last executing test programs: 10m12.930475334s ago: executing program 32 (id=249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', 0x0, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xffffffffffffffff) readv(r2, &(0x7f0000000300), 0x0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) r3 = gettid() tkill(r3, 0x13) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) open$dir(&(0x7f0000000480)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0xc000, 0x1b2) 10m10.558907172s ago: executing program 33 (id=268): openat(0xffffffffffffff9c, 0x0, 0x141442, 0x41) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x4000087, 0x2, 0x0) unshare(0x62000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 10m8.480187822s ago: executing program 34 (id=286): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000880)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) 10m0.064146347s ago: executing program 35 (id=334): syz_emit_ethernet(0x2b, &(0x7f0000000280)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, '\x00'}}}}}, 0x0) 9m8.99055598s ago: executing program 36 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004600), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000062c0)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008840)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000088c0)={0x0, 0x0, &(0x7f0000008900)={&(0x7f0000008940)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000008980), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000089c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000008a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000008a40)={0x0, 0x0, &(0x7f0000008a80)={&(0x7f0000008ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000009980)={&(0x7f00000099c0)=@xdp={0x2c, 0x8, r2, 0x109}, 0x80, &(0x7f0000009a40)=[{&(0x7f0000009a80)='k', 0x1}], 0x1}, 0x20000885) 8m31.433099223s ago: executing program 37 (id=985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 7m42.792346197s ago: executing program 38 (id=1310): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40480, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000380), 0x56) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000400)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="27030200e61114120600602fb96dbcf706e105", 0x13}], 0x1}, 0x0) 7m19.700969519s ago: executing program 8 (id=1590): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 7m19.575672972s ago: executing program 8 (id=1592): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000580)={0x0, 0x7f, 0x708}) socketpair(0x1, 0x805, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) write$cgroup_subtree(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40081d4}, 0x8840) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@dev, @in6=@private1}}, {{@in6=@mcast2}, 0x0, @in=@private}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10e) writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)='00', 0x2}, {&(0x7f00000016c0)="000025d638347ad104945044524daa100de26946cbc0cff5a7d8b52758690ef52843a8ca3abf8602e26c54c44fd7d9a33a1012338d57b9d6c246fe73cda0a7cc234f2c676c3dd93efd19463035e1b5001a773db0af418b19029b17b8db5c337d08", 0x61}, {&(0x7f0000000340)='0 3', 0xffffffffffffff78}], 0x3) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x4000, &(0x7f0000000640)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@oldalloc}, {@init_itable}]}, 0x2, 0x466, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0xffffffffffffffd2}, 0x48) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x6000, &(0x7f00000003c0)=[{&(0x7f0000000400)='U', 0xa00120}], 0x1}, 0x3) 7m16.028808568s ago: executing program 8 (id=1610): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) syz_emit_ethernet(0x1e, &(0x7f0000000640)={@local, @remote, @val={@val={0x88a8, 0x3, 0x1, 0xffe}, {0x8100, 0x1, 0x1, 0x1}}, {@llc={0x4, {@snap={0x2, 0x55, '~', "254eb9", 0xe8b7}}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) 7m13.696051825s ago: executing program 8 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="09000000040000"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 7m13.619188196s ago: executing program 8 (id=1631): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x101400, 0x0) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440), 0x0, r1) syz_clone(0x8800b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 7m12.64253192s ago: executing program 8 (id=1645): r0 = syz_clone(0xc2800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000980)='./file0\x00', 0x800000, &(0x7f00000009c0)=ANY=[@ANYBLOB='lastblock=00000000000010000216,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,session=18446744073709551360,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,uid=ignore,shortad,gid=ignore,dmode=00000000000017777777777,uid=ignore,fileset=00000000000000000000,shortad,\x00'], 0x4, 0xc24, &(0x7f0000000ac0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) 6m59.514331209s ago: executing program 39 (id=1620): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='file *rivers/hid/hid-core.c line 2088 +', 0x27) 6m57.474229039s ago: executing program 40 (id=1645): r0 = syz_clone(0xc2800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000980)='./file0\x00', 0x800000, &(0x7f00000009c0)=ANY=[@ANYBLOB='lastblock=00000000000010000216,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,session=18446744073709551360,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,uid=ignore,shortad,gid=ignore,dmode=00000000000017777777777,uid=ignore,fileset=00000000000000000000,shortad,\x00'], 0x4, 0xc24, &(0x7f0000000ac0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) 6m26.737274356s ago: executing program 0 (id=1896): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x14) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f00000001c0)=[{r3, 0xc080}], 0x1, 0xffbffff5) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 6m26.487913673s ago: executing program 0 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m24.236044138s ago: executing program 0 (id=1903): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10) getpeername$inet(r0, 0x0, 0x0) 6m23.74407202s ago: executing program 0 (id=1909): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa08018, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX], 0x1, 0xc5a, &(0x7f0000001040)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) syz_clone3(&(0x7f0000000500)={0x23800000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 6m23.177490554s ago: executing program 0 (id=1916): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0x3, 0xc0}, @timestamp_prespec={0x44, 0x4, 0xbf, 0x3, 0xf}]}}}}}) 6m22.08603449s ago: executing program 0 (id=1924): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xb, 0x8, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000680)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m22.08539937s ago: executing program 2 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m21.772048988s ago: executing program 41 (id=1924): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xb, 0x8, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000680)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m21.749801408s ago: executing program 2 (id=1928): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x400c031, 0xffffffffffffffff, 0x40db5000) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mlockall(0x7) 6m21.310065949s ago: executing program 2 (id=1930): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESOCT], 0x3, 0x249, &(0x7f0000000300)="$eJzs2r9rZFUUB/Dzkqwbs2Qn4i92QbxooTaPTWqLDbILYkDRHWEtZN+aFx3ynAl5QyAWJtXa+idYi6WdIFvapPEvsLCRNCm3EJ9kZjSJxCxpZkL4fJocOPlyz+NeLreY/be//XJ9rc7Xin5MZVlM3Y7deJLFQkzFP3bjrTfu//LKR/c/eW95ZeXOhyndXb63uJRSuv7qz9Pxw2uP+9c+/vH6T1djb+HT/YOl3/de2rux/9e9Lzp16tSp2+unIj3s9frFw6pMq516PU/pg6os6jJ1unW5eaK/VvU2NrZT0V2dn9vYLOs6Fd3ttF5up34v9bOZVHxedLopz/M0Pxec5Zmn9NvfP2maOGiuPIimaZ79Lq49jvnfohXZcyl7/nb24oPs5d3sxkHTtMY0MeN1xv4v2//L79ilPhtRfbPV3moP/w77y2vRiSrKuBWt+DMOj8nIsL777sqdW2lgIR5VO6P8zlZ7+mR+MVqxcHp+cZhP8aj6Y3Rj7Wy1r8ZcxJWIUX4pWvHC6fmlo/xg/enB+rPx5uvH1s+jFb9+Fr2oYjUOs0f5rxdTeuf9lXRy/puD/wMAuGzy9K9T3295/n/9Yf4c78P/vK9m4ubMZL+diHr7q/WiqspNRVVuzl6MMS5DEZENDlg2OmjHWof3wgWYUHFmMdFriTE52vRJTwIAAAAAAAAAAMB5jOPnhJP+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GL7OwAA//9TB8zx") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1c0) r0 = syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./file7/file0\x00', 0x800020, 0x0, 0x0, 0x0, 0x0) renameat2(r0, 0x0, r0, 0x0, 0x2) rmdir(&(0x7f0000000680)='./file7/file0\x00') 6m21.123689913s ago: executing program 2 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 6m20.896908569s ago: executing program 2 (id=1935): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6b0, &(0x7f00000001c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080), &(0x7f0000000200)="308201d430", 0x5, 0xfffffffffffffffc) 6m20.615899545s ago: executing program 2 (id=1936): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x101400, 0x0) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)="7796b096378ac187158dd5039a6861923e18d4c54c6a9d58d54afd39303399f250552b8aec6853f4056d8188b03ece9bf28f1db883d0cba60296a6fbc8620aacd0ab7b7a44960d3a286e03ebae5f6260de9ff080d41a22daa87514e1f61db202d44aa0d4c62559b395f668934093ef3c", 0x70, r1) syz_clone(0x8800b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6m5.958662753s ago: executing program 1 (id=2000): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) getpgrp(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000001d80)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001ad80)=0x7) r5 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x2) accept(r0, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000280)=0x80) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000001b00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1512, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffdf]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) 6m4.861665859s ago: executing program 42 (id=1936): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x101400, 0x0) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)="7796b096378ac187158dd5039a6861923e18d4c54c6a9d58d54afd39303399f250552b8aec6853f4056d8188b03ece9bf28f1db883d0cba60296a6fbc8620aacd0ab7b7a44960d3a286e03ebae5f6260de9ff080d41a22daa87514e1f61db202d44aa0d4c62559b395f668934093ef3c", 0x70, r1) syz_clone(0x8800b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6m1.003958893s ago: executing program 1 (id=2008): r0 = add_key$keyring(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001d00), &(0x7f0000001d40)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000001d80)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001e00), &(0x7f0000001e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000001e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001f00), &(0x7f0000001f40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x39, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000001f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002000), &(0x7f0000002040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000002080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002100), &(0x7f0000002140)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000002180)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002200), &(0x7f0000002240)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000002280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002300), &(0x7f0000002340)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000002380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002400), &(0x7f0000002440)={'fscrypt:', @desc1}, &(0x7f0000002480)={0x0, "001122aabbccdcee0055668881c2bbcc0100242a000033465566770000000000000023000000000000000000088000010100", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002500), &(0x7f0000002540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000002580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002600), &(0x7f0000002640)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000002680)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002700), &(0x7f0000002740)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000002780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000002800), &(0x7f0000002840)={'fscrypt:', @desc2}, &(0x7f0000002880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002900), &(0x7f0000002940)={'fscrypt:', @auto=[0x30, 0x5b, 0x67, 0x37, 0x32, 0x30, 0x66, 0x30, 0x39, 0x30, 0x32, 0x65, 0x35, 0x38, 0x30, 0x36]}, &(0x7f0000002980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeffd43131bc44556677882233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000002a40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000002a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000002b00), &(0x7f0000002b40)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x31, 0x39, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x53, 0x65, 0x30]}, 0x0, 0x0, r0) add_key$user(&(0x7f0000002c00), &(0x7f0000002c40)={'syz', 0x2}, &(0x7f0000002c80)='c', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 5m53.951174334s ago: executing program 1 (id=2021): unshare(0x2a020480) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ab3000/0x3000)=nil, 0x3000}, 0x6a7f682acb7d1de4}) 5m53.70377363s ago: executing program 1 (id=2023): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x400, &(0x7f0000000440)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000540)="$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") syz_mount_image$udf(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x10048, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f00000008c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001540)='mountinfo\x00') read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x24000081) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x1579}]}, 0x10) 5m52.213846306s ago: executing program 1 (id=2027): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00'}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001cc0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m51.152341362s ago: executing program 1 (id=2034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a80)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001c40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0x5, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xb}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0xd45, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002c00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000002c80)={&(0x7f0000002cc0)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002d80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5m50.867718789s ago: executing program 43 (id=2034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a80)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001c40)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0x5, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xb}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0xd45, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002c00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000002c80)={&(0x7f0000002cc0)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002d80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m51.715289648s ago: executing program 5 (id=2325): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000010c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f00009c1000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x11) 4m51.544233132s ago: executing program 5 (id=2326): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0xa18800, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="bf7dde434e16660c93524bfe7471c6f5ef3c6d9d295af25f87758efc963f5775ef1878c12231822424314097655778ee6379021d4ca0b1f277af8b10f70451bb4852d5c9842eb09998515a4d00aa08c1a56f36af85180d0db7817d9ca9650de6bf80932a47e3387689f2d94ad438cdbfdc6e3f9cc6a85036a86d0cd28f390c7ac0fbace28a4b389576e203a75973a00f9c0ce459df2807953d59967a4e4f41bb33989328018b6f838abe531241fd756b19214e5fac51a50b862b69ff88c99e3d14dd17ab0e7e5226e0509152ed35637c3e64918cce1b41e005bd506205b44325f1a7f4238a44c2be73f8225f66e1ca10018915ed51"], 0x1, 0x314, &(0x7f0000000d80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe1e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001100), 0x208e24b) preadv(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) fdatasync(r0) timer_create(0x2, 0x0, &(0x7f0000000b40)) timer_settime(0x0, 0x5, &(0x7f0000000b80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m50.307966323s ago: executing program 5 (id=2331): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, 0x0) 4m49.615357849s ago: executing program 5 (id=2338): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x200008, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000600)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") r1 = creat(&(0x7f0000001200)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000001240)=0x0) mount(&(0x7f0000001280)=@loop={'/dev/loop', 0x0}, &(0x7f00000012c0)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000001300)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000001480)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f00000014c0)='$', 0x1, 0x0, 0x0, 0x0, r3}]) 4m49.211652599s ago: executing program 5 (id=2340): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x80, 0x19, 0xfe, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 4m45.570626768s ago: executing program 5 (id=2347): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 4m45.152072368s ago: executing program 44 (id=2347): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 26.192308414s ago: executing program 3 (id=4022): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0xc8, 0x1000, 0x2, 0x180], [0x0, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x2, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x4, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x958, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x3, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000140001002dbd"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 25.607666128s ago: executing program 3 (id=4026): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff97422012, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x160) bpf$MAP_CREATE(0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40806685, 0x0) 25.312148935s ago: executing program 3 (id=4029): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 24.954556274s ago: executing program 3 (id=4031): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x2101068, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 24.823388517s ago: executing program 3 (id=4033): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) 23.784261582s ago: executing program 3 (id=4044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000400)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r2, &(0x7f0000000600)=ANY=[], 0xfdef) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f00000003c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 23.550570298s ago: executing program 45 (id=4044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000400)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r2, &(0x7f0000000600)=ANY=[], 0xfdef) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f00000003c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.822919851s ago: executing program 9 (id=4091): ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x44}], 0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r3 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2, r3}) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[], 0xfe44, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000003b00)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000003b40)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000003b80)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x32, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76) 9.822572541s ago: executing program 7 (id=4092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40003}, 0x14}, 0x1, 0x2b1e}, 0x0) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 9.821798801s ago: executing program 6 (id=4093): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,u']) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1010, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.808875552s ago: executing program 4 (id=4094): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffef2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x399}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x4}, 0x38) io_uring_enter(r2, 0x3ab, 0x6933, 0x17, 0x0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.026819275s ago: executing program 9 (id=4095): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000000c0)={0x200001fe0000, 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.026268375s ago: executing program 7 (id=4096): alarm(0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) alarm(0x7f) 8.025841465s ago: executing program 6 (id=4097): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3b3, &(0x7f0000000400)="$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") r2 = openat(r1, &(0x7f00000007c0)='./file1\x00', 0x42, 0xb6) pwritev2(r2, &(0x7f00000018c0)=[{&(0x7f0000000880)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) 8.025752105s ago: executing program 4 (id=4098): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000540)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000580)='X', 0x34000, 0xe0, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.202068259s ago: executing program 9 (id=4099): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001340)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.201354349s ago: executing program 7 (id=4100): fsopen(&(0x7f0000000b00)='bpf\x00', 0x0) 6.188689189s ago: executing program 6 (id=4101): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./dev\x00', &(0x7f00000007c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x0) mount(&(0x7f0000000840)=@filename='./dev/sda1\x00', &(0x7f0000000880)='./mnt\x00', &(0x7f00000008c0)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000940)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xd1, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001}]}) 6.185817499s ago: executing program 4 (id=4102): socket$inet6(0xa, 0x3, 0xff) socket$pppoe(0x18, 0x1, 0x0) io_uring_setup(0x3450, &(0x7f0000000340)={0x0, 0x1539, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="8ee8660f3881ae0200b8ee08b800008ec8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca26660fed4869ba2100b842f4ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_io_uring_setup(0x2c40, &(0x7f0000000280)={0x0, 0xa83c, 0x40, 0x0, 0x23b}, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.195356828s ago: executing program 9 (id=4103): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x8400, 0x4d) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x200000, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) read$FUSE(r0, &(0x7f0000003500)={0x2020}, 0x2020) 4.132179499s ago: executing program 7 (id=4104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x6) r3 = open(&(0x7f0000000180)='./file1\x00', 0x4d142, 0xa0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x8e, 0x2, r3}) 4.131974869s ago: executing program 6 (id=4105): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0xc8, 0x1000, 0x2, 0x180], [0x0, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x2, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x4, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x958, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x3, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000140001002dbd"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.131787039s ago: executing program 4 (id=4106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'syzkaller0\x00'}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x4c}}, 0x0) close(0x3) 2.197967106s ago: executing program 9 (id=4107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs, &(0x7f0000000400)=0x80) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0xe61d4101de6474e6}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_EVENT(r3, 0x84, 0x7f, &(0x7f0000000280)={0x0, 0x8005}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.194583836s ago: executing program 7 (id=4108): syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') getrandom(&(0x7f00000001c0)=""/286, 0xffffff9a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001480), 0x23, 0x101) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) mprotect(&(0x7f000062d000/0x2000)=nil, 0x2000, 0x4) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.176205596s ago: executing program 6 (id=4109): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) 2.175720476s ago: executing program 4 (id=4110): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000022c0), 0x103902, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)={0x80, 0x5, "61fe77ab0a"}) 54.272908ms ago: executing program 9 (id=4111): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) 53.266458ms ago: executing program 7 (id=4112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 144.04µs ago: executing program 6 (id=4113): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$reject(0x13, 0x0, 0x5, 0xfe0f, 0x0) 0s ago: executing program 4 (id=4114): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2a5}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x6, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$FICLONE(r1, 0x40049409, r1) syz_mount_image$fuse(0x0, 0x0, 0x16000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000a00)='./trace\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./trace/set_event\x00', 0x2, 0x12) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='\t\x00', 0x2}], 0x1) read$FUSE(r2, &(0x7f0000002a80)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 0000000000081 RDI: 00007fa40f893fac [ 548.115572][T17048] RBP: 00007fa40f893fa0 R08: 002ca9f13fe30ae2 R09: 0000000000000000 [ 548.123546][T17048] R10: 0000200000ff6000 R11: 0000000000000246 R12: 0000000000000000 [ 548.131516][T17048] R13: 00007fa40f894038 R14: 00007ffe67348730 R15: 00007ffe67348818 [ 548.139500][T17048] [ 548.435883][T17059] Could not find key with description: [syzlecryptfs_fne] [ 548.465862][T17061] overlayfs: failed to clone upperpath [ 548.473926][T17059] process_request_key_err: No key [ 548.489341][T17059] Could not find valid key in user session keyring for sig specified in mount option: [syzlecryptfs_fne] [ 548.545662][T17059] One or more global auth toks could not properly register; rc = [-2] [ 548.575319][T17059] Error parsing options; rc = [-2] [ 548.725938][T17072] Unknown status report in ack skb [ 549.132936][T17087] overlayfs: failed to clone upperpath [ 549.448502][T17099] usb usb8: usbfs: process 17099 (syz.3.2895) did not claim interface 0 before use [ 549.688609][T17111] loop3: detected capacity change from 0 to 8 [ 549.765316][T17111] SQUASHFS error: Unable to read inode 0x11f [ 551.146157][T17167] loop3: detected capacity change from 0 to 8 [ 551.246224][T17167] SQUASHFS error: Unable to read inode 0x11f [ 551.508365][T17173] 9pnet_virtio: no channels available for device syz [ 551.602548][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2917'. [ 551.724140][T17183] ip_tables: iptables: counters copy to user failed while replacing table [ 551.817765][T17188] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 552.554745][ T4250] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 552.652336][T17223] loop3: detected capacity change from 0 to 512 [ 552.736099][T17223] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 552.783864][T17223] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.819982][ T4250] usb 8-1: Using ep0 maxpacket: 32 [ 553.280127][ T4250] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 553.317913][ T4250] usb 8-1: config 0 has no interface number 0 [ 553.356342][ T4250] usb 8-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 553.413812][ T4250] usb 8-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 553.539284][ T4250] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.675940][T17240] 9pnet_virtio: no channels available for device syz [ 553.820395][ T4250] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 553.855554][ T4250] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.904339][ T4250] usb 8-1: Product: syz [ 553.935597][ T4250] usb 8-1: Manufacturer: syz [ 553.966600][ T4250] usb 8-1: SerialNumber: syz [ 554.016657][ T4250] usb 8-1: config 0 descriptor?? [ 554.082536][ T4250] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.119/input/input11 [ 554.101364][T17261] loop3: detected capacity change from 0 to 8 [ 554.164483][T17250] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 554.192397][T17261] SQUASHFS error: Unable to read inode 0x11f [ 554.488101][ T4252] usb 8-1: USB disconnect, device number 11 [ 554.587558][T17266] rxe_eth0 speed is unknown, defaulting to 1000 [ 556.335275][T17296] loop3: detected capacity change from 0 to 2048 [ 556.388067][T17296] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 556.872312][T17306] FAULT_INJECTION: forcing a failure. [ 556.872312][T17306] name failslab, interval 1, probability 0, space 0, times 0 [ 556.888621][T17306] CPU: 0 PID: 17306 Comm: syz.7.2952 Not tainted syzkaller #0 [ 556.896245][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 556.906341][T17306] Call Trace: [ 556.909655][T17306] [ 556.912617][T17306] dump_stack_lvl+0x188/0x250 [ 556.917308][T17306] ? show_regs_print_info+0x20/0x20 [ 556.922538][T17306] ? load_image+0x410/0x410 [ 556.927053][T17306] ? lockdep_softirqs_off+0x430/0x430 [ 556.932433][T17306] should_fail+0x383/0x4b0 [ 556.936858][T17306] should_failslab+0x5/0x20 [ 556.941384][T17306] slab_pre_alloc_hook+0x51/0xc0 [ 556.946329][T17306] kmem_cache_alloc_trace+0x47/0x290 [ 556.951644][T17306] ? rfcomm_dlc_alloc+0x72/0x400 [ 556.956695][T17306] rfcomm_dlc_alloc+0x72/0x400 [ 556.961469][T17306] rfcomm_sock_alloc+0x4f/0x200 [ 556.966381][T17306] rfcomm_sock_create+0xbe/0x2c0 [ 556.971328][T17306] bt_sock_create+0x155/0x220 [ 556.976089][T17306] __sock_create+0x473/0x910 [ 556.980730][T17306] __sys_socket+0xe2/0x170 [ 556.985154][T17306] __x64_sys_socket+0x76/0x80 [ 556.989838][T17306] do_syscall_64+0x4c/0xa0 [ 556.994263][T17306] ? clear_bhb_loop+0x30/0x80 [ 556.999057][T17306] ? clear_bhb_loop+0x30/0x80 [ 557.003747][T17306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.009887][T17306] RIP: 0033:0x7f9b193b2559 [ 557.014325][T17306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.034046][T17306] RSP: 002b:00007f9b17608fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 557.042572][T17306] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f9b193b2559 [ 557.050553][T17306] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 000000000000001f [ 557.058616][T17306] RBP: 00007f9b19449b20 R08: 0000000000000000 R09: 0000000000000000 [ 557.066720][T17306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.074799][T17306] R13: 00007f9b19639038 R14: 00007f9b19638fa0 R15: 00007ffedfffe268 [ 557.082793][T17306] [ 557.519970][T17323] loop3: detected capacity change from 0 to 8 [ 557.593536][T17323] SQUASHFS error: Unable to read inode 0x11f [ 559.820207][T17348] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 560.380850][T17352] FAULT_INJECTION: forcing a failure. [ 560.380850][T17352] name failslab, interval 1, probability 0, space 0, times 0 [ 560.479467][T17374] 9pnet_virtio: no channels available for device syz [ 560.496389][T17352] CPU: 0 PID: 17352 Comm: syz.3.2964 Not tainted syzkaller #0 [ 560.503878][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 560.513942][T17352] Call Trace: [ 560.517227][T17352] [ 560.520162][T17352] dump_stack_lvl+0x188/0x250 [ 560.524853][T17352] ? show_regs_print_info+0x20/0x20 [ 560.530078][T17352] ? load_image+0x410/0x410 [ 560.534585][T17352] ? __might_sleep+0xf0/0xf0 [ 560.539189][T17352] ? __lock_acquire+0x7d40/0x7d40 [ 560.544224][T17352] should_fail+0x383/0x4b0 [ 560.548658][T17352] ? cryptomgr_notify+0x9b0/0x9b0 [ 560.553757][T17352] should_failslab+0x5/0x20 [ 560.558262][T17352] slab_pre_alloc_hook+0x51/0xc0 [ 560.563230][T17352] ? cryptomgr_notify+0x9b0/0x9b0 [ 560.568274][T17352] kmem_cache_alloc_trace+0x47/0x290 [ 560.573582][T17352] ? __kthread_create_on_node+0x117/0x460 [ 560.579384][T17352] ? __init_swait_queue_head+0xa4/0x140 [ 560.584984][T17352] ? cryptomgr_notify+0x9b0/0x9b0 [ 560.590042][T17352] __kthread_create_on_node+0x117/0x460 [ 560.595612][T17352] ? cryptomgr_notify+0x18a/0x9b0 [ 560.600650][T17352] ? kthread_create_on_node+0x140/0x140 [ 560.606202][T17352] ? xfrm_add_sa+0x22ab/0x30d0 [ 560.611081][T17352] ? cryptomgr_notify+0x9b0/0x9b0 [ 560.616117][T17352] ? cryptomgr_notify+0x9b0/0x9b0 [ 560.621147][T17352] kthread_create_on_node+0xe8/0x140 [ 560.626466][T17352] ? tsk_fork_get_node+0x60/0x60 [ 560.631433][T17352] ? cryptomgr_notify+0x496/0x9b0 [ 560.636463][T17352] cryptomgr_notify+0x7f6/0x9b0 [ 560.641318][T17352] blocking_notifier_call_chain+0x103/0x1b0 [ 560.647280][T17352] crypto_alg_mod_lookup+0x495/0x6d0 [ 560.652614][T17352] crypto_alloc_tfm_node+0x14e/0x360 [ 560.657912][T17352] esp_init_state+0x35b/0xf50 [ 560.662655][T17352] ? __kasan_kmalloc+0xaf/0xe0 [ 560.667475][T17352] ? kmemdup+0x22/0x50 [ 560.671588][T17352] ? xfrm_add_sa+0x1607/0x30d0 [ 560.676373][T17352] ? xfrm_user_rcv_msg+0x7fc/0xaa0 [ 560.681495][T17352] ? netlink_rcv_skb+0x1e9/0x430 [ 560.686474][T17352] ? xfrm_netlink_rcv+0x75/0x90 [ 560.691348][T17352] ? netlink_unicast+0x78f/0x940 [ 560.696341][T17352] ? netlink_sendmsg+0x8ba/0xbe0 [ 560.701297][T17352] ? esp4_err+0x410/0x410 [ 560.705643][T17352] ? do_syscall_64+0x4c/0xa0 [ 560.710268][T17352] __xfrm_init_state+0xb0a/0xdf0 [ 560.715388][T17352] xfrm_add_sa+0x22ab/0x30d0 [ 560.719981][T17352] ? xfrm_net_nlsk+0x120/0x120 [ 560.724740][T17352] ? apparmor_capable+0x12c/0x190 [ 560.730031][T17352] ? __nla_parse+0x3c/0x50 [ 560.734473][T17352] xfrm_user_rcv_msg+0x7fc/0xaa0 [ 560.739415][T17352] ? xfrm_netlink_rcv+0x90/0x90 [ 560.744310][T17352] ? __mutex_lock_common+0x435/0x2400 [ 560.749689][T17352] netlink_rcv_skb+0x1e9/0x430 [ 560.754456][T17352] ? xfrm_netlink_rcv+0x66/0x90 [ 560.759307][T17352] ? xfrm_netlink_rcv+0x90/0x90 [ 560.764171][T17352] ? netlink_ack+0xb10/0xb10 [ 560.768785][T17352] ? __lock_acquire+0x7d40/0x7d40 [ 560.773837][T17352] xfrm_netlink_rcv+0x75/0x90 [ 560.778513][T17352] netlink_unicast+0x78f/0x940 [ 560.783299][T17352] netlink_sendmsg+0x8ba/0xbe0 [ 560.788100][T17352] ? netlink_getsockopt+0x570/0x570 [ 560.793301][T17352] ? aa_sock_msg_perm+0x94/0x150 [ 560.798247][T17352] ? apparmor_socket_sendmsg+0x88/0x230 [ 560.803799][T17352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 560.809157][T17352] ? security_socket_sendmsg+0x7c/0xa0 [ 560.814829][T17352] ? netlink_getsockopt+0x570/0x570 [ 560.820037][T17352] ____sys_sendmsg+0x5be/0x8f0 [ 560.824813][T17352] ? __sys_sendmsg_sock+0x30/0x30 [ 560.829865][T17352] ? import_iovec+0x6f/0xa0 [ 560.834426][T17352] ___sys_sendmsg+0x236/0x2e0 [ 560.839144][T17352] ? __sys_sendmsg+0x290/0x290 [ 560.844067][T17352] __se_sys_sendmsg+0x1b7/0x2a0 [ 560.848923][T17352] ? __x64_sys_sendmsg+0x80/0x80 [ 560.853876][T17352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 560.859875][T17352] ? lockdep_hardirqs_on+0x94/0x140 [ 560.865083][T17352] do_syscall_64+0x4c/0xa0 [ 560.869506][T17352] ? clear_bhb_loop+0x30/0x80 [ 560.874194][T17352] ? clear_bhb_loop+0x30/0x80 [ 560.878875][T17352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 560.884771][T17352] RIP: 0033:0x7fa40f60d559 [ 560.889196][T17352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.908831][T17352] RSP: 002b:00007fa40d864028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.917267][T17352] RAX: ffffffffffffffda RBX: 00007fa40f893fa0 RCX: 00007fa40f60d559 [ 560.925262][T17352] RDX: 0000000000048080 RSI: 0000200000000040 RDI: 0000000000000009 [ 560.933240][T17352] RBP: 00007fa40f6a4b20 R08: 0000000000000000 R09: 0000000000000000 [ 560.941217][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.949190][T17352] R13: 00007fa40f894038 R14: 00007fa40f893fa0 R15: 00007ffe67348818 [ 560.957181][T17352] [ 560.974722][T17371] rxe_eth0 speed is unknown, defaulting to 1000 [ 561.123032][T17380] CIFS mount error: No usable UNC path provided in device string! [ 561.123032][T17380] [ 561.333127][T17380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 562.787615][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.794888][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.067203][T17410] loop7: detected capacity change from 0 to 1024 [ 563.300297][T17410] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 563.769316][T17425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.133326][T17477] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 566.251530][T17477] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 568.068281][ T4250] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 568.348257][ T4250] usb 4-1: Using ep0 maxpacket: 8 [ 568.522276][ T4250] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 568.567285][ T4250] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.658962][ T4250] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 568.679767][T17522] tipc: Started in network mode [ 568.684667][T17522] tipc: Node identity ac141441, cluster identity 4711 [ 568.731882][ T4250] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.764196][T17522] tipc: Enabled bearer , priority 10 [ 568.788574][ T4250] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.865901][ T4250] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 568.916173][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.032703][T17532] nvme_rdma: malformed address passed: 12:4420 [ 569.216852][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 569.216865][ T26] audit: type=1800 audit(1792593809.012:541): pid=17537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3015" name=08 dev="sda1" ino=2075 res=0 errno=0 [ 569.243885][ T4250] usb 4-1: usb_control_msg returned -32 [ 569.268268][ T4250] usbtmc 4-1:16.0: can't read capabilities [ 569.534134][T17549] loop7: detected capacity change from 0 to 512 [ 569.598716][T17550] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 569.682298][T17549] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 569.792465][T17549] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.807500][ T7040] usb 4-1: USB disconnect, device number 13 [ 569.878016][ T4250] tipc: Node number set to 2886997057 [ 571.210330][T17595] loop7: detected capacity change from 0 to 512 [ 571.268302][ T4254] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 571.366639][T17595] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 571.444695][T17595] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.555943][ T4254] usb 4-1: Using ep0 maxpacket: 8 [ 571.780845][ T4203] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 571.818001][ T4254] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.870384][ T4254] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.157908][ T4254] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 572.220064][ T4254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.283762][ T4254] usb 4-1: Product: syz [ 572.327717][ T4254] usb 4-1: Manufacturer: syz [ 572.363829][ T4254] usb 4-1: SerialNumber: syz [ 572.480336][T17620] jffs2: notice: (17620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 572.543549][T17622] device team_slave_1 entered promiscuous mode [ 572.767787][ T4254] usb 4-1: 1:1 : bogus bTerminalLink 7 [ 572.790653][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3042'. [ 572.847684][ T4254] usb 4-1: unit 119 not found! [ 572.890781][ T4254] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 572.972017][ T4254] usb 4-1: USB disconnect, device number 14 [ 574.151946][T17669] binder: 17667:17669 ioctl 4018620d 0 returned -22 [ 574.226610][T17674] FAULT_INJECTION: forcing a failure. [ 574.226610][T17674] name fail_futex, interval 1, probability 0, space 0, times 1 [ 574.332521][T17674] CPU: 0 PID: 17674 Comm: syz.7.3057 Not tainted syzkaller #0 [ 574.340029][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 574.350098][T17674] Call Trace: [ 574.353392][T17674] [ 574.356330][T17674] dump_stack_lvl+0x188/0x250 [ 574.361026][T17674] ? proc_reg_write+0x1dd/0x2c0 [ 574.365983][T17674] ? ksys_write+0x153/0x260 [ 574.370524][T17674] ? show_regs_print_info+0x20/0x20 [ 574.375746][T17674] ? load_image+0x410/0x410 [ 574.380261][T17674] should_fail+0x383/0x4b0 [ 574.384690][T17674] get_futex_key+0x1a1/0x12d0 [ 574.389379][T17674] ? __lock_acquire+0x13b3/0x7d40 [ 574.394410][T17674] ? futex_wait_restart+0x250/0x250 [ 574.399621][T17674] futex_wake+0x101/0x540 [ 574.403971][T17674] ? futex_wait+0x680/0x680 [ 574.408504][T17674] ? verify_lock_unused+0x140/0x140 [ 574.413731][T17674] ? verify_lock_unused+0x140/0x140 [ 574.418941][T17674] do_futex+0xd83/0x12b0 [ 574.423193][T17674] ? vfs_write+0xaa6/0xd70 [ 574.427642][T17674] ? futex_exit_release+0x1c0/0x1c0 [ 574.432873][T17674] ? __context_tracking_exit+0x4c/0x80 [ 574.438359][T17674] __se_sys_futex+0x389/0x420 [ 574.443178][T17674] ? __x64_sys_futex+0xf0/0xf0 [ 574.447961][T17674] ? __x64_sys_futex+0x1d/0xf0 [ 574.452758][T17674] do_syscall_64+0x4c/0xa0 [ 574.457186][T17674] ? clear_bhb_loop+0x30/0x80 [ 574.461981][T17674] ? clear_bhb_loop+0x30/0x80 [ 574.466701][T17674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 574.472608][T17674] RIP: 0033:0x7f9b193b2559 [ 574.477085][T17674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.496830][T17674] RSP: 002b:00007f9b176090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 574.505273][T17674] RAX: ffffffffffffffda RBX: 00007f9b19638fa8 RCX: 00007f9b193b2559 [ 574.513249][T17674] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b19638fac [ 574.521243][T17674] RBP: 00007f9b19638fa0 R08: 000ae03811408bdf R09: 0000000000000000 [ 574.529251][T17674] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 574.537234][T17674] R13: 00007f9b19639038 R14: 00007ffedfffe180 R15: 00007ffedfffe268 [ 574.545246][T17674] [ 574.808009][ C0] Unknown status report in ack skb [ 575.945064][T17728] tipc: Enabling of bearer rejected, failed to enable media [ 576.028321][T17731] netlink: 'syz.3.3074': attribute type 1 has an invalid length. [ 576.246823][T17731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.388111][T17734] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 576.484721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 577.403784][ T4270] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 577.847161][ T4270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.077202][ T4270] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.134009][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.200084][ T4270] usb 4-1: Product: syz [ 578.226346][ T4270] usb 4-1: Manufacturer: syz [ 578.260097][ T4270] usb 4-1: SerialNumber: syz [ 578.607199][ T7040] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 578.974562][T17820] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3103'. [ 578.986961][ T4270] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 578.992999][ T4270] cdc_ncm 4-1:1.0: bind() failure [ 578.998679][ T7040] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 579.037483][ T7040] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.060059][ T4270] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 579.081289][ T7040] usb 8-1: config 0 has no interface number 0 [ 579.094507][ T4270] cdc_ncm 4-1:1.1: bind() failure [ 579.104387][ T7040] usb 8-1: config 0 interface 255 has no altsetting 0 [ 579.133227][ T4270] usb 4-1: USB disconnect, device number 15 [ 579.297097][ T7040] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 579.332069][ T7040] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 579.366252][ T7040] usb 8-1: Product: syz [ 579.386289][ T7040] usb 8-1: Manufacturer: syz [ 579.410140][ T7040] usb 8-1: SerialNumber: syz [ 579.441419][ T7040] usb 8-1: config 0 descriptor?? [ 579.715692][ T4270] usb 8-1: USB disconnect, device number 12 [ 579.849622][T17836] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 580.602603][T17877] device team_slave_1 entered promiscuous mode [ 580.663278][T17882] FAULT_INJECTION: forcing a failure. [ 580.663278][T17882] name failslab, interval 1, probability 0, space 0, times 0 [ 580.741118][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3118'. [ 580.764686][T17882] CPU: 0 PID: 17882 Comm: syz.3.3121 Not tainted syzkaller #0 [ 580.772183][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 580.782248][T17882] Call Trace: [ 580.785550][T17882] [ 580.788489][T17882] dump_stack_lvl+0x188/0x250 [ 580.793181][T17882] ? show_regs_print_info+0x20/0x20 [ 580.798386][T17882] ? load_image+0x410/0x410 [ 580.802926][T17882] ? __might_sleep+0xf0/0xf0 [ 580.807531][T17882] ? __lock_acquire+0x7d40/0x7d40 [ 580.812577][T17882] should_fail+0x383/0x4b0 [ 580.817096][T17882] should_failslab+0x5/0x20 [ 580.821617][T17882] slab_pre_alloc_hook+0x51/0xc0 [ 580.826579][T17882] ? __kernfs_new_node+0xe3/0x6b0 [ 580.831702][T17882] kmem_cache_alloc+0x3d/0x280 [ 580.836500][T17882] __kernfs_new_node+0xe3/0x6b0 [ 580.841359][T17882] ? __lock_acquire+0x7d40/0x7d40 [ 580.846401][T17882] ? kernfs_new_node+0x250/0x250 [ 580.851370][T17882] ? kernfs_activate+0x1eb/0x210 [ 580.856319][T17882] kernfs_new_node+0x148/0x250 [ 580.861091][T17882] __kernfs_create_file+0x47/0x2e0 [ 580.866214][T17882] sysfs_add_file_mode_ns+0x2d2/0x390 [ 580.871604][T17882] internal_create_group+0x492/0xd00 [ 580.876903][T17882] ? up_write+0x1b6/0x410 [ 580.881248][T17882] ? sysfs_create_group+0x20/0x20 [ 580.886282][T17882] sysfs_create_groups+0x55/0x120 [ 580.891347][T17882] device_add_attrs+0x82/0x690 [ 580.896208][T17882] device_add+0x677/0x1050 [ 580.900643][T17882] rfkill_register+0x16c/0x970 [ 580.905437][T17882] hci_register_dev+0x459/0x980 [ 580.910308][T17882] vhci_create_device+0x32e/0x5c0 [ 580.915445][T17882] vhci_write+0x389/0x440 [ 580.919787][T17882] vfs_write+0x748/0xd70 [ 580.924045][T17882] ? file_end_write+0x250/0x250 [ 580.928911][T17882] ? __fget_files+0x402/0x470 [ 580.933597][T17882] ? __fdget_pos+0x1e2/0x370 [ 580.938187][T17882] ? ksys_write+0x70/0x260 [ 580.942612][T17882] ksys_write+0x153/0x260 [ 580.946976][T17882] ? __ia32_sys_read+0x80/0x80 [ 580.951746][T17882] ? lockdep_hardirqs_on+0x94/0x140 [ 580.956959][T17882] do_syscall_64+0x4c/0xa0 [ 580.961396][T17882] ? clear_bhb_loop+0x30/0x80 [ 580.966075][T17882] ? clear_bhb_loop+0x30/0x80 [ 580.970759][T17882] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 580.976662][T17882] RIP: 0033:0x7fa40f60d559 [ 580.981082][T17882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.000694][T17882] RSP: 002b:00007fa40d864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.009137][T17882] RAX: ffffffffffffffda RBX: 00007fa40f893fa0 RCX: 00007fa40f60d559 [ 581.017113][T17882] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000004 [ 581.025088][T17882] RBP: 00007fa40f6a4b20 R08: 0000000000000000 R09: 0000000000000000 [ 581.033069][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.041054][T17882] R13: 00007fa40f894038 R14: 00007fa40f893fa0 R15: 00007ffe67348818 [ 581.049078][T17882] [ 582.862946][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3133'. [ 582.984352][T17939] loop7: detected capacity change from 0 to 8 [ 583.049179][T17939] SQUASHFS error: Unable to read inode 0x11f [ 585.820569][T18012] overlayfs: failed to verify origin (261/file1, ino=1439, err=-116) [ 585.891185][T18012] overlayfs: failed to look up (file1) for ino (-116) [ 586.396358][T18038] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 586.534872][T18038] overlayfs: failed to look up (tracing) for ino (-66) [ 592.893483][T18193] ip_tables: iptables: counters copy to user failed while replacing table [ 593.272806][T18213] loop3: detected capacity change from 0 to 512 [ 593.410853][T18213] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 593.533084][T18213] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.994879][T18259] loop7: detected capacity change from 0 to 8 [ 595.116086][T18259] SQUASHFS error: Unable to read inode 0x11f [ 595.131131][ T4203] Bluetooth: Frame is too long (len 18, expected len 4) [ 595.393758][T18262] block device autoloading is deprecated and will be removed. [ 596.314686][T18285] device-mapper: table: 248:4: cache: Error opening cache device [ 596.383858][T18285] device-mapper: ioctl: error adding target to table [ 598.889617][T18327] device-mapper: table: 248:4: flakey: Unrecognised flakey feature requested [ 598.954671][T18327] device-mapper: ioctl: error adding target to table [ 599.407595][ T4203] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 601.394630][T18366] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 601.495754][T18366] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 601.547105][T18372] 9pnet_virtio: no channels available for device syz [ 601.593697][T18364] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 601.791615][T18384] loop7: detected capacity change from 0 to 8 [ 601.905147][T18384] SQUASHFS error: Unable to read inode 0x11f [ 601.929646][T18387] batman_adv: batadv0: Adding interface: dummy0 [ 602.047024][T18387] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.300567][T18387] batman_adv: batadv0: Interface activated: dummy0 [ 602.375887][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 602.466581][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 602.526146][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 604.017196][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 604.129868][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 604.178842][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 604.246870][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 604.294291][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 604.356546][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 604.396614][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 604.456601][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready [ 604.523235][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready [ 604.585308][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): nr9: link becomes ready [ 604.683189][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 604.761954][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 604.823280][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 604.886576][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 604.929295][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 604.969199][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 605.027933][T18401] infiniband syz2: set active [ 605.052134][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 605.117183][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready [ 605.174336][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready [ 605.218715][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready [ 605.264436][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready [ 605.291122][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready [ 605.321294][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready [ 605.341711][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready [ 605.361884][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb14: link becomes ready [ 605.382041][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb15: link becomes ready [ 605.410657][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb16: link becomes ready [ 605.426944][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb17: link becomes ready [ 605.454609][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb18: link becomes ready [ 605.472634][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb19: link becomes ready [ 605.493104][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb20: link becomes ready [ 605.513042][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb21: link becomes ready [ 605.542264][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb22: link becomes ready [ 605.561112][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb23: link becomes ready [ 605.580787][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb24: link becomes ready [ 605.603249][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb25: link becomes ready [ 605.623301][T18401] IPv6: ADDRCONF(NETDEV_CHANGE): lapb26: link becomes ready [ 605.656491][ T4284] rxe_eth0 speed is unknown, defaulting to 1000 [ 607.378535][T11578] Bluetooth: hci0: command 0x0406 tx timeout [ 607.609080][T18463] device team_slave_1 entered promiscuous mode [ 607.983981][T18480] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 608.363554][T11578] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 608.562830][T18500] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 608.629809][T18500] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 608.643471][T11578] usb 4-1: Using ep0 maxpacket: 8 [ 608.704105][T18497] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 608.763590][T11578] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.810845][T11578] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.450829][T11578] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 610.532400][T11578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.571800][T11578] usb 4-1: Product: syz [ 610.600215][T11578] usb 4-1: Manufacturer: syz [ 610.630025][T11578] usb 4-1: SerialNumber: syz [ 611.067520][T11578] usb 4-1: 1:1 : bogus bTerminalLink 7 [ 611.103253][T11578] usb 4-1: unit 119 not found! [ 611.169399][T11578] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 611.230065][T11578] usb 4-1: USB disconnect, device number 16 [ 611.463325][ T4254] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 611.846428][T18541] loop3: detected capacity change from 0 to 8 [ 611.950833][T18541] SQUASHFS error: Unable to read inode 0x11f [ 611.973254][ T4254] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.283114][ T4254] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.358332][ T4254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.422674][ T4254] usb 8-1: Product: syz [ 612.464530][ T4254] usb 8-1: Manufacturer: syz [ 612.513154][ T4254] usb 8-1: SerialNumber: syz [ 613.273005][ T4254] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 613.293600][ T4254] cdc_ncm 8-1:1.0: bind() failure [ 614.474406][ T4254] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 614.481323][ T4254] cdc_ncm 8-1:1.1: bind() failure [ 614.871641][ T4254] usb 8-1: USB disconnect, device number 13 [ 614.989964][T18574] jffs2: notice: (18574) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 615.399250][T18592] device syzkaller0 entered promiscuous mode [ 617.456135][ T4254] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 618.132944][ T4254] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.332890][ T4254] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.375155][ T4254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.432433][ T4254] usb 8-1: Product: syz [ 618.469147][ T4254] usb 8-1: Manufacturer: syz [ 618.499133][ T4254] usb 8-1: SerialNumber: syz [ 619.252437][ T4254] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 619.285570][ T4254] cdc_ncm 8-1:1.0: bind() failure [ 619.345469][ T4254] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 619.516636][ T4254] cdc_ncm 8-1:1.1: bind() failure [ 619.564828][ T4254] usb 8-1: USB disconnect, device number 14 [ 620.124373][T18694] bridge0: port 3(bond0) entered blocking state [ 620.174426][T18694] bridge0: port 3(bond0) entered disabled state [ 620.243608][T18694] device bond0 entered promiscuous mode [ 620.249193][T18694] device bond_slave_0 entered promiscuous mode [ 620.304974][T18694] device bond_slave_1 entered promiscuous mode [ 620.335479][T18694] bridge0: port 3(bond0) entered blocking state [ 620.342490][T18694] bridge0: port 3(bond0) entered forwarding state [ 620.400734][T18697] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 620.509936][T18697] device wlan1 entered promiscuous mode [ 620.542980][T18697] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 620.868739][T18726] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 620.939957][T18726] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 620.990373][T18724] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 621.275988][T18747] loop7: detected capacity change from 0 to 512 [ 621.389604][T18756] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 621.492989][T18747] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 621.605053][T18747] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.181983][T18756] VFS: Can't find a romfs filesystem on dev nullb0. [ 622.181983][T18756] [ 622.696504][ T4203] Bluetooth: hci2: unexpected event for opcode 0x080f [ 622.737015][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 623.671049][T18836] FAULT_INJECTION: forcing a failure. [ 623.671049][T18836] name failslab, interval 1, probability 0, space 0, times 0 [ 623.893782][T18836] CPU: 0 PID: 18836 Comm: syz.3.3340 Not tainted syzkaller #0 [ 623.901284][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 623.911341][T18836] Call Trace: [ 623.914625][T18836] [ 623.917567][T18836] dump_stack_lvl+0x188/0x250 [ 623.922253][T18836] ? show_regs_print_info+0x20/0x20 [ 623.927461][T18836] ? load_image+0x410/0x410 [ 623.931969][T18836] ? __might_sleep+0xf0/0xf0 [ 623.936577][T18836] ? __lock_acquire+0x7d40/0x7d40 [ 623.941608][T18836] ? lock_chain_count+0x20/0x20 [ 623.946467][T18836] should_fail+0x383/0x4b0 [ 623.950894][T18836] should_failslab+0x5/0x20 [ 623.955403][T18836] slab_pre_alloc_hook+0x51/0xc0 [ 623.960347][T18836] kmem_cache_alloc_trace+0x47/0x290 [ 623.965633][T18836] ? kobject_uevent_env+0x275/0x890 [ 623.970909][T18836] kobject_uevent_env+0x275/0x890 [ 623.976108][T18836] ? kfree+0xef/0x2a0 [ 623.980098][T18836] kvm_uevent_notify_change+0x2fb/0x3a0 [ 623.985714][T18836] kvm_dev_ioctl+0x1807/0x20a0 [ 623.990492][T18836] ? hardware_enable_nolock+0x130/0x130 [ 623.996048][T18836] ? bpf_lsm_file_ioctl+0x5/0x10 [ 624.000988][T18836] ? security_file_ioctl+0x7c/0xa0 [ 624.006136][T18836] ? hardware_enable_nolock+0x130/0x130 [ 624.011690][T18836] __se_sys_ioctl+0xfa/0x170 [ 624.016287][T18836] do_syscall_64+0x4c/0xa0 [ 624.020714][T18836] ? clear_bhb_loop+0x30/0x80 [ 624.025413][T18836] ? clear_bhb_loop+0x30/0x80 [ 624.030096][T18836] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 624.035999][T18836] RIP: 0033:0x7fa40f60d559 [ 624.040418][T18836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.060034][T18836] RSP: 002b:00007fa40d864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.068655][T18836] RAX: ffffffffffffffda RBX: 00007fa40f893fa0 RCX: 00007fa40f60d559 [ 624.076650][T18836] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 624.084621][T18836] RBP: 00007fa40f6a4b20 R08: 0000000000000000 R09: 0000000000000000 [ 624.092598][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.100600][T18836] R13: 00007fa40f894038 R14: 00007fa40f893fa0 R15: 00007ffe67348818 [ 624.108621][T18836] [ 624.356923][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.365621][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.750254][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3343'. [ 625.035931][T18873] fuse: Bad value for 'fd' [ 625.392270][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 625.468002][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 625.542446][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 625.591155][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 625.639574][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 625.687454][T18892] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 626.041426][ T4254] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 626.141978][T18921] device team_slave_1 entered promiscuous mode [ 626.521591][ T4254] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.851478][ T4254] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.901759][ T4254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.976510][ T4254] usb 8-1: Product: syz [ 627.010978][ T4254] usb 8-1: Manufacturer: syz [ 627.049475][ T4254] usb 8-1: SerialNumber: syz [ 627.791260][ T4254] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 627.797312][ T4254] cdc_ncm 8-1:1.0: bind() failure [ 627.861591][ T4254] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 627.891696][ T4254] cdc_ncm 8-1:1.1: bind() failure [ 627.935060][ T4254] usb 8-1: USB disconnect, device number 15 [ 628.172527][ T4270] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 628.401138][ T4270] usb 4-1: device descriptor read/64, error -71 [ 628.691327][ T4270] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 628.717685][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 628.941031][ T4270] usb 4-1: device descriptor read/64, error -71 [ 629.081170][ T4270] usb usb4-port1: attempt power cycle [ 629.292548][T19005] fuse: Bad value for 'fd' [ 629.510979][ T4270] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 629.643266][ T4270] usb 4-1: device descriptor read/8, error -71 [ 629.737039][T19030] loop7: detected capacity change from 0 to 512 [ 629.826890][T19030] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 629.911031][ T4270] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 629.919961][T19030] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.140430][ T4270] usb 4-1: device descriptor read/8, error -71 [ 630.407536][ T4270] usb usb4-port1: unable to enumerate USB device [ 630.873005][T19069] fuse: Bad value for 'fd' [ 631.299119][ T150] blk_update_request: I/O error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 631.311298][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 100391) [ 631.323639][ T150] Buffer I/O error on device sda1, logical block 100352 [ 631.332011][ T150] blk_update_request: I/O error, dev sda, sector 811262 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 631.344887][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101414) [ 631.356982][ T150] Buffer I/O error on device sda1, logical block 101369 [ 631.364140][ T150] Buffer I/O error on device sda1, logical block 101370 [ 631.371588][ T150] Buffer I/O error on device sda1, logical block 101371 [ 631.378556][ T150] Buffer I/O error on device sda1, logical block 101372 [ 631.385880][ T150] Buffer I/O error on device sda1, logical block 101373 [ 631.393173][ T150] Buffer I/O error on device sda1, logical block 101374 [ 631.400244][ T150] Buffer I/O error on device sda1, logical block 101375 [ 631.407593][ T150] blk_update_request: I/O error, dev sda, sector 815350 op 0x1:(WRITE) flags 0x0 phys_seg 8 prio class 0 [ 631.419277][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101926) [ 631.431192][ T150] Buffer I/O error on device sda1, logical block 101880 [ 631.439592][ T150] Buffer I/O error on device sda1, logical block 101881 [ 631.447207][ T150] blk_update_request: I/O error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 631.458891][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 102439) [ 631.470886][ T150] blk_update_request: I/O error, dev sda, sector 827694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 631.482370][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 103462) [ 631.494245][ T150] blk_update_request: I/O error, dev sda, sector 790838 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 631.505855][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2038 starting block 98857) [ 631.519458][ T150] blk_update_request: I/O error, dev sda, sector 745782 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 631.531528][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2034 starting block 93224) [ 631.544476][ T150] blk_update_request: I/O error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 631.556114][ T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2029 starting block 92200) [ 631.578742][ T5848] blk_update_request: I/O error, dev sda, sector 831750 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 631.591362][ T5848] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 103974) [ 631.603469][ T5848] blk_update_request: I/O error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 631.614762][ T5848] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 94247) [ 631.987152][ T3520] Aborting journal on device sda1-8. [ 632.019520][ T150] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 632.040658][ T3520] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 632.259622][T19067] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4452: inode #271: block 161: comm dhcpcd-run-hook: unable to read itable block [ 632.351871][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 632.383600][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 632.394112][ T4270] EXT4-fs (sda1): I/O error while writing superblock [ 632.402605][T19067] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #268: comm dhcpcd-run-hook: reading directory lblock 0 [ 632.463314][ T4173] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 632.493835][T19067] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd-run-hook: reading directory lblock 0 [ 632.532156][ T4270] EXT4-fs (sda1): previous I/O error to superblock detected [ 632.539631][ T4270] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 632.617829][T19099] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 632.646513][ T4173] EXT4-fs (sda1): I/O error while writing superblock [ 632.653649][ T4270] EXT4-fs (sda1): I/O error while writing superblock [ 632.677428][T19073] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 632.684396][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 632.724600][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 632.772822][T19100] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 632.807960][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 632.846386][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 632.869414][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 632.890818][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 632.980326][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 633.046251][T19107] EXT4-fs (sda1): Remounting filesystem read-only [ 633.053097][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 633.059629][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 633.584366][T19138] fuse: Bad value for 'fd' [ 633.837870][T19153] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 634.038793][T19153] CIFS: Attempting to mount \\127.0.0.1\test [ 634.654895][T19153] CIFS: VFS: Error connecting to socket. Aborting operation. [ 634.706166][T19153] CIFS: VFS: cifs_mount failed w/return code = -4 [ 634.755064][T19076] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 634.951612][T19076] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 635.265034][T19076] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f] [ 635.830208][T11578] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 635.846709][T19194] device team_slave_0 entered promiscuous mode [ 635.907675][T19194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 635.958119][ T4203] Bluetooth: Wrong link type (-22) [ 635.969461][T19194] team0: Device macvlan2 is already an upper device of the team interface [ 636.037490][T19194] device team_slave_0 left promiscuous mode [ 636.100199][T11578] usb 8-1: Using ep0 maxpacket: 8 [ 636.230375][T11578] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 636.279381][T11578] usb 8-1: config 179 has no interface number 0 [ 636.320561][T11578] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 636.398035][T11578] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 636.474764][T11578] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 636.532678][T11578] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 636.598771][T11578] usb 8-1: config 179 interface 65 has no altsetting 0 [ 636.638042][T11578] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 636.685414][T11578] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.749070][ T4254] virtio-pci 0000:00:03.0: can't enable device: BAR 0 [io 0xc000-0xc03f] not claimed [ 636.830797][T11578] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input13 [ 636.842557][T19076] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 636.915234][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3421'. [ 637.020643][ T4270] usb 8-1: USB disconnect, device number 16 [ 637.068222][ T4270] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 637.280270][ T4173] EXT4-fs error: 110 callbacks suppressed [ 637.280286][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 637.635493][T19210] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3424: Detected aborted journal [ 637.649533][T19211] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3425: Detected aborted journal [ 637.693677][T19210] EXT4-fs: 66 callbacks suppressed [ 637.693692][T19210] EXT4-fs (sda1): Remounting filesystem read-only [ 637.720007][T19211] EXT4-fs (sda1): Remounting filesystem read-only [ 637.768475][T19211] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3425: Detected aborted journal [ 637.780781][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 637.810872][T19212] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3426: Detected aborted journal [ 637.837902][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 637.857484][T19210] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3424: Detected aborted journal [ 637.868960][T19211] EXT4-fs (sda1): Remounting filesystem read-only [ 637.890458][T19212] EXT4-fs (sda1): Remounting filesystem read-only [ 637.926647][T19210] EXT4-fs (sda1): Remounting filesystem read-only [ 637.948967][T19212] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3426: Detected aborted journal [ 637.991052][T19217] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1267: comm kworker/u4:11: reading directory lblock 0 [ 638.021882][T19218] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3427: Detected aborted journal [ 638.056356][T19212] EXT4-fs (sda1): Remounting filesystem read-only [ 638.114891][T19218] EXT4-fs (sda1): Remounting filesystem read-only [ 638.131899][T19226] EXT4-fs (sda1): Remounting filesystem read-only [ 638.172490][T19218] EXT4-fs (sda1): Remounting filesystem read-only [ 638.459484][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3433'. [ 638.493161][T19243] loop3: detected capacity change from 0 to 512 [ 638.655759][T19243] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 638.904852][T19243] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.951868][T19283] UBIFS error (pid: 19283): cannot open "ubi0:testvol", error -19 [ 640.344000][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3449'. [ 641.790177][T19317] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3458'. [ 642.414781][T19330] EXT4-fs error: 111 callbacks suppressed [ 642.414799][T19330] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3464: Detected aborted journal [ 642.491295][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 642.553636][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 642.636319][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 642.714085][ T4173] EXT4-fs: 83 callbacks suppressed [ 642.714100][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 642.755069][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 642.809363][ T4254] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 642.839647][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 642.885428][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 642.965477][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 643.013514][T19334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3465: Detected aborted journal [ 643.024821][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 643.067518][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 643.084587][T19334] EXT4-fs (sda1): Remounting filesystem read-only [ 643.128282][T19335] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3466: Detected aborted journal [ 643.151702][T19334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3465: Detected aborted journal [ 643.184725][T19337] EXT4-fs (sda1): Remounting filesystem read-only [ 643.212990][T19335] EXT4-fs (sda1): Remounting filesystem read-only [ 643.229336][T19334] EXT4-fs (sda1): Remounting filesystem read-only [ 643.239788][ T4254] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.279436][T19337] EXT4-fs (sda1): Remounting filesystem read-only [ 643.287236][T19335] EXT4-fs (sda1): Remounting filesystem read-only [ 643.489419][ T4254] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.498541][ T4254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.577427][ T4254] usb 8-1: Product: syz [ 643.599403][ T4254] usb 8-1: Manufacturer: syz [ 643.627121][ T4254] usb 8-1: SerialNumber: syz [ 643.895919][T19364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 644.619274][ T4254] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 644.650369][ T4254] cdc_ncm 8-1:1.0: bind() failure [ 644.735942][ T4254] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 644.770401][ T4254] cdc_ncm 8-1:1.1: bind() failure [ 644.830660][ T4254] usb 8-1: USB disconnect, device number 17 [ 645.000893][T19381] tipc: Started in network mode [ 645.046668][T19381] tipc: Node identity e0000001, cluster identity 4711 [ 645.084794][T19381] tipc: Enabling of bearer rejected, failed to enable media [ 645.489084][ T4250] Bluetooth: hci4: command 0x1003 tx timeout [ 645.519436][ T4202] Bluetooth: hci4: sending frame failed (-49) [ 646.817524][T19409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 646.978135][T19413] overlayfs: failed to clone upperpath [ 647.110316][T19415] device-mapper: raid: Choosing default region size of 4MiB [ 647.147305][T19415] device-mapper: table: 248:3: raid: RAID device lookup failure [ 647.197136][T19415] device-mapper: ioctl: error adding target to table [ 647.467575][T19428] EXT4-fs error: 114 callbacks suppressed [ 647.467590][T19428] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3498: Detected aborted journal [ 647.501735][T19427] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3499: Detected aborted journal [ 647.564368][T19427] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3499: Detected aborted journal [ 647.575511][T11578] Bluetooth: hci4: command 0x1001 tx timeout [ 647.591238][T19428] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3498: Detected aborted journal [ 647.607171][ T4202] Bluetooth: hci4: sending frame failed (-49) [ 647.825181][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 647.846550][T19427] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3499: Detected aborted journal [ 647.857825][T19428] EXT4-fs: 78 callbacks suppressed [ 647.857837][T19428] EXT4-fs (sda1): Remounting filesystem read-only [ 647.887949][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 647.909772][T19427] EXT4-fs (sda1): Remounting filesystem read-only [ 647.938967][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 648.009309][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 648.062444][T19431] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3500: Detected aborted journal [ 648.129484][T19431] EXT4-fs (sda1): Remounting filesystem read-only [ 648.179064][T19422] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3497: Detected aborted journal [ 648.191534][T19431] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3500: Detected aborted journal [ 648.246855][T19422] EXT4-fs (sda1): Remounting filesystem read-only [ 648.267048][T19431] EXT4-fs (sda1): Remounting filesystem read-only [ 648.293455][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 648.308954][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 648.363531][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 648.627314][T19454] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 648.659565][T19458] loop7: detected capacity change from 0 to 8 [ 648.752532][T19458] SQUASHFS error: Unable to read inode 0x11f [ 649.950217][ T4250] Bluetooth: hci4: command 0x1009 tx timeout [ 650.942778][ T4202] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 651.391932][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3524'. [ 651.879023][T19541] rxe_eth0 speed is unknown, defaulting to 1000 [ 651.967398][T19545] batman_adv: batadv0: Adding interface: syz_tun [ 651.993822][T19545] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.151723][T19550] jffs2: notice: (19550) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 652.178887][T19545] batman_adv: batadv0: Interface activated: syz_tun [ 652.407556][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3535'. [ 652.494018][T19557] EXT4-fs error: 133 callbacks suppressed [ 652.494033][T19557] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3534: Detected aborted journal [ 652.565723][T19570] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3537: Detected aborted journal [ 652.583896][T19569] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3538: Detected aborted journal [ 652.597730][T19571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3539: Detected aborted journal [ 652.633070][T19557] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3534: Detected aborted journal [ 652.652353][T19570] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3537: Detected aborted journal [ 652.668956][T19569] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3538: Detected aborted journal [ 652.686788][T19571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3539: Detected aborted journal [ 652.701624][T19557] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3534: Detected aborted journal [ 652.744897][T19557] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3534: Detected aborted journal [ 653.026962][T19579] EXT4-fs: 110 callbacks suppressed [ 653.026978][T19579] EXT4-fs (sda1): Remounting filesystem read-only [ 653.057132][T19583] EXT4-fs (sda1): Remounting filesystem read-only [ 653.083613][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 653.100389][T19583] EXT4-fs (sda1): Remounting filesystem read-only [ 653.154949][T19586] EXT4-fs (sda1): Remounting filesystem read-only [ 653.169867][T19585] EXT4-fs (sda1): Remounting filesystem read-only [ 653.211962][T19586] EXT4-fs (sda1): Remounting filesystem read-only [ 653.242902][T19587] loop7: detected capacity change from 0 to 8 [ 653.274261][T19589] EXT4-fs (sda1): Remounting filesystem read-only [ 653.366073][T19587] SQUASHFS error: Unable to read inode 0x11f [ 653.379597][T19589] EXT4-fs (sda1): Remounting filesystem read-only [ 653.426004][T19585] EXT4-fs (sda1): Remounting filesystem read-only [ 654.039235][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3550'. [ 654.391357][T19627] Cannot find set identified by id 0 to match [ 655.640388][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3575'. [ 655.949734][ T4270] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 656.378041][ T4270] usb 4-1: unable to get BOS descriptor or descriptor too short [ 656.413258][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3582'. [ 656.509561][ T4270] usb 4-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 656.568042][ T4270] usb 4-1: config 189 has 0 interfaces, different from the descriptor's value: 1 [ 656.788549][ T4270] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 656.847080][ T4270] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 657.687850][ T4270] usb 4-1: Product: syz [ 657.697945][ T4270] usb 4-1: Manufacturer: syz [ 657.728845][ T4270] usb 4-1: SerialNumber: syz [ 657.929514][T19710] EXT4-fs error: 134 callbacks suppressed [ 657.929529][T19710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3590: Detected aborted journal [ 657.994305][T19711] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3591: Detected aborted journal [ 658.072367][T19710] EXT4-fs: 97 callbacks suppressed [ 658.072383][T19710] EXT4-fs (sda1): Remounting filesystem read-only [ 658.087252][T19711] EXT4-fs (sda1): Remounting filesystem read-only [ 658.151526][T19711] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3591: Detected aborted journal [ 658.170281][T19710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3590: Detected aborted journal [ 658.249554][T19711] EXT4-fs (sda1): Remounting filesystem read-only [ 658.258379][T19710] EXT4-fs (sda1): Remounting filesystem read-only [ 658.305939][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 658.329988][T19710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3590: Detected aborted journal [ 658.392942][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 658.412009][T19710] EXT4-fs (sda1): Remounting filesystem read-only [ 658.465427][T19710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3590: Detected aborted journal [ 658.537037][T19710] EXT4-fs (sda1): Remounting filesystem read-only [ 658.586437][T19710] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3590: Detected aborted journal [ 658.664374][T19710] EXT4-fs (sda1): Remounting filesystem read-only [ 658.736884][T19716] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3592: Detected aborted journal [ 658.755528][ T26] audit: type=1326 audit(1792593898.563:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 658.779777][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.814429][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 658.833256][T19710] EXT4-fs (sda1): Remounting filesystem read-only [ 658.848370][T19710] EXT4-fs (sda1): Remounting filesystem read-only [ 659.047486][ T26] audit: type=1326 audit(1792593898.663:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 659.220184][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3595'. [ 659.250084][ T26] audit: type=1326 audit(1792593898.663:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 659.489069][ T26] audit: type=1326 audit(1792593898.663:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 659.513270][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.724430][ T26] audit: type=1326 audit(1792593898.663:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 659.748629][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.947557][ T26] audit: type=1326 audit(1792593898.663:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 660.139624][ T26] audit: type=1326 audit(1792593898.663:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 660.163724][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.335990][ T26] audit: type=1326 audit(1792593898.663:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 660.360224][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.551672][ T26] audit: type=1326 audit(1792593898.663:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 660.707375][ T26] audit: type=1326 audit(1792593898.663:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19710 comm="syz.4.3590" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072dd2d559 code=0x7ffc0000 [ 660.789526][ T4270] usb 4-1: USB disconnect, device number 21 [ 661.289772][T19769] loop3: detected capacity change from 0 to 512 [ 661.431418][T19769] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 661.512385][T19769] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.471909][T19796] loop3: detected capacity change from 0 to 16 [ 662.542418][T19796] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 662.737716][T19800] 9pnet_virtio: no channels available for device syz [ 662.763999][T19801] loop3: detected capacity change from 0 to 1024 [ 662.953048][T19804] EXT4-fs error: 115 callbacks suppressed [ 662.953062][T19804] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3628: Detected aborted journal [ 663.063133][T19804] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3628: Detected aborted journal [ 663.078919][T19806] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3629: Detected aborted journal [ 663.145750][T19804] EXT4-fs: 102 callbacks suppressed [ 663.145765][T19804] EXT4-fs (sda1): Remounting filesystem read-only [ 663.262814][T19806] EXT4-fs (sda1): Remounting filesystem read-only [ 663.293434][T19810] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3630: Detected aborted journal [ 663.311143][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 663.359529][T19813] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3631: Detected aborted journal [ 663.373293][T19806] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3629: Detected aborted journal [ 663.396040][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 663.408562][T19810] EXT4-fs (sda1): Remounting filesystem read-only [ 663.436571][T19813] EXT4-fs (sda1): Remounting filesystem read-only [ 663.460274][T19810] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3630: Detected aborted journal [ 663.509179][T19813] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3631: Detected aborted journal [ 663.541401][T19806] EXT4-fs (sda1): Remounting filesystem read-only [ 663.548956][T19810] EXT4-fs (sda1): Remounting filesystem read-only [ 663.584941][T19813] EXT4-fs (sda1): Remounting filesystem read-only [ 663.597446][T19810] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3630: Detected aborted journal [ 663.648720][T19806] EXT4-fs (sda1): Remounting filesystem read-only [ 663.797103][T19810] EXT4-fs (sda1): Remounting filesystem read-only [ 665.850844][T19835] FAULT_INJECTION: forcing a failure. [ 665.850844][T19835] name failslab, interval 1, probability 0, space 0, times 0 [ 666.076526][T19835] CPU: 0 PID: 19835 Comm: syz.7.3635 Not tainted syzkaller #0 [ 666.084058][T19835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 666.094127][T19835] Call Trace: [ 666.097414][T19835] [ 666.100351][T19835] dump_stack_lvl+0x188/0x250 [ 666.105042][T19835] ? show_regs_print_info+0x20/0x20 [ 666.110246][T19835] ? load_image+0x410/0x410 [ 666.114758][T19835] ? __might_sleep+0xf0/0xf0 [ 666.119354][T19835] ? __lock_acquire+0x7d40/0x7d40 [ 666.124389][T19835] should_fail+0x383/0x4b0 [ 666.128814][T19835] should_failslab+0x5/0x20 [ 666.133318][T19835] slab_pre_alloc_hook+0x51/0xc0 [ 666.138264][T19835] __kmalloc+0x6b/0x340 [ 666.142424][T19835] ? ops_init+0x8a/0x5f0 [ 666.146754][T19835] ops_init+0x8a/0x5f0 [ 666.150835][T19835] setup_net+0x39e/0xa10 [ 666.155103][T19835] ? copy_net_ns+0x5b0/0x5b0 [ 666.159700][T19835] ? copy_net_ns+0x324/0x5b0 [ 666.164294][T19835] ? down_read_killable+0x1ce/0x340 [ 666.169504][T19835] copy_net_ns+0x33e/0x5b0 [ 666.173931][T19835] create_new_namespaces+0x3ce/0x700 [ 666.179234][T19835] unshare_nsproxy_namespaces+0x116/0x160 [ 666.184961][T19835] ksys_unshare+0x4f6/0x8e0 [ 666.189467][T19835] ? __lock_acquire+0x7d40/0x7d40 [ 666.194503][T19835] ? sighand_ctor+0x40/0x40 [ 666.199035][T19835] ? lock_chain_count+0x20/0x20 [ 666.203904][T19835] ? syscall_enter_from_user_mode+0x21/0x70 [ 666.209837][T19835] __x64_sys_unshare+0x34/0x40 [ 666.214605][T19835] do_syscall_64+0x4c/0xa0 [ 666.219030][T19835] ? clear_bhb_loop+0x30/0x80 [ 666.223716][T19835] ? clear_bhb_loop+0x30/0x80 [ 666.228401][T19835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 666.234311][T19835] RIP: 0033:0x7f9b193b2559 [ 666.238737][T19835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.258464][T19835] RSP: 002b:00007f9b17609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 666.266893][T19835] RAX: ffffffffffffffda RBX: 00007f9b19638fa0 RCX: 00007f9b193b2559 [ 666.274873][T19835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 666.282848][T19835] RBP: 00007f9b19449b20 R08: 0000000000000000 R09: 0000000000000000 [ 666.290822][T19835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.298792][T19835] R13: 00007f9b19639038 R14: 00007f9b19638fa0 R15: 00007ffedfffe268 [ 666.306784][T19835] [ 666.572157][T19846] device veth1_macvtap left promiscuous mode [ 666.650720][T19846] device macsec0 entered promiscuous mode [ 666.732960][T19849] device veth1_macvtap entered promiscuous mode [ 666.750458][T19851] jffs2: notice: (19851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 666.821842][T19849] device macsec0 left promiscuous mode [ 667.000937][T19855] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 667.810909][ T4254] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 667.979848][T19880] EXT4-fs error: 103 callbacks suppressed [ 667.979861][T19880] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3653: Detected aborted journal [ 668.114090][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 668.170718][ T4173] EXT4-fs: 92 callbacks suppressed [ 668.170731][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 668.195775][T19880] EXT4-fs (sda1): Remounting filesystem read-only [ 668.202811][ T4254] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.234504][ T4254] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 668.262403][T19883] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3654: Detected aborted journal [ 668.325742][ T4254] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 668.340573][T19883] EXT4-fs (sda1): Remounting filesystem read-only [ 668.378944][T19883] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3654: Detected aborted journal [ 668.391356][ T4254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.426005][T19880] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3653: Detected aborted journal [ 668.477792][T19883] EXT4-fs (sda1): Remounting filesystem read-only [ 668.489073][ T4254] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 668.523549][T19590] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 668.596624][T19590] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 668.609593][T19880] EXT4-fs (sda1): Remounting filesystem read-only [ 668.631857][T19887] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3655: Detected aborted journal [ 668.674046][T19590] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 668.691514][T19873] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3650: Detected aborted journal [ 668.728050][T19887] EXT4-fs (sda1): Remounting filesystem read-only [ 668.760452][T19873] EXT4-fs (sda1): Remounting filesystem read-only [ 668.772287][T19887] EXT4-fs (sda1): Remounting filesystem read-only [ 668.803177][T19880] EXT4-fs (sda1): Remounting filesystem read-only [ 668.811095][T19873] EXT4-fs (sda1): Remounting filesystem read-only [ 669.710096][T19899] siw: device registration error -23 [ 670.187131][T19918] loop7: detected capacity change from 0 to 512 [ 670.352871][T19918] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 670.520420][T19918] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.590221][ T4250] usb 4-1: USB disconnect, device number 22 [ 671.485205][T19948] netlink: 'syz.9.3677': attribute type 30 has an invalid length. [ 671.524806][T19950] digital: digital_start_poll: Unknown protocol [ 671.738363][T19954] usbcore.quirks: string doesn't fit in 127 chars. [ 671.771990][ T3851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.045507][T19977] EXT4-fs error: 112 callbacks suppressed [ 673.045521][T19977] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3687: Detected aborted journal [ 673.063473][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0 [ 673.179289][T19977] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3687: Detected aborted journal [ 673.249831][T19977] EXT4-fs: 88 callbacks suppressed [ 673.249846][T19977] EXT4-fs (sda1): Remounting filesystem read-only [ 673.290483][T19980] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3688: Detected aborted journal [ 673.377367][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 673.400016][T19977] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3687: Detected aborted journal [ 673.438141][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 673.471953][T19977] EXT4-fs (sda1): Remounting filesystem read-only [ 673.480863][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 673.523138][T19980] EXT4-fs (sda1): Remounting filesystem read-only [ 673.554904][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 673.623162][T19982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3689: Detected aborted journal [ 673.664553][T19984] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3690: Detected aborted journal [ 673.677629][T19983] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3699: Detected aborted journal [ 673.690242][T19980] EXT4-fs (sda1): Remounting filesystem read-only [ 673.719940][T19982] EXT4-fs (sda1): Remounting filesystem read-only [ 673.747763][T19984] EXT4-fs (sda1): Remounting filesystem read-only [ 673.759734][T19985] EXT4-fs (sda1): Remounting filesystem read-only [ 673.781897][T19982] EXT4-fs (sda1): Remounting filesystem read-only [ 674.419108][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3694'. [ 675.562072][T20037] device syzkaller0 entered promiscuous mode [ 676.753495][T20077] loop3: detected capacity change from 0 to 512 [ 677.383048][T20077] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 677.502812][T20077] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.074244][T20099] EXT4-fs error: 132 callbacks suppressed [ 678.074259][T20099] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3734: Detected aborted journal [ 678.196527][T20101] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3735: Detected aborted journal [ 678.233050][T20099] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3734: Detected aborted journal [ 678.262063][T20099] EXT4-fs: 109 callbacks suppressed [ 678.262078][T20099] EXT4-fs (sda1): Remounting filesystem read-only [ 678.304671][T20101] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3735: Detected aborted journal [ 678.366883][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 678.433194][T20101] EXT4-fs (sda1): Remounting filesystem read-only [ 678.461333][T20105] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3736: Detected aborted journal [ 678.472585][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 678.512200][T20106] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3737: Detected aborted journal [ 678.528750][T20107] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3738: Detected aborted journal [ 678.568460][T20105] EXT4-fs (sda1): Remounting filesystem read-only [ 678.583093][T20108] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3739: Detected aborted journal [ 678.614006][T20105] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3736: Detected aborted journal [ 678.629593][T20106] EXT4-fs (sda1): Remounting filesystem read-only [ 678.636409][T20107] EXT4-fs (sda1): Remounting filesystem read-only [ 678.660976][T20108] EXT4-fs (sda1): Remounting filesystem read-only [ 678.669129][T20106] EXT4-fs (sda1): Remounting filesystem read-only [ 678.676717][T20107] EXT4-fs (sda1): Remounting filesystem read-only [ 678.699294][T20105] EXT4-fs (sda1): Remounting filesystem read-only [ 679.152642][T20135] loop3: detected capacity change from 0 to 512 [ 679.193130][T20137] bridge0: port 3(team0) entered blocking state [ 679.252013][T20137] bridge0: port 3(team0) entered disabled state [ 679.281610][T20135] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 679.316817][T20137] device team0 entered promiscuous mode [ 679.340908][T20137] device team_slave_0 entered promiscuous mode [ 679.364070][T20135] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.421915][T20137] bridge0: port 3(team0) entered blocking state [ 679.428293][T20137] bridge0: port 3(team0) entered forwarding state [ 681.358031][T20242] bridge0: port 3(bond0) entered blocking state [ 681.405771][T20242] bridge0: port 3(bond0) entered disabled state [ 681.451632][T20242] device bond0 entered promiscuous mode [ 681.477697][T20242] device bond_slave_0 entered promiscuous mode [ 681.484069][T20251] loop3: detected capacity change from 0 to 16 [ 681.511258][T20242] device bond_slave_1 entered promiscuous mode [ 681.539781][T20251] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 681.589782][T20242] bridge0: port 3(bond0) entered blocking state [ 681.596179][T20242] bridge0: port 3(bond0) entered forwarding state [ 681.638002][T20252] netlink: 'syz.9.3782': attribute type 10 has an invalid length. [ 681.722799][T20261] loop3: detected capacity change from 0 to 1024 [ 681.770259][T20252] device wlan1 entered promiscuous mode [ 681.817174][T20252] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 681.874519][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 681.874531][ T26] audit: type=1800 audit(1792593921.686:558): pid=20261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3785" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 682.161879][T20273] batman_adv: batadv0: Adding interface: syz_tun [ 682.197579][T20273] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.390993][T20273] batman_adv: batadv0: Interface activated: syz_tun [ 682.740626][T20303] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 682.806309][T20307] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 682.864872][ T7040] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 682.944546][T20303] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 683.026343][T20303] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 683.119469][T20307] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 683.134685][ T7040] usb 4-1: Using ep0 maxpacket: 8 [ 683.140101][T20324] EXT4-fs error: 220 callbacks suppressed [ 683.140113][T20324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3810: Detected aborted journal [ 683.209123][T20303] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 683.252597][T20324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3810: Detected aborted journal [ 683.263998][ T7040] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.277419][T20303] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 683.321490][T20324] EXT4-fs: 183 callbacks suppressed [ 683.321505][T20324] EXT4-fs (sda1): Remounting filesystem read-only [ 683.376900][T20303] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 683.454853][ T7040] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 683.473226][T20303] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 683.496607][ T7040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.520644][T20301] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3802: Detected aborted journal [ 683.544655][ T7040] usb 4-1: Product: syz [ 683.562266][ T7040] usb 4-1: Manufacturer: syz [ 683.585147][T20322] device syzkaller0 left promiscuous mode [ 683.591710][T20301] EXT4-fs (sda1): Remounting filesystem read-only [ 683.598681][ T7040] usb 4-1: SerialNumber: syz [ 683.619021][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 683.643659][T20327] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3811: Detected aborted journal [ 683.656443][T20301] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3802: Detected aborted journal [ 683.697129][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 683.718806][T20301] EXT4-fs (sda1): Remounting filesystem read-only [ 683.739331][T20327] EXT4-fs (sda1): Remounting filesystem read-only [ 683.762633][T20301] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3802: Detected aborted journal [ 683.776423][ T3558] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 683.790752][T20327] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3811: Detected aborted journal [ 683.842542][T20301] EXT4-fs (sda1): Remounting filesystem read-only [ 683.858877][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 683.874757][T20327] EXT4-fs (sda1): Remounting filesystem read-only [ 683.891484][T20301] EXT4-fs (sda1): Remounting filesystem read-only [ 683.899402][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 683.937420][T20330] EXT4-fs (sda1): Remounting filesystem read-only [ 683.994848][ T7040] usb 4-1: 1:1 : bogus bTerminalLink 7 [ 684.024828][ T7040] usb 4-1: unit 119 not found! [ 684.074145][ T7040] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 684.123025][ T7040] usb 4-1: USB disconnect, device number 23 [ 684.367442][ T4254] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 684.594344][T20359] batman_adv: batadv0: Adding interface: dummy0 [ 684.612516][T20359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.680251][T20359] batman_adv: batadv0: Interface activated: dummy0 [ 684.728207][T20360] batadv0: mtu less than device minimum [ 684.755717][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.768583][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.780348][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.792064][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.803771][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.815510][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.827284][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.839038][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.850747][T20360] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 684.894679][ T4254] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.086800][ T4254] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.132455][ T4254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.176859][ T4254] usb 8-1: Product: syz [ 685.181070][ T4254] usb 8-1: Manufacturer: syz [ 685.222230][ T4254] usb 8-1: SerialNumber: syz [ 685.648133][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.866166][ T4254] cdc_ncm 8-1:1.0: bind() failure [ 685.904583][ T4254] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 686.149260][ T4250] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 686.184551][ T4254] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 686.224499][ T4254] usbtest: probe of 8-1:1.1 failed with error -71 [ 686.259146][ T4254] usb 8-1: USB disconnect, device number 18 [ 686.404906][ T4250] usb 4-1: Using ep0 maxpacket: 8 [ 686.534581][ T4250] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.572904][ T4250] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 686.640272][T20418] block device autoloading is deprecated and will be removed. [ 686.776383][ T4250] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 686.803192][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.839200][ T4250] usb 4-1: Product: syz [ 686.853651][ T4250] usb 4-1: Manufacturer: syz [ 686.883966][ T4250] usb 4-1: SerialNumber: syz [ 686.956038][T20434] block device autoloading is deprecated and will be removed. [ 687.001763][T20439] EXT4-fs (md6): unable to read superblock [ 687.284429][ T4250] usb 4-1: 1:1 : bogus bTerminalLink 7 [ 687.314994][ T4250] usb 4-1: unit 119 not found! [ 687.379847][ T4250] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 687.423929][ T4250] usb 4-1: USB disconnect, device number 24 [ 687.579616][T20464] block device autoloading is deprecated and will be removed. [ 688.226626][T20481] EXT4-fs error: 200 callbacks suppressed [ 688.226640][T20481] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3865: Detected aborted journal [ 688.282382][T20482] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3866: Detected aborted journal [ 688.316485][T20483] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3867: Detected aborted journal [ 688.337886][T20481] EXT4-fs: 135 callbacks suppressed [ 688.337901][T20481] EXT4-fs (sda1): Remounting filesystem read-only [ 688.356830][T20482] EXT4-fs (sda1): Remounting filesystem read-only [ 688.370141][T20483] EXT4-fs (sda1): Remounting filesystem read-only [ 688.390163][T20482] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.3866: Detected aborted journal [ 688.420341][T20483] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3867: Detected aborted journal [ 688.432809][T20481] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3865: Detected aborted journal [ 688.457291][T20487] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3868: Detected aborted journal [ 688.472103][T20482] EXT4-fs (sda1): Remounting filesystem read-only [ 688.480681][T20481] EXT4-fs (sda1): Remounting filesystem read-only [ 688.490468][T20483] EXT4-fs (sda1): Remounting filesystem read-only [ 688.507376][T20487] EXT4-fs (sda1): Remounting filesystem read-only [ 688.560754][T20487] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3868: Detected aborted journal [ 688.610460][T20489] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.3869: Detected aborted journal [ 688.642007][T20487] EXT4-fs (sda1): Remounting filesystem read-only [ 688.651921][T20490] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3870: Detected aborted journal [ 688.675098][T20487] EXT4-fs (sda1): Remounting filesystem read-only [ 688.693824][T20489] EXT4-fs (sda1): Remounting filesystem read-only [ 689.153564][ T4270] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 689.304521][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 689.315871][T20529] FAULT_INJECTION: forcing a failure. [ 689.315871][T20529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.351576][T20528] bond0: Unable to set down delay as MII monitoring is disabled [ 689.370826][T20529] CPU: 0 PID: 20529 Comm: syz.3.3884 Not tainted syzkaller #0 [ 689.378326][T20529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 689.388389][T20529] Call Trace: [ 689.391671][T20529] [ 689.394604][T20529] dump_stack_lvl+0x188/0x250 [ 689.399291][T20529] ? show_regs_print_info+0x20/0x20 [ 689.404494][T20529] ? load_image+0x410/0x410 [ 689.409000][T20529] ? __lock_acquire+0x7d40/0x7d40 [ 689.414047][T20529] should_fail+0x383/0x4b0 [ 689.418503][T20529] strncpy_from_user+0x32/0x350 [ 689.423378][T20529] getname_flags+0xf2/0x4f0 [ 689.427899][T20529] user_path_at_empty+0x2a/0x190 [ 689.432852][T20529] __se_sys_mount+0x2a4/0x3d0 [ 689.437536][T20529] ? __x64_sys_mount+0xc0/0xc0 [ 689.442305][T20529] ? lockdep_hardirqs_on+0x94/0x140 [ 689.447506][T20529] ? __x64_sys_mount+0x1c/0xc0 [ 689.452289][T20529] do_syscall_64+0x4c/0xa0 [ 689.456718][T20529] ? clear_bhb_loop+0x30/0x80 [ 689.461391][T20529] ? clear_bhb_loop+0x30/0x80 [ 689.466080][T20529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 689.471977][T20529] RIP: 0033:0x7fa40f60d559 [ 689.476413][T20529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.496020][T20529] RSP: 002b:00007fa40d864028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 689.504440][T20529] RAX: ffffffffffffffda RBX: 00007fa40f893fa0 RCX: 00007fa40f60d559 [ 689.512441][T20529] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 689.520411][T20529] RBP: 00007fa40f6a4b20 R08: 0000000000000000 R09: 0000000000000000 [ 689.528392][T20529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.536385][T20529] R13: 00007fa40f894038 R14: 00007fa40f893fa0 R15: 00007ffe67348818 [ 689.544378][T20529] [ 689.583944][ T4270] usb 8-1: Using ep0 maxpacket: 8 [ 689.670409][T20536] overlayfs: failed to clone upperpath [ 689.680434][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3888'. [ 689.714193][ T4270] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.809158][T20545] net_ratelimit: 10 callbacks suppressed [ 689.809173][T20545] ip_tables: iptables: counters copy to user failed while replacing table [ 689.914066][ T4270] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 689.952960][ T4270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.993557][ T4270] usb 8-1: Product: syz [ 690.015846][ T4270] usb 8-1: Manufacturer: syz [ 690.048390][ T4270] usb 8-1: SerialNumber: syz [ 690.111381][T20558] netlink: 'syz.9.3898': attribute type 8 has an invalid length. [ 690.352484][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3902'. [ 690.435080][ T4270] usb 8-1: 1:1 : bogus bTerminalLink 7 [ 690.464346][ T4270] usb 8-1: unit 119 not found! [ 690.537184][ T4270] snd-usb-audio: probe of 8-1:1.2 failed with error -16 [ 690.579338][ T4270] usb 8-1: USB disconnect, device number 19 [ 690.757965][T20589] block device autoloading is deprecated and will be removed. [ 691.066995][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 691.794702][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3929'. [ 691.857826][T20638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3931'. [ 692.043115][T20651] ip_tables: iptables: counters copy to user failed while replacing table [ 692.251541][T20654] loop3: detected capacity change from 0 to 8192 [ 692.321965][T20654] loop3: p1[EZD] p3 p4 [ 692.339604][T20654] loop3: partition table partially beyond EOD, truncated [ 692.379919][T20654] loop3: p1 size 67043332 extends beyond EOD, truncated [ 692.428930][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3943'. [ 692.444834][T20654] loop3: p3 start 33556736 is beyond EOD, truncated [ 692.481619][T20654] loop3: p4 size 32769 extends beyond EOD, truncated [ 692.566568][T20671] netlink: 'syz.7.3944': attribute type 1 has an invalid length. [ 692.712298][T20671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.731396][T20682] futex_wake_op: syz.3.3947 tries to shift op by -1; fix this program [ 692.898761][T20078] udevd[20078]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 692.921780][T20343] udevd[20343]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 692.962943][T20674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.006394][T20674] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 693.048149][T20078] udevd[20078]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 693.079523][T20343] udevd[20343]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 693.095908][T20674] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 693.146059][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3944'. [ 693.198248][T20681] device bond1 entered promiscuous mode [ 693.237852][T20699] EXT4-fs error: 214 callbacks suppressed [ 693.237866][T20699] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3955: Detected aborted journal [ 693.263565][ T4270] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 693.305815][T20701] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3956: Detected aborted journal [ 693.346267][T20701] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3956: Detected aborted journal [ 693.377992][T20701] EXT4-fs: 181 callbacks suppressed [ 693.378007][T20701] EXT4-fs (sda1): Remounting filesystem read-only [ 693.391859][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 693.422293][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 693.438965][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3956'. [ 693.455814][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 693.492993][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 693.524384][ T4270] usb 4-1: Using ep0 maxpacket: 8 [ 693.576509][T20704] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3957: Detected aborted journal [ 693.592840][T20705] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3958: Detected aborted journal [ 693.608699][T20704] EXT4-fs (sda1): Remounting filesystem read-only [ 693.615739][T20705] EXT4-fs (sda1): Remounting filesystem read-only [ 693.638745][T20704] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.3957: Detected aborted journal [ 693.663750][ T4270] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.686606][T20705] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.3958: Detected aborted journal [ 693.718562][T20704] EXT4-fs (sda1): Remounting filesystem read-only [ 693.731284][T20708] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.3959: Detected aborted journal [ 693.754424][T20705] EXT4-fs (sda1): Remounting filesystem read-only [ 693.768251][T20709] EXT4-fs (sda1): Remounting filesystem read-only [ 693.784160][T20705] EXT4-fs (sda1): Remounting filesystem read-only [ 693.800844][T20708] EXT4-fs (sda1): Remounting filesystem read-only [ 693.873674][ T4270] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 693.891698][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3961'. [ 693.919460][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.967423][ T4270] usb 4-1: Product: syz [ 693.995129][ T4270] usb 4-1: Manufacturer: syz [ 694.032327][ T4270] usb 4-1: SerialNumber: syz [ 694.105200][T20723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 694.182448][T20723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.220934][T20723] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 694.262207][T20723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.413620][ T4270] usb 4-1: 1:1 : bogus bTerminalLink 7 [ 694.443571][ T4270] usb 4-1: unit 119 not found! [ 694.520349][ T4270] snd-usb-audio: probe of 4-1:1.2 failed with error -16 [ 694.576543][ T4270] usb 4-1: USB disconnect, device number 25 [ 694.896051][T20763] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3981'. [ 695.138138][T20775] xt_CT: No such helper "snmp_trap" [ 695.259337][T20783] ip_tables: iptables: counters copy to user failed while replacing table [ 695.415396][T20795] loop7: detected capacity change from 0 to 164 [ 695.484904][T20795] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 695.704161][T20798] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.867512][T20809] X.509: Couldn't decode AuthKeyIdentifier [ 695.956449][T20813] loop7: detected capacity change from 0 to 512 [ 696.126803][T20813] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000103) [ 696.176732][T20819] sctp: [Deprecated]: syz.9.4002 (pid 20819) Use of int in max_burst socket option deprecated. [ 696.176732][T20819] Use struct sctp_assoc_value instead [ 696.213429][T20813] FAT-fs (loop7): Filesystem has been set read-only [ 697.112593][ T26] audit: type=1326 audit(1792593936.927:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.4011" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b193b2559 code=0x7ffc0000 [ 697.226187][T20846] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 697.244386][ T26] audit: type=1326 audit(1792593936.967:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.4011" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9b193b2559 code=0x7ffc0000 [ 697.485495][ T26] audit: type=1326 audit(1792593936.967:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.4011" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b193b2559 code=0x7ffc0000 [ 697.679534][ T26] audit: type=1326 audit(1792593936.967:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.4011" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b193b2559 code=0x7ffc0000 [ 697.795779][T20861] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4017'. [ 697.891609][ T26] audit: type=1326 audit(1792593936.967:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.4011" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f9b193b2559 code=0x7ffc0000 [ 697.972306][T20864] rxe_eth0 speed is unknown, defaulting to 1000 [ 698.055972][T20868] FAULT_INJECTION: forcing a failure. [ 698.055972][T20868] name failslab, interval 1, probability 0, space 0, times 0 [ 698.074597][ T26] audit: type=1326 audit(1792593936.967:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.4011" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b193b2559 code=0x7ffc0000 [ 698.158070][T20868] CPU: 0 PID: 20868 Comm: syz.7.4020 Not tainted syzkaller #0 [ 698.165579][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 698.175641][T20868] Call Trace: [ 698.178926][T20868] [ 698.181861][T20868] dump_stack_lvl+0x188/0x250 [ 698.186550][T20868] ? show_regs_print_info+0x20/0x20 [ 698.191753][T20868] ? load_image+0x410/0x410 [ 698.196260][T20868] ? __might_sleep+0xf0/0xf0 [ 698.200854][T20868] ? __lock_acquire+0x7d40/0x7d40 [ 698.205902][T20868] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 698.211889][T20868] should_fail+0x383/0x4b0 [ 698.216312][T20868] should_failslab+0x5/0x20 [ 698.220819][T20868] slab_pre_alloc_hook+0x51/0xc0 [ 698.225759][T20868] kmem_cache_alloc_trace+0x47/0x290 [ 698.231058][T20868] ? igmpv3_add_delrec+0xbe/0x560 [ 698.236125][T20868] igmpv3_add_delrec+0xbe/0x560 [ 698.240986][T20868] __igmp_group_dropped+0x706/0x910 [ 698.246280][T20868] ? ip_mc_hash_remove+0x200/0x200 [ 698.251414][T20868] ? lockdep_rtnl_is_held+0x22/0x30 [ 698.256635][T20868] ? ip_mc_hash_remove+0x1c9/0x200 [ 698.261747][T20868] __ip_mc_dec_group+0x1ef/0x430 [ 698.266702][T20868] ip_mc_drop_socket+0x1d8/0x270 [ 698.271921][T20868] inet_release+0x47/0x180 [ 698.276347][T20868] sock_close+0xbf/0x210 [ 698.280598][T20868] ? sock_mmap+0x90/0x90 [ 698.284845][T20868] __fput+0x212/0x8c0 [ 698.288852][T20868] task_work_run+0x125/0x1a0 [ 698.293450][T20868] exit_to_user_mode_loop+0x10f/0x130 [ 698.298826][T20868] exit_to_user_mode_prepare+0xee/0x180 [ 698.304375][T20868] syscall_exit_to_user_mode+0x16/0x40 [ 698.309836][T20868] do_syscall_64+0x58/0xa0 [ 698.314259][T20868] ? clear_bhb_loop+0x30/0x80 [ 698.318939][T20868] ? clear_bhb_loop+0x30/0x80 [ 698.323631][T20868] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 698.329562][T20868] RIP: 0033:0x7f9b193b2559 [ 698.333991][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.353604][T20868] RSP: 002b:00007f9b17609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 698.362047][T20868] RAX: 0000000000000000 RBX: 00007f9b19638fa0 RCX: 00007f9b193b2559 [ 698.370040][T20868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 698.378010][T20868] RBP: 00007f9b19449b20 R08: 0000000000000000 R09: 0000000000000000 [ 698.385981][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.393957][T20868] R13: 00007f9b19639038 R14: 00007f9b19638fa0 R15: 00007ffedfffe268 [ 698.401945][T20868] [ 698.487564][T20870] EXT4-fs error: 162 callbacks suppressed [ 698.487579][T20870] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4021: Detected aborted journal [ 698.506895][ T26] audit: type=1326 audit(1792593936.967:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20842 comm="syz.7.4011" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b193b2559 code=0x7ffc0000 [ 698.588562][T20871] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.4022: Detected aborted journal [ 698.616254][T20872] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4023: Detected aborted journal [ 698.653096][T20871] EXT4-fs: 140 callbacks suppressed [ 698.653111][T20871] EXT4-fs (sda1): Remounting filesystem read-only [ 698.675483][T20862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4018: Detected aborted journal [ 698.701082][T20872] EXT4-fs (sda1): Remounting filesystem read-only [ 698.714821][T20871] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.4022: Detected aborted journal [ 698.732650][T20872] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4023: Detected aborted journal [ 698.750840][T20870] EXT4-fs (sda1): Remounting filesystem read-only [ 698.763074][T20862] EXT4-fs (sda1): Remounting filesystem read-only [ 698.769643][T20862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4018: Detected aborted journal [ 698.792997][T20871] EXT4-fs (sda1): Remounting filesystem read-only [ 698.801888][T20870] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4021: Detected aborted journal [ 698.814003][T20872] EXT4-fs (sda1): Remounting filesystem read-only [ 698.858976][T20862] EXT4-fs (sda1): Remounting filesystem read-only [ 698.883109][T20862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4018: Detected aborted journal [ 698.942746][T20879] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4024: Detected aborted journal [ 698.954188][T20870] EXT4-fs (sda1): Remounting filesystem read-only [ 698.967472][T20862] EXT4-fs (sda1): Remounting filesystem read-only [ 698.997709][T20862] EXT4-fs (sda1): Remounting filesystem read-only [ 699.058542][T20880] overlayfs: failed to clone lowerpath [ 700.596676][T13563] bond1: (slave syz_tun): Removing an active aggregator [ 700.644035][T13563] bond1: (slave syz_tun): Releasing backup interface [ 700.790545][T20922] ip_tables: iptables: counters copy to user failed while replacing table [ 700.830527][T20922] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4041'. [ 701.556451][T20946] FAULT_INJECTION: forcing a failure. [ 701.556451][T20946] name failslab, interval 1, probability 0, space 0, times 0 [ 701.662778][T20946] CPU: 0 PID: 20946 Comm: syz.7.4049 Not tainted syzkaller #0 [ 701.670277][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 701.680332][T20946] Call Trace: [ 701.683612][T20946] [ 701.686545][T20946] dump_stack_lvl+0x188/0x250 [ 701.691226][T20946] ? show_regs_print_info+0x20/0x20 [ 701.696429][T20946] ? load_image+0x410/0x410 [ 701.700935][T20946] ? __might_sleep+0xf0/0xf0 [ 701.705529][T20946] ? __lock_acquire+0x7d40/0x7d40 [ 701.710562][T20946] should_fail+0x383/0x4b0 [ 701.714984][T20946] should_failslab+0x5/0x20 [ 701.719490][T20946] slab_pre_alloc_hook+0x51/0xc0 [ 701.724441][T20946] ? copy_net_ns+0x13c/0x5b0 [ 701.729036][T20946] kmem_cache_alloc+0x3d/0x280 [ 701.733799][T20946] copy_net_ns+0x13c/0x5b0 [ 701.738235][T20946] create_new_namespaces+0x3ce/0x700 [ 701.743544][T20946] unshare_nsproxy_namespaces+0x116/0x160 [ 701.749267][T20946] ksys_unshare+0x4f6/0x8e0 [ 701.753768][T20946] ? __lock_acquire+0x7d40/0x7d40 [ 701.758799][T20946] ? sighand_ctor+0x40/0x40 [ 701.763304][T20946] ? lock_chain_count+0x20/0x20 [ 701.768176][T20946] ? syscall_enter_from_user_mode+0x21/0x70 [ 701.774084][T20946] __x64_sys_unshare+0x34/0x40 [ 701.778857][T20946] do_syscall_64+0x4c/0xa0 [ 701.783291][T20946] ? clear_bhb_loop+0x30/0x80 [ 701.787990][T20946] ? clear_bhb_loop+0x30/0x80 [ 701.792670][T20946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 701.798564][T20946] RIP: 0033:0x7f9b193b2559 [ 701.802978][T20946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.822577][T20946] RSP: 002b:00007f9b17609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 701.831013][T20946] RAX: ffffffffffffffda RBX: 00007f9b19638fa0 RCX: 00007f9b193b2559 [ 701.838988][T20946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000600 [ 701.846958][T20946] RBP: 00007f9b19449b20 R08: 0000000000000000 R09: 0000000000000000 [ 701.854944][T20946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.862925][T20946] R13: 00007f9b19639038 R14: 00007f9b19638fa0 R15: 00007ffedfffe268 [ 701.870912][T20946] [ 703.046386][ T26] audit: type=1326 audit(1792593942.868:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 703.185916][ T26] audit: type=1326 audit(1792593942.908:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 703.350843][ T26] audit: type=1326 audit(1792593942.908:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 703.395092][T20970] loop7: detected capacity change from 0 to 128 [ 703.498967][T20968] EXT4-fs error: 112 callbacks suppressed [ 703.498982][T20968] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4057: Detected aborted journal [ 703.556657][ T26] audit: type=1326 audit(1792593942.918:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 703.622064][T20968] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4057: Detected aborted journal [ 703.644087][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 703.671901][T20972] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 703.710869][T20968] EXT4-fs: 90 callbacks suppressed [ 703.710884][T20968] EXT4-fs (sda1): Remounting filesystem read-only [ 703.737040][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 703.756653][ T26] audit: type=1326 audit(1792593942.918:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 703.808776][T20973] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4060: Detected aborted journal [ 703.836512][T20968] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4057: Detected aborted journal [ 703.892367][T20973] EXT4-fs (sda1): Remounting filesystem read-only [ 703.902528][T20968] EXT4-fs (sda1): Remounting filesystem read-only [ 703.909660][T20968] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4057: Detected aborted journal [ 703.929451][T20974] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4059: Detected aborted journal [ 703.952846][T20975] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4058: Detected aborted journal [ 703.965625][T20973] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4060: Detected aborted journal [ 703.982387][ T26] audit: type=1326 audit(1792593942.918:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 704.036773][T20973] EXT4-fs (sda1): Remounting filesystem read-only [ 704.050485][T20968] EXT4-fs (sda1): Remounting filesystem read-only [ 704.058105][T20974] EXT4-fs (sda1): Remounting filesystem read-only [ 704.087019][T20968] EXT4-fs (sda1): Remounting filesystem read-only [ 704.093920][T20973] EXT4-fs (sda1): Remounting filesystem read-only [ 704.120743][T20975] EXT4-fs (sda1): Remounting filesystem read-only [ 704.137635][ T26] audit: type=1326 audit(1792593942.918:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 704.318522][ T26] audit: type=1326 audit(1792593942.918:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 704.500673][ T26] audit: type=1326 audit(1792593942.918:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 704.719431][ T26] audit: type=1326 audit(1792593942.918:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.9.4054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e349b1559 code=0x7ffc0000 [ 705.587596][T20997] 9pnet: Insufficient options for proto=fd [ 707.792371][T21013] xt_hashlimit: size too large, truncated to 1048576 [ 707.800178][T21016] loop7: detected capacity change from 0 to 16 [ 707.845698][T21013] xt_hashlimit: max too large, truncated to 1048576 [ 707.900954][T21016] erofs: (device loop7): mounted with root inode @ nid 36. [ 708.976263][ T4173] EXT4-fs error: 70 callbacks suppressed [ 708.976276][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 709.015783][T21021] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 709.027978][ T4173] EXT4-fs: 54 callbacks suppressed [ 709.027989][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 709.050245][T21022] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4075: Detected aborted journal [ 709.066836][T21023] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4076: Detected aborted journal [ 709.086560][T21025] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4078: Detected aborted journal [ 709.098921][T21024] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4077: Detected aborted journal [ 709.129048][T21022] EXT4-fs (sda1): Remounting filesystem read-only [ 709.140145][T21023] EXT4-fs (sda1): Remounting filesystem read-only [ 709.146966][T21025] EXT4-fs (sda1): Remounting filesystem read-only [ 709.154528][T21024] EXT4-fs (sda1): Remounting filesystem read-only [ 709.168903][T21022] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4075: Detected aborted journal [ 709.187761][T21024] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4077: Detected aborted journal [ 709.199767][T21023] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4076: Detected aborted journal [ 709.217786][T21024] EXT4-fs (sda1): Remounting filesystem read-only [ 709.227474][T21022] EXT4-fs (sda1): Remounting filesystem read-only [ 709.238790][T21023] EXT4-fs (sda1): Remounting filesystem read-only [ 709.265496][T21025] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4078: Detected aborted journal [ 709.315546][T21023] EXT4-fs (sda1): Remounting filesystem read-only [ 709.339687][T21025] EXT4-fs (sda1): Remounting filesystem read-only [ 710.422422][T21043] device bridge_slave_0 left promiscuous mode [ 710.463915][T21043] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.828805][T21054] FAULT_INJECTION: forcing a failure. [ 711.828805][T21054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 711.900864][T21054] CPU: 0 PID: 21054 Comm: syz.7.4084 Not tainted syzkaller #0 [ 711.908367][T21054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 711.918431][T21054] Call Trace: [ 711.921715][T21054] [ 711.924652][T21054] dump_stack_lvl+0x188/0x250 [ 711.929358][T21054] ? show_regs_print_info+0x20/0x20 [ 711.934561][T21054] ? load_image+0x410/0x410 [ 711.939092][T21054] ? __lock_acquire+0x7d40/0x7d40 [ 711.944127][T21054] should_fail+0x383/0x4b0 [ 711.948551][T21054] prepare_alloc_pages+0x1e3/0x5b0 [ 711.953669][T21054] __alloc_pages+0x11b/0x480 [ 711.958273][T21054] ? zone_statistics+0x170/0x170 [ 711.963249][T21054] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 711.969286][T21054] pcpu_populate_chunk+0x15d/0xc80 [ 711.974427][T21054] ? _find_next_bit+0x1a9/0x200 [ 711.979291][T21054] pcpu_alloc+0xcb6/0x16d0 [ 711.983775][T21054] bpf_map_alloc_percpu+0xc5/0x150 [ 711.988999][T21054] htab_map_alloc+0xce5/0x1670 [ 711.993818][T21054] map_create+0x481/0x2330 [ 711.998257][T21054] ? bpf_lsm_bpf+0x5/0x10 [ 712.002597][T21054] __sys_bpf+0x30a/0x6f0 [ 712.006850][T21054] ? bpf_link_show_fdinfo+0x380/0x380 [ 712.012245][T21054] __x64_sys_bpf+0x78/0x90 [ 712.016666][T21054] do_syscall_64+0x4c/0xa0 [ 712.021099][T21054] ? clear_bhb_loop+0x30/0x80 [ 712.025809][T21054] ? clear_bhb_loop+0x30/0x80 [ 712.030511][T21054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.036424][T21054] RIP: 0033:0x7f9b193b2559 [ 712.040862][T21054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.060474][T21054] RSP: 002b:00007f9b17609028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.068890][T21054] RAX: ffffffffffffffda RBX: 00007f9b19638fa0 RCX: 00007f9b193b2559 [ 712.076866][T21054] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 0004000000000000 [ 712.084842][T21054] RBP: 00007f9b19449b20 R08: 0000000000000000 R09: 0000000000000000 [ 712.092814][T21054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.100787][T21054] R13: 00007f9b19639038 R14: 00007f9b19638fa0 R15: 00007ffedfffe268 [ 712.108775][T21054] [ 714.963480][T21081] EXT4-fs error: 52 callbacks suppressed [ 714.963494][T21081] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4094: Detected aborted journal [ 714.984668][T21079] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4093: Detected aborted journal [ 715.005120][T21080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4092: Detected aborted journal [ 715.022849][T21082] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4091: Detected aborted journal [ 715.047090][T21078] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 715.059448][T21079] EXT4-fs: 38 callbacks suppressed [ 715.059459][T21079] EXT4-fs (sda1): Remounting filesystem read-only [ 715.076046][T21080] EXT4-fs (sda1): Remounting filesystem read-only [ 715.082806][T21082] EXT4-fs (sda1): Remounting filesystem read-only [ 715.090371][T21081] EXT4-fs (sda1): Remounting filesystem read-only [ 715.107548][T21080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4092: Detected aborted journal [ 715.132787][T21081] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4094: Detected aborted journal [ 715.144990][T21079] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4093: Detected aborted journal [ 715.157974][T21082] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4091: Detected aborted journal [ 715.173555][T21080] EXT4-fs (sda1): Remounting filesystem read-only [ 715.180270][T21082] EXT4-fs (sda1): Remounting filesystem read-only [ 715.188654][T21079] EXT4-fs (sda1): Remounting filesystem read-only [ 715.199394][T21081] EXT4-fs (sda1): Remounting filesystem read-only [ 715.208512][T21080] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4092: Detected aborted journal [ 715.255848][T21080] EXT4-fs (sda1): Remounting filesystem read-only [ 715.292820][T21080] EXT4-fs (sda1): Remounting filesystem read-only [ 720.504939][ T4173] EXT4-fs error: 33 callbacks suppressed [ 720.504952][ T4173] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 720.537575][T21110] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 720.550000][ T4173] EXT4-fs: 22 callbacks suppressed [ 720.550015][ T4173] EXT4-fs (sda1): Remounting filesystem read-only [ 720.576415][T21111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4103: Detected aborted journal [ 720.597525][T21112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4104: Detected aborted journal [ 720.619287][T21113] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4105: Detected aborted journal [ 720.635821][T21114] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4106: Detected aborted journal [ 720.652341][T21111] EXT4-fs (sda1): Remounting filesystem read-only [ 720.659692][T21114] EXT4-fs (sda1): Remounting filesystem read-only [ 720.669252][T21112] EXT4-fs (sda1): Remounting filesystem read-only [ 720.678202][T21113] EXT4-fs (sda1): Remounting filesystem read-only [ 720.692841][T21112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4104: Detected aborted journal [ 720.706594][T21111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.4103: Detected aborted journal [ 720.726068][T21114] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.4106: Detected aborted journal [ 720.741468][T21113] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4105: Detected aborted journal [ 720.756686][T21111] EXT4-fs (sda1): Remounting filesystem read-only [ 720.763939][T21112] EXT4-fs (sda1): Remounting filesystem read-only [ 720.775067][T21114] EXT4-fs (sda1): Remounting filesystem read-only [ 720.781797][T21113] EXT4-fs (sda1): Remounting filesystem read-only [ 722.577323][T21125] EXT4-fs (sda1): Remounting filesystem read-only [ 722.715973][T21132] Write-error on swap-device (8:0:273768) [ 722.736587][T21132] Write-error on swap-device (8:0:273776) Oct 21 14:46:02 syzkaller kern.alert kernel: [ 722.715973][T21132] Write-error on swap-device (8:0:273768) Oct 21 14:46:02 syz[ 722.758600][T21132] Write-error on swap-device (8:0:273784) kaller kern.alert kernel: [ 722.736587][T21132] Write-error on swap-device (8:0:273776) Oct 21 14:46:02 syzkaller kern.alert kernel: [ 722.75[ 722.776948][T21132] Write-error on swap-device (8:0:273792) 8600][T21132] Wr[ 722.784021][T21132] Write-error on swap-device (8:0:273800) ite-error on swap-device (8:0:273784) Oct 21 14:46:02 syzkaller kern.alert kern[ 722.796093][T21132] Write-error on swap-device (8:0:273808) el: [ 722.77694[ 722.803836][T21132] Write-error on swap-device (8:0:273816) 8][T21132] Write-error on swap-device (8:0:273792) Oct 21 14:46:02 syzkaller ke[ 722.816016][T21132] Write-error on swap-device (8:0:273824) rn.alert kernel: [ 722.784021][T21132] Write-error on swap-device (8:0:273800)[ 722.828907][T21132] Write-error on swap-device (8:0:273832) Oct 21 14:46:02 syzkaller kern.alert kernel: [ 722.796093][T21132] Write-error[ 722.841482][T21132] Write-error on swap-device (8:0:273840) on swap-device (8:0:273808) Oct 21 14:46:02 syzkaller kern.alert kernel: [ 722.803836][T21132] Write-error on swap-device (8:0:273816) Oct 21 14:46:02 syzkaller kern.alert kernel: [ 722.816016][T21132] Write-error on swap-device (8:0:273824) Oct 21 14:46:02 syzkaller kern.alert kernel: [ 722.828907][T21132] Write-error on swap-device (8:0:273832) Oct 21 14:46:02 syzkaller kern.alert kernel: [ 722.841482][T21132] Write-error on swap-device (8:0:273840) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=8 req=4046 state=1 status=67 (errno 9: Bad file descriptor) [ 725.557175][T12847] EXT4-fs error: 64 callbacks suppressed [ 725.557192][T12847] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 725.590474][T16179] batman_adv: batadv0: Interface deactivated: syz_tun [ 725.704902][T12847] EXT4-fs: 23 callbacks suppressed [ 725.704917][T12847] EXT4-fs (sda1): Remounting filesystem read-only [ 725.734038][T12847] EXT4-fs error (device sda1) in ext4_evict_inode:259: Journal has aborted [ 725.745784][T16179] batman_adv: batadv0: Removing interface: syz_tun [ 725.792929][T14633] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 725.828113][T12847] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm syz-executor: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 725.869783][T14633] EXT4-fs (sda1): Remounting filesystem read-only [ 725.876239][T14633] EXT4-fs error (device sda1) in ext4_evict_inode:259: Journal has aborted [ 725.949232][T12847] EXT4-fs error (device sda1): ext4_discard_preallocations:5142: comm syz-executor: Error -5 reading block bitmap for 2 [ 725.970383][T14633] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm syz-executor: Cannot read block bitmap - block_group = 2, block_bitmap = 131 [ 726.033755][T12847] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 726.049771][T14633] EXT4-fs error (device sda1): ext4_discard_preallocations:5142: comm syz-executor: Error -5 reading block bitmap for 2 [ 726.129984][T14633] EXT4-fs error (device sda1): ext4_wait_block_bitmap:572: comm syz-executor: Cannot read block bitmap - block_group = 3, block_bitmap = 132 [ 726.147111][T12847] EXT4-fs (sda1): Remounting filesystem read-only [ 726.214434][ T154] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.256625][T14633] EXT4-fs (sda1): Remounting filesystem read-only [ 726.320873][T21139] EXT4-fs (sda1): Remounting filesystem read-only [ 726.335458][T21141] EXT4-fs (sda1): Remounting filesystem read-only [ 726.367004][T21139] EXT4-fs (sda1): Remounting filesystem read-only [ 726.388419][T21141] EXT4-fs (sda1): Remounting filesystem read-only [ 726.404207][T14656] batman_adv: batadv0: Interface deactivated: syz_tun [ 726.447883][T14656] batman_adv: batadv0: Removing interface: syz_tun [ 726.495428][ T154] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.559192][ T154] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.632857][ T154] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.645174][T21141] EXT4-fs (sda1): Remounting filesystem read-only [ 727.233103][ T154] bond0: (slave wlan1): Releasing backup interface [ 727.252008][ T154] device wlan1 left promiscuous mode [ 727.479216][ T154] device hsr_slave_0 left promiscuous mode [ 727.490427][ T154] device hsr_slave_1 left promiscuous mode [ 727.497318][ T154] batman_adv: batadv0: Interface deactivated: dummy0 [ 727.508195][ T154] batman_adv: batadv0: Removing interface: dummy0 [ 727.516272][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.527838][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.536438][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.547711][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.564094][ T154] device bond0 left promiscuous mode [ 727.569482][ T154] device bond_slave_0 left promiscuous mode [ 727.576623][ T154] device bond_slave_1 left promiscuous mode [ 727.588478][ T154] bridge0: port 3(bond0) entered disabled state [ 727.596774][ T154] device bridge_slave_1 left promiscuous mode [ 727.606599][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.615671][ T154] device bridge_slave_0 left promiscuous mode [ 727.625608][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.637445][ T154] device veth1_macvtap left promiscuous mode [ 727.647272][ T154] device veth0_macvtap left promiscuous mode [ 727.654492][ T154] device veth1_vlan left promiscuous mode [ 727.853816][ T154] team0 (unregistering): Port device team_slave_1 removed [ 727.871919][ T154] team0 (unregistering): Port device team_slave_0 removed [ 727.896251][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.915015][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.015201][ T154] bond0 (unregistering): Released all slaves [ 729.463143][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.496119][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.536079][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.576559][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.706367][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.765415][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.835946][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.897532][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.163414][ T154] tipc: Left network mode [ 730.565037][T21207] EXT4-fs error: 124 callbacks suppressed [ 730.565051][T21207] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 730.598831][T21208] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 730.662411][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 730.693298][T21209] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 730.737020][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 730.780626][T21210] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 730.808553][T21211] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 730.875483][ T3851] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 730.902764][T21212] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 730.945945][T21213] EXT4-fs error (device sda1): ext4_get_inode_loc:4468: inode #90: block 150: comm dhcpcd: unable to read itable block [ 731.246783][ T154] device hsr_slave_0 left promiscuous mode [ 731.253389][ T154] device hsr_slave_1 left promiscuous mode [ 731.264152][ T154] batman_adv: batadv0: Interface deactivated: dummy0 [ 731.272223][ T154] batman_adv: batadv0: Removing interface: dummy0 [ 731.282971][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.294025][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.305653][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.313417][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.329192][ T154] device bridge_slave_1 left promiscuous mode [ 731.335383][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.347600][ T154] device bridge_slave_0 left promiscuous mode [ 731.354087][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.371990][ T154] device hsr_slave_0 left promiscuous mode [ 731.378290][ T154] device hsr_slave_1 left promiscuous mode [ 731.388769][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.396710][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.413452][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.424719][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.433591][ T154] device team0 left promiscuous mode [ 731.438906][ T154] device team_slave_0 left promiscuous mode [ 731.450314][ T154] bridge0: port 3(team0) entered disabled state [ 731.457842][ T154] device bridge_slave_1 left promiscuous mode [ 731.467347][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.476957][ T154] device bridge_slave_0 left promiscuous mode [ 731.492730][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.505981][ T154] device veth1_macvtap left promiscuous mode [ 731.515751][ T154] device veth0_macvtap left promiscuous mode [ 731.525290][ T154] device veth1_vlan left promiscuous mode [ 731.534907][ T154] device veth0_vlan left promiscuous mode [ 731.543486][ T154] device veth1_macvtap left promiscuous mode [ 731.553617][ T154] device veth0_macvtap left promiscuous mode [ 731.560810][ T154] device veth1_vlan left promiscuous mode [ 731.566636][ T154] device veth0_vlan left promiscuous mode [ 731.766927][ T154] bond3 (unregistering): Released all slaves [ 731.783739][ T154] bond2 (unregistering): Released all slaves [ 731.798291][ T154] bond1 (unregistering): Released all slaves [ 731.901382][ T154] team0 (unregistering): Port device team_slave_1 removed [ 731.919539][ T154] team0 (unregistering): Port device team_slave_0 removed [ 731.935692][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.945013][ T154] device bond_slave_1 left promiscuous mode [ 731.963914][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.976876][ T154] device bond_slave_0 left promiscuous mode [ 732.048566][ T154] bond0 (unregistering): Released all slaves [ 732.067870][ T154] bond2 (unregistering): Released all slaves [ 732.095786][ T154] bond1 (unregistering): Released all slaves [ 732.202598][ T154] team0 (unregistering): Port device team_slave_1 removed [ 732.221217][ T154] team0 (unregistering): Port device team_slave_0 removed [ 732.237221][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.257949][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.344164][ T154] bond0 (unregistering): Released all slaves [ 734.336432][ T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.395955][ T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.424049][ T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.464361][ T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.696707][ T154] tipc: Disabling bearer [ 734.712814][ T154] tipc: Left network mode