024 [ 436.218042][ T9670] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 436.228141][ T9670] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 436.239577][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.252421][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.267954][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.279640][ T9675] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 436.290310][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.300311][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 436.308505][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.317098][ T9670] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.1595: iget: bad i_size value: 12154757448730 [ 436.468121][ T9670] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1595: couldn't read orphan inode 13 (err -117) [ 436.578225][ T9670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 436.651339][ T9673] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.829003][ T7718] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /74/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 436.932992][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 436.960188][ T7718] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /74/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 437.071196][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 437.136379][ T7718] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 437.245065][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 437.264389][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 437.336690][ T7718] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /74/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 437.459317][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 437.483308][ T7718] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /74/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 437.563795][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 437.574593][ T7718] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 437.677535][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 437.690675][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 437.715926][ T7718] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /74/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 437.773204][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 437.805131][ T7718] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /74/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 437.921198][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 437.939202][ T7718] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 437.998889][ T7718] EXT4-fs (loop5): Remounting filesystem read-only [ 438.019888][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.135429][ T7718] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /74/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 438.262806][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.333777][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.375486][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 438.415149][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.442208][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.465780][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.492051][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.519525][ T7718] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 438.763772][ T4364] device hsr_slave_0 left promiscuous mode [ 438.784635][ T4364] device hsr_slave_1 left promiscuous mode [ 438.806916][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.827166][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.893137][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.909000][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.947442][ T4364] device bridge_slave_1 left promiscuous mode [ 438.968092][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.993707][ T4364] device bridge_slave_0 left promiscuous mode [ 439.024116][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.251578][ T4364] device veth1_macvtap left promiscuous mode [ 439.268549][ T4364] device veth0_macvtap left promiscuous mode [ 439.295380][ T4364] device veth1_vlan left promiscuous mode [ 439.302605][ T4364] device veth0_vlan left promiscuous mode [ 439.822440][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 439.985562][ T9720] FAULT_INJECTION: forcing a failure. [ 439.985562][ T9720] name failslab, interval 1, probability 0, space 0, times 0 [ 439.999245][ T9720] CPU: 0 PID: 9720 Comm: syz.2.1606 Not tainted syzkaller #0 [ 440.006825][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.017418][ T9720] Call Trace: [ 440.020812][ T9720] [ 440.023908][ T9720] dump_stack_lvl+0x188/0x24e [ 440.029064][ T9720] ? show_regs_print_info+0x12/0x12 [ 440.034880][ T9720] ? load_image+0x410/0x410 [ 440.039509][ T9720] ? __might_sleep+0xd0/0xd0 [ 440.044495][ T9720] ? __lock_acquire+0x7ea0/0x7ea0 [ 440.049849][ T9720] should_fail_ex+0x390/0x4c0 [ 440.054739][ T9720] should_failslab+0x5/0x20 [ 440.059321][ T9720] slab_pre_alloc_hook+0x59/0x300 [ 440.064418][ T9720] ? xfrm_state_init+0xe0/0x470 [ 440.069347][ T9720] __kmem_cache_alloc_node+0x4f/0x270 [ 440.074814][ T9720] ? xfrm_state_init+0xe0/0x470 [ 440.079744][ T9720] __kmalloc+0xa3/0x240 [ 440.084014][ T9720] xfrm_state_init+0xe0/0x470 [ 440.088881][ T9720] xfrm_net_init+0x1a3/0xeb0 [ 440.093616][ T9720] ? policy_hash_direct+0x5b0/0x5b0 [ 440.098940][ T9720] ops_init+0x360/0x5e0 [ 440.103182][ T9720] setup_net+0x4f2/0xbd0 [ 440.107963][ T9720] ? copy_net_ns+0x5b0/0x5b0 [ 440.112647][ T9720] ? copy_net_ns+0x324/0x5b0 [ 440.117338][ T9720] ? down_read_killable+0x1cc/0x340 [ 440.123189][ T9720] copy_net_ns+0x33e/0x5b0 [ 440.128614][ T9720] create_new_namespaces+0x3ce/0x700 [ 440.135499][ T9720] unshare_nsproxy_namespaces+0x116/0x160 [ 440.141399][ T9720] ksys_unshare+0x4f6/0x8e0 [ 440.145994][ T9720] ? sighand_ctor+0x40/0x40 [ 440.150575][ T9720] ? lock_chain_count+0x20/0x20 [ 440.155596][ T9720] ? syscall_enter_from_user_mode+0x21/0x80 [ 440.162011][ T9720] __x64_sys_unshare+0x34/0x40 [ 440.167199][ T9720] do_syscall_64+0x4c/0xa0 [ 440.171800][ T9720] ? clear_bhb_loop+0x60/0xb0 [ 440.176569][ T9720] ? clear_bhb_loop+0x60/0xb0 [ 440.181425][ T9720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.188746][ T9720] RIP: 0033:0x7fac02d9f559 [ 440.193286][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.213163][ T9720] RSP: 002b:00007fac03d4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 440.222517][ T9720] RAX: ffffffffffffffda RBX: 00007fac03025fa0 RCX: 00007fac02d9f559 [ 440.230603][ T9720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 440.239949][ T9720] RBP: 00007fac02e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 440.248246][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.256298][ T9720] R13: 00007fac03026038 R14: 00007fac03025fa0 R15: 00007ffd1579ea48 [ 440.264659][ T9720] [ 440.445621][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 441.594482][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 441.709297][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 441.795428][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.889744][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.255467][ T9736] overlayfs: failed to clone upperpath [ 442.535842][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 442.606480][ T4364] bond0 (unregistering): Released all slaves [ 442.736191][ T9673] chnl_net:caif_netlink_parms(): no params data found [ 443.036960][ T7718] EXT4-fs: 294 callbacks suppressed [ 443.036979][ T7718] EXT4-fs (loop5): unmounting filesystem. [ 443.073725][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.087226][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.098739][ T9673] device bridge_slave_0 entered promiscuous mode [ 443.120604][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.138915][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.150994][ T9673] device bridge_slave_1 entered promiscuous mode [ 443.282996][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.341861][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.545618][ T9673] team0: Port device team_slave_0 added [ 444.568891][ T9673] team0: Port device team_slave_1 added [ 444.604888][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 445.816179][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.822596][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.976346][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.004812][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.062077][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.075800][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.082820][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.131584][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.205884][ T9778] ip_tables: iptables: counters copy to user failed while replacing table [ 446.316016][ T9673] device hsr_slave_0 entered promiscuous mode [ 446.338036][ T9673] device hsr_slave_1 entered promiscuous mode [ 446.370662][ T9673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.391309][ T9673] Cannot create hsr debugfs directory [ 446.511060][ T9788] loop2: detected capacity change from 0 to 1024 [ 446.562907][ T9788] EXT4-fs: Ignoring removed nobh option [ 446.646240][ T9788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 446.705375][ T9788] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.727699][ T9788] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 3) [ 446.757216][ T9788] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 446.845578][ T9788] EXT4-fs (loop2): This should not happen!! Data will be lost [ 446.845578][ T9788] [ 446.875153][ T9786] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 446.948106][ T9796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 446.967985][ T4364] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.004674][ T9786] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 447.047150][ T9796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 447.170902][ T9796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 447.259794][ T9796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 447.285499][ T9796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 447.308799][ T9796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 447.399159][ T9788] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1625: lblock 3 mapped to illegal pblock 3 (length 1) [ 447.950391][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.972723][ T4296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.986281][ T4296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.997452][ T4296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.009373][ T4296] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 448.019571][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.220322][ T4364] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.388247][ T9809] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.402670][ T63] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 448.427662][ T63] EXT4-fs (loop2): This should not happen!! Data will be lost [ 448.427662][ T63] [ 448.497530][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 448.517899][ T4364] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.665443][ T4364] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.760902][ T9673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 448.906474][ T9673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 449.400330][ T9673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 449.622083][ T9673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 450.056299][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 451.713918][ T4364] tipc: Left network mode [ 451.771801][ T9864] loop2: detected capacity change from 0 to 512 [ 451.833370][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.060139][ T9809] chnl_net:caif_netlink_parms(): no params data found [ 452.110949][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.136416][ T4296] Bluetooth: hci4: command 0x041b tx timeout [ 452.189654][ T9673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 452.201809][ T9673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.268066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 452.317421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 452.362038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.233612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.266084][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.275189][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.289619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.300056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.313883][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.321363][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.337024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.346917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.358436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.370853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.385307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.411593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.490346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.531272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.575724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 453.625348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.662878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.672387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.681026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.512627][ T4296] Bluetooth: hci4: command 0x040f tx timeout [ 454.763535][ T9905] loop2: detected capacity change from 0 to 512 [ 454.855263][ T9905] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1652: inode has both inline data and extents flags [ 454.921383][ T9905] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1652: couldn't read orphan inode 15 (err -117) [ 454.995293][ T9905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 455.345389][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 455.453900][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.481470][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.518897][ T9809] device bridge_slave_0 entered promiscuous mode [ 455.670684][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.702674][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.764982][ T9809] device bridge_slave_1 entered promiscuous mode [ 455.970158][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.076063][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.286630][ T9809] team0: Port device team_slave_0 added [ 457.727706][ T4296] Bluetooth: hci4: command 0x0419 tx timeout [ 457.887259][ T9809] team0: Port device team_slave_1 added [ 458.032569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.079986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.150628][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.170387][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.188914][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.309873][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.668599][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.705449][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.818353][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.298113][ T9809] device hsr_slave_0 entered promiscuous mode [ 459.378428][ T9809] device hsr_slave_1 entered promiscuous mode [ 459.392706][ T9809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.421629][ T9809] Cannot create hsr debugfs directory [ 459.861880][ T4364] device hsr_slave_0 left promiscuous mode [ 459.874670][ T4364] device hsr_slave_1 left promiscuous mode [ 460.233824][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.525208][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.749515][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.796904][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.876703][ T4364] device bridge_slave_1 left promiscuous mode [ 460.930682][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.257486][ T4364] device bridge_slave_0 left promiscuous mode [ 461.485171][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.805344][ T4364] device veth1_macvtap left promiscuous mode [ 461.812258][ T4364] device veth0_macvtap left promiscuous mode [ 461.851246][ T4364] device veth1_vlan left promiscuous mode [ 461.878633][ T4364] device veth0_vlan left promiscuous mode [ 462.063410][T10008] fuse: Bad value for 'fd' [ 464.039349][T10031] loop2: detected capacity change from 0 to 512 [ 464.091394][T10031] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1681: inode has both inline data and extents flags [ 464.113827][T10031] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1681: couldn't read orphan inode 15 (err -117) [ 464.178424][T10031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 464.408343][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 464.523150][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 464.614345][ T956] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 464.633010][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 464.673970][ T956] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.785726][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.920691][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.033604][T10038] hid-generic 0000:0000:0000.0008: pid 10038 passed too short report [ 465.525558][ T4364] bond0 (unregistering): Released all slaves [ 465.863713][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.895277][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.008201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.092084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.125829][ T9673] device veth0_vlan entered promiscuous mode [ 466.223651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.286737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.334100][ T9673] device veth1_vlan entered promiscuous mode [ 466.502218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 466.578325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 466.615836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.660396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.762446][ T9673] device veth0_macvtap entered promiscuous mode [ 466.853216][ T9673] device veth1_macvtap entered promiscuous mode [ 466.972336][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.104119][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.280521][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.525038][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.591586][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.658813][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.715675][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.759724][ T9809] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 467.885880][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.929496][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.069196][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.132860][T10073] device-mapper: table: 248:7: multipath: round-robin ps: invalid repeat count (-EINVAL) [ 468.158530][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.185982][T10073] device-mapper: ioctl: error adding target to table [ 468.194468][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.218446][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.231040][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.247038][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.153651][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.188998][ T9809] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 469.214049][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 469.237566][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.406166][ T9809] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.430545][ T9673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.479587][ T9673] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.499571][ T9673] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.531763][ T9673] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.587599][ T9809] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.925341][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.934034][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.036996][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 470.102075][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.138508][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.215206][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.224019][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 470.308772][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.331689][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.356925][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.394583][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.413343][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.503838][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.512307][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.571834][T10111] loop2: detected capacity change from 0 to 512 [ 470.798757][T10111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 470.822606][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.909721][T10111] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.164453][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 471.655850][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.697546][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.707588][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.723151][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.821119][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 471.881195][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.991286][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.103379][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.143437][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.162049][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.194352][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.248079][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.283540][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.344556][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.381956][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.458892][ T9809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.318586][ T27] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 474.366945][ T27] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 474.619997][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.653983][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.785244][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.797033][T10173] fido_id[10173]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.700118][T10215] FAULT_INJECTION: forcing a failure. [ 476.700118][T10215] name failslab, interval 1, probability 0, space 0, times 0 [ 476.831950][T10215] CPU: 0 PID: 10215 Comm: syz.7.1726 Not tainted syzkaller #0 [ 476.839882][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 476.850200][T10215] Call Trace: [ 476.854220][T10215] [ 476.857594][T10215] dump_stack_lvl+0x188/0x24e [ 476.862822][T10215] ? show_regs_print_info+0x12/0x12 [ 476.868671][T10215] ? load_image+0x410/0x410 [ 476.873566][T10215] ? __might_sleep+0xd0/0xd0 [ 476.879671][T10215] ? __lock_acquire+0x7ea0/0x7ea0 [ 476.886296][T10215] should_fail_ex+0x390/0x4c0 [ 476.891751][T10215] should_failslab+0x5/0x20 [ 476.897198][T10215] slab_pre_alloc_hook+0x59/0x300 [ 476.902500][T10215] ? ib_setup_port_attrs+0x1007/0x2290 [ 476.908598][T10215] __kmem_cache_alloc_node+0x4f/0x270 [ 476.915119][T10215] ? ib_setup_port_attrs+0x1007/0x2290 [ 476.920943][T10215] __kmalloc+0xa3/0x240 [ 476.926151][T10215] ib_setup_port_attrs+0x1007/0x2290 [ 476.932926][T10215] ? ib_free_port_attrs+0x3a0/0x3a0 [ 476.940603][T10215] ? __class_register+0x400/0x400 [ 476.946684][T10215] ? kobject_put+0x416/0x450 [ 476.952727][T10215] ? do_raw_spin_unlock+0x11d/0x230 [ 476.959531][T10215] ib_register_device+0x1062/0x1350 [ 476.966293][T10215] ? remove_all_compat_devs+0x260/0x260 [ 476.974751][T10215] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 476.982310][T10215] ? lock_chain_count+0x20/0x20 [ 476.987709][T10215] ? lockdep_hardirqs_on+0x94/0x140 [ 476.993826][T10215] ? lockdep_softirqs_off+0x430/0x430 [ 476.999529][T10215] ? __raw_spin_lock_init+0x41/0x100 [ 477.005820][T10215] siw_newlink+0x9cf/0xe60 [ 477.010836][T10215] nldev_newlink+0x59c/0x620 [ 477.015768][T10215] ? unwind_next_frame+0x1719/0x1fd0 [ 477.024039][T10215] ? nldev_set_doit+0x490/0x490 [ 477.029438][T10215] ? aa_get_newest_label+0xf9/0x5b0 [ 477.035717][T10215] ? end_current_label_crit_section+0x170/0x170 [ 477.043299][T10215] ? end_current_label_crit_section+0x170/0x170 [ 477.050907][T10215] ? __might_sleep+0xd0/0xd0 [ 477.057284][T10215] ? apparmor_capable+0x12c/0x190 [ 477.064614][T10215] ? nldev_set_doit+0x490/0x490 [ 477.070491][T10215] rdma_nl_rcv+0x6e7/0xa20 [ 477.078627][T10215] ? rdma_nl_net_init+0x190/0x190 [ 477.084321][T10215] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.090891][T10215] ? __netlink_deliver_tap+0x92/0x7e0 [ 477.098528][T10215] ? net_generic+0x1e/0x240 [ 477.103981][T10215] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.110678][T10215] netlink_unicast+0x7ad/0x920 [ 477.117229][T10215] netlink_sendmsg+0x8ad/0xbd0 [ 477.123459][T10215] ? netlink_getsockopt+0x550/0x550 [ 477.129204][T10215] ? apparmor_socket_sendmsg+0x8a/0x330 [ 477.136132][T10215] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 477.142742][T10215] ? security_socket_sendmsg+0x7c/0xa0 [ 477.149271][T10215] ? netlink_getsockopt+0x550/0x550 [ 477.155950][T10215] ____sys_sendmsg+0x5ed/0x9a0 [ 477.162976][T10215] ? __sys_sendmsg_sock+0x30/0x30 [ 477.169004][T10215] ? __import_iovec+0x306/0x510 [ 477.174804][T10215] ? import_iovec+0x6f/0xa0 [ 477.180776][T10215] ___sys_sendmsg+0x2a2/0x360 [ 477.186011][T10215] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.191482][T10215] __se_sys_sendmsg+0x1c3/0x2b0 [ 477.197329][T10215] ? __x64_sys_sendmsg+0x80/0x80 [ 477.202878][T10215] ? lockdep_hardirqs_on+0x94/0x140 [ 477.208351][T10215] do_syscall_64+0x4c/0xa0 [ 477.213206][T10215] ? clear_bhb_loop+0x60/0xb0 [ 477.219051][T10215] ? clear_bhb_loop+0x60/0xb0 [ 477.224046][T10215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.231382][T10215] RIP: 0033:0x7fc6b119f559 [ 477.237525][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.261645][T10215] RSP: 002b:00007fc6b2035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.271808][T10215] RAX: ffffffffffffffda RBX: 00007fc6b1425fa0 RCX: 00007fc6b119f559 [ 477.281635][T10215] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 477.290203][T10215] RBP: 00007fc6b1236b50 R08: 0000000000000000 R09: 0000000000000000 [ 477.299475][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.308578][T10215] R13: 00007fc6b1426038 R14: 00007fc6b1425fa0 R15: 00007ffec0b66dc8 [ 477.317417][T10215] [ 477.625897][T10215] infiniband syz2: Couldn't register device with driver model [ 477.659624][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.686960][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.933315][T10215] siw: device registration error -12 [ 477.946523][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.019907][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.237730][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.393771][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.507883][ T9809] device veth0_vlan entered promiscuous mode [ 478.794251][ T9809] device veth1_vlan entered promiscuous mode [ 478.988403][ T9809] device veth0_macvtap entered promiscuous mode [ 479.057074][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.076271][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.128061][ T9809] device veth1_macvtap entered promiscuous mode [ 479.160675][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.195816][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.463578][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.500023][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.532436][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.555242][T10256] loop7: detected capacity change from 0 to 1024 [ 479.561744][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.602637][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.615994][T10256] EXT4-fs: Ignoring removed nobh option [ 479.648053][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.662396][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.717530][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.733324][T10256] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 479.771498][T10256] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.826910][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.890061][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.907062][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.931850][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.967007][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.987783][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.042770][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.075929][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.090094][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.107202][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.129367][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.151917][ T48] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 480.165778][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.196356][ T48] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 112 with error 28 [ 480.223721][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.243654][ T48] EXT4-fs (loop7): This should not happen!! Data will be lost [ 480.243654][ T48] [ 480.258246][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.279027][ T48] EXT4-fs (loop7): Total free blocks count 0 [ 480.292220][ T9809] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.300571][ T48] EXT4-fs (loop7): Free/Dirty block details [ 480.323676][ T48] EXT4-fs (loop7): free_blocks=0 [ 480.333882][ T9809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.344905][ T48] EXT4-fs (loop7): dirty_blocks=128 [ 480.351675][ T48] EXT4-fs (loop7): Block reservation details [ 480.374827][ T9809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.390820][ T48] EXT4-fs (loop7): i_reserved_data_blocks=8 [ 480.401478][ T9809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.425064][ T48] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 480.470463][ T48] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 480.716073][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.732811][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.912932][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.000321][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.054798][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.107621][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.376003][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 484.449006][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 484.499614][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 484.548889][T10307] loop7: detected capacity change from 0 to 512 [ 484.567336][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 484.590319][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 484.621969][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 484.666471][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 484.726259][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 484.737248][T10307] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 484.763413][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 484.775777][T10307] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.800296][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 484.850229][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 484.875968][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 485.121216][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 485.131811][ T9673] EXT4-fs (loop7): unmounting filesystem. [ 485.198787][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 485.226252][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 485.256512][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 485.298852][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 485.321517][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 485.341109][T10302] infiniband rxe0: set active [ 485.353447][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 485.368560][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 485.379697][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 485.390379][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 485.404395][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 485.430666][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 485.442080][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 485.462901][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 485.485832][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 485.507664][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 485.532972][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 486.902801][ T22] kernel write not supported for file /input/mice (pid: 22 comm: kworker/1:0) [ 486.998795][T10349] 0: reclassify loop, rule prio 0, protocol 03 [ 487.232624][T10365] Console: switching to colour VGA+ 80x25 [ 487.355887][T10353] FAULT_INJECTION: forcing a failure. [ 487.355887][T10353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.425249][T10353] CPU: 0 PID: 10353 Comm: syz.7.1762 Not tainted syzkaller #0 [ 487.434978][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 487.449087][T10353] Call Trace: [ 487.453217][T10353] [ 487.456311][T10353] dump_stack_lvl+0x188/0x24e [ 487.463437][T10353] ? show_regs_print_info+0x12/0x12 [ 487.469223][T10353] ? load_image+0x410/0x410 [ 487.475187][T10353] ? __lock_acquire+0x7ea0/0x7ea0 [ 487.481371][T10353] should_fail_ex+0x390/0x4c0 [ 487.486673][T10353] fpu__restore_sig+0x257/0x12d0 [ 487.492714][T10353] ? copy_fpstate_to_sigframe+0xd70/0xd70 [ 487.502373][T10353] ? __lock_acquire+0x7ea0/0x7ea0 [ 487.508871][T10353] ? __might_fault+0xc2/0x120 [ 487.515165][T10353] ? __might_fault+0xa6/0x120 [ 487.522432][T10353] __ia32_sys_rt_sigreturn+0x5ef/0x750 [ 487.528795][T10353] ? load_gs_index+0x130/0x130 [ 487.534632][T10353] ? lock_chain_count+0x20/0x20 [ 487.541171][T10353] ? lockdep_hardirqs_on+0x94/0x140 [ 487.549138][T10353] do_syscall_64+0x4c/0xa0 [ 487.554955][T10353] ? clear_bhb_loop+0x60/0xb0 [ 487.560627][T10353] ? clear_bhb_loop+0x60/0xb0 [ 487.566899][T10353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.573215][T10353] RIP: 0033:0x7fc6b119f559 [ 487.577807][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.601339][T10353] RSP: 002b:00007fc6b2035028 EFLAGS: 00000246 [ 487.608614][T10353] RAX: fffffffffffffffc RBX: 00007fc6b1425fa0 RCX: 00007fc6b119f559 [ 487.617256][T10353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 487.625998][T10353] RBP: 00007fc6b1236b50 R08: 0000000000000000 R09: 0000000000000000 [ 487.634965][T10353] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 487.644681][T10353] R13: 00007fc6b1426038 R14: 00007fc6b1425fa0 R15: 00007ffec0b66dc8 [ 487.655344][T10353] [ 487.658790][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.054566][T10394] md: md7 stopped. [ 489.817102][T10411] loop8: detected capacity change from 0 to 1024 [ 489.884386][T10411] EXT4-fs: Ignoring removed nobh option [ 489.995815][T10411] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 490.035034][T10411] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.170087][T10421] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 3: comm syz.8.1782: lblock 3 mapped to illegal pblock 3 (length 3) [ 490.198272][T10421] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 490.224280][T10421] EXT4-fs (loop8): This should not happen!! Data will be lost [ 490.224280][T10421] [ 490.277646][T10424] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1782: lblock 3 mapped to illegal pblock 3 (length 1) [ 490.330743][T10411] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 4: comm syz.8.1782: lblock 4 mapped to illegal pblock 4 (length 2) [ 490.409374][T10424] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1782: lblock 3 mapped to illegal pblock 3 (length 1) [ 490.435139][T10411] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 4: comm syz.8.1782: lblock 4 mapped to illegal pblock 4 (length 2) [ 490.481212][T10424] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1782: lblock 3 mapped to illegal pblock 3 (length 1) [ 490.814239][ T4691] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm kworker/u4:15: bg 0: block 112: padding at end of block bitmap is not set [ 490.858426][T10440] md: md2 stopped. [ 490.881104][ T4691] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 368 with error 28 [ 490.934840][ T4691] EXT4-fs (loop8): This should not happen!! Data will be lost [ 490.934840][ T4691] [ 491.005208][ T4691] EXT4-fs (loop8): Total free blocks count 0 [ 491.014298][ T4691] EXT4-fs (loop8): Free/Dirty block details [ 491.072510][ T4691] EXT4-fs (loop8): free_blocks=0 [ 491.112512][ T4691] EXT4-fs (loop8): dirty_blocks=448 [ 491.143860][ T4691] EXT4-fs (loop8): Block reservation details [ 491.204975][ T4691] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 494.263583][T10486] loop8: detected capacity change from 0 to 1024 [ 494.360230][T10486] EXT4-fs: Ignoring removed nobh option [ 494.640117][T10486] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 494.715129][T10486] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.840823][T10498] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 3) [ 494.935010][T10492] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 494.988785][T10498] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 495.031882][ T4309] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 516 with error 28 [ 495.082252][ T4309] EXT4-fs (loop8): This should not happen!! Data will be lost [ 495.082252][ T4309] [ 495.121565][ T4309] EXT4-fs (loop8): Total free blocks count 0 [ 495.159637][ T4309] EXT4-fs (loop8): Free/Dirty block details [ 495.189480][ T4309] EXT4-fs (loop8): free_blocks=0 [ 495.214672][ T4309] EXT4-fs (loop8): dirty_blocks=592 [ 495.220885][ T4309] EXT4-fs (loop8): Block reservation details [ 495.229189][T10498] EXT4-fs (loop8): This should not happen!! Data will be lost [ 495.229189][T10498] [ 495.256655][T10505] 0: reclassify loop, rule prio 0, protocol 03 [ 495.437012][T10484] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.569886][T10503] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.603624][T10484] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.604384][ T4309] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 495.676361][T10503] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.746410][T10503] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.809637][T10503] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 1) [ 495.892763][T10503] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1803: lblock 3 mapped to illegal pblock 3 (length 1) [ 496.157482][T10520] binder_alloc: 10519: binder_alloc_buf, no vma [ 496.453408][T10533] loop2: detected capacity change from 0 to 512 [ 496.561493][T10533] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1817: inode has both inline data and extents flags [ 496.689969][T10533] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1817: couldn't read orphan inode 15 (err -117) [ 496.773773][T10533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.051686][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 497.110177][T10546] md: md7 stopped. [ 497.577934][T10559] loop2: detected capacity change from 0 to 512 [ 497.736082][T10559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.835735][T10559] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.972176][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 498.825679][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1835'. [ 498.871501][T10590] md: md7 stopped. [ 499.149015][T10599] ip_tables: iptables: counters copy to user failed while replacing table [ 499.227962][T10601] loop7: detected capacity change from 0 to 512 [ 499.335290][T10601] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 499.347007][T10601] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.515853][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.555035][T10617] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 499.758063][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 499.794572][ T9673] EXT4-fs (loop7): unmounting filesystem. [ 499.907529][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 499.956226][T10620] loop2: detected capacity change from 0 to 512 [ 500.056020][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 500.132114][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 500.187138][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 500.274588][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 501.443934][T10640] md: md8 stopped. [ 501.841448][T10653] overlayfs: failed to clone upperpath [ 504.562923][T10687] loop7: detected capacity change from 0 to 512 [ 505.336770][T10694] loop2: detected capacity change from 0 to 512 [ 505.493930][T10694] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1865: inode has both inline data and extents flags [ 505.555318][T10694] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1865: couldn't read orphan inode 15 (err -117) [ 505.612448][T10694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 505.879492][ T9998] smpboot: CPU 1 is now offline [ 505.918952][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.929070][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.059203][T10710] loop8: detected capacity change from 0 to 512 [ 506.129406][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 507.969103][T10749] loop2: detected capacity change from 0 to 512 [ 508.084119][T10749] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1881: inode has both inline data and extents flags [ 508.357349][T10749] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1881: couldn't read orphan inode 15 (err -117) [ 508.506598][T10749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 508.660413][T10759] device-mapper: raid: Choosing default region size of 4MiB [ 508.749716][T10759] device-mapper: table: 248:8: raid: RAID device lookup failure (-ENODEV) [ 508.851154][T10759] device-mapper: ioctl: error adding target to table [ 508.879725][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 512.063463][T10837] loop2: detected capacity change from 0 to 512 [ 512.286120][T10844] device syzkaller1 entered promiscuous mode [ 513.076705][T10859] overlayfs: missing 'lowerdir' [ 513.142034][T10862] loop7: detected capacity change from 0 to 512 [ 513.281584][T10862] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #15: comm syz.7.1915: inode has both inline data and extents flags [ 513.473391][T10862] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.1915: couldn't read orphan inode 15 (err -117) [ 513.601798][T10862] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 513.790988][T10878] loop8: detected capacity change from 0 to 512 [ 514.003930][T10878] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 514.141142][T10878] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.196907][ T9673] EXT4-fs (loop7): unmounting filesystem. [ 514.241770][T10889] loop2: detected capacity change from 0 to 8 [ 514.434576][T10889] SQUASHFS error: Failed to read block 0x260685: -5 [ 514.561437][T10889] SQUASHFS error: Unable to read metadata cache entry [260685] [ 514.651023][T10889] SQUASHFS error: Unable to read directory block [260685:0] [ 514.881458][ T9809] EXT4-fs (loop8): unmounting filesystem. [ 515.246479][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.266282][T10911] overlayfs: missing 'lowerdir' [ 515.833917][T10931] loop7: detected capacity change from 0 to 512 [ 515.967282][T10931] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #15: comm syz.7.1935: inode has both inline data and extents flags [ 516.110998][T10931] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.1935: couldn't read orphan inode 15 (err -117) [ 516.293065][T10931] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 516.915451][T10953] loop8: detected capacity change from 0 to 8 [ 516.980734][ T9673] EXT4-fs (loop7): unmounting filesystem. [ 517.101682][T10953] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 517.226543][T10953] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.484920][ T4296] Bluetooth: hci2: command 0x0406 tx timeout [ 522.163180][T10983] loop2: detected capacity change from 0 to 512 [ 522.657899][T10983] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1954: inode has both inline data and extents flags [ 522.847086][T10983] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1954: couldn't read orphan inode 15 (err -117) [ 523.093197][T10983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 523.417157][T11008] loop7: detected capacity change from 0 to 8 [ 523.659059][T11008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 523.795061][T11008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 523.837775][ T9115] EXT4-fs (loop2): unmounting filesystem. [ 524.069727][T11017] FAULT_INJECTION: forcing a failure. [ 524.069727][T11017] name failslab, interval 1, probability 0, space 0, times 0 [ 524.269419][T11017] CPU: 0 PID: 11017 Comm: syz.8.1962 Not tainted syzkaller #0 [ 524.281305][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 524.293244][T11017] Call Trace: [ 524.298347][T11017] [ 524.303143][T11017] dump_stack_lvl+0x188/0x24e [ 524.309208][T11017] ? show_regs_print_info+0x12/0x12 [ 524.319279][T11017] ? load_image+0x410/0x410 [ 524.324725][T11017] ? __might_sleep+0xd0/0xd0 [ 524.329796][T11017] ? __lock_acquire+0x7ea0/0x7ea0 [ 524.336791][T11017] should_fail_ex+0x390/0x4c0 [ 524.344698][T11017] should_failslab+0x5/0x20 [ 524.350980][T11017] slab_pre_alloc_hook+0x59/0x300 [ 524.361333][T11017] ? __v4l2_subdev_state_alloc+0x56/0x300 [ 524.367868][T11017] __kmem_cache_alloc_node+0x4f/0x270 [ 524.373468][T11017] ? __v4l2_subdev_state_alloc+0x56/0x300 [ 524.381923][T11017] kmalloc_trace+0x26/0xe0 [ 524.387642][T11017] __v4l2_subdev_state_alloc+0x56/0x300 [ 524.395081][T11017] subdev_open+0xa9/0x3e0 [ 524.402132][T11017] v4l2_open+0x201/0x340 [ 524.408047][T11017] chrdev_open+0x585/0x5f0 [ 524.412650][T11017] ? cd_forget+0x160/0x160 [ 524.418727][T11017] ? fsnotify_perm+0x39b/0x550 [ 524.425764][T11017] ? cd_forget+0x160/0x160 [ 524.431301][T11017] do_dentry_open+0x7dd/0x10b0 [ 524.438682][T11017] path_openat+0x2674/0x2f10 [ 524.446733][T11017] ? kasan_set_track+0x60/0x70 [ 524.451966][T11017] ? verify_lock_unused+0x140/0x140 [ 524.461254][T11017] ? do_sys_openat2+0xdd/0x4f0 [ 524.469607][T11017] ? do_filp_open+0x420/0x420 [ 524.476837][T11017] do_filp_open+0x1ee/0x420 [ 524.484995][T11017] ? vfs_tmpfile+0x490/0x490 [ 524.490513][T11017] ? _raw_spin_unlock+0x24/0x40 [ 524.496287][T11017] ? alloc_fd+0x590/0x640 [ 524.501931][T11017] do_sys_openat2+0x14b/0x4f0 [ 524.508056][T11017] ? do_sys_open+0xe0/0xe0 [ 524.513316][T11017] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 524.520215][T11017] ? lock_chain_count+0x20/0x20 [ 524.528695][T11017] __x64_sys_openat+0x135/0x160 [ 524.534770][T11017] do_syscall_64+0x4c/0xa0 [ 524.544418][T11017] ? clear_bhb_loop+0x60/0xb0 [ 524.553068][T11017] ? clear_bhb_loop+0x60/0xb0 [ 524.559648][T11017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.567125][T11017] RIP: 0033:0x7f137075fd8e [ 524.572098][T11017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 524.598324][T11017] RSP: 002b:00007f13716f4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 524.611809][T11017] RAX: ffffffffffffffda RBX: 00007f13716f56c0 RCX: 00007f137075fd8e [ 524.622628][T11017] RDX: 0000000000080002 RSI: 00007f13716f4c00 RDI: ffffffffffffff9c [ 524.632620][T11017] RBP: 00007f13716f4c00 R08: 0000000000000000 R09: 0000000000000000 [ 524.642370][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 524.651024][T11017] R13: 00007f1370a26038 R14: 00007f1370a25fa0 R15: 00007fff5b42f4d8 [ 524.661237][T11017] [ 525.556736][T11035] device-mapper: raid: Choosing default region size of 4MiB [ 525.642575][T11035] device-mapper: table: 248:9: raid: RAID device lookup failure (-ENODEV) [ 525.749615][T11035] device-mapper: ioctl: error adding target to table [ 527.596037][T11051] loop7: detected capacity change from 0 to 512 [ 527.713407][T11051] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #15: comm syz.7.1971: inode has both inline data and extents flags [ 527.909999][T11051] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.1971: couldn't read orphan inode 15 (err -117) [ 528.050714][T11051] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 528.498927][T11067] loop2: detected capacity change from 0 to 512 [ 528.563452][ T9673] EXT4-fs (loop7): unmounting filesystem. [ 528.659880][T11067] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 529.451038][T11084] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 529.519724][T11084] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 529.584036][ T4296] Bluetooth: hci4: link tx timeout [ 529.593597][ T4296] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 530.166790][T11102] FAULT_INJECTION: forcing a failure. [ 530.166790][T11102] name fail_futex, interval 1, probability 0, space 0, times 0 [ 530.290777][T11102] CPU: 0 PID: 11102 Comm: syz.2.1983 Not tainted syzkaller #0 [ 530.299408][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 530.311096][T11102] Call Trace: [ 530.317550][T11102] [ 530.320779][T11102] dump_stack_lvl+0x188/0x24e [ 530.325524][T11102] ? unwind_get_return_address+0x49/0x80 [ 530.331689][T11102] ? stack_trace_save+0xf0/0xf0 [ 530.336960][T11102] ? show_regs_print_info+0x12/0x12 [ 530.342308][T11102] ? load_image+0x410/0x410 [ 530.347733][T11102] ? stack_trace_save+0xa6/0xf0 [ 530.353071][T11102] should_fail_ex+0x390/0x4c0 [ 530.357881][T11102] get_futex_key+0x1a6/0xe70 [ 530.362878][T11102] ? kasan_set_track+0x4b/0x70 [ 530.367918][T11102] ? kasan_save_free_info+0x27/0x40 [ 530.374245][T11102] ? ____kasan_slab_free+0x126/0x1f0 [ 530.379913][T11102] ? __se_sys_request_key+0x322/0x350 [ 530.385701][T11102] ? futex_setup_timer+0xc0/0xc0 [ 530.391238][T11102] futex_wake+0x123/0x4f0 [ 530.396692][T11102] ? futex_wake_mark+0x150/0x150 [ 530.402717][T11102] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 530.409548][T11102] ? lock_chain_count+0x20/0x20 [ 530.414444][T11102] do_futex+0x2e2/0x320 [ 530.419163][T11102] ? __ia32_sys_get_robust_list+0x100/0x100 [ 530.426881][T11102] ? slab_free_freelist_hook+0x133/0x1b0 [ 530.434214][T11102] __se_sys_futex+0x381/0x410 [ 530.439299][T11102] ? __x64_sys_futex+0xf0/0xf0 [ 530.444545][T11102] ? __x64_sys_futex+0x1d/0xf0 [ 530.450416][T11102] do_syscall_64+0x4c/0xa0 [ 530.455082][T11102] ? clear_bhb_loop+0x60/0xb0 [ 530.460548][T11102] ? clear_bhb_loop+0x60/0xb0 [ 530.465308][T11102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.471344][T11102] RIP: 0033:0x7fac02d9f559 [ 530.475801][T11102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.496434][T11102] RSP: 002b:00007fac03d4f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 530.505328][T11102] RAX: ffffffffffffffda RBX: 00007fac03025fa8 RCX: 00007fac02d9f559 [ 530.514151][T11102] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac03025fac [ 530.524473][T11102] RBP: 00007fac03025fa0 R08: 00040b556df19bdd R09: 0000000000000000 [ 530.534806][T11102] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 530.545579][T11102] R13: 00007fac03026038 R14: 00007ffd1579e960 R15: 00007ffd1579ea48 [ 530.555310][T11102] [ 530.954399][T11118] loop7: detected capacity change from 0 to 512 [ 531.082651][T11118] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #15: comm syz.7.1986: inode has both inline data and extents flags [ 531.241127][T11118] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.1986: couldn't read orphan inode 15 (err -117) [ 531.349660][T11118] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 531.645083][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 531.707471][ T9673] EXT4-fs (loop7): unmounting filesystem. [ 541.665704][ T4296] Bluetooth: hci4: link tx timeout [ 541.671851][ T4296] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.907356][ T4296] Bluetooth: hci4: link tx timeout [ 541.919919][ T4296] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.990412][T11188] 9pnet_fd: Insufficient options for proto=fd [ 547.691597][T11228] 9pnet_fd: Insufficient options for proto=fd [ 548.505572][T11256] loop8: detected capacity change from 0 to 512 [ 548.886906][T11264] FAULT_INJECTION: forcing a failure. [ 548.886906][T11264] name failslab, interval 1, probability 0, space 0, times 0 [ 549.066857][T11264] CPU: 0 PID: 11264 Comm: syz.7.2029 Not tainted syzkaller #0 [ 549.074560][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 549.085844][T11264] Call Trace: [ 549.090408][T11264] [ 549.093606][T11264] dump_stack_lvl+0x188/0x24e [ 549.098691][T11264] ? show_regs_print_info+0x12/0x12 [ 549.104009][T11264] ? load_image+0x410/0x410 [ 549.109804][T11264] ? __might_sleep+0xd0/0xd0 [ 549.115155][T11264] ? __lock_acquire+0x7ea0/0x7ea0 [ 549.120823][T11264] ? __mutex_trylock_common+0x15c/0x260 [ 549.127357][T11264] should_fail_ex+0x390/0x4c0 [ 549.132882][T11264] should_failslab+0x5/0x20 [ 549.138691][T11264] slab_pre_alloc_hook+0x59/0x300 [ 549.144079][T11264] ? __rdma_create_id+0x65/0x620 [ 549.149370][T11264] __kmem_cache_alloc_node+0x4f/0x270 [ 549.154910][T11264] ? __rdma_create_id+0x65/0x620 [ 549.159927][T11264] kmalloc_trace+0x26/0xe0 [ 549.164491][T11264] ? cma_listen_on_dev+0x720/0x720 [ 549.169759][T11264] __rdma_create_id+0x65/0x620 [ 549.175011][T11264] cma_listen_on_dev+0x203/0x720 [ 549.180011][T11264] cma_add_one+0x638/0xa90 [ 549.184519][T11264] add_client_context+0x375/0x7a0 [ 549.189620][T11264] ? ib_register_client+0x3f0/0x3f0 [ 549.195059][T11264] ? xa_find_after+0xab/0x430 [ 549.199830][T11264] enable_device_and_get+0x195/0x3d0 [ 549.205358][T11264] ? ib_register_device+0x1350/0x1350 [ 549.211355][T11264] ? do_raw_spin_unlock+0x11d/0x230 [ 549.216895][T11264] ib_register_device+0x1088/0x1350 [ 549.222276][T11264] ? remove_all_compat_devs+0x260/0x260 [ 549.228068][T11264] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 549.235098][T11264] ? lock_chain_count+0x20/0x20 [ 549.240528][T11264] ? lockdep_hardirqs_on+0x94/0x140 [ 549.246263][T11264] ? lockdep_softirqs_off+0x430/0x430 [ 549.253010][T11264] ? __raw_spin_lock_init+0x41/0x100 [ 549.260427][T11264] siw_newlink+0x9cf/0xe60 [ 549.265898][T11264] nldev_newlink+0x59c/0x620 [ 549.272026][T11264] ? unwind_next_frame+0x1719/0x1fd0 [ 549.277850][T11264] ? nldev_set_doit+0x490/0x490 [ 549.283445][T11264] ? aa_get_newest_label+0xf9/0x5b0 [ 549.288789][T11264] ? end_current_label_crit_section+0x170/0x170 [ 549.295221][T11264] ? end_current_label_crit_section+0x170/0x170 [ 549.301662][T11264] ? __might_sleep+0xd0/0xd0 [ 549.306944][T11264] ? apparmor_capable+0x12c/0x190 [ 549.312148][T11264] ? nldev_set_doit+0x490/0x490 [ 549.317467][T11264] rdma_nl_rcv+0x6e7/0xa20 [ 549.322255][T11264] ? rdma_nl_net_init+0x190/0x190 [ 549.327671][T11264] ? netlink_deliver_tap+0x2e/0x1b0 [ 549.332938][T11264] ? __netlink_deliver_tap+0x92/0x7e0 [ 549.338785][T11264] ? net_generic+0x1e/0x240 [ 549.343408][T11264] ? netlink_deliver_tap+0x2e/0x1b0 [ 549.348760][T11264] netlink_unicast+0x7ad/0x920 [ 549.353964][T11264] netlink_sendmsg+0x8ad/0xbd0 [ 549.359641][T11264] ? netlink_getsockopt+0x550/0x550 [ 549.365435][T11264] ? apparmor_socket_sendmsg+0x8a/0x330 [ 549.372611][T11264] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 549.378267][T11264] ? security_socket_sendmsg+0x7c/0xa0 [ 549.384013][T11264] ? netlink_getsockopt+0x550/0x550 [ 549.389337][T11264] ____sys_sendmsg+0x5ed/0x9a0 [ 549.394327][T11264] ? __sys_sendmsg_sock+0x30/0x30 [ 549.399847][T11264] ? __import_iovec+0x306/0x510 [ 549.405500][T11264] ? import_iovec+0x6f/0xa0 [ 549.410358][T11264] ___sys_sendmsg+0x2a2/0x360 [ 549.415199][T11264] ? __sys_sendmsg+0x2a0/0x2a0 [ 549.420071][T11264] __se_sys_sendmsg+0x1c3/0x2b0 [ 549.425175][T11264] ? __x64_sys_sendmsg+0x80/0x80 [ 549.431146][T11264] ? lockdep_hardirqs_on+0x94/0x140 [ 549.436838][T11264] do_syscall_64+0x4c/0xa0 [ 549.441861][T11264] ? clear_bhb_loop+0x60/0xb0 [ 549.447247][T11264] ? clear_bhb_loop+0x60/0xb0 [ 549.452077][T11264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.458471][T11264] RIP: 0033:0x7fc6b119f559 [ 549.463408][T11264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.483663][T11264] RSP: 002b:00007fc6b2035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.492348][T11264] RAX: ffffffffffffffda RBX: 00007fc6b1425fa0 RCX: 00007fc6b119f559 [ 549.500559][T11264] RDX: 000000000000c000 RSI: 0000200000000440 RDI: 0000000000000005 [ 549.508814][T11264] RBP: 00007fc6b1236b50 R08: 0000000000000000 R09: 0000000000000000 [ 549.517705][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.525940][T11264] R13: 00007fc6b1426038 R14: 00007fc6b1425fa0 R15: 00007ffec0b66dc8 [ 549.533969][T11264] [ 550.564186][T11286] 9pnet_fd: Insufficient options for proto=fd [ 552.435856][T11309] overlayfs: failed to clone upperpath [ 554.220044][T11320] ip_tables: iptables: counters copy to user failed while replacing table [ 554.967942][T11345] binder: BINDER_SET_CONTEXT_MGR already set [ 555.043816][T11345] binder: 11343:11345 ioctl 4018620d 2000000004c0 returned -16 [ 555.734144][T11360] loop8: detected capacity change from 0 to 512 [ 555.856582][T11360] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.2053: inode has both inline data and extents flags [ 556.071112][T11360] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2053: couldn't read orphan inode 15 (err -117) [ 556.645739][T11360] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 558.867139][ T9809] EXT4-fs (loop8): unmounting filesystem. [ 559.325487][T11389] device-mapper: table: 248:10: multipath: error getting device (-ENODEV) [ 559.411394][T11389] device-mapper: ioctl: error adding target to table [ 560.003297][T11400] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2066'. [ 560.773255][ T4296] Bluetooth: hci0: command 0x0406 tx timeout [ 561.441320][T11415] ip_tables: iptables: counters copy to user failed while replacing table [ 564.053826][T11434] loop8: detected capacity change from 0 to 512 [ 564.189818][T11434] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.2073: inode has both inline data and extents flags [ 564.382279][T11434] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2073: couldn't read orphan inode 15 (err -117) [ 564.553950][T11434] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 565.231554][ T9809] EXT4-fs (loop8): unmounting filesystem. [ 565.265737][T11453] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2079'. [ 566.347315][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.371742][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.384129][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.399358][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.422906][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 566.436669][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 566.667061][T11468] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.679883][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.686799][ T4296] Bluetooth: hci5: command 0x0409 tx timeout [ 568.704779][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.925041][T11480] device-mapper: table: 248:11: multipath: error getting device (-ENODEV) [ 569.053597][T11480] device-mapper: ioctl: error adding target to table [ 569.982980][T10000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.514512][T10000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.564218][T11505] 9pnet_fd: Insufficient options for proto=fd [ 570.713786][T11512] loop8: detected capacity change from 0 to 512 [ 570.772708][ T4296] Bluetooth: hci5: command 0x041b tx timeout [ 570.917867][T11512] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 571.148933][T11512] EXT4-fs (loop8): 1 truncate cleaned up [ 571.223365][T11512] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 571.243579][T11519] overlayfs: failed to clone upperpath [ 572.239946][T10000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.375147][ T4351] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 572.701020][T10000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.724108][ T4351] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.818490][ T4351] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 572.845311][ T4296] Bluetooth: hci5: command 0x040f tx timeout [ 572.907282][ T4351] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 573.027255][ T4351] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.143389][ T4351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 573.231299][ T4351] usb 9-1: SerialNumber: syz [ 573.546888][ T4351] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 573.591504][T11468] chnl_net:caif_netlink_parms(): no params data found [ 573.628947][T11548] ip_tables: iptables: counters copy to user failed while replacing table [ 573.643984][ T4351] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 573.813980][ T4351] cdc_acm: probe of 9-1:1.0 failed with error -22 [ 574.085152][ T4351] usb 9-1: USB disconnect, device number 2 [ 574.306510][T11468] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.314404][T11468] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.348308][ T9809] EXT4-fs (loop8): unmounting filesystem. [ 574.398086][T11468] device bridge_slave_0 entered promiscuous mode [ 574.502439][T11468] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.585636][T11468] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.706178][T11468] device bridge_slave_1 entered promiscuous mode [ 574.924834][ T4296] Bluetooth: hci5: command 0x0419 tx timeout [ 576.933534][T11468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.057341][T11468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.170355][T11570] loop7: detected capacity change from 0 to 8 [ 577.328316][T11468] team0: Port device team_slave_0 added [ 577.442380][T11468] team0: Port device team_slave_1 added [ 577.749393][T11468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.823650][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.018067][T11468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.065022][T11581] loop8: detected capacity change from 0 to 512 [ 578.195077][T11581] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.2115: inode has both inline data and extents flags [ 578.327819][T11581] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2115: couldn't read orphan inode 15 (err -117) [ 578.542624][T11581] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 578.651650][T11468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.699081][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.733443][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.970401][T11468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.403499][ T9809] EXT4-fs (loop8): unmounting filesystem. [ 579.776099][T11602] md: md7 stopped. [ 580.084495][T11468] device hsr_slave_0 entered promiscuous mode [ 581.765238][T11468] device hsr_slave_1 entered promiscuous mode [ 581.840701][T11468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.886322][T11468] Cannot create hsr debugfs directory [ 581.932988][T11608] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2119'. [ 583.374958][T11630] loop7: detected capacity change from 0 to 512 [ 584.150867][T11643] loop8: detected capacity change from 0 to 512 [ 584.383369][T11643] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.2129: inode has both inline data and extents flags [ 584.746471][T11643] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2129: couldn't read orphan inode 15 (err -117) [ 584.943968][T11643] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 585.388470][T11658] FAULT_INJECTION: forcing a failure. [ 585.388470][T11658] name fail_futex, interval 1, probability 0, space 0, times 0 [ 587.085837][T11658] CPU: 0 PID: 11658 Comm: syz.8.2129 Not tainted syzkaller #0 [ 587.095808][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 587.106588][T11658] Call Trace: [ 587.110067][T11658] [ 587.113036][T11658] dump_stack_lvl+0x188/0x24e [ 587.117779][T11658] ? show_regs_print_info+0x12/0x12 [ 587.123385][T11658] ? load_image+0x410/0x410 [ 587.128284][T11658] ? __lock_acquire+0x7ea0/0x7ea0 [ 587.133785][T11658] should_fail_ex+0x390/0x4c0 [ 587.138884][T11658] get_futex_key+0x1a6/0xe70 [ 587.143723][T11658] ? futex_setup_timer+0xc0/0xc0 [ 587.148869][T11658] futex_wake+0x123/0x4f0 [ 587.153314][T11658] ? futex_wake_mark+0x150/0x150 [ 587.158374][T11658] ? __lock_acquire+0x7ea0/0x7ea0 [ 587.163635][T11658] ? file_end_write+0x156/0x250 [ 587.169971][T11658] ? vfs_write+0x777/0x9a0 [ 587.174970][T11658] do_futex+0x2e2/0x320 [ 587.179183][T11658] ? __ia32_sys_get_robust_list+0x100/0x100 [ 587.185138][T11658] __se_sys_futex+0x381/0x410 [ 587.189959][T11658] ? __x64_sys_futex+0xf0/0xf0 [ 587.196280][T11658] ? __x64_sys_futex+0x1d/0xf0 [ 587.201735][T11658] do_syscall_64+0x4c/0xa0 [ 587.206857][T11658] ? clear_bhb_loop+0x60/0xb0 [ 587.211868][T11658] ? clear_bhb_loop+0x60/0xb0 [ 587.217262][T11658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.223320][T11658] RIP: 0033:0x7f137079f559 [ 587.228233][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.252171][T11658] RSP: 002b:00007f13716d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 587.262934][T11658] RAX: ffffffffffffffda RBX: 00007f1370a26098 RCX: 00007f137079f559 [ 587.271927][T11658] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1370a2609c [ 587.282219][T11658] RBP: 00007f1370a26090 R08: 001128486c27c0c9 R09: 0000000000000000 [ 587.293576][T11658] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 587.303027][T11658] R13: 00007f1370a26128 R14: 00007fff5b42f3f0 R15: 00007fff5b42f4d8 [ 587.313162][T11658] [ 587.797516][T11671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2136'. [ 587.907729][T11673] FAULT_INJECTION: forcing a failure. [ 587.907729][T11673] name failslab, interval 1, probability 0, space 0, times 0 [ 588.084866][T11673] CPU: 0 PID: 11673 Comm: syz.7.2137 Not tainted syzkaller #0 [ 588.093791][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 588.105993][T11673] Call Trace: [ 588.109632][T11673] [ 588.113463][T11673] dump_stack_lvl+0x188/0x24e [ 588.119627][T11673] ? show_regs_print_info+0x12/0x12 [ 588.126054][T11673] ? load_image+0x410/0x410 [ 588.130943][T11673] ? __might_sleep+0xd0/0xd0 [ 588.135595][T11673] ? __lock_acquire+0x7ea0/0x7ea0 [ 588.140954][T11673] should_fail_ex+0x390/0x4c0 [ 588.145784][T11673] should_failslab+0x5/0x20 [ 588.150688][T11673] slab_pre_alloc_hook+0x59/0x300 [ 588.157912][T11673] kmem_cache_alloc_lru+0x49/0x2e0 [ 588.163397][T11673] ? __d_alloc+0x2e/0x6e0 [ 588.169017][T11673] __d_alloc+0x2e/0x6e0 [ 588.174527][T11673] d_alloc_name+0xb7/0x320 [ 588.179039][T11673] ? rwsem_write_trylock+0x135/0x1c0 [ 588.184686][T11673] ? d_alloc_pseudo+0x70/0x70 [ 588.190240][T11673] ? do_raw_spin_unlock+0x11d/0x230 [ 588.195861][T11673] devpts_fill_super+0x567/0x900 [ 588.201184][T11673] ? devpts_kill_sb+0x60/0x60 [ 588.205988][T11673] mount_nodev+0x52/0xe0 [ 588.210366][T11673] legacy_get_tree+0xe6/0x180 [ 588.215185][T11673] ? devpts_pty_kill+0x280/0x280 [ 588.220335][T11673] vfs_get_tree+0x88/0x270 [ 588.225502][T11673] do_new_mount+0x247/0xa50 [ 588.230243][T11673] __se_sys_mount+0x2e3/0x3d0 [ 588.235013][T11673] ? __x64_sys_mount+0xc0/0xc0 [ 588.239858][T11673] ? lockdep_hardirqs_on+0x94/0x140 [ 588.245863][T11673] ? __x64_sys_mount+0x1c/0xc0 [ 588.251479][T11673] do_syscall_64+0x4c/0xa0 [ 588.256472][T11673] ? clear_bhb_loop+0x60/0xb0 [ 588.261430][T11673] ? clear_bhb_loop+0x60/0xb0 [ 588.266697][T11673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.274298][T11673] RIP: 0033:0x7fc6b119f559 [ 588.280164][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.302686][T11673] RSP: 002b:00007fc6b2035028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.312980][T11673] RAX: ffffffffffffffda RBX: 00007fc6b1425fa0 RCX: 00007fc6b119f559 [ 588.322862][T11673] RDX: 0000200000000a40 RSI: 0000200000000a00 RDI: 0000000000000000 [ 588.332710][T11673] RBP: 00007fc6b1236b50 R08: 0000000000000000 R09: 0000000000000000 [ 588.342329][T11673] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000000 [ 588.351309][T11673] R13: 00007fc6b1426038 R14: 00007fc6b1425fa0 R15: 00007ffec0b66dc8 [ 588.360297][T11673] [ 588.398889][T11468] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 588.772820][T11468] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 588.872517][T10000] device hsr_slave_0 left promiscuous mode [ 588.914493][T10000] device hsr_slave_1 left promiscuous mode [ 588.959183][T10000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.983848][T10000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.003796][T10000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.034405][T10000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.073198][T10000] device bridge_slave_1 left promiscuous mode [ 589.097386][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.119780][T10000] device bridge_slave_0 left promiscuous mode [ 589.133797][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.218515][T10000] device veth1_macvtap left promiscuous mode [ 589.238713][T10000] device veth0_macvtap left promiscuous mode [ 589.262079][T10000] device veth1_vlan left promiscuous mode [ 589.288317][T10000] device veth0_vlan left promiscuous mode [ 589.454440][ T9809] EXT4-fs (loop8): unmounting filesystem. [ 589.681866][T11683] loop8: detected capacity change from 0 to 512 [ 589.808298][T11673] devpts: Unable to alloc dentry for ptmx node [ 590.396840][T11689] [ 590.399322][T11689] ====================================================== [ 590.406985][T11689] WARNING: possible circular locking dependency detected [ 590.414288][T11689] syzkaller #0 Not tainted [ 590.419449][T11689] ------------------------------------------------------ [ 590.427353][T11689] syz.8.2142/11689 is trying to acquire lock: [ 590.433991][T11689] ffffffff8e191a48 (major_names_lock){+.+.}-{3:3}, at: blk_request_module+0x31/0x290 [ 590.444316][T11689] [ 590.444316][T11689] but task is already holding lock: [ 590.452488][T11689] ffff888075a742d0 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: new_dev_store+0x222/0x660 [ 590.465419][T11689] [ 590.465419][T11689] which lock already depends on the new lock. [ 590.465419][T11689] [ 590.476288][T11689] [ 590.476288][T11689] the existing dependency chain (in reverse order) is: [ 590.486111][T11689] [ 590.486111][T11689] -> #4 (&mddev->reconfig_mutex){+.+.}-{3:3}: [ 590.496084][T11689] __mutex_lock+0x12d/0xb40 [ 590.504634][T11689] array_state_store+0x2e4/0x9c0 [ 590.512175][T11689] md_attr_store+0x183/0x220 [ 590.518265][T11689] kernfs_fop_write_iter+0x3a0/0x520 [ 590.524333][T11689] vfs_write+0x482/0x9a0 [ 590.529344][T11689] ksys_write+0x14d/0x260 [ 590.534448][T11689] do_syscall_64+0x4c/0xa0 [ 590.539451][T11689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.546197][T11689] [ 590.546197][T11689] -> #3 (kn->active#62){++++}-{0:0}: [ 590.554889][T11689] kernfs_drain+0x31a/0x6d0 [ 590.560590][T11689] __kernfs_remove+0x3f4/0x6c0 [ 590.566683][T11689] kernfs_remove_by_name_ns+0xd8/0x150 [ 590.573251][T11689] sysfs_remove_group+0xfd/0x290 [ 590.579206][T11689] sysfs_remove_groups+0x50/0xa0 [ 590.585155][T11689] __kobject_del+0x83/0x2e0 [ 590.590823][T11689] kobject_put+0x22f/0x450 [ 590.595809][T11689] process_one_work+0x8ab/0x1160 [ 590.601569][T11689] worker_thread+0xaf5/0x12a0 [ 590.606988][T11689] kthread+0x29d/0x330 [ 590.611884][T11689] ret_from_fork+0x1f/0x30 [ 590.617068][T11689] [ 590.617068][T11689] -> #2 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}: [ 590.627016][T11689] process_one_work+0x7ec/0x1160 [ 590.632706][T11689] worker_thread+0xaf5/0x12a0 [ 590.639789][T11689] kthread+0x29d/0x330 [ 590.646194][T11689] ret_from_fork+0x1f/0x30 [ 590.651262][T11689] [ 590.651262][T11689] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 590.660684][T11689] __flush_workqueue+0x165/0x1380 [ 590.667160][T11689] md_alloc+0x2e/0xd00 [ 590.671847][T11689] md_probe+0x53/0xc0 [ 590.676571][T11689] blk_request_module+0x26e/0x290 [ 590.683000][T11689] blkdev_get_no_open+0x33/0xc0 [ 590.689101][T11689] blkdev_get_by_dev+0x77/0xa60 [ 590.695438][T11689] blkdev_open+0x119/0x2d0 [ 590.701242][T11689] do_dentry_open+0x7dd/0x10b0 [ 590.707626][T11689] path_openat+0x2674/0x2f10 [ 590.714078][T11689] do_filp_open+0x1ee/0x420 [ 590.719794][T11689] do_sys_openat2+0x14b/0x4f0 [ 590.726024][T11689] __x64_sys_openat+0x135/0x160 [ 590.732157][T11689] do_syscall_64+0x4c/0xa0 [ 590.737502][T11689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.744910][T11689] [ 590.744910][T11689] -> #0 (major_names_lock){+.+.}-{3:3}: [ 590.753034][T11689] __lock_acquire+0x3a03/0x7ea0 [ 590.759173][T11689] lock_acquire+0x1bc/0x4a0 [ 590.764412][T11689] __mutex_lock+0x12d/0xb40 [ 590.770725][T11689] blk_request_module+0x31/0x290 [ 590.776764][T11689] blkdev_get_no_open+0x33/0xc0 [ 590.783233][T11689] blkdev_get_by_dev+0x77/0xa60 [ 590.788750][T11689] md_import_device+0x379/0x800 [ 590.794945][T11689] new_dev_store+0x38d/0x660 [ 590.801354][T11689] md_attr_store+0x183/0x220 [ 590.807440][T11689] kernfs_fop_write_iter+0x3a0/0x520 [ 590.813538][T11689] vfs_write+0x482/0x9a0 [ 590.818442][T11689] ksys_write+0x14d/0x260 [ 590.823327][T11689] do_syscall_64+0x4c/0xa0 [ 590.828960][T11689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.835864][T11689] [ 590.835864][T11689] other info that might help us debug this: [ 590.835864][T11689] [ 590.847252][T11689] Chain exists of: [ 590.847252][T11689] major_names_lock --> kn->active#62 --> &mddev->reconfig_mutex [ 590.847252][T11689] [ 590.862066][T11689] Possible unsafe locking scenario: [ 590.862066][T11689] [ 590.869933][T11689] CPU0 CPU1 [ 590.876105][T11689] ---- ---- [ 590.881880][T11689] lock(&mddev->reconfig_mutex); [ 590.887294][T11689] lock(kn->active#62); [ 590.894557][T11689] lock(&mddev->reconfig_mutex); [ 590.902325][T11689] lock(major_names_lock); [ 590.908140][T11689] [ 590.908140][T11689] *** DEADLOCK *** [ 590.908140][T11689] [ 590.916626][T11689] 5 locks held by syz.8.2142/11689: [ 590.922827][T11689] #0: ffff88803014d768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 590.932597][T11689] #1: ffff88807e10e460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 590.941986][T11689] #2: ffff888056c81888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 590.953220][T11689] #3: ffff888056568578 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 590.964064][T11689] #4: ffff888075a742d0 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: new_dev_store+0x222/0x660 [ 590.974842][T11689] [ 590.974842][T11689] stack backtrace: [ 590.982043][T11689] CPU: 0 PID: 11689 Comm: syz.8.2142 Not tainted syzkaller #0 [ 590.991535][T11689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 591.002928][T11689] Call Trace: [ 591.007466][T11689] [ 591.010880][T11689] dump_stack_lvl+0x188/0x24e [ 591.016049][T11689] ? load_image+0x410/0x410 [ 591.020710][T11689] ? show_regs_print_info+0x12/0x12 [ 591.025978][T11689] ? print_circular_bug+0x12b/0x1a0 [ 591.031762][T11689] check_noncircular+0x2f8/0x400 [ 591.039124][T11689] ? print_deadlock_bug+0x5d0/0x5d0 [ 591.044686][T11689] ? lockdep_lock+0xf1/0x1f0 [ 591.049634][T11689] ? _find_first_zero_bit+0xd2/0x100 [ 591.055266][T11689] __lock_acquire+0x3a03/0x7ea0 [ 591.060957][T11689] ? verify_lock_unused+0x140/0x140 [ 591.067363][T11689] ? mark_lock+0x94/0x320 [ 591.072953][T11689] ? verify_lock_unused+0x140/0x140 [ 591.078476][T11689] ? __lock_acquire+0x142d/0x7ea0 [ 591.083831][T11689] lock_acquire+0x1bc/0x4a0 [ 591.089268][T11689] ? blk_request_module+0x31/0x290 [ 591.094432][T11689] ? __might_sleep+0xd0/0xd0 [ 591.099325][T11689] ? read_lock_is_recursive+0x10/0x10 [ 591.105718][T11689] ? get_page_from_freelist+0x206b/0x2180 [ 591.111896][T11689] __mutex_lock+0x12d/0xb40 [ 591.116726][T11689] ? blk_request_module+0x31/0x290 [ 591.122519][T11689] ? blk_request_module+0x31/0x290 [ 591.128148][T11689] ? ilookup+0x9b/0x200 [ 591.132725][T11689] ? mutex_lock_nested+0x10/0x10 [ 591.138977][T11689] ? __lock_acquire+0x7ea0/0x7ea0 [ 591.144058][T11689] ? __rwlock_init+0x140/0x140 [ 591.148880][T11689] ? do_raw_spin_unlock+0x11d/0x230 [ 591.154549][T11689] blk_request_module+0x31/0x290 [ 591.159716][T11689] blkdev_get_no_open+0x33/0xc0 [ 591.164824][T11689] blkdev_get_by_dev+0x77/0xa60 [ 591.169799][T11689] ? alloc_pages+0x4dd/0x740 [ 591.175231][T11689] ? badblocks_init+0x12f/0x210 [ 591.181270][T11689] md_import_device+0x379/0x800 [ 591.186384][T11689] ? flush_rdev_wq+0x1e/0x210 [ 591.191734][T11689] new_dev_store+0x38d/0x660 [ 591.198706][T11689] ? __lock_acquire+0x7ea0/0x7ea0 [ 591.204492][T11689] ? metadata_store+0x9b0/0x9b0 [ 591.209942][T11689] ? do_raw_spin_unlock+0x11d/0x230 [ 591.215191][T11689] md_attr_store+0x183/0x220 [ 591.220120][T11689] ? sysfs_kf_read+0x350/0x350 [ 591.225483][T11689] kernfs_fop_write_iter+0x3a0/0x520 [ 591.232387][T11689] vfs_write+0x482/0x9a0 [ 591.238306][T11689] ? file_end_write+0x250/0x250 [ 591.243435][T11689] ? __fget_files+0x3fc/0x460 [ 591.248724][T11689] ? __fdget_pos+0x2ae/0x360 [ 591.253984][T11689] ? ksys_write+0x70/0x260 [ 591.259937][T11689] ksys_write+0x14d/0x260 [ 591.264371][T11689] ? __ia32_sys_read+0x80/0x80 [ 591.269587][T11689] ? lockdep_hardirqs_on+0x94/0x140 [ 591.274913][T11689] do_syscall_64+0x4c/0xa0 [ 591.280673][T11689] ? clear_bhb_loop+0x60/0xb0 [ 591.286272][T11689] ? clear_bhb_loop+0x60/0xb0 [ 591.292285][T11689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.299261][T11689] RIP: 0033:0x7f137079f559 [ 591.304287][T11689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.327698][T11689] RSP: 002b:00007f13716f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.336445][T11689] RAX: ffffffffffffffda RBX: 00007f1370a25fa0 RCX: 00007f137079f559 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 591.344726][T11689] RDX: 0000000000000016 RSI: 0000200000000280 RDI: 0000000000000006 [ 591.353998][T11689] RBP: 00007f1370836b50 R08: 0000000000000000 R09: 0000000000000000 [ 591.362787][T11689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.371026][T11689] R13: 00007f1370a26038 R14: 00007f1370a25fa0 R15: 00007fff5b42f4d8 [ 591.380017][T11689] [ 593.297044][T10000] team0 (unregistering): Port device team_slave_1 removed [ 593.364431][T10000] team0 (unregistering): Port device team_slave_0 removed [ 593.442822][T10000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.554832][T10000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.049011][T11689] block device autoloading is deprecated and will be removed. [ 594.248227][T10000] bond0 (unregistering): Released all slaves [ 594.437539][T11468] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 595.682157][T10000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.716848][T10000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.769230][T10000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.804818][T10000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.860944][T10000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.916484][T10000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.960134][T10000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.989005][T10000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.133589][T10000] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.178118][T10000] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.238127][T10000] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.289955][T10000] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.493355][T10000] device hsr_slave_0 left promiscuous mode [ 597.509510][T10000] device hsr_slave_1 left promiscuous mode [ 597.529930][T10000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.555957][T10000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.567251][T10000] device bridge_slave_1 left promiscuous mode [ 597.574688][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.609657][T10000] device bridge_slave_0 left promiscuous mode [ 597.626467][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.655400][T10000] device hsr_slave_0 left promiscuous mode [ 597.675005][T10000] device hsr_slave_1 left promiscuous mode [ 597.695098][T10000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.702784][T10000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.735398][T10000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.743772][T10000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.773805][T10000] device bridge_slave_1 left promiscuous mode [ 597.797381][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.826915][T10000] device bridge_slave_0 left promiscuous mode [ 597.833704][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.869402][T10000] device hsr_slave_0 left promiscuous mode [ 597.883264][T10000] device hsr_slave_1 left promiscuous mode [ 597.899494][T10000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.908137][T10000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.917963][T10000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.927422][T10000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.937288][T10000] device bridge_slave_1 left promiscuous mode [ 597.944293][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.953579][T10000] device bridge_slave_0 left promiscuous mode [ 597.961060][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.978046][T10000] device veth1_macvtap left promiscuous mode [ 597.984365][T10000] device veth0_macvtap left promiscuous mode [ 597.992456][T10000] device veth1_vlan left promiscuous mode [ 597.999864][T10000] device veth0_vlan left promiscuous mode [ 598.007703][T10000] device veth1_macvtap left promiscuous mode [ 598.014480][T10000] device veth0_macvtap left promiscuous mode [ 598.022911][T10000] device veth1_vlan left promiscuous mode [ 598.030080][T10000] device veth0_vlan left promiscuous mode [ 598.256949][T10000] team0 (unregistering): Port device team_slave_1 removed [ 598.299081][T10000] team0 (unregistering): Port device team_slave_0 removed [ 598.313329][T10000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.354392][T10000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.421396][T10000] bond0 (unregistering): Released all slaves [ 598.618560][T10000] team0 (unregistering): Port device team_slave_1 removed [ 598.659079][T10000] team0 (unregistering): Port device team_slave_0 removed [ 598.703879][T10000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.753227][T10000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.872264][T10000] bond0 (unregistering): Released all slaves [ 599.082032][T10000] team0 (unregistering): Port device team_slave_1 removed [ 599.101360][T10000] team0 (unregistering): Port device team_slave_0 removed [ 599.141508][T10000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.176761][T10000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.240694][T10000] bond0 (unregistering): Released all slaves [ 599.262266][ T4350] infiniband syz2: ib_query_port failed (-19)