last executing test programs: 13m31.440925483s ago: executing program 32 (id=2090): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0x86000, 0x41) 7m25.257219019s ago: executing program 33 (id=3548): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 6m17.860876676s ago: executing program 3 (id=3865): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xa9, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x73, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) 6m16.639792981s ago: executing program 3 (id=3868): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x67, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x4, 'wrr\x00', 0x0, 0x7fffffff, 0x71}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) splice(0xffffffffffffffff, &(0x7f0000000280)=0x8968, r2, &(0x7f0000000540)=0x8e6, 0x5, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x1, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x8]}}) mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x44000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/trace_options\x00', 0x1, 0x184) write(r6, &(0x7f0000000140)="32b9b504499f5ef1d8c97a4cabf7ad9cb4da96e0ed3de40736e8c864ab2d8fd17dd8e749202583c30f8d0dd91c1876ed8a18cf183af7af9cbff1a31d6f684f15581a", 0x42) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x6, 0x4, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x78, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0x402, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x6, @empty, 0xfffffff5}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000580)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000400)={r10, @in6={{0xa, 0x4e33, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}, 0xffff}, 0x90) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000000)={0x0, @remote}) creat(0x0, 0x10) 6m16.495934674s ago: executing program 3 (id=3871): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.223546489s ago: executing program 3 (id=3874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) 6m1.092823626s ago: executing program 34 (id=3874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) 4m32.055388492s ago: executing program 6 (id=4323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) 4m31.771154108s ago: executing program 6 (id=4327): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000) syz_emit_ethernet(0xaf, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9200793afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000b80aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202000100000005000000906d26efe393000000"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x88281, 0x126) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae41600005fea0c00", [0xfffffffffffffce8, 0xa]}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000dc0)={0xd7, 0xf, &(0x7f00000009c0)="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"}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x2000c000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000004780)={{0xffffffffffffffff, &(0x7f00000000c0)='&:&6[\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r9, 0x6, 0x2, "a49f"}, 0xa) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="3bcf095f961ba17e0e8da144a45098358094df6da1ed98b3dc707fa6a6c241485c5f99a38eedfb2eb1bbb1868918829329dd503389601935c2a9c5ebd1a9af5172e5a85f4e2c6116f3d4087e3e85225e6592775ce607201e0fd899d8f9bb90b82a874a3d4bc84d39f72513ac0da5537c2597f434b2d7a9fe2d0c689e24eab7d55bf75285538469f964be43fc2e3ca78dbd25f271cf405d16722e66bc991a290e53c1a712e41fc74cfd903ae97a63f907726850931271fde0024d7e8a9bf85834e16501f7a78695a8eac4671d552d586f28f6175178e1c5bf1ccfb17fb6fdf8b0bd43"], 0x3, 0x23a, &(0x7f00000002c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4m30.69129857s ago: executing program 6 (id=4331): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x0, r1}, 0x10) 4m30.21402523s ago: executing program 6 (id=4337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4m30.018143203s ago: executing program 6 (id=4343): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 4m28.68144302s ago: executing program 6 (id=4350): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000a80)={[{@auto_da_alloc}]}, 0x0, 0x236, &(0x7f0000000b40)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes256, 0x1, @desc2}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) 4m28.294767418s ago: executing program 35 (id=4350): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000a80)={[{@auto_da_alloc}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes256, 0x1, @desc2}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) 4m24.338769849s ago: executing program 5 (id=4370): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x53, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) 4m22.991268436s ago: executing program 5 (id=4374): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x53, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) 4m21.391798578s ago: executing program 5 (id=4382): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000) syz_emit_ethernet(0xaf, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9200793afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000b80aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202000100000005000000906d26efe393000000"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x88281, 0x126) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae41600005fea0c00", [0xfffffffffffffce8, 0xa]}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000dc0)={0xd7, 0xf, &(0x7f00000009c0)="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"}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x2000c000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000080011100fe8000000000000000000000000000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001012b0200000135000002000200e0020000000000000000000000000000ac1414aa000000000000000000000000fc020000000000000000000000000000fe88000000000000000000000000000133040000ff34000002000200ac1e0001000000000000000000000000fe800000000000000000000000000035ac1414aa000000000000000000000000fc02000000000000000000000000000102000000000000000000000000000000000000aa000000000000000000000000fe80000000000000000000000000003f3c0000000535000002000a007f000001000000000000000000000000fe8000000000000000000000000000bbfc010000000000000000000000000001fc00000000000000000000000000000133040000033500000a00020063d5892fcde95fe0e0fe92b9ecb71d5209000000950cfa2df12fcb36cbf8f44c984602077e66619f3b2bfbb46f8b7fec5401f0e2016c8a142be59eea16a87d6c1b0000"], 0x1d0}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000004780)={{0xffffffffffffffff, &(0x7f00000000c0)='&:&6[\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r9, 0x6, 0x2, "a49f"}, 0xa) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="3bcf095f961ba17e0e8da144a45098358094df6da1ed98b3dc707fa6a6c241485c5f99a38eedfb2eb1bbb1868918829329dd503389601935c2a9c5ebd1a9af5172e5a85f4e2c6116f3d4087e3e85225e6592775ce607201e0fd899d8f9bb90b82a874a3d4bc84d39f72513ac0da5537c2597f434b2d7a9fe2d0c689e24eab7d55bf75285538469f964be43fc2e3ca78dbd25f271cf405d16722e66bc991a290e53c1a712e41fc74cfd903ae97a63f907726850931271fde0024d7e8a9bf85834e16501f7a78695a8eac4671d552d586f28f6175178e1c5bf1ccfb17fb6fdf8b0bd43"], 0x3, 0x23a, &(0x7f00000002c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4m19.062853325s ago: executing program 5 (id=4387): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$9p_tcp(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x88000, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 4m18.465530457s ago: executing program 5 (id=4389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, 0x0}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x100003, 0x0, {[0xfffffffd, 0x8, 0x3, 0x4, 0x93b, 0x80, 0xd, 0x9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m13.377059281s ago: executing program 5 (id=4398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 4m12.702905694s ago: executing program 36 (id=4398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 2m27.713242624s ago: executing program 9 (id=4706): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x3) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m19.213103054s ago: executing program 9 (id=4727): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) setxattr$trusted_overlay_nlink(&(0x7f0000000bc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x2) 2m18.756355104s ago: executing program 9 (id=4732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x28}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m13.573337822s ago: executing program 9 (id=4740): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f00000005c0)='./file1\x00', 0x0) 2m12.845803928s ago: executing program 9 (id=4746): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x180) 2m8.256088615s ago: executing program 9 (id=4763): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x2, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, 0x0) 2m7.814152784s ago: executing program 37 (id=4763): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x2, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, 0x0) 1m56.995473522s ago: executing program 2 (id=4784): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000) syz_emit_ethernet(0xaf, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9200793afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000b80aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202000100000005000000906d26efe393000000"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x88281, 0x126) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae41600005fea0c00", [0xfffffffffffffce8, 0xa]}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000dc0)={0xd7, 0xf, &(0x7f00000009c0)="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"}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x2000c000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/444], 0x1d0}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000004780)={{0xffffffffffffffff, &(0x7f00000000c0)='&:&6[\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r9, 0x6, 0x2, "a49f"}, 0xa) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="3bcf095f961ba17e0e8da144a45098358094df6da1ed98b3dc707fa6a6c241485c5f99a38eedfb2eb1bbb1868918829329dd503389601935c2a9c5ebd1a9af5172e5a85f4e2c6116f3d4087e3e85225e6592775ce607201e0fd899d8f9bb90b82a874a3d4bc84d39f72513ac0da5537c2597f434b2d7a9fe2d0c689e24eab7d55bf75285538469f964be43fc2e3ca78dbd25f271cf405d16722e66bc991a290e53c1a712e41fc74cfd903ae97a63f907726850931271fde0024d7e8a9bf85834e16501f7a78695a8eac4671d552d586f28f6175178e1c5bf1ccfb17fb6fdf8b0bd43"], 0x3, 0x23a, &(0x7f00000002c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1m55.580299332s ago: executing program 2 (id=4786): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m53.78284143s ago: executing program 2 (id=4789): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000000100112233445586dd6000000000003b4020010db8000000000000000000000001ff0e"], 0x0) close(0x4) 1m46.517606324s ago: executing program 2 (id=4794): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xa4, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x6e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {0x0, 0x1, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) 1m41.885253381s ago: executing program 2 (id=4807): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 1m41.691138015s ago: executing program 2 (id=4808): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 1m26.457653706s ago: executing program 38 (id=4808): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 48.312906601s ago: executing program 7 (id=4942): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000) syz_emit_ethernet(0xaf, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9200793afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000b80aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202000100000005000000906d26efe393000000"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x88281, 0x126) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae41600005fea0c00", [0xfffffffffffffce8, 0xa]}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000dc0)={0xd7, 0xf, &(0x7f00000009c0)="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"}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x2000c000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000080011100fe8000000000000000000000000000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001012b0200000135000002000200e0020000000000000000000000000000ac1414aa000000000000000000000000fc020000000000000000000000000000fe88000000000000000000000000000133040000ff34000002000200ac1e0001000000000000000000000000fe800000000000000000000000000035ac1414aa000000000000000000000000fc02000000000000000000000000000102000000000000000000000000000000000000aa000000000000000000000000fe80000000000000000000000000003f3c0000000535000002000a007f000001000000000000000000000000fe8000000000000000000000000000bbfc010000000000000000000000000001fc00000000000000000000000000000133040000033500000a00020063d5892fcde95fe0e0fe92b9ecb71d5209000000950cfa2df12fcb36cbf8f44c984602077e66619f3b2bfbb46f8b7fec5401f0e2016c8a142be59eea16a87d6c1b00"/444], 0x1d0}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000004780)={{0xffffffffffffffff, &(0x7f00000000c0)='&:&6[\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r9, 0x6, 0x2, "a49f"}, 0xa) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="3bcf095f961ba17e0e8da144a45098358094df6da1ed98b3dc707fa6a6c241485c5f99a38eedfb2eb1bbb1868918829329dd503389601935c2a9c5ebd1a9af5172e5a85f4e2c6116f3d4087e3e85225e6592775ce607201e0fd899d8f9bb90b82a874a3d4bc84d39f72513ac0da5537c2597f434b2d7a9fe2d0c689e24eab7d55bf75285538469f964be43fc2e3ca78dbd25f271cf405d16722e66bc991a290e53c1a712e41fc74cfd903ae97a63f907726850931271fde0024d7e8a9bf85834e16501f7a78695a8eac4671d552d586f28f6175178e1c5bf1ccfb17fb6fdf8b0bd43"], 0x3, 0x23a, &(0x7f00000002c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 45.97239562s ago: executing program 7 (id=4947): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x53, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) 42.18933209s ago: executing program 7 (id=4950): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x60040, 0x0) openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000040, 0x0) 41.290996309s ago: executing program 7 (id=4955): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x103c41, 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) 41.039236664s ago: executing program 7 (id=4957): connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x13bf, 0x1, 0x0, 0x1d9}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x800, 0xfffffffe, 0x3ae}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x0, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 38.561968297s ago: executing program 7 (id=4962): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="229421", 0x3}], 0x1}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 38.095360716s ago: executing program 39 (id=4962): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="229421", 0x3}], 0x1}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 26.760425906s ago: executing program 3 (id=4965): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x60040, 0x0) openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2000040, 0x0) 26.751575306s ago: executing program 3 (id=5001): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dfa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 19.137997406s ago: executing program 0 (id=5024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xa4, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x6e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {0x0, 0x1, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) 17.54003785s ago: executing program 1 (id=5028): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 17.179861768s ago: executing program 8 (id=5030): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000) syz_emit_ethernet(0xaf, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00020008001086dd60122d9200793afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000b80aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202000100000005000000906d26efe393000000"], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x88281, 0x126) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae41600005fea0c00", [0xfffffffffffffce8, 0xa]}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000dc0)={0xd7, 0xf, &(0x7f00000009c0)="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"}) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x2000c000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/444], 0x1d0}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000004780)={{0xffffffffffffffff, &(0x7f00000000c0)='&:&6[\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r9, 0x6, 0x2, "a49f"}, 0xa) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="3bcf095f961ba17e0e8da144a45098358094df6da1ed98b3dc707fa6a6c241485c5f99a38eedfb2eb1bbb1868918829329dd503389601935c2a9c5ebd1a9af5172e5a85f4e2c6116f3d4087e3e85225e6592775ce607201e0fd899d8f9bb90b82a874a3d4bc84d39f72513ac0da5537c2597f434b2d7a9fe2d0c689e24eab7d55bf75285538469f964be43fc2e3ca78dbd25f271cf405d16722e66bc991a290e53c1a712e41fc74cfd903ae97a63f907726850931271fde0024d7e8a9bf85834e16501f7a78695a8eac4671d552d586f28f6175178e1c5bf1ccfb17fb6fdf8b0bd43"], 0x3, 0x23a, &(0x7f00000002c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x0, 0x44, 0x0, 0x0, 0x400000}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 16.296420946s ago: executing program 1 (id=5031): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x1, 0x81, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 16.233361187s ago: executing program 4 (id=5032): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x20002, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x11) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 15.961827033s ago: executing program 1 (id=5033): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15.906022724s ago: executing program 4 (id=5034): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 15.484930913s ago: executing program 0 (id=5035): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/notes', 0x40000, 0x248) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) socket(0x2, 0x3, 0xff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) syz_usbip_server_init(0x6) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r0], 0x22) 14.843810897s ago: executing program 0 (id=5036): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r3, 0x21, 0x0, 0x0) 12.169261823s ago: executing program 0 (id=5037): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 12.111368505s ago: executing program 8 (id=5038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x0, 0x5, 0x3c5b, 0x100007d, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x80002, 0xc, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x109, 0x8000012f, 0x2008004, 0x5, 0x15f, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x2ea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x6, 0xd37, 0x5, 0x4, 0x1b, 0x2000004, 0x9, 0x80000002, 0x9, 0x6, 0x147, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x20000004, 0x4, 0x3, 0x50, 0x2, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0xd3, 0x3], [0x7, 0x407, 0x7, 0x5, 0x2, 0x100, 0x8d2, 0x9, 0xa2, 0xff, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x2000000c, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x2000200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1003, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x4006, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x80, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ee, 0x4, 0xb], [0x9, 0xbb33, 0x6, 0xb, 0x1, 0x2, 0x5, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x3, 0x17, 0x9, 0x1, 0x10000, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x9, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0xc, 0xaf, 0x5, 0x1000006, 0x227, 0x42, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x76, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 6.961146823s ago: executing program 4 (id=5039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, 0x0, 0x20004014) 6.887027995s ago: executing program 1 (id=5040): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c50200864cafae016f2b7531451b8bdc", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x317, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.808709176s ago: executing program 8 (id=5041): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x204}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 6.686118709s ago: executing program 0 (id=5042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0x26000, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0xc0000025}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000003000/0x400000)=nil) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002000)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0x20002}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.298781647s ago: executing program 8 (id=5043): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.101412311s ago: executing program 4 (id=5044): mkdirat(0xffffffffffffff9c, 0x0, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 562.977708ms ago: executing program 4 (id=5045): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010011a801000f48004000580080009000000000008000380300001800500"], 0x270}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 540.274008ms ago: executing program 1 (id=5046): setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100), 0x24, 0x0) timer_create(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x3000001, 0x601d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./tracing\x00', 0x2008400, &(0x7f0000000180), 0xc1, 0x7ee, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) symlink(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) 512.049559ms ago: executing program 8 (id=5047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_capacity\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='4', 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) 230.804375ms ago: executing program 8 (id=5048): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) r1 = fanotify_init(0x40, 0x80000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents64(r2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r3, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) 216.708995ms ago: executing program 0 (id=5049): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00'}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x20, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) close(r0) 131.680817ms ago: executing program 4 (id=5050): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) 0s ago: executing program 1 (id=5051): creat(&(0x7f00000000c0)='./file2\x00', 0xd5) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[], 0x5, 0x301, &(0x7f0000000080)="$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") write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) kernel console output (not intermixed with test programs): romiscuous mode [ 1409.383165][T20196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.390577][T20196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.423960][T20196] device bridge_slave_1 entered promiscuous mode [ 1409.618451][T20196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.711947][T20274] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4419'. [ 1409.756166][T20274] loop7: detected capacity change from 0 to 128 [ 1409.884085][T17255] Bluetooth: hci4: command 0x040f tx timeout [ 1410.388918][T20196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.443905][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1410.462321][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1410.508795][T19994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.535511][T20196] team0: Port device team_slave_0 added [ 1410.544863][T20196] team0: Port device team_slave_1 added [ 1410.575652][T20196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.589453][T20196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.726162][T20196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.852961][T20283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4423'. [ 1410.890562][T20196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.906472][T20196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.999800][T20196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.380747][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4427'. [ 1411.400922][T20302] netlink: 75 bytes leftover after parsing attributes in process `syz.7.4427'. [ 1411.434118][T20196] device hsr_slave_0 entered promiscuous mode [ 1411.462557][T20196] device hsr_slave_1 entered promiscuous mode [ 1411.496461][T20196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.511833][T20196] Cannot create hsr debugfs directory [ 1411.952048][T17255] Bluetooth: hci4: command 0x0419 tx timeout [ 1412.405804][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1412.429115][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1412.540316][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1412.567625][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1412.619727][T19994] device veth0_vlan entered promiscuous mode [ 1412.714520][T20324] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4432'. [ 1412.758808][T20324] loop7: detected capacity change from 0 to 128 [ 1412.949828][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1413.075455][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1413.273692][ T4418] device hsr_slave_0 left promiscuous mode [ 1413.280442][ T4418] device hsr_slave_1 left promiscuous mode [ 1413.328471][ T4418] device bridge_slave_1 left promiscuous mode [ 1413.347616][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.378083][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4433'. [ 1413.406587][ T4418] device bridge_slave_0 left promiscuous mode [ 1413.425317][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.504644][ T4418] device veth1_macvtap left promiscuous mode [ 1413.511270][ T4418] device veth0_macvtap left promiscuous mode [ 1413.518068][ T4418] device veth1_vlan left promiscuous mode [ 1413.524414][ T4418] device veth0_vlan left promiscuous mode [ 1414.824980][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 1414.903676][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 1414.980264][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.065802][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.638083][ T4418] team0 (unregistering): Port device bridge0 removed [ 1415.697706][ T4418] bond0 (unregistering): Released all slaves [ 1415.794603][T19994] device veth1_vlan entered promiscuous mode [ 1415.854609][T20335] team0: Port device gretap3 added [ 1415.860572][T20336] bridge0: port 1(team0) entered blocking state [ 1415.870675][T20336] bridge0: port 1(team0) entered disabled state [ 1415.878677][T20336] device team0 entered promiscuous mode [ 1415.888975][T20336] device team_slave_0 entered promiscuous mode [ 1415.896549][T20336] device team_slave_1 entered promiscuous mode [ 1415.908330][T20336] device gretap3 entered promiscuous mode [ 1416.110802][T20339] loop7: detected capacity change from 0 to 2048 [ 1416.148262][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1416.158630][T20339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1416.177852][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1416.213253][T19994] device veth0_macvtap entered promiscuous mode [ 1416.240043][T20196] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1416.297217][T19994] device veth1_macvtap entered promiscuous mode [ 1416.325806][T20196] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1416.348699][T20196] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1416.422523][T20196] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1416.443729][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.478203][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.501591][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.526215][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.579828][T19994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.622751][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1416.742383][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1416.816321][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1417.024122][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1417.508058][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.524545][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.534771][T19994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.545596][T19994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.557277][T19994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.582648][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1417.823607][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1417.879034][T20362] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4442'. [ 1417.926089][T20362] loop7: detected capacity change from 0 to 128 [ 1418.196258][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1418.583399][T19994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.642465][T19994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.712409][T19994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.741636][T19994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.758817][T20366] overlayfs: failed to clone upperpath [ 1418.807825][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4443'. [ 1419.138609][T20196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.261094][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1419.288337][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1419.343737][T20196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.377436][T15348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.413160][T15348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.445216][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1419.475086][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1419.504201][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1419.525010][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.532568][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.562354][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1419.589174][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1419.626655][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.634112][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.687136][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1419.733522][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4447'. [ 1419.751938][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1419.811448][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1419.849787][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1419.905143][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1419.918862][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1419.946589][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1419.977428][ T4651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.996989][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1420.013879][ T4651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.032295][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 1420.041431][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1420.092679][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1420.127396][T20196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1420.166246][T20196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1420.198282][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1420.223525][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1420.245828][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1420.628606][T20409] loop8: detected capacity change from 0 to 512 [ 1420.735868][T20409] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1420.829042][T20409] EXT4-fs (loop8): 1 truncate cleaned up [ 1420.850482][T20409] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1420.965723][T20409] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.4352: bg 0: block 4: invalid block bitmap [ 1421.332823][T19994] EXT4-fs (loop8): unmounting filesystem. [ 1421.467414][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1421.493434][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1421.516279][T20196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.566035][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4455'. [ 1422.290552][T20455] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4460'. [ 1423.036431][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.149016][T20461] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4461'. [ 1423.178282][T20461] loop8: detected capacity change from 0 to 128 [ 1424.018650][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1424.030768][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1424.147832][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1424.177351][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1424.201212][T20196] device veth0_vlan entered promiscuous mode [ 1424.227499][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1424.257525][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1424.303589][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1424.365675][T20196] device veth1_vlan entered promiscuous mode [ 1424.390650][T20483] loop7: detected capacity change from 0 to 1024 [ 1424.446316][T20483] EXT4-fs: Ignoring removed bh option [ 1424.525759][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1424.540725][T20483] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1424.550986][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1424.587634][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1424.611120][T20483] EXT4-fs (loop7): shut down requested (2) [ 1424.620191][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1424.655404][T20196] device veth0_macvtap entered promiscuous mode [ 1424.718387][T20196] device veth1_macvtap entered promiscuous mode [ 1424.771347][T20483] EXT4-fs (loop7): unmounting filesystem. [ 1424.883470][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.927886][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.974908][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.998878][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.019399][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.040784][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.095085][T20196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.172254][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.236341][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.248106][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.260213][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.272226][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.290095][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.330826][T20196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.396603][T20503] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4471'. [ 1425.450017][T20503] loop7: detected capacity change from 0 to 128 [ 1426.159628][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1426.229199][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1426.321352][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1426.397883][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1426.432986][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1426.471307][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1426.576958][T20196] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.625977][T20196] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.681060][T20196] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.691752][T20196] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.869843][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1427.510901][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.595642][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.715362][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1427.781709][T20529] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4477'. [ 1427.839028][T20529] loop8: detected capacity change from 0 to 128 [ 1428.533118][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.585007][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.694193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1429.072601][ T5251] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1429.521890][ T5251] usb 9-1: Using ep0 maxpacket: 16 [ 1429.610262][ T5251] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1430.010206][ T5251] usb 9-1: config 0 has no interface number 0 [ 1430.248718][ T5251] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1430.306841][ T5251] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.347313][ T5251] usb 9-1: Product: syz [ 1430.367754][ T5251] usb 9-1: Manufacturer: syz [ 1430.384452][ T5251] usb 9-1: SerialNumber: syz [ 1430.432561][ T5251] usb 9-1: config 0 descriptor?? [ 1430.465459][ T5251] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1430.917466][T20562] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1431.826595][T20570] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4485'. [ 1431.873643][T20570] loop9: detected capacity change from 0 to 128 [ 1432.403051][T20569] netlink: 'syz.1.4487': attribute type 4 has an invalid length. [ 1432.642370][ T5251] gspca_spca1528: reg_w err -71 [ 1432.648863][ T5251] spca1528: probe of 9-1:0.1 failed with error -71 [ 1432.661252][ T5251] usb 9-1: USB disconnect, device number 2 [ 1433.296299][T20585] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1435.287100][T20594] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 1435.337163][T20594] caller generic_access_phys+0x1eb/0x370 mapping multiple BARs [ 1435.400614][T20600] FAULT_INJECTION: forcing a failure. [ 1435.400614][T20600] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.422531][T20600] CPU: 1 PID: 20600 Comm: syz.2.4495 Not tainted syzkaller #0 [ 1435.431061][T20600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1435.441937][T20600] Call Trace: [ 1435.446018][T20600] [ 1435.449100][T20600] dump_stack_lvl+0x188/0x24e [ 1435.456135][T20600] ? show_regs_print_info+0x12/0x12 [ 1435.461876][T20600] ? load_image+0x410/0x410 [ 1435.466918][T20600] ? __might_sleep+0xd0/0xd0 [ 1435.473336][T20600] ? __lock_acquire+0x7ea0/0x7ea0 [ 1435.479012][T20600] should_fail_ex+0x390/0x4c0 [ 1435.484127][T20600] should_failslab+0x5/0x20 [ 1435.489921][T20600] slab_pre_alloc_hook+0x59/0x300 [ 1435.496501][T20600] ? mpih_sqr_n+0x9cf/0xa10 [ 1435.501347][T20600] ? mpihelp_mul_karatsuba_case+0xed/0xf90 [ 1435.508548][T20600] __kmem_cache_alloc_node+0x4f/0x270 [ 1435.515429][T20600] ? mpihelp_mul_karatsuba_case+0xed/0xf90 [ 1435.522510][T20600] __kmalloc+0xa3/0x240 [ 1435.529011][T20600] mpihelp_mul_karatsuba_case+0xed/0xf90 [ 1435.535193][T20600] mpi_powm+0x19ee/0x2390 [ 1435.540892][T20600] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 1435.549159][T20600] ? mpihelp_cmp+0xb6/0xd0 [ 1435.554716][T20600] ? mpi_cmp+0x1b4/0x290 [ 1435.560532][T20600] rsa_enc+0x28f/0x3c0 [ 1435.566771][T20600] ? crypto_dh_decode_key+0x680/0x680 [ 1435.574081][T20600] ? __virt_addr_valid+0x188/0x540 [ 1435.580047][T20600] ? __virt_addr_valid+0x188/0x540 [ 1435.586277][T20600] ? __virt_addr_valid+0x467/0x540 [ 1435.593233][T20600] pkcs1pad_verify+0x3f9/0x5e0 [ 1435.600682][T20600] public_key_verify_signature+0x888/0xd20 [ 1435.610487][T20600] ? x509_cert_parse+0x53a/0x7a0 [ 1435.616065][T20600] ? x509_key_preparse+0x60/0x660 [ 1435.621651][T20600] ? public_key_free+0x80/0x80 [ 1435.629276][T20600] ? asymmetric_key_generate_id+0x52/0xd0 [ 1435.636691][T20600] ? asymmetric_key_id_same+0x63/0xe0 [ 1435.642650][T20600] x509_check_for_self_signed+0x317/0x420 [ 1435.649578][T20600] x509_cert_parse+0x59c/0x7a0 [ 1435.657377][T20600] x509_key_preparse+0x60/0x660 [ 1435.663613][T20600] ? down_read+0x1a8/0x2d0 [ 1435.668805][T20600] asymmetric_key_preparse+0xa5/0x140 [ 1435.675135][T20600] key_create_or_update+0x432/0xa40 [ 1435.682565][T20600] ? security_key_permission+0x7c/0xa0 [ 1435.689696][T20600] ? key_type_put+0x20/0x20 [ 1435.695108][T20600] ? lookup_user_key_possessed+0x40/0x40 [ 1435.701661][T20600] ? __might_fault+0xc2/0x120 [ 1435.706688][T20600] ? __might_fault+0xa6/0x120 [ 1435.711568][T20600] __se_sys_add_key+0x34b/0x410 [ 1435.717066][T20600] ? __x64_sys_add_key+0xc0/0xc0 [ 1435.722696][T20600] ? lockdep_hardirqs_on+0x94/0x140 [ 1435.728663][T20600] ? __x64_sys_add_key+0x1c/0xc0 [ 1435.733775][T20600] do_syscall_64+0x4c/0xa0 [ 1435.738724][T20600] ? clear_bhb_loop+0x60/0xb0 [ 1435.743779][T20600] ? clear_bhb_loop+0x60/0xb0 [ 1435.749168][T20600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.755501][T20600] RIP: 0033:0x7f6bd979e159 [ 1435.760132][T20600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.780705][T20600] RSP: 002b:00007f6bda60b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1435.789730][T20600] RAX: ffffffffffffffda RBX: 00007f6bd9a25fa0 RCX: 00007f6bd979e159 [ 1435.798171][T20600] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1435.806554][T20600] RBP: 00007f6bd983506b R08: 000000002449926d R09: 0000000000000000 [ 1435.814959][T20600] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1435.823410][T20600] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007fff14e7dac8 [ 1435.831824][T20600] [ 1436.235156][T20610] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4497'. [ 1436.284964][T20610] loop8: detected capacity change from 0 to 128 [ 1438.327215][T20627] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4499'. [ 1438.351724][T20624] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4503'. [ 1438.370923][T20624] loop7: detected capacity change from 0 to 128 [ 1439.972196][T19356] smpboot: CPU 1 is now offline [ 1440.666450][T20631] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4501'. [ 1442.622484][T20648] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4505'. [ 1442.676887][T20622] x86: Booting SMP configuration: [ 1442.785625][T20622] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1444.510773][T20670] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4511'. [ 1444.531280][T20670] loop9: detected capacity change from 0 to 128 [ 1445.138002][T20683] FAULT_INJECTION: forcing a failure. [ 1445.138002][T20683] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.251959][T20683] CPU: 0 PID: 20683 Comm: syz.9.4512 Not tainted syzkaller #0 [ 1445.260033][T20683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1445.270967][T20683] Call Trace: [ 1445.274412][T20683] [ 1445.278178][T20683] dump_stack_lvl+0x188/0x24e [ 1445.283707][T20683] ? show_regs_print_info+0x12/0x12 [ 1445.289077][T20683] ? load_image+0x410/0x410 [ 1445.294066][T20683] ? __might_sleep+0xd0/0xd0 [ 1445.298989][T20683] ? __lock_acquire+0x7ea0/0x7ea0 [ 1445.304231][T20683] should_fail_ex+0x390/0x4c0 [ 1445.309396][T20683] should_failslab+0x5/0x20 [ 1445.313989][T20683] slab_pre_alloc_hook+0x59/0x300 [ 1445.319868][T20683] ? mpih_sqr_n+0x9cf/0xa10 [ 1445.324423][T20683] ? mpihelp_mul_karatsuba_case+0xed/0xf90 [ 1445.330589][T20683] __kmem_cache_alloc_node+0x4f/0x270 [ 1445.336070][T20683] ? mpihelp_mul_karatsuba_case+0xed/0xf90 [ 1445.342033][T20683] __kmalloc+0xa3/0x240 [ 1445.346327][T20683] mpihelp_mul_karatsuba_case+0xed/0xf90 [ 1445.352406][T20683] mpi_powm+0x19ee/0x2390 [ 1445.356890][T20683] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 1445.363142][T20683] ? mpihelp_cmp+0xb6/0xd0 [ 1445.367795][T20683] ? mpi_cmp+0x1b4/0x290 [ 1445.372105][T20683] rsa_enc+0x28f/0x3c0 [ 1445.376246][T20683] ? crypto_dh_decode_key+0x680/0x680 [ 1445.381767][T20683] ? __virt_addr_valid+0x188/0x540 [ 1445.386928][T20683] ? __virt_addr_valid+0x188/0x540 [ 1445.392093][T20683] ? __virt_addr_valid+0x467/0x540 [ 1445.397546][T20683] pkcs1pad_verify+0x3f9/0x5e0 [ 1445.402381][T20683] public_key_verify_signature+0x888/0xd20 [ 1445.408912][T20683] ? x509_cert_parse+0x53a/0x7a0 [ 1445.414464][T20683] ? x509_key_preparse+0x60/0x660 [ 1445.419955][T20683] ? public_key_free+0x80/0x80 [ 1445.425057][T20683] ? asymmetric_key_generate_id+0x52/0xd0 [ 1445.430942][T20683] ? asymmetric_key_id_same+0x63/0xe0 [ 1445.436410][T20683] x509_check_for_self_signed+0x317/0x420 [ 1445.442202][T20683] x509_cert_parse+0x59c/0x7a0 [ 1445.447019][T20683] x509_key_preparse+0x60/0x660 [ 1445.452166][T20683] ? down_read+0x1a8/0x2d0 [ 1445.456836][T20683] asymmetric_key_preparse+0xa5/0x140 [ 1445.462559][T20683] key_create_or_update+0x432/0xa40 [ 1445.467841][T20683] ? security_key_permission+0x7c/0xa0 [ 1445.473727][T20683] ? key_type_put+0x20/0x20 [ 1445.478387][T20683] ? lookup_user_key_possessed+0x40/0x40 [ 1445.484084][T20683] ? __might_fault+0xc2/0x120 [ 1445.488796][T20683] ? __might_fault+0xa6/0x120 [ 1445.493639][T20683] __se_sys_add_key+0x34b/0x410 [ 1445.498727][T20683] ? __x64_sys_add_key+0xc0/0xc0 [ 1445.503815][T20683] ? lockdep_hardirqs_on+0x94/0x140 [ 1445.509393][T20683] ? __x64_sys_add_key+0x1c/0xc0 [ 1445.514713][T20683] do_syscall_64+0x4c/0xa0 [ 1445.519702][T20683] ? clear_bhb_loop+0x60/0xb0 [ 1445.524904][T20683] ? clear_bhb_loop+0x60/0xb0 [ 1445.529911][T20683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1445.535906][T20683] RIP: 0033:0x7f666139e159 [ 1445.540829][T20683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.561088][T20683] RSP: 002b:00007f66621df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1445.569555][T20683] RAX: ffffffffffffffda RBX: 00007f6661625fa0 RCX: 00007f666139e159 [ 1445.577579][T20683] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1445.585932][T20683] RBP: 00007f666143506b R08: 0000000008059eb3 R09: 0000000000000000 [ 1445.593970][T20683] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1445.602494][T20683] R13: 00007f6661626038 R14: 00007f6661625fa0 R15: 00007ffc670be958 [ 1445.610821][T20683] [ 1447.394120][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4521'. [ 1447.643520][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880595d7400: rx timeout, send abort [ 1448.161731][T20743] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4523'. [ 1448.183208][T20743] loop9: detected capacity change from 0 to 128 [ 1454.278281][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4525'. [ 1454.919484][T20816] loop7: detected capacity change from 0 to 8 [ 1455.156175][T20816] SQUASHFS error: Failed to read block 0x4de: -5 [ 1455.229712][T20816] SQUASHFS error: Failed to read block 0x4de: -5 [ 1455.266117][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1455.266149][ T26] audit: type=1800 audit(1791043806.396:530): pid=20816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4530" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1456.611207][T20853] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4535'. [ 1456.630524][T20853] loop7: detected capacity change from 0 to 128 [ 1456.674771][T20859] loop8: detected capacity change from 0 to 512 [ 1458.510098][T20905] FAULT_INJECTION: forcing a failure. [ 1458.510098][T20905] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.628067][T20905] CPU: 0 PID: 20905 Comm: syz.2.4544 Not tainted syzkaller #0 [ 1458.637253][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1458.650703][T20905] Call Trace: [ 1458.656894][T20905] [ 1458.661610][T20905] dump_stack_lvl+0x188/0x24e [ 1458.667819][T20905] ? show_regs_print_info+0x12/0x12 [ 1458.676010][T20905] ? load_image+0x410/0x410 [ 1458.681722][T20905] ? __might_sleep+0xd0/0xd0 [ 1458.687615][T20905] ? __lock_acquire+0x7ea0/0x7ea0 [ 1458.693768][T20905] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.700755][T20905] should_fail_ex+0x390/0x4c0 [ 1458.708498][T20905] should_failslab+0x5/0x20 [ 1458.714740][T20905] slab_pre_alloc_hook+0x59/0x300 [ 1458.721442][T20905] ? nfs_alloc_server+0x4a/0x480 [ 1458.728746][T20905] __kmem_cache_alloc_node+0x4f/0x270 [ 1458.735664][T20905] ? nfs_alloc_server+0x4a/0x480 [ 1458.741816][T20905] kmalloc_trace+0x26/0xe0 [ 1458.751568][T20905] nfs_alloc_server+0x4a/0x480 [ 1458.759685][T20905] nfs4_create_server+0xa1/0x10c0 [ 1458.766552][T20905] ? __rwlock_init+0x140/0x140 [ 1458.772952][T20905] ? nfs4_set_ds_client+0x490/0x490 [ 1458.781248][T20905] ? get_nfs_version+0x1e7/0x200 [ 1458.788296][T20905] ? nfs_get_tree+0x10b6/0x1520 [ 1458.794029][T20905] nfs4_try_get_tree+0x45/0x110 [ 1458.801049][T20905] vfs_get_tree+0x88/0x270 [ 1458.809594][T20905] do_new_mount+0x247/0xa40 [ 1458.815436][T20905] __se_sys_mount+0x2e3/0x3d0 [ 1458.822789][T20905] ? __x64_sys_mount+0xc0/0xc0 [ 1458.830345][T20905] ? lockdep_hardirqs_on+0x94/0x140 [ 1458.836356][T20905] ? __x64_sys_mount+0x1c/0xc0 [ 1458.843406][T20905] do_syscall_64+0x4c/0xa0 [ 1458.849411][T20905] ? clear_bhb_loop+0x60/0xb0 [ 1458.857169][T20905] ? clear_bhb_loop+0x60/0xb0 [ 1458.862836][T20905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.873427][T20905] RIP: 0033:0x7f6bd979e159 [ 1458.879515][T20905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.912362][T20905] RSP: 002b:00007f6bda60b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1458.923620][T20905] RAX: ffffffffffffffda RBX: 00007f6bd9a25fa0 RCX: 00007f6bd979e159 [ 1458.936411][T20905] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 1458.948202][T20905] RBP: 00007f6bd983506b R08: 0000200000000140 R09: 0000000000000000 [ 1458.960518][T20905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.970965][T20905] R13: 00007f6bd9a26038 R14: 00007f6bd9a25fa0 R15: 00007fff14e7dac8 [ 1458.981346][T20905] [ 1459.281236][T20911] loop9: detected capacity change from 0 to 8 [ 1459.526072][T20911] SQUASHFS error: Failed to read block 0x4de: -5 [ 1459.538257][T20917] trusted_key: encrypted_key: key user:syz not found [ 1459.584669][T20911] SQUASHFS error: Failed to read block 0x4de: -5 [ 1459.669814][ T26] audit: type=1800 audit(1791043810.796:531): pid=20911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4546" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 1460.921450][T20935] netlink: 384 bytes leftover after parsing attributes in process `syz.9.4551'. [ 1460.943259][T20935] loop9: detected capacity change from 0 to 128 [ 1461.033381][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4553'. [ 1461.405306][T20947] loop8: detected capacity change from 0 to 4096 [ 1461.447603][T20947] EXT4-fs: Ignoring removed mblk_io_submit option [ 1464.077927][T20947] fscrypt: Error allocating hmac(sha512): -2 [ 1468.207888][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4561'. [ 1469.258437][T21043] loop9: detected capacity change from 0 to 128 [ 1472.338513][T21042] bond0 speed is unknown, defaulting to 1000 [ 1475.920248][T21107] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4580'. [ 1476.822538][T21166] FAULT_INJECTION: forcing a failure. [ 1476.822538][T21166] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.909043][T21166] CPU: 0 PID: 21166 Comm: syz.7.4586 Not tainted syzkaller #0 [ 1476.917679][T21166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1476.933858][T21166] Call Trace: [ 1476.937745][T21166] [ 1476.941672][T21166] dump_stack_lvl+0x188/0x24e [ 1476.949571][T21166] ? show_regs_print_info+0x12/0x12 [ 1476.957767][T21166] ? load_image+0x410/0x410 [ 1476.964505][T21166] ? __might_sleep+0xd0/0xd0 [ 1476.969423][T21166] ? __lock_acquire+0x7ea0/0x7ea0 [ 1476.975527][T21166] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1476.982770][T21166] should_fail_ex+0x390/0x4c0 [ 1476.988200][T21166] should_failslab+0x5/0x20 [ 1476.993302][T21166] slab_pre_alloc_hook+0x59/0x300 [ 1476.998881][T21166] ? nfs_alloc_server+0x4a/0x480 [ 1477.004840][T21166] __kmem_cache_alloc_node+0x4f/0x270 [ 1477.011981][T21166] ? nfs_alloc_server+0x4a/0x480 [ 1477.021148][T21166] kmalloc_trace+0x26/0xe0 [ 1477.026671][T21166] nfs_alloc_server+0x4a/0x480 [ 1477.032569][T21166] nfs4_create_server+0xa1/0x10c0 [ 1477.038745][T21166] ? __rwlock_init+0x140/0x140 [ 1477.044844][T21166] ? nfs4_set_ds_client+0x490/0x490 [ 1477.054675][T21166] ? get_nfs_version+0x1e7/0x200 [ 1477.060655][T21166] ? nfs_get_tree+0x10b6/0x1520 [ 1477.066297][T21166] nfs4_try_get_tree+0x45/0x110 [ 1477.071666][T21166] vfs_get_tree+0x88/0x270 [ 1477.076443][T21166] do_new_mount+0x247/0xa40 [ 1477.081912][T21166] __se_sys_mount+0x2e3/0x3d0 [ 1477.087023][T21166] ? __x64_sys_mount+0xc0/0xc0 [ 1477.092872][T21166] ? lockdep_hardirqs_on+0x94/0x140 [ 1477.098175][T21166] ? __x64_sys_mount+0x1c/0xc0 [ 1477.103451][T21166] do_syscall_64+0x4c/0xa0 [ 1477.108287][T21166] ? clear_bhb_loop+0x60/0xb0 [ 1477.113098][T21166] ? clear_bhb_loop+0x60/0xb0 [ 1477.118001][T21166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.124028][T21166] RIP: 0033:0x7f1e2219e159 [ 1477.128934][T21166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.156964][T21166] RSP: 002b:00007f1e23033028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1477.165451][T21166] RAX: ffffffffffffffda RBX: 00007f1e22425fa0 RCX: 00007f1e2219e159 [ 1477.173743][T21166] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 1477.184656][T21166] RBP: 00007f1e2223506b R08: 0000200000000140 R09: 0000000000000000 [ 1477.193368][T21166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.201562][T21166] R13: 00007f1e22426038 R14: 00007f1e22425fa0 R15: 00007ffd7c97ea48 [ 1477.210608][T21166] [ 1477.452799][T21184] loop8: detected capacity change from 0 to 16 [ 1477.485210][T21184] erofs: (device loop8): mounted with root inode @ nid 36. [ 1477.591314][T21184] bond0 speed is unknown, defaulting to 1000 [ 1477.782035][T12501] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1477.971708][T12501] usb 10-1: Using ep0 maxpacket: 8 [ 1477.980010][T12501] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1478.020618][T12501] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1478.071620][T12501] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1478.123957][T12501] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1478.169046][T12501] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.271219][T12501] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1478.304127][T12501] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.556477][T12501] usb 10-1: usb_control_msg returned -32 [ 1478.571692][T12501] usbtmc 10-1:16.0: can't read capabilities [ 1478.680247][T21212] bond0: option prio: mode dependency failed, not supported in mode balance-rr(0) [ 1478.992392][T21217] usbtmc 10-1:16.0: control status returned 0 [ 1479.224677][ T4335] usb 10-1: USB disconnect, device number 2 [ 1479.821737][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4603'. [ 1479.862988][T21242] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4602'. [ 1479.890778][T21241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.898787][T21241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.033126][T21242] unsupported nlmsg_type 40 [ 1480.518796][T21263] FAULT_INJECTION: forcing a failure. [ 1480.518796][T21263] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.594265][T21263] CPU: 0 PID: 21263 Comm: syz.8.4608 Not tainted syzkaller #0 [ 1480.602029][T21263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1480.612156][T21263] Call Trace: [ 1480.615501][T21263] [ 1480.618938][T21263] dump_stack_lvl+0x188/0x24e [ 1480.623715][T21263] ? show_regs_print_info+0x12/0x12 [ 1480.629191][T21263] ? load_image+0x410/0x410 [ 1480.633789][T21263] ? __might_sleep+0xd0/0xd0 [ 1480.638586][T21263] ? __lock_acquire+0x7ea0/0x7ea0 [ 1480.643904][T21263] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.650059][T21263] should_fail_ex+0x390/0x4c0 [ 1480.654927][T21263] should_failslab+0x5/0x20 [ 1480.659585][T21263] slab_pre_alloc_hook+0x59/0x300 [ 1480.664770][T21263] ? nfs_alloc_server+0x4a/0x480 [ 1480.669872][T21263] __kmem_cache_alloc_node+0x4f/0x270 [ 1480.675446][T21263] ? nfs_alloc_server+0x4a/0x480 [ 1480.680517][T21263] kmalloc_trace+0x26/0xe0 [ 1480.685249][T21263] nfs_alloc_server+0x4a/0x480 [ 1480.690046][T21263] nfs4_create_server+0xa1/0x10c0 [ 1480.695126][T21263] ? __rwlock_init+0x140/0x140 [ 1480.700096][T21263] ? nfs4_set_ds_client+0x490/0x490 [ 1480.705388][T21263] ? get_nfs_version+0x1e7/0x200 [ 1480.710404][T21263] ? nfs_get_tree+0x10b6/0x1520 [ 1480.715315][T21263] nfs4_try_get_tree+0x45/0x110 [ 1480.720205][T21263] vfs_get_tree+0x88/0x270 [ 1480.724781][T21263] do_new_mount+0x247/0xa40 [ 1480.730126][T21263] __se_sys_mount+0x2e3/0x3d0 [ 1480.734865][T21263] ? __x64_sys_mount+0xc0/0xc0 [ 1480.739667][T21263] ? lockdep_hardirqs_on+0x94/0x140 [ 1480.744934][T21263] ? __x64_sys_mount+0x1c/0xc0 [ 1480.749765][T21263] do_syscall_64+0x4c/0xa0 [ 1480.754242][T21263] ? clear_bhb_loop+0x60/0xb0 [ 1480.758963][T21263] ? clear_bhb_loop+0x60/0xb0 [ 1480.763680][T21263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.769612][T21263] RIP: 0033:0x7fba3f59e159 [ 1480.774063][T21263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.793808][T21263] RSP: 002b:00007fba40504028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1480.802281][T21263] RAX: ffffffffffffffda RBX: 00007fba3f825fa0 RCX: 00007fba3f59e159 [ 1480.810479][T21263] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 1480.818749][T21263] RBP: 00007fba3f63506b R08: 0000200000000140 R09: 0000000000000000 [ 1480.827291][T21263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.835655][T21263] R13: 00007fba3f826038 R14: 00007fba3f825fa0 R15: 00007ffcc395a048 [ 1480.843870][T21263] [ 1480.893095][T21259] bond0 speed is unknown, defaulting to 1000 [ 1481.413548][T21279] FAULT_INJECTION: forcing a failure. [ 1481.413548][T21279] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1481.502539][T21279] CPU: 0 PID: 21279 Comm: syz.7.4610 Not tainted syzkaller #0 [ 1481.510379][T21279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1481.520773][T21279] Call Trace: [ 1481.524131][T21279] [ 1481.527376][T21279] dump_stack_lvl+0x188/0x24e [ 1481.532163][T21279] ? show_regs_print_info+0x12/0x12 [ 1481.537458][T21279] ? load_image+0x410/0x410 [ 1481.542210][T21279] should_fail_ex+0x390/0x4c0 [ 1481.547651][T21279] get_futex_key+0x1b1/0x1000 [ 1481.552556][T21279] ? futex_setup_timer+0xc0/0xc0 [ 1481.557804][T21279] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1481.564104][T21279] ? __lock_acquire+0x7ea0/0x7ea0 [ 1481.569396][T21279] ? lock_chain_count+0x20/0x20 [ 1481.574545][T21279] futex_wait_setup+0xb8/0x270 [ 1481.580391][T21279] ? futex_wait_multiple+0x920/0x920 [ 1481.586827][T21279] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1481.593818][T21279] ? _raw_spin_unlock+0x40/0x40 [ 1481.599384][T21279] futex_wait+0x1b8/0x5c0 [ 1481.605099][T21279] ? futex_wait_setup+0x270/0x270 [ 1481.612758][T21279] ? userfaultfd_unmap_prep+0x570/0x570 [ 1481.619342][T21279] do_futex+0x310/0x320 [ 1481.624099][T21279] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1481.630744][T21279] ? vm_mmap_pgoff+0x219/0x2d0 [ 1481.636125][T21279] __se_sys_futex+0x381/0x410 [ 1481.642843][T21279] ? __x64_sys_futex+0xf0/0xf0 [ 1481.648320][T21279] ? __x64_sys_futex+0x1d/0xf0 [ 1481.653954][T21279] do_syscall_64+0x4c/0xa0 [ 1481.660489][T21279] ? clear_bhb_loop+0x60/0xb0 [ 1481.666820][T21279] ? clear_bhb_loop+0x60/0xb0 [ 1481.673695][T21279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1481.682287][T21279] RIP: 0033:0x7f1e2219e159 [ 1481.687631][T21279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.709623][T21279] RSP: 002b:00007f1e230330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1481.719249][T21279] RAX: ffffffffffffffda RBX: 00007f1e22425fa8 RCX: 00007f1e2219e159 [ 1481.728101][T21279] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e22425fa8 [ 1481.738242][T21279] RBP: 00007f1e22425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.747173][T21279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.757618][T21279] R13: 00007f1e22426038 R14: 00007ffd7c97e960 R15: 00007ffd7c97ea48 [ 1481.766839][T21279] [ 1482.182206][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1483.692572][T21309] loop9: detected capacity change from 0 to 4096 [ 1483.737701][T21309] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1483.827426][T21309] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1484.052024][T19356] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1484.228494][T21345] overlayfs: failed to resolve './file0': -2 [ 1484.251843][T19356] usb 9-1: Using ep0 maxpacket: 32 [ 1484.259618][T19356] usb 9-1: config 0 has no interfaces? [ 1484.294762][T19356] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1484.355214][T19356] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.387853][T19356] usb 9-1: Product: syz [ 1484.405930][T19356] usb 9-1: Manufacturer: syz [ 1484.410659][T19356] usb 9-1: SerialNumber: syz [ 1484.434667][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.456333][T19356] usb 9-1: config 0 descriptor?? [ 1484.517779][T21309] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1484.654194][T21358] xt_hashlimit: size too large, truncated to 1048576 [ 1484.740437][T21331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.790305][T21331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.849190][T21331] loop5: detected capacity change from 0 to 7 [ 1484.868588][T20196] EXT4-fs (loop9): unmounting filesystem. [ 1484.897940][T21334] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1484.912862][T21334] loop5: partition table partially beyond EOD, truncated [ 1484.936537][T21334] loop5: p1 size 2214597121 extends beyond EOD, truncated [ 1485.014114][T21331] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1485.023134][T21331] loop5: partition table partially beyond EOD, truncated [ 1485.056626][T21331] loop5: p1 size 2214597121 extends beyond EOD, truncated [ 1485.158229][T12501] usb 9-1: USB disconnect, device number 3 [ 1485.216088][T21334] udevd[21334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1485.348508][T21334] udevd[21334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1485.566599][T21374] loop9: detected capacity change from 0 to 1024 [ 1485.588353][T21374] EXT4-fs: Ignoring removed bh option [ 1485.862655][T21374] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1486.757590][T21400] loop8: detected capacity change from 0 to 1024 [ 1486.823708][T21400] EXT4-fs: Ignoring removed orlov option [ 1486.837360][T20196] EXT4-fs (loop9): unmounting filesystem. [ 1486.946261][T21400] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1487.362156][T19994] EXT4-fs (loop8): unmounting filesystem. [ 1489.864898][T21431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4650'. [ 1489.876503][ T4335] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1490.092205][ T4335] usb 10-1: Using ep0 maxpacket: 8 [ 1490.099262][ T4335] usb 10-1: config 0 has no interfaces? [ 1490.125226][ T4335] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1490.165347][ T4335] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1490.228611][ T4335] usb 10-1: Product: syz [ 1490.241660][ T4335] usb 10-1: Manufacturer: syz [ 1490.261713][ T4335] usb 10-1: SerialNumber: syz [ 1490.294590][ T4335] usb 10-1: config 0 descriptor?? [ 1492.223385][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4654'. [ 1492.278050][T19344] usb 10-1: USB disconnect, device number 3 [ 1493.289643][T21470] loop8: detected capacity change from 0 to 512 [ 1493.515339][T21470] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 1493.815747][T21483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1496.101338][T21498] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4657'. [ 1496.321662][T19344] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1496.541657][T19344] usb 9-1: Using ep0 maxpacket: 8 [ 1496.552897][T19344] usb 9-1: config 0 has no interfaces? [ 1496.570050][T19344] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1496.605364][T19344] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1496.631669][T19344] usb 9-1: Product: syz [ 1496.652742][T19344] usb 9-1: Manufacturer: syz [ 1496.667565][T19344] usb 9-1: SerialNumber: syz [ 1496.704936][T19344] usb 9-1: config 0 descriptor?? [ 1496.956310][T19344] usb 9-1: USB disconnect, device number 4 [ 1499.672435][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4671'. [ 1500.630257][T21559] netlink: 384 bytes leftover after parsing attributes in process `syz.9.4675'. [ 1500.648304][T21559] loop9: detected capacity change from 0 to 128 [ 1500.941701][T19355] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1501.163302][T19355] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1501.192438][T19355] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1501.375433][T19355] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1501.394817][T19355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.689393][T21574] netlink: 384 bytes leftover after parsing attributes in process `syz.8.4693'. [ 1501.705033][T21574] loop8: detected capacity change from 0 to 128 [ 1502.171823][ T4335] smpboot: CPU 1 is now offline [ 1502.265459][T21581] x86: Booting SMP configuration: [ 1502.271622][T21581] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1502.506293][T21590] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4688'. [ 1502.601836][T21592] ip_tables: iptables: counters copy to user failed while replacing table [ 1502.659914][T21592] tipc: Started in network mode [ 1502.684670][T21592] tipc: Node identity ac1414aa, cluster identity 4711 [ 1502.712551][T19355] usbhid 3-1:1.0: can't add hid device: -71 [ 1502.719907][T19355] usbhid: probe of 3-1:1.0 failed with error -71 [ 1502.727441][T21592] tipc: New replicast peer: 172.20.20.187 [ 1502.760114][T19355] usb 3-1: USB disconnect, device number 36 [ 1502.787306][T21592] tipc: Enabled bearer , priority 10 [ 1502.804241][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4691'. [ 1502.828635][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4691'. [ 1502.851125][T21598] ip_tables: iptables: counters copy to user failed while replacing table [ 1503.840331][T21617] netlink: 384 bytes leftover after parsing attributes in process `syz.2.4699'. [ 1503.864555][T19355] tipc: Node number set to 2886997162 [ 1504.385238][T21623] kernel profiling enabled (shift: 5) [ 1506.195140][T21628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4702'. [ 1506.774913][T21638] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4708'. [ 1506.785549][T21635] FAULT_INJECTION: forcing a failure. [ 1506.785549][T21635] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.868370][T21635] CPU: 0 PID: 21635 Comm: syz.9.4706 Not tainted syzkaller #0 [ 1506.875899][T21635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1506.885988][T21635] Call Trace: [ 1506.889287][T21635] [ 1506.892226][T21635] dump_stack_lvl+0x188/0x24e [ 1506.896929][T21635] ? show_regs_print_info+0x12/0x12 [ 1506.902240][T21635] ? load_image+0x410/0x410 [ 1506.906762][T21635] ? __might_sleep+0xd0/0xd0 [ 1506.911383][T21635] ? __lock_acquire+0x7ea0/0x7ea0 [ 1506.916458][T21635] should_fail_ex+0x390/0x4c0 [ 1506.921198][T21635] should_failslab+0x5/0x20 [ 1506.925988][T21635] slab_pre_alloc_hook+0x59/0x300 [ 1506.931127][T21635] kmem_cache_alloc+0x56/0x2f0 [ 1506.935921][T21635] ? __anon_vma_prepare+0xb2/0x430 [ 1506.941191][T21635] __anon_vma_prepare+0xb2/0x430 [ 1506.946329][T21635] handle_mm_fault+0x3717/0x3d40 [ 1506.951396][T21635] ? numa_migrate_prep+0x250/0x250 [ 1506.956543][T21635] ? vma_is_secretmem+0x9/0x40 [ 1506.961344][T21635] ? check_vma_flags+0x340/0x4c0 [ 1506.966311][T21635] __get_user_pages+0x40d/0xec0 [ 1506.971644][T21635] ? populate_vma_page_range+0x2b0/0x2b0 [ 1506.977399][T21635] ? vma_link+0x254/0x2c0 [ 1506.981768][T21635] ? __might_sleep+0xd0/0xd0 [ 1506.986422][T21635] ? read_lock_is_recursive+0x10/0x10 [ 1506.991832][T21635] __get_user_pages_remote+0x1c2/0x730 [ 1506.997320][T21635] ? alloc_bprm+0x5f7/0x710 [ 1507.001911][T21635] ? get_user_pages_remote+0x55/0xa0 [ 1507.007228][T21635] get_arg_page+0x1ca/0x410 [ 1507.011772][T21635] ? copy_string_kernel+0x220/0x220 [ 1507.017005][T21635] ? up_write+0x1b6/0x410 [ 1507.021361][T21635] ? alloc_bprm+0x37a/0x710 [ 1507.025902][T21635] copy_string_kernel+0x161/0x220 [ 1507.031011][T21635] do_execveat_common+0x35d/0x6b0 [ 1507.036172][T21635] __x64_sys_execveat+0xc0/0xe0 [ 1507.041149][T21635] do_syscall_64+0x4c/0xa0 [ 1507.045599][T21635] ? clear_bhb_loop+0x60/0xb0 [ 1507.050309][T21635] ? clear_bhb_loop+0x60/0xb0 [ 1507.055016][T21635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1507.061040][T21635] RIP: 0033:0x7f666139e159 [ 1507.065481][T21635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.085212][T21635] RSP: 002b:00007f66621df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1507.093656][T21635] RAX: ffffffffffffffda RBX: 00007f6661625fa0 RCX: 00007f666139e159 [ 1507.101823][T21635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1507.109820][T21635] RBP: 00007f666143506b R08: 0000000000001000 R09: 0000000000000000 [ 1507.117819][T21635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.126259][T21635] R13: 00007f6661626038 R14: 00007f6661625fa0 R15: 00007ffc670be958 [ 1507.134360][T21635] [ 1509.022538][ T4335] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1509.213528][ T4335] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 1509.245797][ T4335] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.456111][ T4335] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1509.746257][T21658] netlink: 384 bytes leftover after parsing attributes in process `syz.7.4714'. [ 1509.765226][ T4335] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 1509.795502][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.839175][ T4335] usb 3-1: config 0 descriptor?? [ 1511.661298][T21662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4716'. [ 1511.716653][T21663] lo speed is unknown, defaulting to 1000 [ 1511.728107][ T4335] usbhid 3-1:0.0: can't add hid device: -71 [ 1511.735199][ T4335] usbhid: probe of 3-1:0.0 failed with error -71 [ 1511.757850][T21663] lo speed is unknown, defaulting to 1000 [ 1511.781250][ T4335] usb 3-1: USB disconnect, device number 37 [ 1511.798605][T21663] lo speed is unknown, defaulting to 1000 [ 1511.804972][T14717] wlan1: Trigger new scan to find an IBSS to join [ 1512.327796][T21668] netlink: 384 bytes leftover after parsing attributes in process `syz.7.4718'. [ 1512.799959][T21663] infiniband syz0: set active [ 1512.804892][ T4335] lo speed is unknown, defaulting to 1000 [ 1512.862956][T21663] infiniband syz0: added lo [ 1512.868125][T21663] rdma_rxe: unable to create cq [ 1512.902033][T21663] infiniband syz0: Couldn't create ib_mad CQ [ 1512.921612][T17255] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.944031][T21663] infiniband syz0: Couldn't open port 1 [ 1514.669644][T21663] RDS/IB: syz0: added [ 1514.691707][T21663] smc: adding ib device syz0 with port count 1 [ 1514.712436][T21663] smc: ib device syz0 port 1 has pnetid [ 1514.749403][T21685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1514.759595][T19356] lo speed is unknown, defaulting to 1000 [ 1514.767049][T18112] wlan1: Trigger new scan to find an IBSS to join [ 1514.780106][T21663] lo speed is unknown, defaulting to 1000 [ 1515.209640][T21663] lo speed is unknown, defaulting to 1000 [ 1515.257493][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1517.115248][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4730'. [ 1517.379017][T21663] lo speed is unknown, defaulting to 1000 [ 1517.791967][ T5177] wlan1: Trigger new scan to find an IBSS to join [ 1517.886271][T21718] netlink: 384 bytes leftover after parsing attributes in process `syz.1.4734'. [ 1517.927640][T21716] FAULT_INJECTION: forcing a failure. [ 1517.927640][T21716] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.998841][T21716] CPU: 0 PID: 21716 Comm: syz.7.4735 Not tainted syzkaller #0 [ 1518.006364][T21716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1518.016448][T21716] Call Trace: [ 1518.019742][T21716] [ 1518.022688][T21716] dump_stack_lvl+0x188/0x24e [ 1518.027391][T21716] ? show_regs_print_info+0x12/0x12 [ 1518.032616][T21716] ? load_image+0x410/0x410 [ 1518.037175][T21716] ? __might_sleep+0xd0/0xd0 [ 1518.041794][T21716] ? __lock_acquire+0x7ea0/0x7ea0 [ 1518.046882][T21716] should_fail_ex+0x390/0x4c0 [ 1518.051701][T21716] should_failslab+0x5/0x20 [ 1518.056274][T21716] slab_pre_alloc_hook+0x59/0x300 [ 1518.061346][T21716] ? nla_strdup+0x94/0x130 [ 1518.065800][T21716] __kmem_cache_alloc_node+0x4f/0x270 [ 1518.071204][T21716] ? nla_strdup+0x94/0x130 [ 1518.075665][T21716] __kmalloc+0xa3/0x240 [ 1518.079866][T21716] nla_strdup+0x94/0x130 [ 1518.084146][T21716] nf_tables_newchain+0x1bcc/0x2a30 [ 1518.089437][T21716] ? nf_tables_deltable+0xd90/0xd90 [ 1518.094697][T21716] ? __lock_acquire+0x7ea0/0x7ea0 [ 1518.099769][T21716] ? __nla_parse+0x3c/0x50 [ 1518.104312][T21716] nfnetlink_rcv+0x1119/0x2470 [ 1518.109214][T21716] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1518.114803][T21716] ? ref_tracker_free+0x682/0x830 [ 1518.119878][T21716] ? netlink_deliver_tap+0x2e/0x1b0 [ 1518.125104][T21716] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 1518.130616][T21716] ? netlink_deliver_tap+0x2e/0x1b0 [ 1518.135934][T21716] netlink_unicast+0x7ad/0x920 [ 1518.140765][T21716] netlink_sendmsg+0x8ad/0xbd0 [ 1518.145568][T21716] ? netlink_getsockopt+0x550/0x550 [ 1518.150798][T21716] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1518.156385][T21716] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1518.161696][T21716] ? security_socket_sendmsg+0x7c/0xa0 [ 1518.167182][T21716] ? netlink_getsockopt+0x550/0x550 [ 1518.172410][T21716] ____sys_sendmsg+0x5ed/0x9a0 [ 1518.177239][T21716] ? __sys_sendmsg_sock+0x30/0x30 [ 1518.182288][T21716] ? __import_iovec+0x306/0x510 [ 1518.187183][T21716] ? import_iovec+0x6f/0xa0 [ 1518.191729][T21716] ___sys_sendmsg+0x2a2/0x360 [ 1518.196448][T21716] ? __sys_sendmsg+0x2a0/0x2a0 [ 1518.201275][T21716] __se_sys_sendmsg+0x1c3/0x2b0 [ 1518.206161][T21716] ? __x64_sys_sendmsg+0x80/0x80 [ 1518.211167][T21716] ? lockdep_hardirqs_on+0x94/0x140 [ 1518.216399][T21716] do_syscall_64+0x4c/0xa0 [ 1518.220842][T21716] ? clear_bhb_loop+0x60/0xb0 [ 1518.225551][T21716] ? clear_bhb_loop+0x60/0xb0 [ 1518.230261][T21716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1518.236179][T21716] RIP: 0033:0x7f1e2219e159 [ 1518.240704][T21716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.260422][T21716] RSP: 002b:00007f1e23033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1518.268857][T21716] RAX: ffffffffffffffda RBX: 00007f1e22425fa0 RCX: 00007f1e2219e159 [ 1518.276873][T21716] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1518.285139][T21716] RBP: 00007f1e2223506b R08: 0000000000000000 R09: 0000000000000000 [ 1518.293140][T21716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1518.301169][T21716] R13: 00007f1e22426038 R14: 00007f1e22425fa0 R15: 00007ffd7c97ea48 [ 1518.309180][T21716] [ 1518.594656][T21663] lo speed is unknown, defaulting to 1000 [ 1519.001861][ T4557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.437899][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4738'. [ 1520.554783][T21663] lo speed is unknown, defaulting to 1000 [ 1520.758268][T21731] loop9: detected capacity change from 0 to 128 [ 1520.865901][ T26] audit: type=1800 audit(1791043871.996:532): pid=21731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4740" name="file1" dev="loop9" ino=1048672 res=0 errno=0 [ 1520.978838][T21663] lo speed is unknown, defaulting to 1000 [ 1521.061748][T21731] loop9: detected capacity change from 128 to 64 [ 1521.343806][T20196] FAT-fs (loop9): error, invalid access to FAT (entry 0x6c000000) [ 1521.410794][T20196] FAT-fs (loop9): Filesystem has been set read-only [ 1523.506721][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1523.861796][T19356] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1524.051706][T19356] usb 3-1: Using ep0 maxpacket: 32 [ 1524.060812][T19356] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1524.090638][T19356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.109380][T19356] usb 3-1: Product: syz [ 1524.119283][T19356] usb 3-1: Manufacturer: syz [ 1524.129410][T19356] usb 3-1: SerialNumber: syz [ 1524.170833][T19356] usb 3-1: config 0 descriptor?? [ 1524.317442][T21747] loop8: detected capacity change from 0 to 32768 [ 1524.452798][T21747] XFS (loop8): Mounting V5 Filesystem [ 1524.628196][T19356] airspy 3-1:0.0: Board ID: 00 [ 1524.633418][T19356] airspy 3-1:0.0: Firmware version: [ 1524.664412][T21747] XFS (loop8): Ending clean mount [ 1524.873307][T19994] XFS (loop8): Unmounting Filesystem [ 1524.949004][ T5177] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.094124][ T5177] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.234565][ T5177] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.339885][ T5177] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.663513][T19356] airspy 3-1:0.0: Registered as swradio24 [ 1525.669372][T19356] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1525.826886][ T5177] tipc: Disabling bearer [ 1525.855729][ T5177] tipc: Left network mode [ 1525.908765][ T4335] usb 3-1: USB disconnect, device number 38 [ 1527.155566][T17255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1527.169864][T17255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1527.180132][T17255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1527.190289][T17255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1527.198539][T17255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1527.206029][T17255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1527.616921][T21828] bond0 speed is unknown, defaulting to 1000 [ 1527.649858][T21828] lo speed is unknown, defaulting to 1000 [ 1527.920894][T21839] netlink: 384 bytes leftover after parsing attributes in process `syz.1.4773'. [ 1529.311717][T17255] Bluetooth: hci4: command 0x0409 tx timeout [ 1529.729503][T21828] chnl_net:caif_netlink_parms(): no params data found [ 1530.123745][T21861] overlayfs: failed to clone upperpath [ 1531.078128][T21868] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4778'. [ 1531.401678][T17255] Bluetooth: hci4: command 0x041b tx timeout [ 1533.123009][T21876] netlink: 384 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1533.481851][T17255] Bluetooth: hci4: command 0x040f tx timeout [ 1535.571775][T17255] Bluetooth: hci4: command 0x0419 tx timeout [ 1536.803174][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4774'. [ 1536.999181][T21828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.026080][T21828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.047404][T21828] device bridge_slave_0 entered promiscuous mode [ 1537.087544][T21828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.118576][T21828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.137027][T21828] device bridge_slave_1 entered promiscuous mode [ 1537.261613][T21828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.561235][T21828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.723238][T21828] team0: Port device team_slave_0 added [ 1537.754280][T21828] team0: Port device team_slave_1 added [ 1537.883741][T21887] netlink: 384 bytes leftover after parsing attributes in process `syz.2.4784'. [ 1538.090409][T21828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.118527][T21828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.191519][T21828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.213992][T21828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.221092][T21828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.309931][T21828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.449266][T21828] device hsr_slave_0 entered promiscuous mode [ 1538.483825][T21828] device hsr_slave_1 entered promiscuous mode [ 1538.511755][T21828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1538.519400][T21828] Cannot create hsr debugfs directory [ 1539.029869][ T5177] device hsr_slave_0 left promiscuous mode [ 1539.041127][ T5177] device hsr_slave_1 left promiscuous mode [ 1539.066918][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.088257][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.102270][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.109857][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.124774][ T5177] device bridge_slave_1 left promiscuous mode [ 1539.131103][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.158632][ T5177] device bridge_slave_0 left promiscuous mode [ 1539.166284][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.225786][ T5177] device veth1_macvtap left promiscuous mode [ 1539.238825][ T5177] device veth0_macvtap left promiscuous mode [ 1539.245410][ T5177] device veth1_vlan left promiscuous mode [ 1539.251284][ T5177] device veth0_vlan left promiscuous mode [ 1545.878082][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.965971][ T5177] team0 (unregistering): Port device team_slave_1 removed [ 1546.068735][ T5177] team0 (unregistering): Port device team_slave_0 removed [ 1546.159999][ T5177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.251008][ T5177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.959697][ T5177] bond0 (unregistering): Released all slaves [ 1547.086942][T21886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4782'. [ 1548.069818][T21933] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4793'. [ 1548.282512][T21918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1548.578652][T21918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1548.612844][T21918] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1549.263794][T21948] netlink: 384 bytes leftover after parsing attributes in process `syz.7.4795'. [ 1549.285126][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4794'. [ 1549.349747][T21918] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1549.369362][T21918] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1549.472446][T21918] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1549.723829][T21963] loop8: detected capacity change from 0 to 512 [ 1549.950873][T21963] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13 [ 1549.974563][T21963] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.4797: inode #15: comm syz.8.4797: iget: illegal inode # [ 1550.049509][T21963] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.4797: couldn't read orphan inode 15 (err -117) [ 1550.129980][T21963] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1550.272565][T17255] Bluetooth: hci2: command 0x0c1a tx timeout [ 1550.303143][ T5177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.395470][T21963] EXT4-fs error (device loop8): ext4_find_dest_de:2117: inode #2: block 13: comm syz.8.4797: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=916, size=1012 fake=0 [ 1550.537471][ T5177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.600577][T17255] Bluetooth: hci1: command 0x0c1a tx timeout [ 1550.662979][T19994] EXT4-fs (loop8): unmounting filesystem. [ 1550.677605][T21975] process '/newroot/1137/file0' started with executable stack [ 1550.788093][ T5177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.843412][T21828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1550.940575][T21984] overlayfs: failed to clone upperpath [ 1551.002118][T21986] FAULT_INJECTION: forcing a failure. [ 1551.002118][T21986] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.039167][ T5177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.061780][T21986] CPU: 0 PID: 21986 Comm: syz.8.4802 Not tainted syzkaller #0 [ 1551.069337][T21986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1551.079974][T21986] Call Trace: [ 1551.083385][T21986] [ 1551.086353][T21986] dump_stack_lvl+0x188/0x24e [ 1551.091122][T21986] ? show_regs_print_info+0x12/0x12 [ 1551.096386][T21986] ? load_image+0x410/0x410 [ 1551.100978][T21986] ? __might_sleep+0xd0/0xd0 [ 1551.105633][T21986] ? __lock_acquire+0x7ea0/0x7ea0 [ 1551.110728][T21986] should_fail_ex+0x390/0x4c0 [ 1551.115488][T21986] should_failslab+0x5/0x20 [ 1551.120046][T21986] slab_pre_alloc_hook+0x59/0x300 [ 1551.125176][T21986] ? sbitmap_queue_init_node+0x24c/0x650 [ 1551.130884][T21986] __kmem_cache_alloc_node+0x4f/0x270 [ 1551.136321][T21986] ? sbitmap_queue_init_node+0x24c/0x650 [ 1551.142113][T21986] kmalloc_node_trace+0x22/0xe0 [ 1551.147004][T21986] sbitmap_queue_init_node+0x24c/0x650 [ 1551.152539][T21986] blk_mq_init_tags+0x159/0x280 [ 1551.157483][T21986] blk_mq_alloc_map_and_rqs+0xc1/0x920 [ 1551.163233][T21986] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 1551.169177][T21986] blk_mq_alloc_tag_set+0x75b/0xd90 [ 1551.174416][T21986] loop_add+0x2ef/0x9a0 [ 1551.178671][T21986] loop_control_ioctl+0x124/0x590 [ 1551.183732][T21986] ? loop_set_hw_queue_depth+0x60/0x60 [ 1551.189229][T21986] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1551.194209][T21986] ? security_file_ioctl+0x7c/0xa0 [ 1551.199361][T21986] ? loop_set_hw_queue_depth+0x60/0x60 [ 1551.204944][T21986] __se_sys_ioctl+0xfa/0x170 [ 1551.209575][T21986] do_syscall_64+0x4c/0xa0 [ 1551.214025][T21986] ? clear_bhb_loop+0x60/0xb0 [ 1551.218737][T21986] ? clear_bhb_loop+0x60/0xb0 [ 1551.223554][T21986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1551.229487][T21986] RIP: 0033:0x7fba3f59e159 [ 1551.233936][T21986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.253587][T21986] RSP: 002b:00007fba40504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.262033][T21986] RAX: ffffffffffffffda RBX: 00007fba3f825fa0 RCX: 00007fba3f59e159 [ 1551.270035][T21986] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1551.278036][T21986] RBP: 00007fba3f63506b R08: 0000000000000000 R09: 0000000000000000 [ 1551.286037][T21986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1551.294037][T21986] R13: 00007fba3f826038 R14: 00007fba3f825fa0 R15: 00007ffcc395a048 [ 1551.302052][T21986] [ 1551.305766][T21828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1551.323813][T21828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1551.334546][T21828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1551.391637][T17255] Bluetooth: hci4: command 0x0c1a tx timeout [ 1551.668849][T21828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.776369][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1551.798060][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1551.844137][T21828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.882514][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1551.896855][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1551.922294][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.929597][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.983638][ T5177] tipc: Disabling bearer [ 1552.012500][ T5177] tipc: Left network mode [ 1552.038728][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1552.074790][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1552.103641][T21997] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4805'. [ 1552.117756][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1552.141243][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.148538][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.182107][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1552.393558][T22004] x86/PAT: syz.2.4807:22004 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 1552.449063][T21986] blk-mq: reduced tag depth (128 -> 64) [ 1552.463327][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1552.473876][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1552.490152][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1552.605443][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1552.615234][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1552.628019][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1552.640486][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1552.655319][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1552.666707][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1552.677231][T17255] Bluetooth: hci1: command 0x0406 tx timeout [ 1552.707176][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1552.743698][T21828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1553.446255][T22028] fuse: Bad value for 'fd' [ 1553.472039][T17255] Bluetooth: hci4: command 0x0406 tx timeout [ 1553.913594][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1553.921197][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1553.956190][T21828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.270695][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1555.076506][T22053] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4818'. [ 1555.092383][T22053] loop8: detected capacity change from 0 to 128 [ 1555.551925][T17255] Bluetooth: hci4: command 0x0406 tx timeout [ 1555.724533][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1555.735167][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1555.801242][T22071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1555.812364][ T5177] device hsr_slave_0 left promiscuous mode [ 1555.894564][ T5177] device hsr_slave_1 left promiscuous mode [ 1555.920650][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.942836][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.968204][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.987606][ T5177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.015824][ T5177] device vlan3 left promiscuous mode [ 1556.021207][ T5177] device geneve0 left promiscuous mode [ 1556.046113][ T5177] bridge0: port 3(vlan3) entered disabled state [ 1556.079700][ T5177] device bridge_slave_1 left promiscuous mode [ 1556.095112][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.136616][ T5177] device bridge_slave_0 left promiscuous mode [ 1556.145722][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.430135][ T5177] device vlan0 left promiscuous mode [ 1556.463455][ T5177] device veth1_macvtap left promiscuous mode [ 1556.469585][ T5177] device veth0_macvtap left promiscuous mode [ 1556.519248][ T5177] device veth1_vlan left promiscuous mode [ 1556.535537][ T5177] device veth0_vlan left promiscuous mode [ 1557.543643][ T5177] bond2 (unregistering): Released all slaves [ 1558.956367][T22094] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1558.980040][T22094] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1560.357739][T22107] fuse: Bad value for 'fd' [ 1561.174550][T22110] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4831'. [ 1562.144803][ T5177] bond1 (unregistering): (slave bond0): Releasing active interface [ 1562.159120][ T5177] bond1 (unregistering): Released all slaves [ 1563.598598][ T5177] team0 (unregistering): Port device team_slave_1 removed [ 1563.736147][ T5177] team0 (unregistering): Port device team_slave_0 removed [ 1563.847545][ T5177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.857565][ T5177] device bond_slave_0 left promiscuous mode [ 1564.564907][ T5177] team0 (unregistering): Port device bridge0 removed [ 1564.657028][ T5177] bond0 (unregistering): Released all slaves [ 1564.868406][T21828] device veth0_vlan entered promiscuous mode [ 1564.908737][T21828] device veth1_vlan entered promiscuous mode [ 1564.966331][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1564.978096][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1565.040753][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1565.067244][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1565.118192][T21828] device veth0_macvtap entered promiscuous mode [ 1565.136426][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1565.192689][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1565.200917][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1565.271355][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1565.283394][T21828] device veth1_macvtap entered promiscuous mode [ 1565.302103][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1565.316220][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1565.375376][T21828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.390411][T21828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.401050][T21828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.419816][T21828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.438601][T21828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.507893][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1565.528801][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1565.543322][T21828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.561095][T21828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.578333][T21828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.589382][T21828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.606106][T21828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.626549][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1565.655867][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1565.677241][T21828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.692762][T21828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.705999][T21828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.719244][T21828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.994330][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.012861][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.020618][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1566.125533][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.151168][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.184876][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1568.429272][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1568.452120][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1568.467141][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1568.476135][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1568.487604][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1568.495088][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1568.600818][T22181] bond0 speed is unknown, defaulting to 1000 [ 1568.618367][T22181] lo speed is unknown, defaulting to 1000 [ 1568.945030][T22158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4842'. [ 1568.964319][T22189] netlink: 'syz.4.4843': attribute type 1 has an invalid length. [ 1569.358566][T22181] chnl_net:caif_netlink_parms(): no params data found [ 1569.560686][T22203] loop8: detected capacity change from 0 to 512 [ 1569.630431][T22204] overlayfs: statfs failed on './file0' [ 1569.662233][T22203] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1569.689494][T22203] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.4847: invalid indirect mapped block 256 (level 1) [ 1569.720910][T22203] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.4847: invalid indirect mapped block 2683928664 (level 1) [ 1569.745211][T22203] EXT4-fs (loop8): 1 truncate cleaned up [ 1569.761317][T22203] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1569.798963][ T4557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1569.850745][T22203] EXT4-fs error (device loop8): ext4_lookup:1852: inode #2: comm syz.8.4847: bad inode number: 6 [ 1569.871913][ T4557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.020901][T19994] EXT4-fs (loop8): unmounting filesystem. [ 1570.145308][T22181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.177916][T22181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.212817][T22181] device bridge_slave_0 entered promiscuous mode [ 1570.310429][ T4557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1570.331844][ T4557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.392706][T22181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.399908][T22181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.453318][T22181] device bridge_slave_1 entered promiscuous mode [ 1570.529654][T17255] Bluetooth: hci5: command 0x0409 tx timeout [ 1570.553530][T22233] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1570.588402][ T4557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1570.647643][T22233] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1570.675139][ T4557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.775322][T22181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.818309][T22226] loop8: detected capacity change from 0 to 8192 [ 1570.967313][ T4557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1571.000241][T17255] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1571.051593][ T4557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.136886][T22181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.259809][T22181] team0: Port device team_slave_0 added [ 1571.313055][T22181] team0: Port device team_slave_1 added [ 1571.376929][T22181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.408044][T22181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.519311][T22181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.602802][T22181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.609884][T22181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.699286][T22181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.920200][T22181] device hsr_slave_0 entered promiscuous mode [ 1571.940374][T22181] device hsr_slave_1 entered promiscuous mode [ 1572.014332][T22254] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4857'. [ 1572.032620][T22254] loop8: detected capacity change from 0 to 128 [ 1572.279262][ T4557] tipc: Left network mode [ 1572.592435][T17255] Bluetooth: hci5: command 0x041b tx timeout [ 1573.140733][T22277] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4863'. [ 1574.672364][T17255] Bluetooth: hci5: command 0x040f tx timeout [ 1576.345384][T22329] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4867'. [ 1576.766913][T17255] Bluetooth: hci5: command 0x0419 tx timeout [ 1577.964689][ T4557] batman_adv: batadv0: Removing interface: gretap2 [ 1578.001295][T22364] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4873'. [ 1578.076007][ T4557] device gretap3 left promiscuous mode [ 1578.118108][ T4557] team0: Port device gretap3 removed [ 1578.170203][T22181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1578.188131][T22372] FAULT_INJECTION: forcing a failure. [ 1578.188131][T22372] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.224523][T22181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1578.356475][T22181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1578.383507][T22372] CPU: 0 PID: 22372 Comm: syz.8.4875 Not tainted syzkaller #0 [ 1578.391068][T22372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1578.401434][T22372] Call Trace: [ 1578.404761][T22372] [ 1578.407729][T22372] dump_stack_lvl+0x188/0x24e [ 1578.412468][T22372] ? show_regs_print_info+0x12/0x12 [ 1578.417747][T22372] ? load_image+0x410/0x410 [ 1578.422300][T22372] ? __might_sleep+0xd0/0xd0 [ 1578.426927][T22372] ? __lock_acquire+0x7ea0/0x7ea0 [ 1578.431997][T22372] should_fail_ex+0x390/0x4c0 [ 1578.436732][T22372] should_failslab+0x5/0x20 [ 1578.441264][T22372] slab_pre_alloc_hook+0x59/0x300 [ 1578.446329][T22372] ? memcg_list_lru_alloc+0x22d/0xb00 [ 1578.451743][T22372] __kmem_cache_alloc_node+0x4f/0x270 [ 1578.457194][T22372] ? memcg_list_lru_alloc+0x22d/0xb00 [ 1578.462615][T22372] __kmalloc+0xa3/0x240 [ 1578.466824][T22372] memcg_list_lru_alloc+0x22d/0xb00 [ 1578.472067][T22372] ? slab_pre_alloc_hook+0xb1/0x300 [ 1578.477299][T22372] ? memcg_reparent_list_lrus+0x850/0x850 [ 1578.483147][T22372] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1578.489120][T22372] slab_pre_alloc_hook+0x2ad/0x300 [ 1578.494351][T22372] ? slab_pre_alloc_hook+0xb1/0x300 [ 1578.499603][T22372] kmem_cache_alloc_lru+0x49/0x2e0 [ 1578.504778][T22372] ? new_inode_pseudo+0x7e/0x1c0 [ 1578.509779][T22372] new_inode_pseudo+0x7e/0x1c0 [ 1578.514659][T22372] ? pseudo_fs_get_tree+0x20/0x20 [ 1578.519728][T22372] new_inode+0x25/0x1d0 [ 1578.523941][T22372] ? pseudo_fs_get_tree+0x20/0x20 [ 1578.529019][T22372] pseudo_fs_fill_super+0x182/0x350 [ 1578.534291][T22372] ? kill_litter_super+0xa0/0xa0 [ 1578.539438][T22372] ? pseudo_fs_get_tree+0x20/0x20 [ 1578.544588][T22372] get_tree_nodev+0xb0/0x160 [ 1578.549219][T22372] vfs_get_tree+0x88/0x270 [ 1578.553844][T22372] do_new_mount+0x247/0xa40 [ 1578.558390][T22372] __se_sys_mount+0x2e3/0x3d0 [ 1578.563099][T22372] ? __x64_sys_mount+0xc0/0xc0 [ 1578.567894][T22372] ? lockdep_hardirqs_on+0x94/0x140 [ 1578.573158][T22372] ? __x64_sys_mount+0x1c/0xc0 [ 1578.577958][T22372] do_syscall_64+0x4c/0xa0 [ 1578.582404][T22372] ? clear_bhb_loop+0x60/0xb0 [ 1578.587246][T22372] ? clear_bhb_loop+0x60/0xb0 [ 1578.591961][T22372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.597980][T22372] RIP: 0033:0x7fba3f59e159 [ 1578.602422][T22372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.622061][T22372] RSP: 002b:00007fba40504028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1578.630592][T22372] RAX: ffffffffffffffda RBX: 00007fba3f825fa0 RCX: 00007fba3f59e159 [ 1578.638683][T22372] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 1578.646704][T22372] RBP: 00007fba3f63506b R08: 0000000000000000 R09: 0000000000000000 [ 1578.654900][T22372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.662913][T22372] R13: 00007fba3f826038 R14: 00007fba3f825fa0 R15: 00007ffcc395a048 [ 1578.670959][T22372] [ 1578.693199][T22181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1579.031371][T22181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.076824][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1579.089971][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1579.110134][T22181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.147330][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1579.166525][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1579.176845][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.184098][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.224573][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1579.245823][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1579.258891][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1579.269104][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.276326][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.294706][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1579.342789][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1579.365078][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1579.384475][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1579.427293][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1579.438793][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1579.450731][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1579.479777][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1579.494473][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1579.497089][T22378] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4876'. [ 1579.528326][T22181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1579.540855][T22181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1579.559772][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1579.588252][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1580.524261][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1580.535320][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1580.560319][T22181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.648606][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1580.664468][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1580.779834][T22181] device veth0_vlan entered promiscuous mode [ 1580.799808][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1580.820382][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1580.839392][T22181] device veth1_vlan entered promiscuous mode [ 1580.907709][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1580.929489][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1580.939355][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1581.050215][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1581.065259][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1581.109209][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1581.146352][T22181] device veth0_macvtap entered promiscuous mode [ 1581.175364][T22399] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1581.178604][T22181] device veth1_macvtap entered promiscuous mode [ 1581.283862][T22181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.304408][T22181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.319109][T22181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.331172][T22181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.346087][T22181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.356929][T22181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.380764][T22181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.401328][ T4557] device team0 left promiscuous mode [ 1581.410831][ T4557] device team_slave_0 left promiscuous mode [ 1581.423610][ T4557] device team_slave_1 left promiscuous mode [ 1581.430942][ T4557] bridge0: port 1(team0) entered disabled state [ 1581.449006][ T4557] device hsr_slave_0 left promiscuous mode [ 1581.458015][ T4557] device hsr_slave_1 left promiscuous mode [ 1581.467337][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.477569][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.496878][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1581.505878][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.568564][ T4557] device veth1_macvtap left promiscuous mode [ 1581.578290][ T4557] device veth0_macvtap left promiscuous mode [ 1581.586471][ T4557] device veth1_vlan left promiscuous mode [ 1581.599740][ T4557] device veth0_vlan left promiscuous mode [ 1583.455579][ T4557] team0 (unregistering): Port device team_slave_1 removed [ 1583.619452][ T4557] team0 (unregistering): Port device team_slave_0 removed [ 1583.762015][ T4557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.719085][T22417] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4885'. [ 1584.961029][ T4557] bond0 (unregistering): Released all slaves [ 1585.040597][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1585.049654][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1585.063914][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1585.079083][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1585.093420][T22181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.132587][T22181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.149648][T22181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.160500][T22181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.178510][T22181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.216978][T22411] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4884'. [ 1585.231355][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1585.255875][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1585.272419][T22181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.281204][T22181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.334174][T22181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.345619][T22181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.737022][T19869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.781664][T19869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.815568][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1585.854946][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.918289][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.949857][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1586.059106][ T5177] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 3 [ 1586.402835][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4893'. [ 1586.824191][T22453] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1587.019232][T22425] loop8: detected capacity change from 0 to 32768 [ 1587.866854][T22470] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4897'. [ 1588.558843][T22484] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4898'. [ 1588.574218][T22484] loop0: detected capacity change from 0 to 128 [ 1591.122282][T22493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4899'. [ 1591.748104][T22557] bridge_slave_0: default FDB implementation only supports local addresses [ 1592.749569][T22583] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4911'. [ 1592.876782][T22594] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4912'. [ 1595.201002][T22604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1595.257807][T22618] 9pnet_fd: Insufficient options for proto=fd [ 1597.941813][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4917'. [ 1598.303201][T22678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1598.423955][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1598.456116][T22685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.496052][T22685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.544344][T22685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1598.584797][T22685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.528816][T22704] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4926'. [ 1602.092724][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4927'. [ 1604.304262][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4931'. [ 1605.394263][T22803] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4936'. [ 1605.979752][T22823] bond0 speed is unknown, defaulting to 1000 [ 1606.247913][T22823] lo speed is unknown, defaulting to 1000 [ 1606.628435][T22841] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4942'. [ 1608.204471][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.375060][T22849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1611.762780][T22935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1611.840209][T22904] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4947'. [ 1612.371212][T22960] FAULT_INJECTION: forcing a failure. [ 1612.371212][T22960] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.414110][T22960] CPU: 0 PID: 22960 Comm: syz.0.4951 Not tainted syzkaller #0 [ 1612.421956][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1612.432163][T22960] Call Trace: [ 1612.435592][T22960] [ 1612.438584][T22960] dump_stack_lvl+0x188/0x24e [ 1612.443353][T22960] ? show_regs_print_info+0x12/0x12 [ 1612.448662][T22960] ? load_image+0x410/0x410 [ 1612.453262][T22960] ? __might_sleep+0xd0/0xd0 [ 1612.457947][T22960] ? __lock_acquire+0x7ea0/0x7ea0 [ 1612.463046][T22960] ? __lock_acquire+0x142d/0x7ea0 [ 1612.468176][T22960] should_fail_ex+0x390/0x4c0 [ 1612.472952][T22960] should_failslab+0x5/0x20 [ 1612.477572][T22960] slab_pre_alloc_hook+0x59/0x300 [ 1612.482692][T22960] kmem_cache_alloc+0x56/0x2f0 [ 1612.487570][T22960] ? mas_alloc_nodes+0x2ec/0x880 [ 1612.492594][T22960] mas_alloc_nodes+0x2ec/0x880 [ 1612.497715][T22960] mas_preallocate+0x162/0x3b0 [ 1612.502760][T22960] vma_link+0xdf/0x2c0 [ 1612.507070][T22960] ? mt_find+0x157/0x830 [ 1612.511650][T22960] ? insert_vm_struct+0x3f0/0x3f0 [ 1612.516753][T22960] ? __vm_enough_memory+0x116/0x370 [ 1612.522006][T22960] insert_vm_struct+0x2e3/0x3f0 [ 1612.526906][T22960] ? exit_mmap+0x970/0x970 [ 1612.531359][T22960] ? vm_area_alloc+0x20/0xe0 [ 1612.535990][T22960] ? alloc_bprm+0x37a/0x710 [ 1612.540537][T22960] alloc_bprm+0x4a4/0x710 [ 1612.544908][T22960] do_execveat_common+0x18a/0x6b0 [ 1612.549974][T22960] __x64_sys_execveat+0xc0/0xe0 [ 1612.554863][T22960] do_syscall_64+0x4c/0xa0 [ 1612.559318][T22960] ? clear_bhb_loop+0x60/0xb0 [ 1612.564037][T22960] ? clear_bhb_loop+0x60/0xb0 [ 1612.568752][T22960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1612.574674][T22960] RIP: 0033:0x7f110539e159 [ 1612.579137][T22960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.598778][T22960] RSP: 002b:00007f1106276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1612.607312][T22960] RAX: ffffffffffffffda RBX: 00007f1105625fa0 RCX: 00007f110539e159 [ 1612.615323][T22960] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 1612.623335][T22960] RBP: 00007f110543506b R08: 0000000000001000 R09: 0000000000000000 [ 1612.631343][T22960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.639445][T22960] R13: 00007f1105626038 R14: 00007f1105625fa0 R15: 00007fff60f5a158 [ 1612.647490][T22960] [ 1613.337412][T22986] loop8: detected capacity change from 0 to 512 [ 1613.429970][T22986] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1613.451715][T22986] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 1615.502801][T22992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4960'. [ 1615.858726][T23006] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1616.180551][T23013] netlink: 'syz.4.4966': attribute type 4 has an invalid length. [ 1616.498765][T23025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1616.659707][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1616.677101][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1616.687497][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1616.699291][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1616.707370][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1616.718179][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1617.016877][T23027] bond0 speed is unknown, defaulting to 1000 [ 1617.069220][T23027] lo speed is unknown, defaulting to 1000 [ 1617.701243][T23027] chnl_net:caif_netlink_parms(): no params data found [ 1617.776625][T23045] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4972'. [ 1617.792275][T23045] loop0: detected capacity change from 0 to 128 [ 1618.002445][T23027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.009735][T23027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.018518][T23027] device bridge_slave_0 entered promiscuous mode [ 1618.027970][T23027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.038729][T23027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.047355][T23027] device bridge_slave_1 entered promiscuous mode [ 1618.089206][T23027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.168576][T23027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.337400][T23027] team0: Port device team_slave_0 added [ 1618.364108][T23027] team0: Port device team_slave_1 added [ 1618.435377][T23027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.462779][T23027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1618.535132][T23027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.575085][T23027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.597092][T23027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1618.712584][T23027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.832321][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 1618.992820][T23027] device hsr_slave_0 entered promiscuous mode [ 1619.052097][T23027] device hsr_slave_1 entered promiscuous mode [ 1619.089150][T23027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1619.105658][T23027] Cannot create hsr debugfs directory [ 1620.911652][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 1621.518939][ T26] audit: type=1326 audit(1791043972.646:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23105 comm="syz.8.4983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba3f59e159 code=0x0 [ 1621.557014][T23027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1621.629231][T23027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1621.667164][T23027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1621.738757][T23027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1621.974188][T23027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.006631][T23114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4984'. [ 1622.079021][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1622.104657][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1622.136695][T23114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4984'. [ 1622.213478][T23027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.333140][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1622.345545][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1622.373371][T19869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.380585][T19869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.570620][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1622.586982][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1622.626362][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1622.653232][T19869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.660466][T19869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.692140][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1622.715561][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1622.804632][T23027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1622.835165][T23027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1622.881379][T23126] netlink: 'syz.4.4987': attribute type 4 has an invalid length. [ 1622.917770][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1622.955753][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1622.976390][T23135] IPVS: length: 217 != 24 [ 1622.986886][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1622.996531][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 1623.026289][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1623.048918][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1623.080891][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.110713][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1623.146520][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1623.166176][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1623.181790][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.200671][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1623.256150][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1623.308336][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.401826][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.047346][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1624.055872][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1624.091173][T23027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.167643][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1624.193981][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1624.256829][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1624.274446][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1624.306551][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1624.346316][T19478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1624.375888][T23027] device veth0_vlan entered promiscuous mode [ 1624.471325][T23027] device veth1_vlan entered promiscuous mode [ 1624.546390][ T26] audit: type=1800 audit(1791043975.676:534): pid=23166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4995" name=08 dev="sda1" ino=2064 res=0 errno=0 [ 1624.619342][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1624.640295][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1624.692779][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1624.713968][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1624.748153][T23027] device veth0_macvtap entered promiscuous mode [ 1624.794472][T23027] device veth1_macvtap entered promiscuous mode [ 1624.901003][T23027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1624.930635][T23027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.964703][T23027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1624.993057][T23027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.029042][T23027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.053387][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1625.071933][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 1625.079785][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1625.116944][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1625.143155][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1625.186158][T23027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.225580][T23027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.251643][T23027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.275781][T23027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.315136][T23027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1625.334664][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1625.369727][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1625.398657][T23027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.427897][T23160] loop0: detected capacity change from 0 to 1024 [ 1625.429121][T23027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.475912][T23160] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1625.495501][T23027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.523522][T23027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.608053][T23160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1625.799839][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.821474][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.835837][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1625.901948][T19478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.909855][T19478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.931319][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1626.068431][T23190] netlink: 'syz.4.4997': attribute type 12 has an invalid length. [ 1626.107217][T22181] EXT4-fs (loop0): unmounting filesystem. [ 1627.356965][T19478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.561269][T19478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.882108][T19478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.293475][T17255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1628.327574][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1628.343646][T17255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1628.358178][T17255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1628.368285][T17255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1628.381746][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1629.157520][ T26] audit: type=1326 audit(1791043980.286:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23223 comm="syz.1.5003" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea0e19e159 code=0x0 [ 1629.218378][T19478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.280352][T23244] bond0 speed is unknown, defaulting to 1000 [ 1629.303811][T23244] lo speed is unknown, defaulting to 1000 [ 1629.947892][T23262] netlink: 'syz.1.5011': attribute type 1 has an invalid length. [ 1630.080124][T23262] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1630.432912][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 1630.598758][T23263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.029077][T23277] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1631.042705][T23277] loop0: detected capacity change from 0 to 128 [ 1631.076262][T23263] bond4: (slave batadv0): making interface the new active one [ 1631.116874][T23263] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 1631.148382][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1632.461350][T23296] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5013'. [ 1632.475259][T23296] loop8: detected capacity change from 0 to 128 [ 1632.511707][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 1632.702900][T23266] bond4 (unregistering): (slave batadv0): Releasing active interface [ 1632.736472][T23266] bond4 (unregistering): Released all slaves [ 1632.779555][T23244] chnl_net:caif_netlink_parms(): no params data found [ 1633.393614][T23244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.413910][T23244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.439437][T23244] device bridge_slave_0 entered promiscuous mode [ 1633.498064][T23244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.517880][T23244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.542803][T23244] device bridge_slave_1 entered promiscuous mode [ 1633.620440][T23306] netlink: 'syz.8.5014': attribute type 12 has an invalid length. [ 1634.008223][T23316] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5023'. [ 1634.023600][T23316] loop0: detected capacity change from 0 to 128 [ 1634.297874][T23244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.359087][T23244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.591791][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 1634.766231][T23244] team0: Port device team_slave_0 added [ 1634.915307][T23244] team0: Port device team_slave_1 added [ 1634.943254][T23341] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1634.987406][ T4281] Bluetooth: hci1: unexpected subevent 0x0c length: 30 > 5 [ 1635.057716][T23244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.087908][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.197889][T23244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.353249][T23244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.360647][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.437572][T23244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.778419][T23244] device hsr_slave_0 entered promiscuous mode [ 1635.808082][T23244] device hsr_slave_1 entered promiscuous mode [ 1635.826123][T23244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1635.853726][T23244] Cannot create hsr debugfs directory [ 1636.445371][T23369] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5025'. [ 1636.459166][T23369] loop8: detected capacity change from 0 to 128 [ 1636.692563][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 1637.008320][T23373] bridge0: port 1(vxlan1) entered blocking state [ 1637.045380][T23373] bridge0: port 1(vxlan1) entered disabled state [ 1637.085620][T23373] device vxlan1 entered promiscuous mode [ 1637.807065][T19478] device hsr_slave_0 left promiscuous mode [ 1637.829986][T19478] device hsr_slave_1 left promiscuous mode [ 1637.837232][T23384] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5030'. [ 1637.853065][T23384] loop8: detected capacity change from 0 to 128 [ 1637.934834][T19478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.969772][T19478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.004639][T19478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1638.041754][T19478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.066527][T19478] device bridge_slave_1 left promiscuous mode [ 1638.074275][T19478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.090907][T19478] device bridge_slave_0 left promiscuous mode [ 1638.106624][T19478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.321220][T19478] device veth1_macvtap left promiscuous mode [ 1638.337263][T19478] device veth0_macvtap left promiscuous mode [ 1638.346996][T19478] device veth1_vlan left promiscuous mode [ 1638.362397][T19478] device veth0_vlan left promiscuous mode [ 1638.749410][T23404] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1638.771543][ T4281] Bluetooth: hci5: unexpected subevent 0x0c length: 30 > 5 [ 1640.076336][T19478] team0 (unregistering): Port device team_slave_1 removed [ 1640.217505][T19478] team0 (unregistering): Port device team_slave_0 removed [ 1640.364813][T19478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.520412][T19478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.663453][T19478] bond0 (unregistering): Released all slaves [ 1642.003325][T23396] netlink: 'syz.1.5033': attribute type 1 has an invalid length. [ 1645.079651][T23244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1645.209139][T23244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1645.331242][T23244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1645.425349][T23244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1646.596971][T23244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.859025][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1646.970627][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1647.090799][T23244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.137610][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1647.156838][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1647.180332][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.187562][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.213807][T19355] kernel write not supported for file /sequencer2 (pid: 19355 comm: kworker/0:17) [ 1647.271381][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1647.307644][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1647.336080][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1647.388566][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.396127][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.426482][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1647.498002][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1647.520300][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1647.557878][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1647.569092][T23434] tipc: Failed to remove unknown binding: 66,0,0/0:119400529/119400531 [ 1647.592573][T23434] tipc: Failed to remove unknown binding: 66,0,0/0:119400529/119400530 [ 1647.607940][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1647.628750][T23434] tipc: Failed to remove unknown binding: 66,0,0/0:119400529/119400531 [ 1647.629976][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1647.639901][T23434] tipc: Failed to remove unknown binding: 66,0,0/0:119400529/119400530 [ 1647.736327][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1647.748162][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1647.793189][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1647.828752][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1647.870141][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1647.896107][T23244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1651.385331][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1651.410918][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1651.522536][T23244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.845791][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1651.886189][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1652.114265][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1652.146190][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1652.235368][T23244] device veth0_vlan entered promiscuous mode [ 1652.278139][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1652.323571][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1652.466744][T23244] device veth1_vlan entered promiscuous mode [ 1652.894239][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1652.933677][ T2942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1653.084026][T23244] device veth0_macvtap entered promiscuous mode [ 1653.257020][T23244] device veth1_macvtap entered promiscuous mode [ 1653.329554][T23244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.375372][T23244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.415790][T23244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1653.451111][T23244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.508414][T23244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.536407][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1653.581275][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1653.627709][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1653.666318][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1653.709320][T23244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.750822][T23244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.785781][T23244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1653.812352][T23244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.851685][T23244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.860490][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1653.902507][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1653.950777][T23244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.981301][T23244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.018047][T23244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.058382][T23244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.137408][T23475] loop8: detected capacity change from 0 to 1024 [ 1654.214701][T23475] EXT4-fs: Ignoring removed bh option [ 1654.305464][T23481] [ 1654.307929][T23481] ====================================================== [ 1654.315366][T23481] WARNING: possible circular locking dependency detected [ 1654.323138][T23481] syzkaller #0 Not tainted [ 1654.323331][T23244] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 1654.328040][T23481] ------------------------------------------------------ [ 1654.343302][T23481] syz.4.5050/23481 is trying to acquire lock: [ 1654.349752][T23481] ffff888148c5e9d0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14c/0x450 [ 1654.361587][T23481] [ 1654.361587][T23481] but task is already holding lock: [ 1654.369439][T23481] ffffffff8d806e68 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 1654.379120][T23481] [ 1654.379120][T23481] which lock already depends on the new lock. [ 1654.379120][T23481] [ 1654.389744][T23481] [ 1654.389744][T23481] the existing dependency chain (in reverse order) is: [ 1654.399130][T23481] [ 1654.399130][T23481] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 1654.407069][T23481] __mutex_lock+0x12d/0xae0 [ 1654.412133][T23481] tcm_alloc_inst+0x61/0x190 [ 1654.417373][T23481] usb_get_function_instance+0xd9/0x2e0 [ 1654.423470][T23481] function_make+0x118/0x350 [ 1654.428697][T23481] configfs_mkdir+0x511/0x9e0 [ 1654.434221][T23481] vfs_mkdir+0x386/0x570 [ 1654.439129][T23481] do_mkdirat+0x1d8/0x440 [ 1654.444227][T23481] __x64_sys_mkdirat+0x85/0x90 [ 1654.449967][T23481] do_syscall_64+0x4c/0xa0 [ 1654.456083][T23481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1654.462716][T23481] [ 1654.462716][T23481] -> #2 (func_lock){+.+.}-{3:3}: [ 1654.470157][T23481] __mutex_lock+0x12d/0xae0 [ 1654.475599][T23481] usb_get_function_instance+0x2a/0x2e0 [ 1654.481837][T23481] function_make+0x118/0x350 [ 1654.487564][T23481] configfs_mkdir+0x511/0x9e0 [ 1654.494221][T23481] vfs_mkdir+0x386/0x570 [ 1654.499045][T23481] do_mkdirat+0x1d8/0x440 [ 1654.504275][T23481] __x64_sys_mkdirat+0x85/0x90 [ 1654.510748][T23481] do_syscall_64+0x4c/0xa0 [ 1654.516247][T23481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1654.523058][T23481] [ 1654.523058][T23481] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1654.531626][T23481] __mutex_lock+0x12d/0xae0 [ 1654.536874][T23481] configfs_rmdir+0x638/0x980 [ 1654.542113][T23481] vfs_rmdir+0x34e/0x4a0 [ 1654.547164][T23481] do_rmdir+0x29a/0x5c0 [ 1654.551899][T23481] __x64_sys_rmdir+0x45/0x50 [ 1654.557281][T23481] do_syscall_64+0x4c/0xa0 [ 1654.562515][T23481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1654.569100][T23481] [ 1654.569100][T23481] -> #0 (&sb->s_type->i_mutex_key#27){++++}-{3:3}: [ 1654.577847][T23481] __lock_acquire+0x3a03/0x7ea0 [ 1654.583715][T23481] lock_acquire+0x1bc/0x4a0 [ 1654.588974][T23481] down_write+0x36/0x60 [ 1654.594063][T23481] configfs_depend_item_unlocked+0x14c/0x450 [ 1654.601938][T23481] usbg_make_tpg+0x1dd/0x550 [ 1654.607109][T23481] target_fabric_make_tpg+0xa0/0x6d0 [ 1654.613337][T23481] configfs_mkdir+0x511/0x9e0 [ 1654.618867][T23481] vfs_mkdir+0x386/0x570 [ 1654.623708][T23481] do_mkdirat+0x1d8/0x440 [ 1654.629580][T23481] __x64_sys_mkdirat+0x85/0x90 [ 1654.637182][T23481] do_syscall_64+0x4c/0xa0 [ 1654.642440][T23481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1654.648974][T23481] [ 1654.648974][T23481] other info that might help us debug this: [ 1654.648974][T23481] [ 1654.659531][T23481] Chain exists of: [ 1654.659531][T23481] &sb->s_type->i_mutex_key#27 --> func_lock --> tpg_instances_lock [ 1654.659531][T23481] [ 1654.676521][T23481] Possible unsafe locking scenario: [ 1654.676521][T23481] [ 1654.684837][T23481] CPU0 CPU1 [ 1654.690769][T23481] ---- ---- [ 1654.696695][T23481] lock(tpg_instances_lock); [ 1654.702552][T23481] lock(func_lock); [ 1654.709565][T23481] lock(tpg_instances_lock); [ 1654.717016][T23481] lock(&sb->s_type->i_mutex_key#27); [ 1654.724524][T23481] [ 1654.724524][T23481] *** DEADLOCK *** [ 1654.724524][T23481] [ 1654.734341][T23481] 4 locks held by syz.4.5050/23481: [ 1654.739715][T23481] #0: ffff888019fb8460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1654.750431][T23481] #1: ffff888024e6a9d0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 1654.762825][T23481] #2: ffffffff8d4eab90 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 1654.773368][T23481] #3: ffffffff8d806e68 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 1654.783283][T23481] [ 1654.783283][T23481] stack backtrace: [ 1654.789197][T23481] CPU: 0 PID: 23481 Comm: syz.4.5050 Not tainted syzkaller #0 [ 1654.797829][T23481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1654.808367][T23481] Call Trace: [ 1654.812388][T23481] [ 1654.815378][T23481] dump_stack_lvl+0x188/0x24e [ 1654.820641][T23481] ? load_image+0x410/0x410 [ 1654.825594][T23481] ? show_regs_print_info+0x12/0x12 [ 1654.831622][T23481] ? print_circular_bug+0x12b/0x1a0 [ 1654.837439][T23481] check_noncircular+0x2f8/0x400 [ 1654.844630][T23481] ? print_deadlock_bug+0x5d0/0x5d0 [ 1654.852048][T23481] ? lockdep_lock+0xf1/0x1f0 [ 1654.857114][T23481] ? _find_first_zero_bit+0xd2/0x100 [ 1654.862914][T23481] __lock_acquire+0x3a03/0x7ea0 [ 1654.868033][T23481] ? verify_lock_unused+0x140/0x140 [ 1654.873380][T23481] ? __mutex_trylock_common+0x15c/0x260 [ 1654.879556][T23481] lock_acquire+0x1bc/0x4a0 [ 1654.884311][T23481] ? configfs_depend_item_unlocked+0x14c/0x450 [ 1654.891277][T23481] ? __might_sleep+0xd0/0xd0 [ 1654.896025][T23481] ? read_lock_is_recursive+0x10/0x10 [ 1654.901458][T23481] ? __mutex_trylock_common+0x15c/0x260 [ 1654.907481][T23481] ? usbg_make_tpg+0xf5/0x550 [ 1654.912480][T23481] ? mutex_lock_nested+0x10/0x10 [ 1654.917560][T23481] down_write+0x36/0x60 [ 1654.921901][T23481] ? configfs_depend_item_unlocked+0x14c/0x450 [ 1654.928196][T23481] configfs_depend_item_unlocked+0x14c/0x450 [ 1654.934482][T23481] usbg_make_tpg+0x1dd/0x550 [ 1654.939917][T23481] ? snprintf+0xe5/0x140 [ 1654.944711][T23481] ? usbg_drop_tport+0x20/0x20 [ 1654.949769][T23481] ? vscnprintf+0x80/0x80 [ 1654.954592][T23481] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1654.961727][T23481] target_fabric_make_tpg+0xa0/0x6d0 [ 1654.967262][T23481] ? target_fabric_release_wwn+0xa0/0xa0 [ 1654.973018][T23481] configfs_mkdir+0x511/0x9e0 [ 1654.978057][T23481] vfs_mkdir+0x386/0x570 [ 1654.982652][T23481] do_mkdirat+0x1d8/0x440 [ 1654.987608][T23481] ? vfs_mkdir+0x570/0x570 [ 1654.993780][T23481] __x64_sys_mkdirat+0x85/0x90 [ 1654.998874][T23481] do_syscall_64+0x4c/0xa0 [ 1655.003445][T23481] ? clear_bhb_loop+0x60/0xb0 [ 1655.008185][T23481] ? clear_bhb_loop+0x60/0xb0 [ 1655.012996][T23481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.019243][T23481] RIP: 0033:0x7f6e9959e159 [ 1655.023773][T23481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.044228][T23481] RSP: 002b:00007f6e9a4be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1655.052877][T23481] RAX: ffffffffffffffda RBX: 00007f6e99826090 RCX: 00007f6e9959e159 [ 1655.061355][T23481] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1655.069817][T23481] RBP: 00007f6e9963506b R08: 0000000000000000 R09: 0000000000000000 [ 1655.078660][T23481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.087408][T23481] R13: 00007f6e99826128 R14: 00007f6e99826090 R15: 00007ffd43a78ad8 [ 1655.095503][T23481] [ 1655.231015][T23475] EXT4-fs: error -4 creating inode table initialization thread [ 1655.263272][T23475] EXT4-fs (loop8): mount failed [ 1656.070405][T19869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.177006][T19869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.347686][T19869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.419272][T19869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.324472][T19869] device hsr_slave_0 left promiscuous mode [ 1657.331188][T19869] device hsr_slave_1 left promiscuous mode [ 1657.337998][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.345879][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.353995][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.361741][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.370713][T19869] device bridge_slave_1 left promiscuous mode [ 1657.377576][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.386410][T19869] device bridge_slave_0 left promiscuous mode [ 1657.393087][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.404966][T19869] device veth1_macvtap left promiscuous mode [ 1657.412000][T19869] device veth0_macvtap left promiscuous mode [ 1657.418322][T19869] device veth1_vlan left promiscuous mode [ 1657.426930][T19869] device veth0_vlan left promiscuous mode [ 1657.747977][T19869] team0 (unregistering): Port device team_slave_1 removed [ 1657.799231][T19869] team0 (unregistering): Port device team_slave_0 removed [ 1657.814583][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.828660][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.895500][T19869] bond0 (unregistering): Released all slaves [ 1658.468746][T19869] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.518446][T19869] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.577084][T19869] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.627067][T19869] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.746194][T19869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.795859][T19869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.836907][T19869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.888008][T19869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.026677][T19869] device hsr_slave_0 left promiscuous mode [ 1660.033922][T19869] device hsr_slave_1 left promiscuous mode [ 1660.040501][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.049532][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.059243][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.068261][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.076791][T19869] device bridge_slave_1 left promiscuous mode [ 1660.084428][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.093577][T19869] device bridge_slave_0 left promiscuous mode [ 1660.100063][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.113719][T19869] device hsr_slave_0 left promiscuous mode [ 1660.120385][T19869] device hsr_slave_1 left promiscuous mode [ 1660.128396][T19869] device bridge_slave_1 left promiscuous mode [ 1660.136652][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.145675][T19869] device bridge_slave_0 left promiscuous mode [ 1660.154771][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.167169][T19869] device veth1_macvtap left promiscuous mode [ 1660.173421][T19869] device veth0_macvtap left promiscuous mode [ 1660.179893][T19869] device veth1_vlan left promiscuous mode [ 1660.186009][T19869] device veth0_vlan left promiscuous mode [ 1660.192848][T19869] device veth1_macvtap left promiscuous mode [ 1660.199088][T19869] device veth0_macvtap left promiscuous mode [ 1660.205435][T19869] device veth1_vlan left promiscuous mode [ 1660.211500][T19869] device veth0_vlan left promiscuous mode [ 1660.500097][T19869] team0 (unregistering): Port device team_slave_1 removed [ 1660.547630][T19869] team0 (unregistering): Port device team_slave_0 removed [ 1660.593901][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.640245][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.700239][T19869] bond0 (unregistering): Released all slaves [ 1660.865363][T19869] team0 (unregistering): Port device team_slave_1 removed [ 1660.912196][T19869] team0 (unregistering): Port device team_slave_0 removed [ 1660.960245][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.012989][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.074159][T19869] bond0 (unregistering): Released all slaves