last executing test programs: 2m42.639369168s ago: executing program 3 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7d, 0x3, 0x7fff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x81, r0}, 0x38) 2m42.005050733s ago: executing program 2 (id=67): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r5, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES16=0x0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m40.167733958s ago: executing program 2 (id=68): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) unshare(0x60000600) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) 2m40.031638591s ago: executing program 3 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x5188, 0x20, 0x0, 0x0, 0x0, 0xffff}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") setpriority(0x2, 0x0, 0x2131) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0xa4000061) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x8500017e) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000300)='./file2\x00') 2m39.675338469s ago: executing program 2 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f0000000940)) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) mmap(&(0x7f00003e6000/0x1000)=nil, 0x1000, 0x3000002, 0x10010, 0xffffffffffffffff, 0xf30cc000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d0000000000000000"], 0x0, 0x56}, 0x28) 2m38.475633038s ago: executing program 2 (id=77): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m38.389250671s ago: executing program 3 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="120108d80472f30000000000010902"], 0x0) 2m38.248720854s ago: executing program 2 (id=82): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) 2m37.975259041s ago: executing program 2 (id=83): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000200)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9, 0x2}}}, 0x8) 2m35.183798568s ago: executing program 3 (id=101): lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001f80300000000000400010006000000000020000500"/36], 0x24, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0xffffffffffffffff, {{0x41, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc8d1}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000001c0)={0x51, 0x0, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x58, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) openat(0xffffffffffffffff, 0x0, 0x185801, 0x83) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r8, 0x1f}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$tipc(r6, 0x0, 0x0) r10 = dup(r9) syz_usb_disconnect(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2m34.443271606s ago: executing program 4 (id=108): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0xa7, 0x0}, 0xed}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m34.151735653s ago: executing program 4 (id=112): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 2m33.01454763s ago: executing program 4 (id=114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r5, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES16=0x0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m32.990151622s ago: executing program 0 (id=115): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x800000000002, 0x800000000000208, 0x0, 0x0, 0x7, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598958224ad596b0fd707f07c8603c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000400006, 0x6]}}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m32.764009327s ago: executing program 0 (id=116): mkdirat(0xffffffffffffff9c, 0x0, 0x10e) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 2m32.641019s ago: executing program 0 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='dummy_udc.0', 0xb) 2m32.574425581s ago: executing program 0 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x1e) 2m32.432054045s ago: executing program 0 (id=119): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.330058297s ago: executing program 0 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x7b, 0x9c, 0x2c, 0x10, 0x403, 0xda73, 0xdf68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x7, 0x10, 0x1, "", [{{0x9, 0x4, 0x89, 0xff, 0x2, 0x9c, 0xd9, 0x6c, 0x81, [], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x4, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0xf7, 0x68}}]}}]}}]}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x3, 0x11, 0xf1, 0x100000001, 0x10, 0x5, 0xff, 0x29, 0x0, 0x6, 0x4, 0x100000000], 0x4000, 0x43180}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0xc, 0x0, 0xb, 0x8, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x87, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x58000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x8000, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m32.088453203s ago: executing program 3 (id=121): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_ublk_setup_io_uring(0x14, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x240002, 0x1e8}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) 2m32.035246445s ago: executing program 4 (id=122): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0) 2m31.908114397s ago: executing program 3 (id=123): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='mem', 0x3) 2m31.907917637s ago: executing program 4 (id=124): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 2m30.944628061s ago: executing program 4 (id=126): lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010af6"], 0x24, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x10000007, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b5, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x80003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x0, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x9, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0xfffffffe, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0x7, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b397, 0x8001, 0x200001, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x43ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x8000491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x234, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x7, 0x7f, 0x9d27, 0x8, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x1000, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xdcce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x8000000e, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x9, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000100)='syz1\x00', 0x4000, &(0x7f0000000140)={@align=0x9, {0x40, 0x8, 0xfc0, 0x101}}, 0x6, 0x0, 0x0}, {[0x6, 0x200, 0x8abb, 0x2ab3]}, 0x9, 0xf5, &(0x7f0000000300)=""/245}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m29.131861584s ago: executing program 1 (id=128): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x0, 0x3}, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x400, 0x2}}, 0x0, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x19, 0x2, "67e7"}, 0x0, 0x0, 0x0, 0x0}) 2m27.068150034s ago: executing program 1 (id=129): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000001cc0)) 2m27.036685075s ago: executing program 1 (id=130): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.961139477s ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0506617, 0x0) 2m26.884022619s ago: executing program 1 (id=132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r5, @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES16=0x0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100020000"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m26.01815836s ago: executing program 1 (id=133): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40300, 0x0) 2m22.68515542s ago: executing program 32 (id=83): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000200)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc9, 0x2}}}, 0x8) 2m0.600253745s ago: executing program 33 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x7b, 0x9c, 0x2c, 0x10, 0x403, 0xda73, 0xdf68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x7, 0x10, 0x1, "", [{{0x9, 0x4, 0x89, 0xff, 0x2, 0x9c, 0xd9, 0x6c, 0x81, [], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x4, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0xf7, 0x68}}]}}]}}]}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x3, 0x11, 0xf1, 0x100000001, 0x10, 0x5, 0xff, 0x29, 0x0, 0x6, 0x4, 0x100000000], 0x4000, 0x43180}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0xc, 0x0, 0xb, 0x8, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x87, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x58000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x8000, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m0.532000326s ago: executing program 34 (id=133): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40300, 0x0) 2m0.485634617s ago: executing program 35 (id=123): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='mem', 0x3) 2m0.437715028s ago: executing program 36 (id=126): lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010af6"], 0x24, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x10000007, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b5, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x80003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x0, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x9, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0xfffffffe, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0x7, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b397, 0x8001, 0x200001, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x43ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x8000491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x234, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x7, 0x7f, 0x9d27, 0x8, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x1000, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xdcce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x8000000e, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x9, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000100)='syz1\x00', 0x4000, &(0x7f0000000140)={@align=0x9, {0x40, 0x8, 0xfc0, 0x101}}, 0x6, 0x0, 0x0}, {[0x6, 0x200, 0x8abb, 0x2ab3]}, 0x9, 0xf5, &(0x7f0000000300)=""/245}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.267739769s ago: executing program 6 (id=548): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x52f, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) 12.206228965s ago: executing program 6 (id=552): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fdatasync(r0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = creat(0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) dup2(r1, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x0, 0x6a}) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) r3 = dup(r2) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) 11.251895477s ago: executing program 5 (id=557): open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4074, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.13246294s ago: executing program 5 (id=558): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) setuid(0xee00) 10.828205888s ago: executing program 5 (id=560): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 10.73610449s ago: executing program 6 (id=563): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 10.598247113s ago: executing program 6 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2a020480) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xe01) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0xa, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)=0x1) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fdff4ef4a1a972b361ab0000000000100000000000000000"], 0x50) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x10001000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80000000}}, 0x7, 0x6, 0xf06, 0x917b, 0xb4, 0x9, 0x7}, 0x9c) 10.275439751s ago: executing program 6 (id=570): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 10.015736007s ago: executing program 6 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 9.819826082s ago: executing program 7 (id=573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "c0be23fa9c0855a83c337a3c7077eb0828b79dfae7329500880e4633afa6bd513ea24b96862e586adce6b9122acb6941df9ee2c561afdc8e41793aa412aefdf187"}}]}, 0x17c}}, 0x0) 9.204067427s ago: executing program 7 (id=576): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) unlink(&(0x7f0000000300)='./file2\x00') 9.187417258s ago: executing program 8 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000005c0)={0xe6c, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x3, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e23, @broadcast}}]}, 0x210) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='foo int x; bar int', 0x12) clock_adjtime(0x0, &(0x7f00000004c0)={0x930b, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x0, 0x400}) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e3, &(0x7f0000000140)="$eJzslr/uEkEQx7+7d96B0ZhY2lhIohYed4cmNibQWFmY+IdYmEDkJMgpCVAIiUGfwCewoLD3BUy09RVMDFrZYGdjc2Zv9+4W5T8ChfNJfvP7Hpmdm5ldZgFBEP8t377+nETIxfoUCrDV59+NzIdr/l9yP158vHWz+vrh20/2xMnPixlF67/fBPChYqCfrp1dXVD/74Kn+h44LitdBYOjdA0c95UOwPBA6Sea7gh/x3ncCgPnUSdsCOEK4wnjC1OSnuU0v+krhoaWH9Py6w2G7XoYBt09ilX9m1Y4bmj56fvlQGbrav3zwOEpXQLDHaWvw056I1ui1X/OzOIbS+u3sO+OiFQ2WHX29MKtsgCEZWyRBsCSgCfeYKdy8FId2X2eoQXCkLUnO/qPIhsHqkIc9BU+MA/eVbZbM7fZi/dyWKXnMBrJ59jnjFCf/w4YjdZ8haW+IGyjI5rNp2jMcDGbT0yNpPiq4TZQ7A2GV1pP682gGTzz/Rrcq657zS/Gg0jaJfMvH8+nk1n82TtpnEmLWXhe7/e7nrTpsy/tvInL4/nHcemCfBapW3/kkNM0U38mTKhC2+8WZk8QBHE8zoP9ihRmItRtAu237u0j5kgQBEEQBEEQBEEQxG78DgAA///p0kGp") mount(&(0x7f0000000380)=@filename='./tracing/synthetic_events\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x2000, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000400), 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 6.61209572s ago: executing program 5 (id=579): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x100, 0x30) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 5.300071001s ago: executing program 8 (id=580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 5.231411383s ago: executing program 9 (id=581): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='r:test/event1 ./file0:0', 0x17) 5.140144165s ago: executing program 7 (id=582): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 5.126739565s ago: executing program 8 (id=583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1dc, 0xf8f7, 0x1, 0x3, 0xfff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 5.022180378s ago: executing program 9 (id=584): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x1, 0xfffffffb, 0x80, 0x0, 0x7}) 4.835657223s ago: executing program 7 (id=585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x88) lseek(r0, 0x10001, 0x0) 4.835485403s ago: executing program 9 (id=586): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x60b, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='0123:abcd:,,', 0xc) 4.696260296s ago: executing program 9 (id=587): futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) socket(0x8000000010, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000400)=ANY=[@ANYBLOB="646973636172642c666d61736b3d30303030303030303030303030303030303030303030312c666d61736b3d30313737373737373737373737373737373731373532312c6d616363656e746575726f2c666d61736b3d30303030303030303030303030383030303030303030342c6e616d65636173653d312c666d61736b3d30303030303030303030da35a36e616d65636173653d312c756d61736b3d30303030303030303030303030393030303030303230312c6572726f72733d636f6e74696e75652c6e616d65636173653d0000"], 0x1, 0x1535, &(0x7f0000001380)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000240)='./bus/file0\x00', 0x2029c1b, 0x0, 0x3, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x86) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) 4.691721816s ago: executing program 7 (id=588): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) write$P9_RVERSION(r1, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0xfffffffa, 0x6, '9P2000'}, 0x13) fallocate(r0, 0x0, 0x0, 0x8ffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0x3, 0x4, 0x1000000000001}) 4.479924941s ago: executing program 8 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) getuid() r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_fuse_handle_req(r3, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x6, 0x5, 0x0, {0xfffffffffffffffc, 0x8a, 0x1, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4009, 0x6, r4, r5, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = semget$private(0x0, 0x4, 0x29b) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000980)={{0x2, r8, r9, 0x0, 0x0, 0x40, 0x17}, 0x2, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x7}) mount$bpf(0x0, 0x0, 0x0, 0x20002, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000000)=0xa, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd, @loopback, @loopback}}}}}}, 0x0) 4.079304781s ago: executing program 5 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000005c0)={0xe6c, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x3, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e23, @broadcast}}]}, 0x210) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='foo int x; bar int', 0x12) clock_adjtime(0x0, &(0x7f00000004c0)={0x930b, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x0, 0x400}) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e3, &(0x7f0000000140)="$eJzslr/uEkEQx7+7d96B0ZhY2lhIohYed4cmNibQWFmY+IdYmEDkJMgpCVAIiUGfwCewoLD3BUy09RVMDFrZYGdjc2Zv9+4W5T8ChfNJfvP7Hpmdm5ldZgFBEP8t377+nETIxfoUCrDV59+NzIdr/l9yP158vHWz+vrh20/2xMnPixlF67/fBPChYqCfrp1dXVD/74Kn+h44LitdBYOjdA0c95UOwPBA6Sea7gh/x3ncCgPnUSdsCOEK4wnjC1OSnuU0v+krhoaWH9Py6w2G7XoYBt09ilX9m1Y4bmj56fvlQGbrav3zwOEpXQLDHaWvw056I1ui1X/OzOIbS+u3sO+OiFQ2WHX29MKtsgCEZWyRBsCSgCfeYKdy8FId2X2eoQXCkLUnO/qPIhsHqkIc9BU+MA/eVbZbM7fZi/dyWKXnMBrJ59jnjFCf/w4YjdZ8haW+IGyjI5rNp2jMcDGbT0yNpPiq4TZQ7A2GV1pP682gGTzz/Rrcq657zS/Gg0jaJfMvH8+nk1n82TtpnEmLWXhe7/e7nrTpsy/tvInL4/nHcemCfBapW3/kkNM0U38mTKhC2+8WZk8QBHE8zoP9ihRmItRtAu237u0j5kgQBEEQBEEQBEEQxG78DgAA///p0kGp") mount(&(0x7f0000000380)=@filename='./tracing/synthetic_events\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x2000, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000400), 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.64906417s ago: executing program 8 (id=591): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x1, 0x4, 0x7}, &(0x7f0000000640)=0x10) 192.196345ms ago: executing program 5 (id=592): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) unlink(&(0x7f0000000300)='./file2\x00') 181.838995ms ago: executing program 9 (id=593): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000800)={0x0, 0x1, 0x17, 0x17, 0xcf, &(0x7f0000000400)="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"}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) 124.365037ms ago: executing program 7 (id=594): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 124.189067ms ago: executing program 8 (id=595): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x8404a, 0x1e21e1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0xa1d, 0x4000000000000ffa, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a25f3dc3bd3fe37dd332000000e52d8ddc25f5ab60c9e6d680f9850700000000000000c8b5342a51100e39133500", "32d8cc26f7061a74df2cfc06c89b5474654b30c50997d3bef409ff2176ff7bfe55cd4a4d83cd4a524bd3ffe746173f800b2f7b6a1e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffff7fce6, 0xa]}}) write(r0, &(0x7f0000000600), 0x0) 0s ago: executing program 9 (id=596): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x125d, 0xff) kernel console output (not intermixed with test programs): CONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.785005][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.824508][ T4735] device veth1_vlan entered promiscuous mode [ 137.865211][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.874016][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.884767][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.898623][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.907875][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.944309][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.987051][ T1324] Bluetooth: hci6: command 0x0419 tx timeout [ 138.006141][ T1324] Bluetooth: hci7: command 0x0419 tx timeout [ 138.019751][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 138.041680][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.066903][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 138.077551][ T1324] Bluetooth: hci5: command 0x0419 tx timeout [ 138.101765][ T4738] device veth0_vlan entered promiscuous mode [ 138.133496][ T4730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.160604][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.170689][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.180737][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.192788][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.214314][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.244950][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.256362][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.273778][ T4737] device veth0_vlan entered promiscuous mode [ 138.298239][ T4738] device veth1_vlan entered promiscuous mode [ 138.318848][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.328119][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.339597][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.374360][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.407007][ T4735] device veth0_macvtap entered promiscuous mode [ 138.431832][ T4737] device veth1_vlan entered promiscuous mode [ 138.472045][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.493753][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.514644][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.523226][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.532208][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.542583][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.561085][ T4735] device veth1_macvtap entered promiscuous mode [ 138.598496][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.620857][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.652318][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.677565][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.698108][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.707359][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.714898][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.723505][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.732620][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.753285][ T4738] device veth0_macvtap entered promiscuous mode [ 138.793735][ T4737] device veth0_macvtap entered promiscuous mode [ 138.809092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.828956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.857363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.892818][ T4738] device veth1_macvtap entered promiscuous mode [ 138.939196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.968190][ T4737] device veth1_macvtap entered promiscuous mode [ 138.981269][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.009499][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.029961][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.040896][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.051959][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.062565][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.072409][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.083208][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.095061][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.134573][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.159736][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.177310][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.200928][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.216248][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.228629][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.238949][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.249696][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.260411][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.276826][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.288803][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.315988][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.324961][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.350282][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.372234][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.387339][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.412205][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.442128][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.459475][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.470420][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.480710][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.491502][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.502493][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.513261][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.538778][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.568914][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.586003][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.597323][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.608452][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.618548][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.629836][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.640047][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.652071][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.663665][ T4738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.674436][ T4738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.689424][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.698690][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.708343][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.717833][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.726864][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.737002][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.745557][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.771961][ T4735] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.781780][ T4735] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.803489][ T4735] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.812609][ T4735] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.831120][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.847072][ T4738] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.856865][ T4738] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.865978][ T4738] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.874712][ T4738] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.892228][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.904196][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.915662][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.927518][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.939189][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.949992][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.960081][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.970894][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.982906][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.994351][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.004402][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.014959][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.026484][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.057604][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.067427][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.077115][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.086870][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.095705][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.104916][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.125327][ T4730] device veth0_vlan entered promiscuous mode [ 140.137283][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.151474][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.162461][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.173013][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.183667][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.193696][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.204349][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.215641][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.227427][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.238931][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.250839][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.261088][ T4737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.271869][ T4737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.283337][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.296400][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.305010][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.313500][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.323989][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.353676][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.368491][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.377860][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.388815][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.397352][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.408806][ T4737] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.417877][ T4737] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.429475][ T4737] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.438443][ T4737] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.453560][ T4730] device veth1_vlan entered promiscuous mode [ 140.485492][ T4736] device veth0_vlan entered promiscuous mode [ 140.508431][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.563956][ T4736] device veth1_vlan entered promiscuous mode [ 140.654373][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.662344][ T4730] device veth0_macvtap entered promiscuous mode [ 140.665638][ T4730] device veth1_macvtap entered promiscuous mode [ 140.696979][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.709891][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.730362][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.741100][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.750502][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.759497][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.767804][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.777595][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.786409][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.794390][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.850398][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.859671][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.887708][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.898489][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.909200][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.929506][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.941050][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.953750][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.964719][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.974786][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.985419][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.995275][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.007767][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.018192][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.029239][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.039655][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.050375][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.061741][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.072921][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.083980][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.123577][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.133192][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.156603][ T4736] device veth0_macvtap entered promiscuous mode [ 141.164593][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.176148][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.189281][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.199865][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.209768][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.220640][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.230590][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.241693][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.252046][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.263073][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.273672][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.284294][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.295391][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.305939][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.317425][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.328584][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.334243][ T4730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.350127][ T4730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.357962][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.359728][ T4730] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.375601][ T4730] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.403769][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.434415][ T4736] device veth1_macvtap entered promiscuous mode [ 141.438570][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.446978][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.469725][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.490100][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.511505][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.521141][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.530620][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.571026][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.583382][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.617373][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.646521][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.723651][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.783113][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.804032][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.818043][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.841360][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.855951][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.867130][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.877771][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.890518][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.904305][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.915336][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.925945][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.938050][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.951651][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.962798][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.973389][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.986413][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.998509][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.036222][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.065820][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.088840][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.110658][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.140177][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.158096][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.175504][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.185712][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.197296][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.207403][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.218686][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.230061][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.241002][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.251193][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.261875][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.271768][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.283062][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.293981][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.306162][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.316536][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.327191][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.341279][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.379385][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.442771][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.458540][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.473422][ T4736] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.495531][ T4736] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.521813][ T4736] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.531441][ T4736] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.670760][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.705369][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.722338][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.767626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.917026][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.946056][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.964116][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.999447][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.028738][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.069139][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.241417][ T4206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.277048][ T4987] FAULT_INJECTION: forcing a failure. [ 143.277048][ T4987] name failslab, interval 1, probability 0, space 0, times 0 [ 143.283279][ T4206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.380281][ T4987] CPU: 1 PID: 4987 Comm: syz.5.134 Not tainted syzkaller #0 [ 143.387990][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.396437][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.398159][ T4987] Call Trace: [ 143.398171][ T4987] [ 143.398180][ T4987] dump_stack_lvl+0x188/0x250 [ 143.416864][ T4987] ? show_regs_print_info+0x20/0x20 [ 143.422108][ T4987] ? load_image+0x410/0x410 [ 143.426672][ T4987] ? __lock_acquire+0x7b50/0x7b50 [ 143.431759][ T4987] should_fail+0x383/0x4b0 [ 143.436318][ T4987] should_failslab+0x5/0x20 [ 143.440869][ T4987] slab_pre_alloc_hook+0x51/0xc0 [ 143.445944][ T4987] ? prepare_creds+0x3c/0x610 [ 143.450832][ T4987] kmem_cache_alloc+0x3d/0x280 [ 143.455737][ T4987] prepare_creds+0x3c/0x610 [ 143.460549][ T4987] cap_task_prctl+0x92a/0xc00 [ 143.465273][ T4987] security_task_prctl+0x75/0x100 [ 143.470343][ T4987] __se_sys_prctl+0xba/0x1050 [ 143.475146][ T4987] ? __x64_sys_prctl+0xc0/0xc0 [ 143.479959][ T4987] ? lockdep_hardirqs_on+0x94/0x140 [ 143.485371][ T4987] ? __x64_sys_prctl+0x1c/0xc0 [ 143.488060][ T26] audit: type=1800 audit(1788237367.141:2): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.147" name=0604 dev="sda1" ino=2057 res=0 errno=0 [ 143.490169][ T4987] do_syscall_64+0x4c/0xa0 [ 143.514614][ T4987] ? clear_bhb_loop+0x30/0x80 [ 143.519348][ T4987] ? clear_bhb_loop+0x30/0x80 [ 143.524068][ T4987] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.530084][ T4987] RIP: 0033:0x7ff2a0bd1159 [ 143.534534][ T4987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.554349][ T4987] RSP: 002b:00007ff29ee29028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 143.562895][ T4987] RAX: ffffffffffffffda RBX: 00007ff2a0e58fa0 RCX: 00007ff2a0bd1159 [ 143.570915][ T4987] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c [ 143.578917][ T4987] RBP: 00007ff2a0c68024 R08: 0000000000000000 R09: 0000000000000000 [ 143.587180][ T4987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.595363][ T4987] R13: 00007ff2a0e59038 R14: 00007ff2a0e58fa0 R15: 00007ffe73551bc8 [ 143.603379][ T4987] [ 144.182499][ T5018] Zero length message leads to an empty skb [ 144.426287][ T4259] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 144.811444][ T26] audit: type=1800 audit(1788237368.471:3): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.156" name="0x0000000000000000" dev="sda1" ino=2058 res=0 errno=0 [ 144.846150][ T4259] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.876492][ T4259] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.907185][ T4259] usb 9-1: config 0 interface 0 has no altsetting 0 [ 144.927847][ T4259] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 144.956049][ T4259] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.005580][ T4259] usb 9-1: config 0 descriptor?? [ 145.198697][ T26] audit: type=1800 audit(1788237368.861:4): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.158" name="(" dev="sda1" ino=2059 res=0 errno=0 [ 145.350742][ T5057] FAULT_INJECTION: forcing a failure. [ 145.350742][ T5057] name failslab, interval 1, probability 0, space 0, times 0 [ 145.404328][ T5057] CPU: 0 PID: 5057 Comm: syz.5.161 Not tainted syzkaller #0 [ 145.411709][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.421796][ T5057] Call Trace: [ 145.425102][ T5057] [ 145.428072][ T5057] dump_stack_lvl+0x188/0x250 [ 145.432784][ T5057] ? show_regs_print_info+0x20/0x20 [ 145.438114][ T5057] ? load_image+0x410/0x410 [ 145.442663][ T5057] ? __lock_acquire+0x7b50/0x7b50 [ 145.447728][ T5057] should_fail+0x383/0x4b0 [ 145.452175][ T5057] should_failslab+0x5/0x20 [ 145.456715][ T5057] slab_pre_alloc_hook+0x51/0xc0 [ 145.461684][ T5057] ? new_inode_pseudo+0x77/0x210 [ 145.466649][ T5057] kmem_cache_alloc+0x3d/0x280 [ 145.471535][ T5057] new_inode_pseudo+0x77/0x210 [ 145.476592][ T5057] create_pipe_files+0x4c/0x6b0 [ 145.482069][ T5057] ? __context_tracking_exit+0x4c/0x80 [ 145.487567][ T5057] __do_pipe_flags+0x46/0x1f0 [ 145.492280][ T5057] do_pipe2+0xa7/0x190 [ 145.496375][ T5057] ? pipe_fcntl+0x530/0x530 [ 145.500917][ T5057] ? lock_chain_count+0x20/0x20 [ 145.505839][ T5057] ? syscall_enter_from_user_mode+0x21/0x70 [ 145.511768][ T5057] __x64_sys_pipe+0x36/0x40 [ 145.516325][ T5057] do_syscall_64+0x4c/0xa0 [ 145.520777][ T5057] ? clear_bhb_loop+0x30/0x80 [ 145.525482][ T5057] ? clear_bhb_loop+0x30/0x80 [ 145.530198][ T5057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.536119][ T5057] RIP: 0033:0x7ff2a0bd1159 [ 145.540563][ T5057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.560205][ T5057] RSP: 002b:00007ff29ee29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 145.568770][ T5057] RAX: ffffffffffffffda RBX: 00007ff2a0e58fa0 RCX: 00007ff2a0bd1159 [ 145.577127][ T5057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480 [ 145.585169][ T5057] RBP: 00007ff2a0c68024 R08: 0000000000000000 R09: 0000000000000000 [ 145.593369][ T5057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.601625][ T5057] R13: 00007ff2a0e59038 R14: 00007ff2a0e58fa0 R15: 00007ffe73551bc8 [ 145.609965][ T5057] [ 145.646298][ T5060] loop6: detected capacity change from 0 to 512 [ 145.648257][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.685945][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.701622][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.721566][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.739015][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.765952][ T1110] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 145.775031][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.782784][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.799320][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.808660][ T5060] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.813028][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.836019][ T5060] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.936633][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.965346][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 145.977693][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.005916][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.028528][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.054403][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.076154][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.105843][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.128660][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.145843][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.153752][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.171143][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.185351][ T1110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.205855][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.213421][ T1110] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.223782][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.241590][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.249196][ T1110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.265902][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.282482][ T1110] usb 10-1: config 0 descriptor?? [ 146.304197][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.311596][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.325919][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.346010][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.379800][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.407743][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.420563][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.438055][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.445678][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.453144][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.464045][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.471810][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.494409][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.502470][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.512382][ T4259] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 146.556588][ T4259] hid-led: probe of 0003:0FC5:B080.0004 failed with error -71 [ 146.635377][ T4259] usb 9-1: USB disconnect, device number 2 [ 146.696373][ T1110] usbhid 10-1:0.0: can't add hid device: -71 [ 146.703118][ T1110] usbhid: probe of 10-1:0.0 failed with error -71 [ 146.750501][ T1110] usb 10-1: USB disconnect, device number 2 [ 147.226121][ T4997] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 147.276137][ T1110] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 147.463865][ T5060] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 147.489929][ T1324] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 147.498218][ T4997] usb 9-1: Using ep0 maxpacket: 16 [ 147.503618][ T5060] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 147.521357][ T5060] EXT4-fs (loop6): This should not happen!! Data will be lost [ 147.521357][ T5060] [ 147.540145][ T5060] EXT4-fs (loop6): Total free blocks count 0 [ 147.547211][ T5060] EXT4-fs (loop6): Free/Dirty block details [ 147.553363][ T5060] EXT4-fs (loop6): free_blocks=65280 [ 147.563145][ T5060] EXT4-fs (loop6): dirty_blocks=33 [ 147.585750][ T5060] EXT4-fs (loop6): Block reservation details [ 147.593291][ T5060] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 147.626388][ T4997] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 147.634710][ T4997] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.662937][ T4997] usb 9-1: config 0 has no interface number 0 [ 147.706121][ T1110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.736848][ T1110] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 147.750982][ T1110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.798488][ T1110] usb 10-1: config 0 descriptor?? [ 147.856769][ T4997] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 147.871257][ T4997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.885413][ T4997] usb 9-1: Product: syz [ 147.890299][ T4997] usb 9-1: Manufacturer: syz [ 147.895308][ T4997] usb 9-1: SerialNumber: syz [ 147.900379][ T1324] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 147.910877][ T1324] usb 6-1: config 127 has no interface number 0 [ 147.926861][ T4997] usb 9-1: config 0 descriptor?? [ 147.932079][ T1324] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 147.989136][ T4997] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 148.000192][ T4997] usb 9-1: No valid video chain found. [ 148.079379][ T144] device hsr_slave_0 left promiscuous mode [ 148.105350][ T144] device hsr_slave_1 left promiscuous mode [ 148.115013][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.122989][ T1324] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 148.141274][ T1324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.149814][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.157044][ T1324] usb 6-1: Product: syz [ 148.161460][ T1324] usb 6-1: Manufacturer: syz [ 148.166233][ T1324] usb 6-1: SerialNumber: syz [ 148.207175][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.214663][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.241999][ T21] usb 9-1: USB disconnect, device number 3 [ 148.256284][ T5101] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 148.285008][ T144] device bridge_slave_1 left promiscuous mode [ 148.328411][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.395296][ T144] device bridge_slave_0 left promiscuous mode [ 148.408866][ T5136] FAULT_INJECTION: forcing a failure. [ 148.408866][ T5136] name failslab, interval 1, probability 0, space 0, times 0 [ 148.417610][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.432819][ T5136] CPU: 1 PID: 5136 Comm: syz.6.173 Not tainted syzkaller #0 [ 148.440167][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.450792][ T5136] Call Trace: [ 148.454205][ T5136] [ 148.457111][ T5131] FAULT_INJECTION: forcing a failure. [ 148.457111][ T5131] name fail_futex, interval 1, probability 0, space 0, times 1 [ 148.457161][ T5136] dump_stack_lvl+0x188/0x250 [ 148.475116][ T5136] ? show_regs_print_info+0x20/0x20 [ 148.480448][ T5136] ? load_image+0x410/0x410 [ 148.485087][ T5136] ? __might_sleep+0xf0/0xf0 [ 148.489724][ T5136] ? __lock_acquire+0x7b50/0x7b50 [ 148.494784][ T5136] should_fail+0x383/0x4b0 [ 148.499237][ T5136] should_failslab+0x5/0x20 [ 148.503767][ T5136] slab_pre_alloc_hook+0x51/0xc0 [ 148.508813][ T5136] __kmalloc+0x6b/0x340 [ 148.514475][ T5136] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 148.520740][ T5136] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 148.527064][ T5136] genl_rcv_msg+0xa91/0xfa0 [ 148.531700][ T5136] ? genl_bind+0x370/0x370 [ 148.536162][ T5136] ? __dev_queue_xmit+0x1b64/0x2e50 [ 148.541379][ T5136] ? verify_lock_unused+0x140/0x140 [ 148.546606][ T5136] ? dev_queue_xmit+0x20/0x20 [ 148.551318][ T5136] ? nla_put_string+0x30/0x30 [ 148.556104][ T5136] ? ctrl_getfamily+0x5b0/0x5b0 [ 148.560993][ T5136] netlink_rcv_skb+0x1e9/0x430 [ 148.565952][ T5136] ? genl_bind+0x370/0x370 [ 148.570375][ T5136] ? netlink_ack+0xb10/0xb10 [ 148.574989][ T5136] ? down_read+0x1aa/0x2e0 [ 148.579438][ T5136] genl_rcv+0x24/0x40 [ 148.583462][ T5136] netlink_unicast+0x78f/0x940 [ 148.589032][ T5136] netlink_sendmsg+0x8ba/0xbe0 [ 148.594306][ T5136] ? netlink_getsockopt+0x570/0x570 [ 148.599521][ T5136] ? aa_sock_msg_perm+0x94/0x150 [ 148.604482][ T5136] ? apparmor_socket_sendmsg+0x88/0x230 [ 148.610059][ T5136] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 148.615389][ T5136] ? security_socket_sendmsg+0x7c/0xa0 [ 148.620970][ T5136] __sys_sendto+0x46d/0x620 [ 148.625587][ T5136] ? __ia32_sys_getpeername+0x80/0x80 [ 148.631126][ T5136] ? lock_chain_count+0x20/0x20 [ 148.636282][ T5136] __x64_sys_sendto+0xda/0xf0 [ 148.641007][ T5136] do_syscall_64+0x4c/0xa0 [ 148.645541][ T5136] ? clear_bhb_loop+0x30/0x80 [ 148.650244][ T5136] ? clear_bhb_loop+0x30/0x80 [ 148.655079][ T5136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.660983][ T5136] RIP: 0033:0x7f738358798e [ 148.665410][ T5136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.685566][ T5136] RSP: 002b:00007f738181de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 148.694135][ T5136] RAX: ffffffffffffffda RBX: 00007f738181f6c0 RCX: 00007f738358798e [ 148.702204][ T5136] RDX: 0000000000000020 RSI: 00007f738181e000 RDI: 0000000000000005 [ 148.710277][ T5136] RBP: 0000000000000000 R08: 00007f738181df04 R09: 000000000000000c [ 148.718271][ T5136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 148.726258][ T5136] R13: 00007f738181df58 R14: 00007f738181e000 R15: 0000000000000000 [ 148.732319][ T5101] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 148.734268][ T5136] [ 148.751827][ T5131] CPU: 0 PID: 5131 Comm: syz.7.172 Not tainted syzkaller #0 [ 148.759378][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.769557][ T5131] Call Trace: [ 148.772873][ T5131] [ 148.775829][ T5131] dump_stack_lvl+0x188/0x250 [ 148.780565][ T5131] ? show_regs_print_info+0x20/0x20 [ 148.785929][ T5131] ? load_image+0x410/0x410 [ 148.790481][ T5131] ? __lock_acquire+0x13dc/0x7b50 [ 148.795817][ T5131] should_fail+0x383/0x4b0 [ 148.800472][ T5131] get_futex_key+0x1a1/0x12d0 [ 148.805196][ T5131] ? futex_wait_restart+0x250/0x250 [ 148.810420][ T5131] ? __lock_acquire+0x13dc/0x7b50 [ 148.815754][ T5131] futex_wake+0x101/0x540 [ 148.820121][ T5131] ? futex_wait+0x680/0x680 [ 148.824774][ T5131] ? reacquire_held_locks+0x319/0x5c0 [ 148.830181][ T5131] ? verify_lock_unused+0x140/0x140 [ 148.835421][ T5131] ? verify_lock_unused+0x140/0x140 [ 148.840758][ T5131] do_futex+0xd83/0x12b0 [ 148.845072][ T5131] ? futex_exit_release+0x1c0/0x1c0 [ 148.850410][ T5131] ? __context_tracking_exit+0x4c/0x80 [ 148.856267][ T5131] __se_sys_futex+0x389/0x420 [ 148.861023][ T5131] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.867225][ T5131] ? __x64_sys_futex+0xf0/0xf0 [ 148.872141][ T5131] ? __x64_sys_futex+0x1d/0xf0 [ 148.877164][ T5131] do_syscall_64+0x4c/0xa0 [ 148.882242][ T5131] ? clear_bhb_loop+0x30/0x80 [ 148.886953][ T5131] ? clear_bhb_loop+0x30/0x80 [ 148.891764][ T5131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.897875][ T5131] RIP: 0033:0x7f3c78529159 [ 148.902321][ T5131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.922643][ T5131] RSP: 002b:00007f3c767810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.931098][ T5131] RAX: ffffffffffffffda RBX: 00007f3c787b0fa8 RCX: 00007f3c78529159 [ 148.939305][ T5131] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c787b0fac [ 148.947985][ T5131] RBP: 00007f3c787b0fa0 R08: 0016ac5a09c89824 R09: 0000000000000000 [ 148.955992][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.964087][ T5131] R13: 00007f3c787b1038 R14: 00007fff7ffb3640 R15: 00007fff7ffb3728 [ 148.972111][ T5131] [ 148.994715][ T5131] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.003310][ T1110] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 149.029728][ T1110] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input6 [ 149.051313][ T5131] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 149.152937][ T144] device hsr_slave_0 left promiscuous mode [ 149.203878][ T144] device hsr_slave_1 left promiscuous mode [ 149.210195][ T1324] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 149.246907][ T1324] asix: probe of 6-1:127.57 failed with error -71 [ 149.266739][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.276052][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.296634][ T1324] usb 6-1: USB disconnect, device number 2 [ 149.346358][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.364255][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.388781][ T144] device bridge_slave_1 left promiscuous mode [ 149.406656][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.420326][ T144] device bridge_slave_0 left promiscuous mode [ 149.445937][ T21] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 149.453778][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.473501][ T144] device hsr_slave_0 left promiscuous mode [ 149.490755][ T144] device hsr_slave_1 left promiscuous mode [ 149.508770][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.524942][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.543036][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.555519][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.573550][ T144] device bridge_slave_1 left promiscuous mode [ 149.586083][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.607066][ T144] device bridge_slave_0 left promiscuous mode [ 149.614512][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.651203][ T144] device veth1_macvtap left promiscuous mode [ 149.666188][ T144] device veth0_macvtap left promiscuous mode [ 149.674385][ T144] device veth1_vlan left promiscuous mode [ 149.680828][ T144] device veth0_vlan left promiscuous mode [ 149.688543][ T144] device veth1_macvtap left promiscuous mode [ 149.694687][ T144] device veth0_macvtap left promiscuous mode [ 149.701988][ T144] device veth1_vlan left promiscuous mode [ 149.709710][ T144] device veth0_vlan left promiscuous mode [ 149.717885][ T144] device veth1_macvtap left promiscuous mode [ 149.725543][ T144] device veth0_macvtap left promiscuous mode [ 149.734638][ T144] device veth1_vlan left promiscuous mode [ 149.741424][ T144] device veth0_vlan left promiscuous mode [ 149.817679][ T21] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 149.846137][ T21] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 149.875331][ T21] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.915958][ T21] usb 9-1: config 0 interface 0 has no altsetting 0 [ 149.936534][ T21] usb 9-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 149.972731][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.009741][ T21] usb 9-1: config 0 descriptor?? [ 150.351871][ T1324] usb 10-1: USB disconnect, device number 3 [ 150.376265][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 150.508651][ T21] input: HID 046d:c29b as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:046D:C29B.0005/input/input7 [ 150.535506][ T5171] kvm: emulating exchange as write [ 150.642160][ T21] logitech 0003:046D:C29B.0005: input,hidraw0: USB HID v80.00 Joystick [HID 046d:c29b] on usb-dummy_hcd.8-1/input0 [ 150.664743][ T21] logitech 0003:046D:C29B.0005: missing HID_OUTPUT_REPORT 0 [ 150.802348][ T21] logitech: probe of 0003:046D:C29B.0005 failed with error -1 [ 150.835879][ T4930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 151.056600][ T144] team0 (unregistering): Port device team_slave_1 removed [ 151.074982][ T144] team0 (unregistering): Port device team_slave_0 removed [ 151.086027][ T4930] usb 7-1: Using ep0 maxpacket: 16 [ 151.099366][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.123828][ T5190] udc-core: couldn't find an available UDC or it's busy [ 151.126162][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.131318][ T5190] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 151.206529][ T4930] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.231447][ T4930] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.245604][ T4930] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.248795][ T144] bond0 (unregistering): Released all slaves [ 151.252535][ T4930] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 151.268000][ T4930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.282453][ T4930] usb 7-1: config 0 descriptor?? [ 151.453000][ T144] team0 (unregistering): Port device team_slave_1 removed [ 151.466971][ T144] team0 (unregistering): Port device team_slave_0 removed [ 151.483737][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.500246][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.595008][ T144] bond0 (unregistering): Released all slaves [ 151.770162][ T4930] elan 0003:04F3:074D.0006: failed to start in urb: -90 [ 151.783035][ T144] team0 (unregistering): Port device team_slave_1 removed [ 151.792954][ T4930] input: HID 04f3:074d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:04F3:074D.0006/input/input8 [ 151.807284][ T144] team0 (unregistering): Port device team_slave_0 removed [ 151.832580][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.846539][ T4930] elan 0003:04F3:074D.0006: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.6-1/input0 [ 151.858813][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.058899][ T4231] usb 7-1: USB disconnect, device number 2 [ 152.163033][ T144] bond0 (unregistering): Released all slaves [ 152.262601][ T4997] usb 9-1: USB disconnect, device number 4 [ 152.590864][ T5198] loop5: detected capacity change from 0 to 4096 [ 152.700456][ T5198] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.562448][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.956754][ T21] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 153.994928][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.345102][ T21] usb 6-1: config 0 descriptor?? [ 155.346443][ T5269] loop6: detected capacity change from 0 to 4096 [ 155.370994][ T4231] Bluetooth: hci7: command 0x0405 tx timeout [ 155.589036][ T5269] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.726041][ T21] usb 6-1: Cannot set autoneg [ 155.731049][ T21] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 155.781572][ T21] usb 6-1: USB disconnect, device number 3 [ 156.191672][ T5305] FAULT_INJECTION: forcing a failure. [ 156.191672][ T5305] name failslab, interval 1, probability 0, space 0, times 0 [ 156.245651][ T5305] CPU: 0 PID: 5305 Comm: syz.7.216 Not tainted syzkaller #0 [ 156.253089][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.263267][ T5305] Call Trace: [ 156.266668][ T5305] [ 156.269641][ T5305] dump_stack_lvl+0x188/0x250 [ 156.274614][ T5305] ? show_regs_print_info+0x20/0x20 [ 156.279936][ T5305] ? load_image+0x410/0x410 [ 156.284489][ T5305] ? __might_sleep+0xf0/0xf0 [ 156.289122][ T5305] ? __lock_acquire+0x7b50/0x7b50 [ 156.294200][ T5305] should_fail+0x383/0x4b0 [ 156.298666][ T5305] should_failslab+0x5/0x20 [ 156.303204][ T5305] slab_pre_alloc_hook+0x51/0xc0 [ 156.308267][ T5305] ? __d_alloc+0x27/0x6d0 [ 156.312629][ T5305] kmem_cache_alloc+0x3d/0x280 [ 156.317680][ T5305] ? alloc_file+0x85/0x510 [ 156.322383][ T5305] __d_alloc+0x27/0x6d0 [ 156.326587][ T5305] ? d_alloc_pseudo+0xe/0x70 [ 156.331308][ T5305] d_alloc_pseudo+0x19/0x70 [ 156.335841][ T5305] alloc_file_pseudo+0xe0/0x200 [ 156.340728][ T5305] ? alloc_empty_file_noaccount+0x80/0x80 [ 156.346481][ T5305] ? do_raw_spin_unlock+0x11d/0x230 [ 156.351724][ T5305] ? put_pid+0xc3/0x120 [ 156.355926][ T5305] sock_alloc_file+0xb3/0x240 [ 156.360637][ T5305] __sys_socketpair+0x372/0x540 [ 156.365542][ T5305] __x64_sys_socketpair+0x97/0xb0 [ 156.370995][ T5305] do_syscall_64+0x4c/0xa0 [ 156.375439][ T5305] ? clear_bhb_loop+0x30/0x80 [ 156.380333][ T5305] ? clear_bhb_loop+0x30/0x80 [ 156.385036][ T5305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.391139][ T5305] RIP: 0033:0x7f3c78529159 [ 156.395701][ T5305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.417613][ T5305] RSP: 002b:00007f3c76781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 156.426092][ T5305] RAX: ffffffffffffffda RBX: 00007f3c787b0fa0 RCX: 00007f3c78529159 [ 156.434642][ T5305] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 156.442726][ T5305] RBP: 00007f3c785c0024 R08: 0000000000000000 R09: 0000000000000000 [ 156.451411][ T5305] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 156.459741][ T5305] R13: 00007f3c787b1038 R14: 00007f3c787b0fa0 R15: 00007fff7ffb3728 [ 156.467738][ T5305] [ 156.555934][ T4997] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 156.976191][ T4997] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 156.998722][ T4997] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.030160][ T4997] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.060120][ T4997] usb 9-1: config 1 has no interface number 0 [ 157.093529][ T4997] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 157.128547][ T4997] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 157.366243][ T4997] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.402638][ T4997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.386553][ T4997] usb 9-1: Product: syz [ 158.390783][ T4997] usb 9-1: Manufacturer: syz [ 158.396120][ T4997] usb 9-1: SerialNumber: syz [ 158.721970][ T5344] loop7: detected capacity change from 0 to 4096 [ 158.885874][ T5344] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.342919][ T5358] size and base must be multiples of 4 kiB [ 159.387460][ T5358] CPU: 0 PID: 5358 Comm: syz.6.227 Not tainted syzkaller #0 [ 159.394893][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.405375][ T5358] Call Trace: [ 159.408676][ T5358] [ 159.411629][ T5358] dump_stack_lvl+0x188/0x250 [ 159.416330][ T5358] ? show_regs_print_info+0x20/0x20 [ 159.421806][ T5358] ? load_image+0x410/0x410 [ 159.426447][ T5358] ? __lock_acquire+0x7b50/0x7b50 [ 159.431507][ T5358] mtrr_add+0x8e/0xc0 [ 159.435555][ T5358] mtrr_ioctl+0x9bf/0x1140 [ 159.440147][ T5358] ? mtrr_close+0x1f0/0x1f0 [ 159.444788][ T5358] ? mtrr_close+0x1f0/0x1f0 [ 159.449729][ T5358] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 159.455484][ T5358] ? proc_reg_poll+0x280/0x280 [ 159.460257][ T5358] __se_sys_ioctl+0xfa/0x170 [ 159.464965][ T5358] do_syscall_64+0x4c/0xa0 [ 159.469423][ T5358] ? clear_bhb_loop+0x30/0x80 [ 159.474230][ T5358] ? clear_bhb_loop+0x30/0x80 [ 159.478913][ T5358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.484924][ T5358] RIP: 0033:0x7f73835c7159 [ 159.489439][ T5358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.509421][ T5358] RSP: 002b:00007f738181f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.517937][ T5358] RAX: ffffffffffffffda RBX: 00007f738384efa0 RCX: 00007f73835c7159 [ 159.525924][ T5358] RDX: 0000200000000900 RSI: 00000000400c4d01 RDI: 0000000000000004 [ 159.533919][ T5358] RBP: 00007f738365e024 R08: 0000000000000000 R09: 0000000000000000 [ 159.541903][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.549890][ T5358] R13: 00007f738384f038 R14: 00007f738384efa0 R15: 00007ffd421db488 [ 159.557890][ T5358] [ 159.700174][ T4997] usb 9-1: can't set config #1, error -71 [ 159.716000][ T4997] usb 9-1: USB disconnect, device number 5 [ 160.167105][ T5380] FAULT_INJECTION: forcing a failure. [ 160.167105][ T5380] name failslab, interval 1, probability 0, space 0, times 0 [ 160.285049][ T5380] CPU: 0 PID: 5380 Comm: syz.9.232 Not tainted syzkaller #0 [ 160.292934][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.303026][ T5380] Call Trace: [ 160.306332][ T5380] [ 160.309290][ T5380] dump_stack_lvl+0x188/0x250 [ 160.314003][ T5380] ? show_regs_print_info+0x20/0x20 [ 160.319254][ T5380] ? load_image+0x410/0x410 [ 160.323803][ T5380] ? __might_sleep+0xf0/0xf0 [ 160.328425][ T5380] ? __lock_acquire+0x7b50/0x7b50 [ 160.333568][ T5380] should_fail+0x383/0x4b0 [ 160.338020][ T5380] should_failslab+0x5/0x20 [ 160.342558][ T5380] slab_pre_alloc_hook+0x51/0xc0 [ 160.347527][ T5380] ? __kernfs_new_node+0xe3/0x6b0 [ 160.352584][ T5380] kmem_cache_alloc+0x3d/0x280 [ 160.357388][ T5380] __kernfs_new_node+0xe3/0x6b0 [ 160.362368][ T5380] ? __lock_acquire+0x7b50/0x7b50 [ 160.367775][ T5380] ? kernfs_new_node+0x250/0x250 [ 160.372860][ T5380] ? kernfs_activate+0x1eb/0x210 [ 160.377923][ T5380] kernfs_new_node+0x148/0x250 [ 160.382723][ T5380] __kernfs_create_file+0x47/0x2e0 [ 160.387871][ T5380] sysfs_add_file_mode_ns+0x2d2/0x390 [ 160.393369][ T5380] internal_create_group+0x492/0xd00 [ 160.398698][ T5380] ? sysfs_create_group+0x20/0x20 [ 160.403839][ T5380] ? kernfs_add_one+0x564/0x6c0 [ 160.408733][ T5380] sysfs_create_groups+0x55/0x120 [ 160.413970][ T5380] device_add_attrs+0x82/0x690 [ 160.418772][ T5380] device_add+0x677/0x1050 [ 160.423535][ T5380] netdev_register_kobject+0x184/0x320 [ 160.429550][ T5380] register_netdevice+0x10e8/0x1720 [ 160.434937][ T5380] ? netif_stacked_transfer_operstate+0x200/0x200 [ 160.441412][ T5380] ? vscnprintf+0x80/0x80 [ 160.445835][ T5380] ? radix_tree_lookup+0x263/0x280 [ 160.451265][ T5380] ppp_dev_configure+0x81a/0xaa0 [ 160.456256][ T5380] ppp_ioctl+0x8c2/0x1a70 [ 160.460653][ T5380] ? ppp_poll+0x250/0x250 [ 160.465128][ T5380] ? bpf_lsm_file_ioctl+0x5/0x10 [ 160.470113][ T5380] ? security_file_ioctl+0x7c/0xa0 [ 160.475275][ T5380] ? ppp_poll+0x250/0x250 [ 160.479643][ T5380] __se_sys_ioctl+0xfa/0x170 [ 160.484272][ T5380] do_syscall_64+0x4c/0xa0 [ 160.488770][ T5380] ? clear_bhb_loop+0x30/0x80 [ 160.493480][ T5380] ? clear_bhb_loop+0x30/0x80 [ 160.498195][ T5380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.504120][ T5380] RIP: 0033:0x7f3f2a1ac159 [ 160.508573][ T5380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.528336][ T5380] RSP: 002b:00007f3f28404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.536799][ T5380] RAX: ffffffffffffffda RBX: 00007f3f2a433fa0 RCX: 00007f3f2a1ac159 [ 160.545178][ T5380] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 160.553542][ T5380] RBP: 00007f3f2a243024 R08: 0000000000000000 R09: 0000000000000000 [ 160.561558][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.569570][ T5380] R13: 00007f3f2a434038 R14: 00007f3f2a433fa0 R15: 00007ffea8d69898 [ 160.577701][ T5380] [ 161.182479][ T5412] loop9: detected capacity change from 0 to 4096 [ 161.959369][ T5412] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.687642][ T5446] usb usb8: usbfs: process 5446 (syz.6.246) did not claim interface 0 before use [ 163.265991][ T4230] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 163.636285][ T4230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.686281][ T4230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.721047][ T5469] netlink: 68 bytes leftover after parsing attributes in process `syz.5.252'. [ 163.758288][ T5469] netlink: 32 bytes leftover after parsing attributes in process `syz.5.252'. [ 163.788582][ T4230] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.803179][ T5469] netlink: 32 bytes leftover after parsing attributes in process `syz.5.252'. [ 163.825945][ T4230] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 163.844962][ T4230] usb 7-1: Manufacturer: syz [ 163.886295][ T4230] usb 7-1: config 0 descriptor?? [ 164.236092][ T1324] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 164.515914][ T1324] usb 6-1: Using ep0 maxpacket: 16 [ 164.633879][ T5502] loop9: detected capacity change from 0 to 4096 [ 164.656226][ T1324] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.675489][ T1324] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.698254][ T5502] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.733588][ T1324] usb 6-1: config 0 interface 0 has no altsetting 0 [ 164.753569][ T1324] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 164.789627][ T1324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.809222][ T4230] input: syz Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0007/input/input10 [ 164.876554][ T1324] usb 6-1: config 0 descriptor?? [ 164.900675][ T4230] input: syz Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0007/input/input11 [ 164.930284][ T4230] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0 [ 165.017997][ T1107] usb 7-1: USB disconnect, device number 3 [ 165.142384][ T5518] fido_id[5518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 165.417147][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 165.424492][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 165.864672][ T5534] netlink: 68 bytes leftover after parsing attributes in process `syz.8.264'. [ 166.441574][ T5534] netlink: 32 bytes leftover after parsing attributes in process `syz.8.264'. [ 166.836242][ T5534] netlink: 32 bytes leftover after parsing attributes in process `syz.8.264'. [ 167.358688][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 167.366005][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 167.373517][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 167.381969][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 167.389189][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 167.396376][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 168.054653][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 168.065271][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 168.073038][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 168.080472][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 168.087799][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 168.096091][ T1324] konepure 0003:1E7D:2DBE.0008: unknown main item tag 0x0 [ 168.106056][ T1324] konepure 0003:1E7D:2DBE.0008: unbalanced collection at end of report description [ 168.147408][ T1324] konepure 0003:1E7D:2DBE.0008: parse failed [ 168.153736][ T1324] konepure: probe of 0003:1E7D:2DBE.0008 failed with error -22 [ 168.274440][ T1324] usb 6-1: USB disconnect, device number 4 [ 168.357202][ T5569] loop9: detected capacity change from 0 to 4096 [ 168.457373][ T5569] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.635895][ T1107] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 168.947327][ T5601] device syzkaller1 entered promiscuous mode [ 168.996051][ T1107] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.025860][ T1107] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.068973][ T5609] FAULT_INJECTION: forcing a failure. [ 169.068973][ T5609] name failslab, interval 1, probability 0, space 0, times 0 [ 169.113217][ T5609] CPU: 0 PID: 5609 Comm: syz.8.283 Not tainted syzkaller #0 [ 169.120579][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.130843][ T5609] Call Trace: [ 169.134166][ T5609] [ 169.137119][ T5609] dump_stack_lvl+0x188/0x250 [ 169.141847][ T5609] ? show_regs_print_info+0x20/0x20 [ 169.147080][ T5609] ? load_image+0x410/0x410 [ 169.151703][ T5609] ? __might_sleep+0xf0/0xf0 [ 169.156406][ T5609] ? __lock_acquire+0x7b50/0x7b50 [ 169.161812][ T5609] should_fail+0x383/0x4b0 [ 169.166261][ T5609] should_failslab+0x5/0x20 [ 169.170791][ T5609] slab_pre_alloc_hook+0x51/0xc0 [ 169.175758][ T5609] __kmalloc+0x6b/0x340 [ 169.179934][ T5609] ? security_sb_alloc+0x3d/0x120 [ 169.185007][ T5609] security_sb_alloc+0x3d/0x120 [ 169.189971][ T5609] alloc_super+0x208/0x970 [ 169.194526][ T5609] ? kernfs_get_tree+0x6b0/0x6b0 [ 169.199731][ T5609] sget_fc+0x2d4/0x6f0 [ 169.203918][ T5609] ? kernfs_test_super+0x100/0x100 [ 169.205856][ T1107] usb 7-1: config 1 has no interface number 0 [ 169.209139][ T5609] kernfs_get_tree+0x15c/0x6b0 [ 169.215235][ T1107] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.220152][ T5609] ? apparmor_capable+0x12c/0x190 [ 169.220187][ T5609] sysfs_get_tree+0x42/0x110 [ 169.220206][ T5609] vfs_get_tree+0x88/0x270 [ 169.220229][ T5609] do_new_mount+0x247/0xa40 [ 169.252755][ T5609] __se_sys_mount+0x2e3/0x3d0 [ 169.257471][ T5609] ? __x64_sys_mount+0xc0/0xc0 [ 169.262274][ T5609] ? lockdep_hardirqs_on+0x94/0x140 [ 169.267578][ T5609] ? __x64_sys_mount+0x1c/0xc0 [ 169.272562][ T5609] do_syscall_64+0x4c/0xa0 [ 169.277005][ T5609] ? clear_bhb_loop+0x30/0x80 [ 169.281705][ T5609] ? clear_bhb_loop+0x30/0x80 [ 169.286408][ T5609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.292318][ T5609] RIP: 0033:0x7f580408f159 [ 169.296755][ T5609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.316380][ T5609] RSP: 002b:00007f58022e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.325002][ T5609] RAX: ffffffffffffffda RBX: 00007f5804316fa0 RCX: 00007f580408f159 [ 169.333087][ T5609] RDX: 0000200000000600 RSI: 0000200000000400 RDI: 0000000000000000 [ 169.341081][ T5609] RBP: 00007f5804126024 R08: 0000000000000000 R09: 0000000000000000 [ 169.349077][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.357071][ T5609] R13: 00007f5804317038 R14: 00007f5804316fa0 R15: 00007ffff3752468 [ 169.365289][ T5609] [ 169.426751][ T1107] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.458886][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.716863][ T1107] usb 7-1: Product: syz [ 169.826765][ T1107] usb 7-1: Manufacturer: syz [ 170.057967][ T1107] usb 7-1: SerialNumber: syz [ 170.346136][ T1107] cdc_ncm 7-1:1.1: NCM or ECM functional descriptors missing [ 170.386834][ T5618] netlink: 68 bytes leftover after parsing attributes in process `syz.5.284'. [ 170.395749][ T5618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.284'. [ 170.406267][ T1107] cdc_ncm 7-1:1.1: bind() failure [ 170.436047][ T5618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.284'. [ 170.822417][ T5624] loop7: detected capacity change from 0 to 512 [ 171.086458][ T5624] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.144976][ T5624] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.160652][ T5633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 171.210510][ T5626] loop5: detected capacity change from 0 to 4096 [ 171.319087][ T5626] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.019582][ T1107] usb 7-1: USB disconnect, device number 4 [ 172.430509][ T5668] netlink: 68 bytes leftover after parsing attributes in process `syz.9.297'. [ 172.465097][ T5668] netlink: 32 bytes leftover after parsing attributes in process `syz.9.297'. [ 172.492288][ T5668] netlink: 32 bytes leftover after parsing attributes in process `syz.9.297'. [ 174.222114][ T5702] device syzkaller1 entered promiscuous mode [ 174.696036][ T1107] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 175.055948][ T1107] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.107145][ T1107] usb 7-1: config 1 has no interface number 0 [ 175.140003][ T1107] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.192089][ T1107] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 175.232733][ T1107] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x5E, skipping [ 175.369789][ T5741] loop5: detected capacity change from 0 to 512 [ 175.435992][ T1107] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.467941][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.503427][ T1107] usb 7-1: Product: syz [ 175.513799][ T1107] usb 7-1: Manufacturer: syz [ 175.525809][ T1107] usb 7-1: SerialNumber: syz [ 175.540014][ T5741] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.613805][ T5741] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.781975][ T5706] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.464319][ T5706] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.497959][ T1107] cdc_ncm 7-1:1.1: bind() failure [ 176.754887][ T4231] usb 7-1: USB disconnect, device number 5 [ 178.936524][ T4930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 179.326060][ T4930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.349090][ T4930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.446082][ T4930] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 179.459904][ T5834] loop8: detected capacity change from 0 to 512 [ 179.465915][ T4930] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 179.497845][ T4930] usb 6-1: Manufacturer: syz [ 179.527512][ T4930] usb 6-1: config 0 descriptor?? [ 179.612145][ T5834] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.653696][ T5834] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.461635][ T4930] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0009/input/input12 [ 180.472885][ T5851] syz.7.336 uses obsolete (PF_INET,SOCK_PACKET) [ 180.518650][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.527595][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.560393][ T4930] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0009/input/input13 [ 180.598931][ T4930] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 180.680434][ T4930] usb 6-1: USB disconnect, device number 5 [ 180.831857][ T5855] fido_id[5855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 181.861074][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.889529][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.964143][ T5842] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.974221][ T5842] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.984945][ T5842] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.994182][ T5842] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.129764][ T5859] netlink: 16 bytes leftover after parsing attributes in process `syz.8.337'. [ 186.305976][ T5881] loop8: detected capacity change from 0 to 512 [ 186.415870][ T2301] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 186.422793][ T5881] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.429316][ T5887] loop6: detected capacity change from 0 to 512 [ 186.445713][ T5881] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.654729][ T5895] autofs4:pid:5895:autofs_fill_super: called with bogus options [ 186.676024][ T2301] usb 10-1: device descriptor read/64, error -71 [ 186.753597][ T5887] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.813213][ T5887] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.845240][ T5904] FAULT_INJECTION: forcing a failure. [ 186.845240][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 186.895966][ T5904] CPU: 0 PID: 5904 Comm: syz.8.350 Not tainted syzkaller #0 [ 186.903455][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.913558][ T5904] Call Trace: [ 186.916868][ T5904] [ 186.919866][ T5904] dump_stack_lvl+0x188/0x250 [ 186.924588][ T5904] ? show_regs_print_info+0x20/0x20 [ 186.929914][ T5904] ? load_image+0x410/0x410 [ 186.934464][ T5904] ? __might_sleep+0xf0/0xf0 [ 186.939095][ T5904] ? __lock_acquire+0x7b50/0x7b50 [ 186.944255][ T5904] should_fail+0x383/0x4b0 [ 186.945929][ T2301] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 186.948907][ T5904] should_failslab+0x5/0x20 [ 186.961326][ T5904] slab_pre_alloc_hook+0x51/0xc0 [ 186.966298][ T5904] __kmalloc+0x6b/0x340 [ 186.970828][ T5904] ? tomoyo_encode+0x28a/0x550 [ 186.975632][ T5904] tomoyo_encode+0x28a/0x550 [ 186.980445][ T5904] tomoyo_mount_permission+0x4f8/0x9b0 [ 186.985927][ T5904] ? ____kasan_slab_free+0xd5/0x110 [ 186.991146][ T5904] ? slab_free_freelist_hook+0xec/0x170 [ 186.996816][ T5904] ? tomoyo_get_name+0x520/0x520 [ 187.001837][ T5904] security_sb_mount+0x83/0xb0 [ 187.006628][ T5904] path_mount+0xb8/0xfe0 [ 187.010903][ T5904] ? user_path_at_empty+0x13e/0x190 [ 187.016124][ T5904] __se_sys_mount+0x2e3/0x3d0 [ 187.020838][ T5904] ? __x64_sys_mount+0xc0/0xc0 [ 187.025633][ T5904] ? lockdep_hardirqs_on+0x94/0x140 [ 187.030860][ T5904] ? __x64_sys_mount+0x1c/0xc0 [ 187.035651][ T5904] do_syscall_64+0x4c/0xa0 [ 187.040100][ T5904] ? clear_bhb_loop+0x30/0x80 [ 187.044812][ T5904] ? clear_bhb_loop+0x30/0x80 [ 187.049621][ T5904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.055551][ T5904] RIP: 0033:0x7f580408f159 [ 187.059998][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.084493][ T5904] RSP: 002b:00007f58022e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.092952][ T5904] RAX: ffffffffffffffda RBX: 00007f5804316fa0 RCX: 00007f580408f159 [ 187.100951][ T5904] RDX: 0000200000000600 RSI: 0000200000000400 RDI: 0000000000000000 [ 187.109045][ T5904] RBP: 00007f5804126024 R08: 0000000000000000 R09: 0000000000000000 [ 187.117278][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.125313][ T5904] R13: 00007f5804317038 R14: 00007f5804316fa0 R15: 00007ffff3752468 [ 187.133515][ T5904] [ 187.156007][ T2301] usb 10-1: device descriptor read/64, error -71 [ 187.286125][ T2301] usb usb10-port1: attempt power cycle [ 187.696218][ T2301] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 187.826836][ T2301] usb 10-1: device descriptor read/8, error -71 [ 188.156389][ T2301] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 188.386078][ T2301] usb 10-1: device descriptor read/8, error -71 [ 188.524942][ T2301] usb usb10-port1: unable to enumerate USB device [ 188.567412][ T5887] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 188.614644][ T5887] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 188.709175][ T5887] EXT4-fs (loop6): This should not happen!! Data will be lost [ 188.709175][ T5887] [ 188.728752][ T5887] EXT4-fs (loop6): Total free blocks count 0 [ 188.737656][ T5887] EXT4-fs (loop6): Free/Dirty block details [ 188.744238][ T5887] EXT4-fs (loop6): free_blocks=65280 [ 188.770426][ T5887] EXT4-fs (loop6): dirty_blocks=33 [ 188.775705][ T5887] EXT4-fs (loop6): Block reservation details [ 188.813925][ T5887] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 188.934395][ T5937] FAULT_INJECTION: forcing a failure. [ 188.934395][ T5937] name failslab, interval 1, probability 0, space 0, times 0 [ 188.956018][ T5937] CPU: 1 PID: 5937 Comm: syz.8.354 Not tainted syzkaller #0 [ 188.963962][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.974307][ T5937] Call Trace: [ 188.977704][ T5937] [ 188.980750][ T5937] dump_stack_lvl+0x188/0x250 [ 188.985482][ T5937] ? show_regs_print_info+0x20/0x20 [ 188.990715][ T5937] ? load_image+0x410/0x410 [ 188.995292][ T5937] ? verify_lock_unused+0x140/0x140 [ 189.000503][ T5937] should_fail+0x383/0x4b0 [ 189.005131][ T5937] should_failslab+0x5/0x20 [ 189.009724][ T5937] slab_pre_alloc_hook+0x51/0xc0 [ 189.014754][ T5937] kmem_cache_alloc_node+0x47/0x2c0 [ 189.020043][ T5937] ? __alloc_skb+0xf4/0x750 [ 189.024581][ T5937] __alloc_skb+0xf4/0x750 [ 189.029009][ T5937] __pskb_copy_fclone+0xa2/0x11a0 [ 189.034154][ T5937] ? rcu_lock_release+0x5/0x20 [ 189.038935][ T5937] ? __lock_acquire+0x7b50/0x7b50 [ 189.044151][ T5937] tipc_clone_to_loopback+0x102/0x4a0 [ 189.049891][ T5937] tipc_node_xmit+0xd8e/0xf70 [ 189.054602][ T5937] ? tipc_node_get_linkname+0x190/0x190 [ 189.060285][ T5937] ? tipc_msg_build+0x385/0xde0 [ 189.065237][ T5937] ? __check_object_size+0x91/0x410 [ 189.070443][ T5937] ? tipc_msg_build+0x3f8/0xde0 [ 189.075365][ T5937] ? tipc_nametbl_lookup_anycast+0x4da/0xf00 [ 189.081352][ T5937] ? tipc_sk_filtering+0x138/0x510 [ 189.086503][ T5937] __tipc_sendmsg+0x1cf2/0x2b60 [ 189.091370][ T5937] ? local_bh_enable+0x20/0x20 [ 189.096145][ T5937] ? verify_lock_unused+0x140/0x140 [ 189.101441][ T5937] ? verify_lock_unused+0x140/0x140 [ 189.106748][ T5937] ? mark_lock+0x94/0x320 [ 189.111176][ T5937] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.117165][ T5937] ? lock_chain_count+0x20/0x20 [ 189.122031][ T5937] ? __local_bh_enable_ip+0x136/0x1c0 [ 189.127412][ T5937] ? lockdep_hardirqs_on+0x94/0x140 [ 189.132618][ T5937] ? wait_woken+0x1b0/0x1b0 [ 189.137127][ T5937] ? _local_bh_enable+0xa0/0xa0 [ 189.141986][ T5937] tipc_sendmsg+0x51/0x70 [ 189.146319][ T5937] ? tipc_recvmsg+0x13d0/0x13d0 [ 189.151276][ T5937] ____sys_sendmsg+0x5be/0x8f0 [ 189.156054][ T5937] ? __sys_sendmsg_sock+0x30/0x30 [ 189.161087][ T5937] ? rcu_is_watching+0x11/0xa0 [ 189.165978][ T5937] ? import_iovec+0x6f/0xa0 [ 189.170488][ T5937] ___sys_sendmsg+0x236/0x2e0 [ 189.175178][ T5937] ? __sys_sendmsg+0x290/0x290 [ 189.180214][ T5937] ? __might_fault+0xb3/0x110 [ 189.184930][ T5937] __sys_sendmmsg+0x2ba/0x500 [ 189.189635][ T5937] ? __ia32_sys_sendmsg+0x80/0x80 [ 189.194692][ T5937] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.200798][ T5937] ? lock_chain_count+0x20/0x20 [ 189.205659][ T5937] __x64_sys_sendmmsg+0x9c/0xb0 [ 189.210515][ T5937] do_syscall_64+0x4c/0xa0 [ 189.214984][ T5937] ? clear_bhb_loop+0x30/0x80 [ 189.219714][ T5937] ? clear_bhb_loop+0x30/0x80 [ 189.224452][ T5937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.230394][ T5937] RIP: 0033:0x7f580408f159 [ 189.234945][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.255635][ T5937] RSP: 002b:00007f58022e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.264171][ T5937] RAX: ffffffffffffffda RBX: 00007f5804316fa0 RCX: 00007f580408f159 [ 189.272518][ T5937] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000005 [ 189.280859][ T5937] RBP: 00007f5804126024 R08: 0000000000000000 R09: 0000000000000000 [ 189.288977][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.297058][ T5937] R13: 00007f5804317038 R14: 00007f5804316fa0 R15: 00007ffff3752468 [ 189.305308][ T5937] [ 189.390607][ T5948] sock: sock_timestamping_bind_phc: sock not bind to device [ 189.693118][ T5961] FAULT_INJECTION: forcing a failure. [ 189.693118][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 189.779492][ T5961] CPU: 0 PID: 5961 Comm: syz.5.362 Not tainted syzkaller #0 [ 189.787104][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.797233][ T5961] Call Trace: [ 189.800666][ T5961] [ 189.804010][ T5961] dump_stack_lvl+0x188/0x250 [ 189.808875][ T5961] ? verify_lock_unused+0x140/0x140 [ 189.814129][ T5961] ? show_regs_print_info+0x20/0x20 [ 189.819378][ T5961] ? load_image+0x410/0x410 [ 189.824192][ T5961] should_fail+0x383/0x4b0 [ 189.828845][ T5961] should_failslab+0x5/0x20 [ 189.833520][ T5961] slab_pre_alloc_hook+0x51/0xc0 [ 189.838489][ T5961] ? skb_clone+0x1bd/0x350 [ 189.842947][ T5961] kmem_cache_alloc+0x3d/0x280 [ 189.847748][ T5961] skb_clone+0x1bd/0x350 [ 189.852328][ T5961] __netlink_deliver_tap+0x3cb/0x7c0 [ 189.857679][ T5961] netlink_deliver_tap+0x16c/0x180 [ 189.862839][ T5961] netlink_sendskb+0x64/0x130 [ 189.867561][ T5961] ctrl_getfamily+0x4c0/0x5b0 [ 189.872394][ T5961] ? nla_put_string+0x30/0x30 [ 189.877110][ T5961] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 189.883638][ T5961] genl_rcv_msg+0xd0b/0xfa0 [ 189.888168][ T5961] ? genl_bind+0x370/0x370 [ 189.892604][ T5961] ? __dev_queue_xmit+0x1b64/0x2e50 [ 189.898035][ T5961] ? verify_lock_unused+0x140/0x140 [ 189.903278][ T5961] ? dev_queue_xmit+0x20/0x20 [ 189.907970][ T5961] ? nla_put_string+0x30/0x30 [ 189.912663][ T5961] ? ctrl_getfamily+0x5b0/0x5b0 [ 189.917616][ T5961] netlink_rcv_skb+0x1e9/0x430 [ 189.922581][ T5961] ? genl_bind+0x370/0x370 [ 189.927527][ T5961] ? netlink_ack+0xb10/0xb10 [ 189.932258][ T5961] ? down_read+0x1aa/0x2e0 [ 189.936776][ T5961] genl_rcv+0x24/0x40 [ 189.940764][ T5961] netlink_unicast+0x78f/0x940 [ 189.945543][ T5961] netlink_sendmsg+0x8ba/0xbe0 [ 189.950321][ T5961] ? netlink_getsockopt+0x570/0x570 [ 189.955524][ T5961] ? aa_sock_msg_perm+0x94/0x150 [ 189.960466][ T5961] ? apparmor_socket_sendmsg+0x88/0x230 [ 189.966113][ T5961] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 189.971406][ T5961] ? security_socket_sendmsg+0x7c/0xa0 [ 189.976876][ T5961] __sys_sendto+0x46d/0x620 [ 189.981389][ T5961] ? __ia32_sys_getpeername+0x80/0x80 [ 189.986794][ T5961] ? lock_chain_count+0x20/0x20 [ 189.991661][ T5961] __x64_sys_sendto+0xda/0xf0 [ 189.996347][ T5961] do_syscall_64+0x4c/0xa0 [ 190.000772][ T5961] ? clear_bhb_loop+0x30/0x80 [ 190.005451][ T5961] ? clear_bhb_loop+0x30/0x80 [ 190.010143][ T5961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.016137][ T5961] RIP: 0033:0x7ff2a0b9198e [ 190.020555][ T5961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.040303][ T5961] RSP: 002b:00007ff29ee27e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 190.048726][ T5961] RAX: ffffffffffffffda RBX: 00007ff29ee296c0 RCX: 00007ff2a0b9198e [ 190.056708][ T5961] RDX: 0000000000000020 RSI: 00007ff29ee28000 RDI: 0000000000000005 [ 190.064775][ T5961] RBP: 0000000000000000 R08: 00007ff29ee27f04 R09: 000000000000000c [ 190.072997][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 190.080979][ T5961] R13: 00007ff29ee27f58 R14: 00007ff29ee28000 R15: 0000000000000000 [ 190.089059][ T5961] [ 190.300130][ T5976] netlink: 68 bytes leftover after parsing attributes in process `syz.8.367'. [ 190.330841][ T5976] netlink: 32 bytes leftover after parsing attributes in process `syz.8.367'. [ 190.353919][ T5976] netlink: 32 bytes leftover after parsing attributes in process `syz.8.367'. [ 190.767203][ T5991] loop9: detected capacity change from 0 to 1024 [ 190.817010][ T5991] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 190.894744][ T5991] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 190.925912][ T5991] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.173245][ T5991] EXT4-fs (loop9): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,dioread_nolock,nomblk_io_submit,data_err=ignore,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,. Quota mode: writeback. [ 191.185571][ T6007] device syzkaller0 entered promiscuous mode [ 191.201690][ T1107] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 191.210480][ T5991] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.516031][ T1107] usb 9-1: device descriptor read/64, error -71 [ 191.893646][ T1107] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 192.115880][ T1107] usb 9-1: device descriptor read/64, error -71 [ 192.235998][ T1107] usb usb9-port1: attempt power cycle [ 192.543934][ T5973] ODEBUG: Out of memory. ODEBUG disabled [ 192.655931][ T1107] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 192.753210][ T1107] usb 9-1: device descriptor read/8, error -71 [ 193.025872][ T1107] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 193.116133][ T1107] usb 9-1: device descriptor read/8, error -71 [ 193.241444][ T1107] usb usb9-port1: unable to enumerate USB device [ 194.011816][ T6034] loop9: detected capacity change from 0 to 8192 [ 194.298941][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.305466][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.332282][ T6048] loop8: detected capacity change from 0 to 2048 [ 194.506814][ T6048] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 194.534956][ T6048] EXT4-fs error (device loop8): ext4_lookup:1850: inode #2: comm syz.8.385: bad inode number: 12 [ 194.674438][ T6064] loop7: detected capacity change from 0 to 2048 [ 194.696096][ T6048] EXT4-fs (loop8): Remounting filesystem read-only [ 195.224968][ T6064] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 195.604357][ T6079] FAULT_INJECTION: forcing a failure. [ 195.604357][ T6079] name fail_futex, interval 1, probability 0, space 0, times 0 [ 195.709134][ T6083] loop8: detected capacity change from 0 to 512 [ 195.733049][ T6079] CPU: 1 PID: 6079 Comm: syz.9.393 Not tainted syzkaller #0 [ 195.740406][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.751508][ T6079] Call Trace: [ 195.754930][ T6079] [ 195.757886][ T6079] dump_stack_lvl+0x188/0x250 [ 195.762595][ T6079] ? show_regs_print_info+0x20/0x20 [ 195.768107][ T6079] ? load_image+0x410/0x410 [ 195.772663][ T6079] ? netlink_getsockopt+0x570/0x570 [ 195.777903][ T6079] ? aa_sock_msg_perm+0x94/0x150 [ 195.782878][ T6079] ? apparmor_socket_sendmsg+0x173/0x230 [ 195.788663][ T6079] should_fail+0x383/0x4b0 [ 195.793117][ T6079] get_futex_key+0x1a1/0x12d0 [ 195.797911][ T6079] ? futex_wait_restart+0x250/0x250 [ 195.803431][ T6079] ? __lock_acquire+0x13dc/0x7b50 [ 195.808690][ T6079] futex_wake+0x101/0x540 [ 195.813110][ T6079] ? futex_wait+0x680/0x680 [ 195.817723][ T6079] ? verify_lock_unused+0x140/0x140 [ 195.823036][ T6079] ? verify_lock_unused+0x140/0x140 [ 195.828415][ T6079] do_futex+0xd83/0x12b0 [ 195.832986][ T6079] ? futex_exit_release+0x1c0/0x1c0 [ 195.838213][ T6079] ? __context_tracking_exit+0x4c/0x80 [ 195.843896][ T6079] __se_sys_futex+0x389/0x420 [ 195.848739][ T6079] ? __x64_sys_futex+0xf0/0xf0 [ 195.853862][ T6079] ? __x64_sys_futex+0x1d/0xf0 [ 195.858677][ T6079] do_syscall_64+0x4c/0xa0 [ 195.863291][ T6079] ? clear_bhb_loop+0x30/0x80 [ 195.868121][ T6079] ? clear_bhb_loop+0x30/0x80 [ 195.873006][ T6079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.878918][ T6079] RIP: 0033:0x7f3f2a1ac159 [ 195.883362][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.903143][ T6079] RSP: 002b:00007f3f284040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 195.911779][ T6079] RAX: ffffffffffffffda RBX: 00007f3f2a433fa8 RCX: 00007f3f2a1ac159 [ 195.919777][ T6079] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3f2a433fac [ 195.927984][ T6079] RBP: 00007f3f2a433fa0 R08: 0020ce5bf2f9ff72 R09: 0000000000000000 [ 195.936089][ T6079] R10: 0000000000000030 R11: 0000000000000246 R12: 0000000000000000 [ 195.944364][ T6079] R13: 00007f3f2a434038 R14: 00007ffea8d697b0 R15: 00007ffea8d69898 [ 195.952392][ T6079] [ 196.104542][ T6083] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 196.266356][ T6083] EXT4-fs (loop8): Remounting filesystem read-only [ 196.273784][ T6083] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.392: invalid indirect mapped block 4278190080 (level 0) [ 196.387402][ T6083] EXT4-fs (loop8): Remounting filesystem read-only [ 196.394061][ T6083] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.392: invalid indirect mapped block 1 (level 1) [ 196.500198][ T6083] EXT4-fs (loop8): Remounting filesystem read-only [ 196.523799][ T6083] EXT4-fs (loop8): 1 truncate cleaned up [ 196.557793][ T6083] EXT4-fs (loop8): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000000ffc,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 196.747016][ T6083] EXT4-fs (loop8): shut down requested (1) [ 197.124600][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.8.395'. [ 197.174614][ T6098] netlink: 36 bytes leftover after parsing attributes in process `syz.8.395'. [ 197.366832][ T4744] Bluetooth: hci0: sending frame failed (-49) [ 198.632961][ T5973] Set syz0 is full, maxelem 65536 reached [ 198.755863][ T6133] loop9: detected capacity change from 0 to 512 [ 199.814593][ T6140] loop6: detected capacity change from 0 to 512 [ 199.914520][ T4231] Bluetooth: hci0: command 0x1003 tx timeout [ 199.920897][ T4744] Bluetooth: hci0: sending frame failed (-49) [ 199.932180][ T6140] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.946677][ T6133] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodiscard,data_err=abort,norecovery,delalloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 199.981384][ T6140] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.016730][ T6133] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.116450][ T6148] netlink: 48 bytes leftover after parsing attributes in process `syz.8.410'. [ 200.228068][ T6140] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 200.341390][ T6140] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 200.454125][ T6140] EXT4-fs (loop6): This should not happen!! Data will be lost [ 200.454125][ T6140] [ 200.484803][ T6140] EXT4-fs (loop6): Total free blocks count 0 [ 200.505214][ T6140] EXT4-fs (loop6): Free/Dirty block details [ 200.525485][ T6140] EXT4-fs (loop6): free_blocks=65280 [ 200.549942][ T6140] EXT4-fs (loop6): dirty_blocks=33 [ 200.579011][ T6140] EXT4-fs (loop6): Block reservation details [ 200.599495][ T6140] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 201.058439][ T6171] FAULT_INJECTION: forcing a failure. [ 201.058439][ T6171] name failslab, interval 1, probability 0, space 0, times 0 [ 201.079231][ T6171] CPU: 0 PID: 6171 Comm: syz.6.413 Not tainted syzkaller #0 [ 201.086586][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.096893][ T6171] Call Trace: [ 201.100221][ T6171] [ 201.103174][ T6171] dump_stack_lvl+0x188/0x250 [ 201.108200][ T6171] ? show_regs_print_info+0x20/0x20 [ 201.113437][ T6171] ? load_image+0x410/0x410 [ 201.118114][ T6171] ? __might_sleep+0xf0/0xf0 [ 201.122825][ T6171] ? __lock_acquire+0x7b50/0x7b50 [ 201.127872][ T6171] should_fail+0x383/0x4b0 [ 201.132320][ T6171] should_failslab+0x5/0x20 [ 201.136927][ T6171] slab_pre_alloc_hook+0x51/0xc0 [ 201.142004][ T6171] ? __kernfs_new_node+0xe3/0x6b0 [ 201.147095][ T6171] kmem_cache_alloc+0x3d/0x280 [ 201.151873][ T6171] __kernfs_new_node+0xe3/0x6b0 [ 201.156829][ T6171] ? widen_string+0x3b/0x320 [ 201.161428][ T6171] ? kernfs_new_node+0x250/0x250 [ 201.166483][ T6171] ? snprintf+0xe5/0x140 [ 201.171043][ T6171] ? mark_lock+0x94/0x320 [ 201.175382][ T6171] kernfs_new_node+0x148/0x250 [ 201.180164][ T6171] __kernfs_create_file+0x47/0x2e0 [ 201.185285][ T6171] cgroup_addrm_files+0xac3/0x1020 [ 201.190547][ T6171] ? rcu_lock_release+0x20/0x20 [ 201.195624][ T6171] ? vfs_mkdir+0x386/0x570 [ 201.200066][ T6171] ? __x64_sys_mkdirat+0x85/0x90 [ 201.205107][ T6171] ? do_syscall_64+0x4c/0xa0 [ 201.209742][ T6171] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.215869][ T6171] ? mark_lock+0x94/0x320 [ 201.220209][ T6171] ? mark_lock+0x94/0x320 [ 201.224544][ T6171] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.230553][ T6171] ? __local_bh_enable_ip+0x136/0x1c0 [ 201.235952][ T6171] ? lockdep_hardirqs_on+0x94/0x140 [ 201.241289][ T6171] css_populate_dir+0x155/0x350 [ 201.246199][ T6171] cgroup_apply_control_enable+0x641/0xb00 [ 201.252145][ T6171] cgroup_mkdir+0xcbd/0xeb0 [ 201.256772][ T6171] ? css_task_iter_end+0x280/0x280 [ 201.261926][ T6171] ? do_raw_spin_unlock+0x11d/0x230 [ 201.267154][ T6171] ? kernfs_iop_permission+0x22d/0x310 [ 201.272881][ T6171] ? css_task_iter_end+0x280/0x280 [ 201.278012][ T6171] kernfs_iop_mkdir+0x23d/0x3d0 [ 201.282899][ T6171] vfs_mkdir+0x386/0x570 [ 201.287174][ T6171] do_mkdirat+0x1dd/0x5c0 [ 201.291512][ T6171] ? vfs_mkdir+0x570/0x570 [ 201.295943][ T6171] __x64_sys_mkdirat+0x85/0x90 [ 201.300714][ T6171] do_syscall_64+0x4c/0xa0 [ 201.305256][ T6171] ? clear_bhb_loop+0x30/0x80 [ 201.309963][ T6171] ? clear_bhb_loop+0x30/0x80 [ 201.314667][ T6171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.320568][ T6171] RIP: 0033:0x7f73835c7159 [ 201.324997][ T6171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.344880][ T6171] RSP: 002b:00007f738181f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 201.353404][ T6171] RAX: ffffffffffffffda RBX: 00007f738384efa0 RCX: 00007f73835c7159 [ 201.361495][ T6171] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 201.369492][ T6171] RBP: 00007f738365e024 R08: 0000000000000000 R09: 0000000000000000 [ 201.377572][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.385640][ T6171] R13: 00007f738384f038 R14: 00007f738384efa0 R15: 00007ffd421db488 [ 201.393629][ T6171] [ 201.419267][ T6171] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 201.823855][ T6191] netlink: 68 bytes leftover after parsing attributes in process `syz.6.420'. [ 201.838546][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz.6.420'. [ 201.910942][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz.6.420'. [ 201.987763][ T4231] Bluetooth: hci0: command 0x1001 tx timeout [ 201.994830][ T4744] Bluetooth: hci0: sending frame failed (-49) [ 202.038495][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.9.421'. [ 203.749939][ T6221] batman_adv: batadv0: Adding interface: gretap1 [ 203.933684][ T6221] batman_adv: batadv0: Interface activated: gretap1 [ 204.651670][ T6243] netlink: 68 bytes leftover after parsing attributes in process `syz.5.432'. [ 204.696078][ T6243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.432'. [ 204.743944][ T6243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.432'. [ 204.908897][ T4259] Bluetooth: hci0: command 0x1009 tx timeout [ 206.342854][ T26] audit: type=1326 audit(1788237430.001:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 206.442742][ T6287] ip_tables: iptables: counters copy to user failed while replacing table [ 206.457491][ T26] audit: type=1326 audit(1788237430.011:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 206.524954][ T26] audit: type=1326 audit(1788237430.011:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 206.603228][ T6296] loop8: detected capacity change from 0 to 1024 [ 206.617786][ T26] audit: type=1326 audit(1788237430.011:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 206.662360][ T6296] EXT4-fs (loop8): INFO: recovery required on readonly filesystem [ 206.670393][ T6296] EXT4-fs (loop8): write access will be enabled during recovery [ 206.678337][ T6296] EXT4-fs (loop8): barriers disabled [ 206.685127][ T6296] JBD2: no valid journal superblock found [ 206.691304][ T6296] EXT4-fs (loop8): error loading journal [ 206.808917][ T26] audit: type=1326 audit(1788237430.011:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 206.915849][ T26] audit: type=1326 audit(1788237430.011:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 210.104122][ T26] audit: type=1326 audit(1788237430.011:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 210.104174][ T26] audit: type=1326 audit(1788237430.011:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 210.104209][ T26] audit: type=1326 audit(1788237430.011:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 210.104242][ T26] audit: type=1326 audit(1788237430.011:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.8.442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 211.027642][ T6305] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 211.122446][ T6316] smpboot: CPU 1 is now offline [ 211.425242][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.515980][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.560312][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.598942][ T6331] loop6: detected capacity change from 0 to 4096 [ 211.615954][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.702605][ T6331] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.835160][ T6331] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.987397][ T6331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 215.428653][ T6353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 215.570140][ T6362] loop7: detected capacity change from 0 to 164 [ 219.608047][ T6384] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.617131][ T6384] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.625987][ T6384] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.634661][ T6384] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.827005][ T4231] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 221.932534][ T6396] loop7: detected capacity change from 0 to 764 [ 223.338258][ T4231] usb 10-1: device not accepting address 8, error -71 [ 227.335584][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 227.335596][ T26] audit: type=1326 audit(1788237450.991:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 227.391245][ T6420] loop6: detected capacity change from 0 to 128 [ 227.477521][ T6420] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.668742][ T6420] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.697160][ T26] audit: type=1326 audit(1788237451.091:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 227.933173][ T6436] loop9: detected capacity change from 0 to 4096 [ 227.963797][ T26] audit: type=1326 audit(1788237451.091:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 228.046781][ T6436] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.066543][ T4209] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.240614][ T6436] overlayfs: missing 'lowerdir' [ 228.258869][ T26] audit: type=1326 audit(1788237451.121:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 228.514763][ T26] audit: type=1326 audit(1788237451.121:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 228.669320][ T6458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 228.794052][ T26] audit: type=1326 audit(1788237451.121:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 229.019642][ T26] audit: type=1326 audit(1788237451.121:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 229.116400][ T6475] program syz.8.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.232290][ T26] audit: type=1326 audit(1788237451.121:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.8.481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f580408f159 code=0x7ffc0000 [ 229.480407][ T6487] loop8: detected capacity change from 0 to 256 [ 229.541545][ T6487] exfat: Bad value for 'fmask' [ 229.851607][ T6491] loop6: detected capacity change from 0 to 4096 [ 229.915034][ T6491] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.021922][ T6491] overlayfs: missing 'lowerdir' [ 230.436515][ T6507] netlink: 'syz.5.503': attribute type 28 has an invalid length. [ 230.476344][ T6506] loop6: detected capacity change from 0 to 1024 [ 230.549166][ T6506] EXT4-fs (loop6): INFO: recovery required on readonly filesystem [ 230.638507][ T6506] EXT4-fs (loop6): write access will be enabled during recovery [ 230.715059][ T6514] FAULT_INJECTION: forcing a failure. [ 230.715059][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 230.735915][ T6506] EXT4-fs (loop6): barriers disabled [ 230.741280][ T6506] JBD2: no valid journal superblock found [ 230.811452][ T6506] EXT4-fs (loop6): error loading journal [ 230.821994][ T6514] CPU: 0 PID: 6514 Comm: syz.5.506 Not tainted syzkaller #0 [ 230.829295][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.839443][ T6514] Call Trace: [ 230.842715][ T6514] [ 230.845636][ T6514] dump_stack_lvl+0x188/0x250 [ 230.850321][ T6514] ? show_regs_print_info+0x20/0x20 [ 230.855617][ T6514] ? load_image+0x410/0x410 [ 230.860217][ T6514] ? __might_sleep+0xf0/0xf0 [ 230.864883][ T6514] ? __lock_acquire+0x7b50/0x7b50 [ 230.869911][ T6514] should_fail+0x383/0x4b0 [ 230.874321][ T6514] should_failslab+0x5/0x20 [ 230.878815][ T6514] slab_pre_alloc_hook+0x51/0xc0 [ 230.883745][ T6514] __kmalloc+0x6b/0x340 [ 230.888286][ T6514] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 230.894055][ T6514] tomoyo_realpath_from_path+0xed/0x5e0 [ 230.899614][ T6514] tomoyo_check_open_permission+0x1eb/0x410 [ 230.905507][ T6514] ? tomoyo_check_path_number_acl+0x280/0x280 [ 230.911623][ T6514] ? __lock_acquire+0x7b50/0x7b50 [ 230.916663][ T6514] ? __rwlock_init+0x140/0x140 [ 230.921425][ T6514] ? preempt_count_add+0x8d/0x190 [ 230.926445][ T6514] ? hook_file_open+0xf1/0x230 [ 230.931196][ T6514] ? tomoyo_file_open+0xe9/0x170 [ 230.936232][ T6514] security_file_open+0x5e/0xa0 [ 230.941090][ T6514] do_dentry_open+0x321/0xf90 [ 230.945759][ T6514] ? vfs_open+0x2b/0x80 [ 230.949934][ T6514] path_openat+0x2718/0x2fb0 [ 230.954543][ T6514] ? __kasan_slab_alloc+0xa9/0xc0 [ 230.959725][ T6514] ? do_filp_open+0x400/0x400 [ 230.964434][ T6514] do_filp_open+0x1df/0x400 [ 230.968952][ T6514] ? vfs_tmpfile+0x300/0x300 [ 230.973584][ T6514] ? _raw_spin_unlock+0x24/0x40 [ 230.978561][ T6514] ? alloc_fd+0x59e/0x650 [ 230.982889][ T6514] do_sys_openat2+0x14b/0x500 [ 230.987570][ T6514] ? __lock_acquire+0x7b50/0x7b50 [ 230.992727][ T6514] ? do_sys_open+0xe0/0xe0 [ 230.997257][ T6514] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 231.003254][ T6514] ? lock_chain_count+0x20/0x20 [ 231.008125][ T6514] __x64_sys_openat+0x135/0x160 [ 231.013523][ T6514] do_syscall_64+0x4c/0xa0 [ 231.017950][ T6514] ? clear_bhb_loop+0x30/0x80 [ 231.022712][ T6514] ? clear_bhb_loop+0x30/0x80 [ 231.027487][ T6514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.033386][ T6514] RIP: 0033:0x7ff2a0bd1159 [ 231.037819][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.057416][ T6514] RSP: 002b:00007ff29ee29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.065833][ T6514] RAX: ffffffffffffffda RBX: 00007ff2a0e58fa0 RCX: 00007ff2a0bd1159 [ 231.073798][ T6514] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 231.081764][ T6514] RBP: 00007ff2a0c68024 R08: 0000000000000000 R09: 0000000000000000 [ 231.089730][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.097780][ T6514] R13: 00007ff2a0e59038 R14: 00007ff2a0e58fa0 R15: 00007ffe73551bc8 [ 231.105763][ T6514] [ 231.719640][ T6535] loop6: detected capacity change from 0 to 512 [ 231.825205][ T6538] loop8: detected capacity change from 0 to 4096 [ 231.861620][ T6535] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 231.921497][ T6535] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.511: invalid block [ 231.973149][ T6538] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.064444][ T6535] EXT4-fs (loop6): 1 truncate cleaned up [ 232.121064][ T6538] overlayfs: missing 'workdir' [ 232.129055][ T6535] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,minixdf,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 232.168091][ T6548] loop7: detected capacity change from 0 to 256 [ 232.261122][ T6548] exfat: Bad value for 'fmask' [ 233.353232][ T6580] loop6: detected capacity change from 0 to 4096 [ 233.415622][ T6580] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.535020][ T6580] overlayfs: missing 'workdir' [ 233.716113][ T6514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.991831][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.531'. [ 234.058516][ T6613] loop5: detected capacity change from 0 to 256 [ 234.158534][ T6613] exfat: Bad value for 'fmask' [ 235.000355][ T6634] loop8: detected capacity change from 0 to 4096 [ 235.144744][ T6634] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.355478][ T6634] overlayfs: missing 'workdir' [ 235.872640][ T6661] loop7: detected capacity change from 0 to 1024 [ 235.923881][ T6662] loop8: detected capacity change from 0 to 512 [ 235.934962][ T6661] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 2: comm syz.7.534: lblock 2 mapped to illegal pblock 2 (length 1) [ 235.949497][ T6661] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 235.957650][ T6661] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 48: comm syz.7.534: lblock 0 mapped to illegal pblock 48 (length 1) [ 235.972306][ T6661] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 235.981797][ T6661] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.534: Failed to acquire dquot type 0 [ 235.994781][ T6661] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 236.005386][ T6661] EXT4-fs error (device loop7): ext4_evict_inode:284: inode #11: comm syz.7.534: mark_inode_dirty error [ 236.017269][ T6661] EXT4-fs warning (device loop7): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 236.027725][ T6661] EXT4-fs (loop7): 1 orphan inode deleted [ 236.033457][ T6661] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 236.146288][ T6662] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 236.254282][ T6662] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 236.372598][ T6670] loop6: detected capacity change from 0 to 512 [ 236.412525][ T6662] EXT4-fs (loop8): 1 truncate cleaned up [ 236.444955][ T6670] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.467577][ T6662] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 236.543686][ T6670] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 236.595538][ T6670] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.548: inode #15: comm syz.6.548: iget: illegal inode # [ 236.697165][ T6670] EXT4-fs (loop6): Remounting filesystem read-only [ 236.740637][ T6670] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.548: couldn't read orphan inode 15 (err -117) [ 236.812671][ T4209] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 236.834337][ T6677] loop8: detected capacity change from 0 to 512 [ 236.861704][ T6670] EXT4-fs (loop6): Remounting filesystem read-only [ 236.894438][ T6670] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 236.917002][ T4209] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 236.925461][ T4209] EXT4-fs error (device loop7): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 236.992764][ T6677] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 237.030179][ T6677] EXT4-fs (loop8): 1 truncate cleaned up [ 237.073913][ T6682] loop9: detected capacity change from 0 to 512 [ 237.086363][ T6670] EXT4-fs error (device loop6): ext4_lookup:1858: comm syz.6.548: inode #15: comm syz.6.548: iget: illegal inode # [ 237.118769][ T6677] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 237.166758][ T6682] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 237.183760][ T4736] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 237.228093][ T6670] EXT4-fs (loop6): Remounting filesystem read-only [ 237.270408][ T6677] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.8.549: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 237.295982][ T6682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 237.342930][ T6682] EXT4-fs (loop9): orphan cleanup on readonly fs [ 237.383286][ T6682] EXT4-fs error (device loop9): ext4_orphan_get:1432: comm syz.9.551: bad orphan inode 3 [ 237.407587][ T4736] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 237.457942][ T6677] EXT4-fs (loop8): Remounting filesystem read-only [ 237.482166][ T6682] EXT4-fs (loop9): Remounting filesystem read-only [ 237.523443][ T6682] EXT4-fs (loop9): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none. [ 237.574395][ T4736] EXT4-fs error (device loop7): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 237.677353][ T6682] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.551: dx entry: limit 0 != root limit 125 [ 237.735946][ T6695] loop8: detected capacity change from 0 to 256 [ 237.771552][ T6695] exfat: Bad value for 'fmask' [ 237.781205][ T6682] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.551: Corrupt directory, running e2fsck is recommended [ 238.128531][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.5.554'. [ 238.224458][ T6703] md: invalid raid superblock magic on ram1 [ 238.324896][ T6703] md: ram1 does not have a valid v0.0 superblock, not importing! [ 238.405327][ T6703] md: md_import_device returned -22 [ 238.474913][ T6708] md: md0 stopped. [ 238.575585][ T6711] loop9: detected capacity change from 0 to 4096 [ 238.721925][ T6711] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.146059][ T1324] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 239.366940][ T1324] usb 6-1: device descriptor read/64, error -71 [ 239.404695][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.570'. [ 239.429772][ T6746] loop8: detected capacity change from 0 to 256 [ 239.501901][ T6746] exfat: Bad value for 'fmask' [ 239.725913][ T1324] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 239.878435][ T6755] FAULT_INJECTION: forcing a failure. [ 239.878435][ T6755] name failslab, interval 1, probability 0, space 0, times 0 [ 239.953381][ T6755] CPU: 0 PID: 6755 Comm: syz.6.572 Not tainted syzkaller #0 [ 239.960717][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.970865][ T6755] Call Trace: [ 239.974137][ T6755] [ 239.977064][ T6755] dump_stack_lvl+0x188/0x250 [ 239.981737][ T6755] ? show_regs_print_info+0x20/0x20 [ 239.986929][ T6755] ? load_image+0x410/0x410 [ 239.991440][ T6755] ? __might_sleep+0xf0/0xf0 [ 239.996022][ T6755] ? __lock_acquire+0x7b50/0x7b50 [ 240.001055][ T6755] should_fail+0x383/0x4b0 [ 240.005642][ T6755] should_failslab+0x5/0x20 [ 240.010142][ T6755] slab_pre_alloc_hook+0x51/0xc0 [ 240.015333][ T6755] __kmalloc_node_track_caller+0x68/0x3a0 [ 240.021070][ T6755] ? tipc_msg_build+0xc9/0xde0 [ 240.026017][ T6755] ? __alloc_skb+0xf4/0x750 [ 240.030623][ T6755] ? tipc_msg_build+0xc9/0xde0 [ 240.035660][ T6755] __alloc_skb+0x22c/0x750 [ 240.040075][ T6755] tipc_msg_build+0xc9/0xde0 [ 240.044664][ T6755] ? tipc_node_get_mtu+0x2a0/0x2a0 [ 240.049797][ T6755] ? tipc_nametbl_lookup_anycast+0x4da/0xf00 [ 240.055861][ T6755] __tipc_sendmsg+0x1823/0x2b60 [ 240.060920][ T6755] ? local_bh_enable+0x20/0x20 [ 240.065938][ T6755] ? verify_lock_unused+0x140/0x140 [ 240.071158][ T6755] ? verify_lock_unused+0x140/0x140 [ 240.076399][ T6755] ? mark_lock+0x94/0x320 [ 240.080974][ T6755] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.086974][ T6755] ? lock_chain_count+0x20/0x20 [ 240.091863][ T6755] ? __local_bh_enable_ip+0x136/0x1c0 [ 240.097246][ T6755] ? lockdep_hardirqs_on+0x94/0x140 [ 240.102451][ T6755] ? wait_woken+0x1b0/0x1b0 [ 240.106979][ T6755] ? _local_bh_enable+0xa0/0xa0 [ 240.111854][ T6755] tipc_sendmsg+0x51/0x70 [ 240.116181][ T6755] ? tipc_recvmsg+0x13d0/0x13d0 [ 240.121116][ T6755] ____sys_sendmsg+0x5be/0x8f0 [ 240.125898][ T6755] ? __sys_sendmsg_sock+0x30/0x30 [ 240.131038][ T6755] ? rcu_is_watching+0x11/0xa0 [ 240.135820][ T6755] ? import_iovec+0x6f/0xa0 [ 240.140324][ T6755] ___sys_sendmsg+0x236/0x2e0 [ 240.145000][ T6755] ? __sys_sendmsg+0x290/0x290 [ 240.149914][ T6755] ? __might_fault+0xb3/0x110 [ 240.154649][ T6755] __sys_sendmmsg+0x2ba/0x500 [ 240.159462][ T6755] ? __ia32_sys_sendmsg+0x80/0x80 [ 240.164617][ T6755] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 240.170799][ T6755] ? lock_chain_count+0x20/0x20 [ 240.175664][ T6755] __x64_sys_sendmmsg+0x9c/0xb0 [ 240.180524][ T6755] do_syscall_64+0x4c/0xa0 [ 240.184946][ T6755] ? clear_bhb_loop+0x30/0x80 [ 240.189824][ T6755] ? clear_bhb_loop+0x30/0x80 [ 240.194523][ T6755] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.200638][ T6755] RIP: 0033:0x7f73835c7159 [ 240.205379][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.225097][ T6755] RSP: 002b:00007f738181f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.233532][ T6755] RAX: ffffffffffffffda RBX: 00007f738384efa0 RCX: 00007f73835c7159 [ 240.241701][ T6755] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000005 [ 240.249953][ T6755] RBP: 00007f738365e024 R08: 0000000000000000 R09: 0000000000000000 [ 240.258069][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.266045][ T6755] R13: 00007f738384f038 R14: 00007f738384efa0 R15: 00007ffd421db488 [ 240.274023][ T6755] [ 240.285784][ T1324] usb 6-1: device descriptor read/64, error -71 [ 240.426338][ T1324] usb usb6-port1: attempt power cycle [ 244.315595][ T6781] loop5: detected capacity change from 0 to 2048 [ 244.514388][ T6781] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 244.619885][ T6795] device syzkaller0 entered promiscuous mode [ 244.651157][ T6781] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.669393][ T6795] tipc: Started in network mode [ 244.674587][ T6795] tipc: Node identity b622ac82b68b, cluster identity 4711 [ 244.764146][ T6795] tipc: Enabled bearer , priority 0 [ 244.837702][ T6793] tipc: Resetting bearer [ 244.933226][ T6806] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.579: bg 0: block 345: padding at end of block bitmap is not set [ 244.970012][ T6793] tipc: Disabling bearer [ 244.993157][ T6809] loop9: detected capacity change from 0 to 256 [ 245.050564][ T6813] loop7: detected capacity change from 0 to 512 [ 245.074295][ T6809] exfat: Bad value for 'fmask' [ 245.128872][ T6806] EXT4-fs (loop5): Remounting filesystem read-only [ 245.211245][ T6816] fuse: Unknown parameter 'default_permissions00000000000000' [ 245.405802][ T6813] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 245.594641][ T6813] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.509766][ T6845] loop6: detected capacity change from 0 to 2 [ 249.549195][ T6840] loop5: detected capacity change from 0 to 4096 [ 249.607854][ T5614] [ 249.610222][ T5614] ====================================================== [ 249.617226][ T5614] WARNING: possible circular locking dependency detected [ 249.624255][ T5614] syzkaller #0 Not tainted [ 249.628676][ T5614] ------------------------------------------------------ [ 249.635691][ T5614] kworker/u4:16/5614 is trying to acquire lock: [ 249.641926][ T5614] ffff888053ab32f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 249.650616][ T5614] [ 249.650616][ T5614] but task is already holding lock: [ 249.658163][ T5614] ffffc90002fcfd00 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 249.669034][ T5614] [ 249.669034][ T5614] which lock already depends on the new lock. [ 249.669034][ T5614] [ 249.679419][ T5614] [ 249.679419][ T5614] the existing dependency chain (in reverse order) is: [ 249.688423][ T5614] [ 249.688423][ T5614] -> #5 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 249.697619][ T5614] process_one_work+0x7ba/0xff0 [ 249.703211][ T5614] worker_thread+0xad7/0x12a0 [ 249.708625][ T5614] kthread+0x42e/0x520 [ 249.713294][ T5614] ret_from_fork+0x1f/0x30 [ 249.718402][ T5614] [ 249.718402][ T5614] -> #4 ((wq_completion)loop7){+.+.}-{0:0}: [ 249.726610][ T5614] flush_workqueue+0x16a/0x1390 [ 249.731992][ T5614] drain_workqueue+0xca/0x370 [ 249.737273][ T5614] destroy_workqueue+0x7b/0xb20 [ 249.742947][ T5614] __loop_clr_fd+0x22f/0xb50 [ 249.748313][ T5614] blkdev_put+0x52b/0x780 [ 249.753178][ T5614] deactivate_locked_super+0x93/0xf0 [ 249.759024][ T5614] cleanup_mnt+0x426/0x4d0 [ 249.764057][ T5614] task_work_run+0x125/0x1a0 [ 249.769283][ T5614] exit_to_user_mode_loop+0x10f/0x130 [ 249.775427][ T5614] exit_to_user_mode_prepare+0xee/0x180 [ 249.781590][ T5614] syscall_exit_to_user_mode+0x16/0x40 [ 249.787584][ T5614] do_syscall_64+0x58/0xa0 [ 249.792533][ T5614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.798968][ T5614] [ 249.798968][ T5614] -> #3 (&lo->lo_mutex){+.+.}-{3:3}: [ 249.806444][ T5614] __mutex_lock_common+0x1e5/0x2400 [ 249.812251][ T5614] mutex_lock_killable_nested+0x17/0x20 [ 249.818336][ T5614] lo_open+0x6a/0x100 [ 249.822968][ T5614] blkdev_get_whole+0x90/0x390 [ 249.828289][ T5614] blkdev_get_by_dev+0x2da/0xa50 [ 249.833754][ T5614] blkdev_open+0x128/0x2c0 [ 249.839030][ T5614] do_dentry_open+0x7f7/0xf90 [ 249.844324][ T5614] path_openat+0x2718/0x2fb0 [ 249.849525][ T5614] do_filp_open+0x1df/0x400 [ 249.854665][ T5614] do_sys_openat2+0x14b/0x500 [ 249.860116][ T5614] __x64_sys_openat+0x135/0x160 [ 249.865653][ T5614] do_syscall_64+0x4c/0xa0 [ 249.870603][ T5614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.877199][ T5614] [ 249.877199][ T5614] -> #2 (&disk->open_mutex){+.+.}-{3:3}: [ 249.885379][ T5614] __mutex_lock_common+0x1e5/0x2400 [ 249.891089][ T5614] mutex_lock_nested+0x17/0x20 [ 249.896537][ T5614] sync_bdevs+0x1a0/0x310 [ 249.901384][ T5614] ksys_sync+0xc2/0x170 [ 249.906273][ T5614] ksys_sync_helper+0x13/0xa0 [ 249.911706][ T5614] pm_suspend+0x1b4/0x7c0 [ 249.916720][ T5614] state_store+0x202/0x290 [ 249.922015][ T5614] kernfs_fop_write_iter+0x3a8/0x500 [ 249.927998][ T5614] vfs_write+0x748/0xd70 [ 249.932885][ T5614] ksys_write+0x153/0x260 [ 249.937787][ T5614] do_syscall_64+0x4c/0xa0 [ 249.943250][ T5614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.950916][ T5614] [ 249.950916][ T5614] -> #1 (&of->mutex){+.+.}-{3:3}: [ 249.958918][ T5614] __mutex_lock_common+0x1e5/0x2400 [ 249.965330][ T5614] mutex_lock_nested+0x17/0x20 [ 249.971014][ T5614] kernfs_seq_start+0x55/0x3c0 [ 249.976319][ T5614] seq_read_iter+0x387/0xc50 [ 249.981420][ T5614] vfs_read+0x75e/0xd50 [ 249.986288][ T5614] ksys_read+0x153/0x260 [ 249.991070][ T5614] do_syscall_64+0x4c/0xa0 [ 249.996018][ T5614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.002582][ T5614] [ 250.002582][ T5614] -> #0 (&p->lock){+.+.}-{3:3}: [ 250.009713][ T5614] __lock_acquire+0x2c66/0x7b50 [ 250.015391][ T5614] lock_acquire+0x19e/0x400 [ 250.020612][ T5614] __mutex_lock_common+0x1e5/0x2400 [ 250.026362][ T5614] mutex_lock_nested+0x17/0x20 [ 250.031659][ T5614] seq_read_iter+0x9d/0xc50 [ 250.036681][ T5614] do_iter_readv_writev+0x47d/0x5f0 [ 250.042629][ T5614] do_iter_read+0x201/0x7c0 [ 250.047742][ T5614] loop_process_work+0x16fd/0x24c0 [ 250.053494][ T5614] process_one_work+0x867/0xff0 [ 250.058897][ T5614] worker_thread+0xad7/0x12a0 [ 250.064096][ T5614] kthread+0x42e/0x520 [ 250.068694][ T5614] ret_from_fork+0x1f/0x30 [ 250.073655][ T5614] [ 250.073655][ T5614] other info that might help us debug this: [ 250.073655][ T5614] [ 250.084147][ T5614] Chain exists of: [ 250.084147][ T5614] &p->lock --> (wq_completion)loop7 --> (work_completion)(&worker->work) [ 250.084147][ T5614] [ 250.098464][ T5614] Possible unsafe locking scenario: [ 250.098464][ T5614] [ 250.105903][ T5614] CPU0 CPU1 [ 250.111362][ T5614] ---- ---- [ 250.116741][ T5614] lock((work_completion)(&worker->work)); [ 250.122815][ T5614] lock((wq_completion)loop7); [ 250.130202][ T5614] lock((work_completion)(&worker->work)); [ 250.138610][ T5614] lock(&p->lock); [ 250.142653][ T5614] [ 250.142653][ T5614] *** DEADLOCK *** [ 250.142653][ T5614] [ 250.150922][ T5614] 2 locks held by kworker/u4:16/5614: [ 250.156373][ T5614] #0: ffff8880742aa138 ((wq_completion)loop6){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 250.166575][ T5614] #1: ffffc90002fcfd00 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 250.177822][ T5614] [ 250.177822][ T5614] stack backtrace: [ 250.183810][ T5614] CPU: 0 PID: 5614 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 250.191439][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.201498][ T5614] Workqueue: loop6 loop_workfn [ 250.206280][ T5614] Call Trace: [ 250.209667][ T5614] [ 250.212596][ T5614] dump_stack_lvl+0x188/0x250 [ 250.217271][ T5614] ? load_image+0x410/0x410 [ 250.221789][ T5614] ? show_regs_print_info+0x20/0x20 [ 250.227338][ T5614] ? print_circular_bug+0x12b/0x1a0 [ 250.232526][ T5614] check_noncircular+0x296/0x330 [ 250.237632][ T5614] ? look_up_lock_class+0x71/0x110 [ 250.242730][ T5614] ? add_chain_block+0x9b0/0x9b0 [ 250.247653][ T5614] ? lockdep_lock+0xf1/0x1f0 [ 250.252484][ T5614] ? mark_lock+0x94/0x320 [ 250.256915][ T5614] ? _find_first_zero_bit+0xd1/0xf0 [ 250.262434][ T5614] __lock_acquire+0x2c66/0x7b50 [ 250.267317][ T5614] ? __lock_acquire+0x13dc/0x7b50 [ 250.272375][ T5614] ? verify_lock_unused+0x140/0x140 [ 250.277602][ T5614] ? mark_lock+0x94/0x320 [ 250.281935][ T5614] ? __lock_acquire+0x1305/0x7b50 [ 250.287147][ T5614] lock_acquire+0x19e/0x400 [ 250.291661][ T5614] ? seq_read_iter+0x9d/0xc50 [ 250.296421][ T5614] ? __might_sleep+0xf0/0xf0 [ 250.301204][ T5614] ? lockdep_lock+0xf1/0x1f0 [ 250.305963][ T5614] ? read_lock_is_recursive+0x10/0x10 [ 250.311366][ T5614] ? lockdep_unlock+0x143/0x2e0 [ 250.316218][ T5614] ? lockdep_lock+0x1f0/0x1f0 [ 250.321009][ T5614] __mutex_lock_common+0x1e5/0x2400 [ 250.326218][ T5614] ? seq_read_iter+0x9d/0xc50 [ 250.330913][ T5614] ? seq_read_iter+0x9d/0xc50 [ 250.335580][ T5614] ? mutex_lock_io_nested+0x60/0x60 [ 250.340768][ T5614] ? __lock_acquire+0x7b50/0x7b50 [ 250.345990][ T5614] ? unwind_next_frame+0x11ec/0x1cf0 [ 250.351266][ T5614] mutex_lock_nested+0x17/0x20 [ 250.356021][ T5614] seq_read_iter+0x9d/0xc50 [ 250.360514][ T5614] ? aa_file_perm+0x38b/0xe80 [ 250.365189][ T5614] ? kernfs_fop_read_iter+0x13e/0x560 [ 250.370582][ T5614] do_iter_readv_writev+0x47d/0x5f0 [ 250.376031][ T5614] ? aa_path_link+0x8a0/0x8a0 [ 250.380696][ T5614] ? generic_file_rw_checks+0x280/0x280 [ 250.386341][ T5614] ? common_file_perm+0x171/0x1c0 [ 250.391464][ T5614] ? fsnotify_perm+0x254/0x560 [ 250.396219][ T5614] do_iter_read+0x201/0x7c0 [ 250.400718][ T5614] ? memset+0x1e/0x40 [ 250.404907][ T5614] loop_process_work+0x16fd/0x24c0 [ 250.410048][ T5614] ? rcu_lock_release+0x20/0x20 [ 250.414908][ T5614] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 250.421694][ T5614] ? __lock_acquire+0x7b50/0x7b50 [ 250.426725][ T5614] ? read_lock_is_recursive+0x10/0x10 [ 250.432376][ T5614] ? preempt_schedule_thunk+0x16/0x18 [ 250.438286][ T5614] process_one_work+0x867/0xff0 [ 250.443193][ T5614] ? worker_detach_from_pool+0x240/0x240 [ 250.449006][ T5614] ? lockdep_hardirqs_off+0x70/0x100 [ 250.454380][ T5614] ? _raw_spin_lock_irq+0xb7/0xf0 [ 250.459599][ T5614] ? _raw_spin_lock_irqsave+0x100/0x100 [ 250.465178][ T5614] ? wq_worker_running+0x97/0x170 [ 250.470520][ T5614] worker_thread+0xad7/0x12a0 [ 250.475221][ T5614] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 250.481210][ T5614] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 250.487327][ T5614] kthread+0x42e/0x520 [ 250.491426][ T5614] ? rcu_lock_release+0x20/0x20 [ 250.496268][ T5614] ? kthread_blkcg+0xd0/0xd0 [ 250.500933][ T5614] ret_from_fork+0x1f/0x30 [ 250.505607][ T5614] [ 250.564130][ T6840] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.148460][ T6845] Dev loop6: unable to read RDB block 2 [ 251.154309][ T6845] loop6: unable to read partition table [ 251.161489][ T6845] loop6: partition table beyond EOD, truncated [ 251.178198][ T6845] loop_reread_partitions: partition scan of loop6 (Cj̖_=ý?}2) failed (rc=-5) [ 251.207112][ T3558] Dev loop6: unable to read RDB block 2 [ 251.212974][ T3558] loop6: unable to read partition table [ 251.220342][ T3558] loop6: partition table beyond EOD, truncated [ 252.535915][ T1324] Bluetooth: hci1: command 0x0406 tx timeout [ 252.542213][ T1324] Bluetooth: hci5: command 0x0406 tx timeout [ 252.549520][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 252.555574][ T1324] Bluetooth: hci6: command 0x0406 tx timeout [ 252.696047][ T4231] Bluetooth: hci7: command 0x0406 tx timeout [ 255.740719][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.751114][ T1431] ieee802154 phy1 wpan1: encryption failed: -22