last executing test programs: 8m48.237351271s ago: executing program 0 (id=514): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r0, 0x0, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@target={'target ', {'PCI:', '15', ':', '6', ':', '4', '.', '5'}}, 0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004840) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xc, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000000), 0x0, 0x4000, &(0x7f0000000700)={0xa, 0x0, 0x400000, @local}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8m46.47688146s ago: executing program 0 (id=518): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c"], 0x38}, 0x140) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m46.020390095s ago: executing program 0 (id=519): mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20000000) getdents64(r1, &(0x7f00000002c0)=""/48, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x2, 0x3}, {0x0, 0xfff3}, {0xb, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x5, 0x4, 0x1, 0x8, 0x8, 0x0, 0x3ff, 0x1, [{0x2, 0xfffffff7, 0x403f78b9, 0x80000000}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 8m43.8721138s ago: executing program 0 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1000, 0x103) 8m42.772443149s ago: executing program 0 (id=528): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) 8m42.299406168s ago: executing program 0 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 8m26.753802443s ago: executing program 32 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 4m7.059198379s ago: executing program 3 (id=1511): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550ec99b1b442aecb50f40d5615c1fd482b394607e18b1db2a25c0404c30", 0x42}, {&(0x7f0000000740)="c5feaad002b474cb445c115793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f9445b9c1fa27e63ac28ca38cff1af01aebe7cf1be1a656", 0xa4}, {&(0x7f0000000840)="37df6e48d5abd55f6b04a4aca97bba51c87aa3f6b01e3fbe283d8019f748b5ad67ae505cd6b7e6868ff81aa817ba4434821cc6132e114e4cec2353e912d23d05a8421a10a2a72a5d514a05235ca57e714888fdbee42d671f3c37118de58e08568a519fd7c541387124cbe3725868df6ba7659b410ae61bcaaab7005ae043d4765fab82a0acf20e", 0x87}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="8a08f196cf005d3275f1fc5e125e4202cd5a3af1988ccfb60c15ecbcb7408bc9be70f6bc02da7b34a37c3c9608cfe0b86f6ee7326f2f132feb514fb9cb53bd607d1ed9a62bbdf76cbcd16bc0f162e473da21e759060776e0ddcd81a1b9bc", 0x5e}], 0x1}}], 0x2, 0x800) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1", 0xd1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x12f}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 4m6.83243922s ago: executing program 3 (id=1513): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffff7fffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m6.823618193s ago: executing program 3 (id=1514): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m5.569632795s ago: executing program 3 (id=1522): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffff7fffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m5.394069582s ago: executing program 3 (id=1525): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 4m4.512411023s ago: executing program 3 (id=1528): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 3m49.43440099s ago: executing program 33 (id=1528): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 37.591715607s ago: executing program 1 (id=2211): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x6a, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x1) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) 35.335108835s ago: executing program 1 (id=2214): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', 0x0, &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c000280050001000000000047000280050001"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x2) 34.418401161s ago: executing program 1 (id=2216): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000025c0)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b4a9a24315b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe290030000002414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b41519539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8e91516db587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) 33.208454758s ago: executing program 1 (id=2218): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80840, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 12.520240712s ago: executing program 5 (id=2253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x40e02, 0x36) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 11.002178675s ago: executing program 5 (id=2254): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0x10, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 10.852407297s ago: executing program 2 (id=2256): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000025c0)={0x9, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) 9.685601792s ago: executing program 2 (id=2258): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) 9.231767528s ago: executing program 2 (id=2260): chdir(&(0x7f0000000080)='./cgroup\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfc) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShUBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdC0VxaPa1MZma7SXe3ed+8fD4w2Xl2npnn+c4zL8/M7CSATasn/ZNE7IiI3yOiKyJKtRm2ZkOa79b05NA/05NDSVQqb/6VpLPFzenJoSJrkn9uzxLldEGlK0m8WKfc8YuXzgyOjo6cz9N9E2ff7xu/eOnp02cHT42cGjk3cOzY0SP9zz078MyyxJnW6ea+D8f273317WuvD5249u7P3yUR24rptXEs0fNd1dHJ6jqZ67FlKmyt2FkznpRbWBEWpDMi0uZqn9n/u6Ltyq7qtK545eOWVg5YUZVKpTLQePJUBdjAkljMXG35sQNYv4oTfXr9Wwyr1PVYE268lF0ApXHfyodsSjm7D9KZXRvtXKHyeyLixNS/X6ZDLPg+RPsK1QoA2Mh+SPs/T9Xp/5Uj7s2y/H08Inblz4a6I+J/EbE7Iv4fEXsi4p7I8t4XEffXL6bnnQbl98xJ39n/KV1faozNpP2/F/JnW7P7f9WnYN1teWrnTPztycnToyOH83VyKNo703R/3aUnEVPp52+fNSq/tv+XDmn5RV8wr8f1cufseYYHJwaXHHjuxkcR+8r14k+ifDuK2BsR+xZZxuknvtk/+5u26tjd429iGZ4zVb6KeDxr/6mYE38haf58sm9LjI4c7iu2iojpOWX88uvVNxqVn8Vfiubxb116oA2k7b+t3vZ/vBp/d1L7vHb8jkV03K2Mq3980vCaZrHbf0fy1qzCLwxOTJzvj+hIXrvz+5ob3EX6wvC3M/nT+A8drL//787nSeN/ICLSjfjBiHgoIg7kdX84Ih6JiINN4v/p5Uffaxj/gflv/1PZx7I+XU3jH657/GvU/gsY2ZIv4cyP3zeMv2j/osHqtv/RIjFTqfkc/+Zb08WsMwAAAFhvShGxI5JSb3W8VOrtzX4vvye2lUbHxieePDn2wbnh7B2B7mgvFXe6umruh/bn94aL9ECevpynj+T3jb9o2zqT7h0aGx1udfCwyW1vsP+n/mxrde2AFVee+5papatVVQFWmfc1YfNa/P7vyAHr3V324tJq1QNYfc7isHnV2/8v1yaSyH4lD2w4zv+weVX3/8/nkbnmda+5L28C60+z87+fAsDGpv8Pm9Ki3utfSyPxdUTzPMlaqeqCRj5dyuzllapY5+1votTC9dPRkkYZaIto4SZRnu9/tYiLlctLLrTVRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDl8V8AAAD//3Y422k=") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x200, 0xfff9, 0x3}, 'syz1\x00', 0xb}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) 8.797880449s ago: executing program 5 (id=2261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x40e02, 0x36) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 6.53648465s ago: executing program 2 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x40e02, 0x36) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 6.494471301s ago: executing program 5 (id=2263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0x5ee, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 6.352487201s ago: executing program 4 (id=2264): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) 5.213815408s ago: executing program 4 (id=2265): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000025c0)={0x9, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, 0x0, &(0x7f0000000180)}, 0x20) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) 5.071993307s ago: executing program 2 (id=2266): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x37e, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000480)="a7af", 0x2}], 0x1) 4.749144557s ago: executing program 4 (id=2267): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) 4.209847887s ago: executing program 4 (id=2268): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000340)={0xe939, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r7}) 4.171944728s ago: executing program 1 (id=2220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) 3.509668752s ago: executing program 5 (id=2269): chdir(&(0x7f0000000080)='./cgroup\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfc) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x200, 0xfff9, 0x3}, 'syz1\x00', 0xb}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) 3.1945793s ago: executing program 4 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 3.018062269s ago: executing program 1 (id=2271): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)='-*.\x00', r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r1}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'streebog256-generic\x00'}}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="000300"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$unix(r5, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab701"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x6d1a, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12c}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_create(0x3, 0x0, &(0x7f0000000280)) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1, 0x45, 0x0) listen(r6, 0x7ff) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 624.505826ms ago: executing program 5 (id=2272): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1', 0x1) 307.771615ms ago: executing program 4 (id=2273): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x2e, "d412be40b532cc37d442bd95cb06448a5e6a76691230ec0a86c3069b91ea70597f000000000000005377714fd11d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2274): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405', 0xb) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): led to clone upperpath [ 292.478756][ T7728] overlayfs: failed to clone upperpath [ 297.963643][ T7759] overlayfs: failed to clone upperpath [ 297.991394][ T7759] overlayfs: failed to clone upperpath [ 298.667605][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 301.051976][ T7787] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7787] [ 302.239487][ T7793] overlayfs: failed to clone upperpath [ 302.287171][ T7793] overlayfs: failed to clone upperpath [ 306.415542][ T7830] overlayfs: failed to clone upperpath [ 306.449070][ T7830] overlayfs: failed to clone upperpath [ 311.072083][ T7870] overlayfs: failed to clone upperpath [ 311.340670][ T7870] overlayfs: failed to clone upperpath [ 315.031346][ T7909] overlayfs: failed to clone upperpath [ 315.076748][ T7909] overlayfs: failed to clone upperpath [ 317.563509][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.569977][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.172347][ T7947] overlayfs: failed to clone upperpath [ 320.232482][ T7947] overlayfs: failed to clone upperpath [ 323.081527][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.068992][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.078505][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.399411][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.416705][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 324.424170][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.264892][ T7963] chnl_net:caif_netlink_parms(): no params data found [ 326.606744][ T5085] Bluetooth: hci4: command tx timeout [ 328.724184][ T5085] Bluetooth: hci4: command tx timeout [ 329.227029][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.235640][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.265521][ T7963] bridge_slave_0: entered allmulticast mode [ 329.294088][ T7963] bridge_slave_0: entered promiscuous mode [ 329.320888][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.344018][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.376557][ T7963] bridge_slave_1: entered allmulticast mode [ 329.402275][ T7963] bridge_slave_1: entered promiscuous mode [ 329.599811][ T7963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.678548][ T7963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.868306][ T7963] team0: Port device team_slave_0 added [ 329.907995][ T7963] team0: Port device team_slave_1 added [ 330.065084][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.076212][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.174004][ T7963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.190035][ T7963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.215853][ T7963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.500840][ T7963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.827794][ T5085] Bluetooth: hci4: command tx timeout [ 330.970871][ T7963] hsr_slave_0: entered promiscuous mode [ 330.993163][ T7963] hsr_slave_1: entered promiscuous mode [ 331.012462][ T7963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.034947][ T7963] Cannot create hsr debugfs directory [ 331.395498][ T7963] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.429434][ T7963] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.449927][ T7963] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.450205][ T5085] Bluetooth: hci2: unexpected event for opcode 0x204e [ 331.681838][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 331.710305][ T7963] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.429400][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.849301][ T5085] Bluetooth: hci4: command tx timeout [ 332.884641][ T7963] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.948204][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.955381][ T7421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.005022][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.012242][ T7421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.464548][ T7963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.773904][ T8078] overlayfs: failed to clone upperpath [ 335.843498][ T7963] veth0_vlan: entered promiscuous mode [ 335.858288][ T8078] overlayfs: failed to clone upperpath [ 335.899496][ T7963] veth1_vlan: entered promiscuous mode [ 335.998807][ T7963] veth0_macvtap: entered promiscuous mode [ 336.038138][ T7963] veth1_macvtap: entered promiscuous mode [ 336.089029][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.116354][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.137816][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.156363][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.176729][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.206084][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.215941][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.246101][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.267732][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.275095][ T8081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.601'. [ 336.297531][ T8082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.601'. [ 336.348861][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.379394][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.416095][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.436144][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.456613][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.480686][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.508844][ T7963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.527561][ T7963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.555371][ T7963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.725972][ T7963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.782307][ T7963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.791139][ T7963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.799917][ T7963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.526961][ T7421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.564619][ T7421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.662947][ T7421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.696459][ T7421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.856990][ T8103] overlayfs: failed to clone upperpath [ 340.906769][ T8104] overlayfs: failed to clone upperpath [ 341.186340][ T8109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.609'. [ 341.299618][ T8109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.609'. [ 344.613082][ T8140] loop4: detected capacity change from 0 to 512 [ 344.651135][ T8140] EXT4-fs (loop4): Test dummy encryption mode enabled [ 344.704109][ T8140] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #11: comm syz.4.616: casefold flag without casefold feature [ 344.776862][ T8140] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.616: couldn't read orphan inode 11 (err -117) [ 344.821135][ T8140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.166959][ T8142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 347.626634][ T7963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.897612][ T9] libceph: connect (1)[c::]:6789 error -101 [ 349.916379][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 349.931176][ T8177] ceph: No mds server is up or the cluster is laggy [ 351.900555][ T8200] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.965642][ T8256] loop4: detected capacity change from 0 to 2048 [ 359.237027][ T8256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.150348][ T8273] No source specified [ 361.143792][ T8255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 361.225865][ T8255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 361.416256][ T8255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 361.416256][ T8255] [ 362.837498][ T8255] EXT4-fs (loop4): Total free blocks count 0 [ 362.877401][ T8255] EXT4-fs (loop4): Free/Dirty block details [ 362.935243][ T8255] EXT4-fs (loop4): free_blocks=4096 [ 362.964651][ T8296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.655'. [ 362.996886][ T8255] EXT4-fs (loop4): dirty_blocks=64 [ 363.007531][ T8296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.655'. [ 363.174753][ T8255] EXT4-fs (loop4): Block reservation details [ 363.241996][ T8299] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'. [ 363.926217][ T8255] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 364.083771][ T8304] process 'syz.1.657' launched '/dev/fd/3' with NULL argv: empty string added [ 365.377238][ T8255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 366.683439][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 366.830237][ T8255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 366.830237][ T8255] [ 367.107640][ T8255] EXT4-fs (loop4): Total free blocks count 0 [ 367.113699][ T8255] EXT4-fs (loop4): Free/Dirty block details [ 367.246997][ T8255] EXT4-fs (loop4): free_blocks=4096 [ 367.252245][ T8255] EXT4-fs (loop4): dirty_blocks=64 [ 367.374289][ T8255] EXT4-fs (loop4): Block reservation details [ 367.419537][ T8255] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 367.452245][ T6759] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 367.526204][ T6759] EXT4-fs (loop4): This should not happen!! Data will be lost [ 367.526204][ T6759] [ 369.983049][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.667'. [ 371.677798][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 377.257359][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 378.431923][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 378.482031][ T8408] vlan3: entered allmulticast mode [ 378.494907][ T8408] bridge1: entered allmulticast mode [ 378.998484][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.005601][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.652899][ T8442] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 388.897856][ T8519] loop4: detected capacity change from 0 to 40427 [ 388.926913][ T8519] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 388.967465][ T8519] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 388.975046][ T8519] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 389.082744][ T6759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.427687][ T6759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.590766][ T6759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.855052][ T6759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.064388][ T8553] type: 635427838 invalid [ 392.076744][ T42] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 392.837447][ T6759] hsr_slave_0: left promiscuous mode [ 392.870666][ T6759] hsr_slave_1: left promiscuous mode [ 392.898831][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.944427][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.995469][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.033339][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.079584][ T6759] bridge_slave_1: left allmulticast mode [ 393.102319][ T6759] bridge_slave_1: left promiscuous mode [ 393.127461][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.211512][ T6759] bridge_slave_0: left allmulticast mode [ 393.227399][ T6759] bridge_slave_0: left promiscuous mode [ 393.227835][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.236753][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.403401][ T6759] veth1_macvtap: left promiscuous mode [ 393.427528][ T6759] veth0_macvtap: left promiscuous mode [ 393.466488][ T6759] veth1_vlan: left promiscuous mode [ 393.472169][ T6759] veth0_vlan: left promiscuous mode [ 394.215748][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.432284][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 394.442037][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.696240][ T42] usb 5-1: GET_CAPABILITIES returned 0 [ 394.704469][ T42] usbtmc 5-1:16.0: can't read capabilities [ 394.930420][ T5834] usb 5-1: USB disconnect, device number 2 [ 395.205798][ T8620] 9pnet_virtio: no channels available for device syz [ 395.367934][ T6759] team0 (unregistering): Port device team_slave_1 removed [ 395.432288][ T6759] team0 (unregistering): Port device team_slave_0 removed [ 395.530493][ T6759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.592574][ T6759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.751795][ T6759] bond0 (unregistering): Released all slaves [ 396.906995][ T8614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.741'. [ 396.949932][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 396.973934][ T8635] netlink: 'syz.4.749': attribute type 21 has an invalid length. [ 397.003669][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 397.063450][ T8635] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.073407][ T8635] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.082362][ T8635] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.091289][ T8635] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.102179][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 397.120125][ T8635] netlink: 'syz.4.749': attribute type 21 has an invalid length. [ 397.136434][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 398.722651][ T8674] loop4: detected capacity change from 0 to 2048 [ 398.826398][ T8557] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.949310][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.776'. [ 404.568059][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.786'. [ 404.597128][ T8782] tc_dump_action: action bad kind [ 405.499367][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.797'. [ 405.519743][ T8819] tc_dump_action: action bad kind [ 405.533792][ T8821] 9pnet_virtio: no channels available for device syz [ 407.377535][ T8855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.807'. [ 407.443804][ T8855] tc_dump_action: action bad kind [ 408.359314][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 409.395074][ T8886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'. [ 409.694488][ T8896] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 409.807337][ T8896] veth3: entered allmulticast mode [ 409.831051][ T8896] bond1: (slave veth3): Enslaving as an active interface with a down link [ 409.971772][ T8896] macvlan2: entered promiscuous mode [ 409.997044][ T8896] macvlan2: entered allmulticast mode [ 410.020586][ T8896] bond1: entered promiscuous mode [ 410.042403][ T8896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 410.075007][ T8896] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 410.746358][ T8896] bond1: left promiscuous mode [ 411.106200][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 411.328247][ T42] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 411.360360][ T42] usb 5-1: config 1 has no interface number 0 [ 411.412497][ T42] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 411.457956][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.498633][ T42] usb 5-1: Product: syz [ 411.503240][ T42] usb 5-1: Manufacturer: syz [ 411.539604][ T42] usb 5-1: SerialNumber: syz [ 411.793551][ T42] usb 5-1: 3:1 : does not exist [ 411.827160][ T42] usb 5-1: 3:2 : does not exist [ 411.954741][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'. [ 411.964966][ T42] usb 5-1: USB disconnect, device number 3 [ 412.055270][ T8736] udevd[8736]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.059514][ T8933] gretap1: entered promiscuous mode [ 412.940932][ T6068] Bluetooth: hci1: Frame reassembly failed (-84) [ 413.029245][ T8955] loop4: detected capacity change from 0 to 512 [ 413.121271][ T8955] EXT4-fs (loop4): 1 orphan inode deleted [ 413.128383][ T8955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.161177][ T8955] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.205225][ T6068] __quota_error: 4 callbacks suppressed [ 413.205241][ T6068] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 413.286264][ T6068] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 415.006207][ T5085] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 415.211193][ T7963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.762118][ T8958] Bluetooth: hci0: unexpected event for opcode 0x204e [ 418.516703][ T9056] warning: `syz.4.856' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 420.047671][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.858'. [ 422.134759][ T9101] loop4: detected capacity change from 0 to 512 [ 422.179675][ T9101] EXT4-fs (loop4): Test dummy encryption mode enabled [ 422.223167][ T9101] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #11: comm syz.4.865: casefold flag without casefold feature [ 422.283852][ T9101] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.865: couldn't read orphan inode 11 (err -117) [ 422.441533][ T9101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.357480][ T7963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.717819][ T9122] ip_tables: iptables: counters copy to user failed while replacing table [ 424.493068][ T9137] loop4: detected capacity change from 0 to 16 [ 425.911400][ T9137] erofs: (device loop4): mounted with root inode @ nid 36. [ 426.776994][ T8958] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 426.816080][ T27] audit: type=1800 audit(1790297431.468:40): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.868" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 427.878854][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 431.184849][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 431.403160][ T9217] loop4: detected capacity change from 0 to 512 [ 432.588821][ T9217] EXT4-fs (loop4): Test dummy encryption mode enabled [ 432.710565][ T9217] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #11: comm syz.4.886: casefold flag without casefold feature [ 433.080313][ T9217] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.886: couldn't read orphan inode 11 (err -117) [ 433.149942][ T9217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.176339][ T9225] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 435.213939][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 435.655324][ T7963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.813725][ T9283] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 440.292686][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.299455][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.490429][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 447.973885][ T9381] overlayfs: failed to clone upperpath [ 448.525089][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.924'. [ 448.536686][ T9394] tc_dump_action: action bad kind [ 448.724265][ T9392] loop4: detected capacity change from 0 to 512 [ 448.841011][ T9392] EXT4-fs (loop4): 1 orphan inode deleted [ 448.848346][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.866442][ T59] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 448.876786][ T9392] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.933649][ T59] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 449.184837][ T7963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.819787][ T5085] Bluetooth: hci0: unexpected event for opcode 0x204e [ 449.922029][ T9424] loop4: detected capacity change from 0 to 128 [ 450.002380][ T9424] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 450.524828][ T9433] input: syz1 as /devices/virtual/input/input6 [ 451.468096][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 451.481780][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 452.208031][ T5763] IPVS: starting estimator thread 0... [ 452.269381][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.933'. [ 452.306124][ T9454] tc_dump_action: action bad kind [ 452.316482][ T9461] IPVS: using max 23 ests per chain, 55200 per kthread [ 452.337779][ T5085] Bluetooth: hci0: unexpected event for opcode 0x204e [ 452.412970][ T9470] overlayfs: failed to resolve './file0': -2 [ 452.952999][ T9478] input: syz1 as /devices/virtual/input/input7 [ 454.222456][ T6068] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 454.757230][ T9492] overlayfs: failed to clone upperpath [ 454.822183][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.949'. [ 454.863804][ T9493] tc_dump_action: action bad kind [ 455.294840][ T9505] overlayfs: failed to resolve './file0': -2 [ 455.605457][ T5085] Bluetooth: hci2: unexpected event for opcode 0x204e [ 457.434165][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.269042][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.959'. [ 458.316166][ T9522] tc_dump_action: action bad kind [ 458.543025][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 458.756949][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 459.079384][ T9551] overlayfs: failed to resolve './file0': -2 [ 460.154934][ T9559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.971'. [ 460.250786][ T9559] tc_dump_action: action bad kind [ 462.023398][ T5085] Bluetooth: hci0: unexpected event for opcode 0x204e [ 462.283310][ T9586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.981'. [ 462.306202][ T9586] tc_dump_action: action bad kind [ 463.806404][ T5085] Bluetooth: hci4: unexpected event for opcode 0x204e [ 465.667036][ T9617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.990'. [ 465.687950][ T9617] tc_dump_action: action bad kind [ 465.836992][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 466.964626][ T9639] overlayfs: failed to resolve './file0': -2 [ 469.239635][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 469.427333][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'. [ 470.603369][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 470.760293][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 470.814151][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 470.855469][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 470.875579][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 470.897510][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 470.907790][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 470.927870][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 470.937505][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 470.950444][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 471.089515][ T9674] kvm: kvm [9673]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 471.821063][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 471.888693][ T9691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1009'. [ 472.011273][ T9703] overlayfs: failed to resolve './file0': -2 [ 474.255946][ T5085] Bluetooth: hci0: unexpected event for opcode 0x204e [ 475.140697][ T9729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 475.371530][ T9739] netlink: 'syz.1.1023': attribute type 5 has an invalid length. [ 475.976866][ T9752] overlayfs: failed to resolve './file0': -2 [ 489.810254][ T9800] overlayfs: failed to clone lowerpath [ 490.218242][ T9817] overlayfs: failed to resolve './file0': -2 [ 490.313794][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'. [ 490.839912][ T9828] No source specified [ 492.236733][ T9838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.244512][ T9838] IPv6: NLM_F_CREATE should be set when creating new route [ 493.499955][ T9864] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1048'. [ 494.384147][ T9877] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1053'. [ 494.976837][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.030750][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.553101][ T9838] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.562394][ T9838] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.572560][ T9838] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.602161][ T9838] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.237892][ T9902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1060'. [ 496.804247][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1051'. [ 497.263050][ T5085] Bluetooth: hci2: unexpected event for opcode 0x204e [ 500.529273][ T5777] Bluetooth: hci1: command 0x1003 tx timeout [ 500.540642][ T5085] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 501.733265][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.739791][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.441785][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1073'. [ 502.631261][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 509.529472][T10036] netlink: 'syz.1.1086': attribute type 83 has an invalid length. [ 510.042552][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 510.086998][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'. [ 511.977833][T10096] No source specified [ 512.731057][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 512.742221][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1104'. [ 513.966286][T10116] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1108'. [ 514.148052][T10122] overlayfs: failed to clone upperpath [ 520.582278][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 520.994797][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'. [ 522.910012][T10225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1128'. [ 523.908612][ T5085] Bluetooth: hci4: unexpected event for opcode 0x204e [ 524.841391][T10241] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1133'. [ 525.104312][T10249] No source specified [ 526.131037][T10261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1139'. [ 526.832886][ T5085] Bluetooth: hci3: unexpected event for opcode 0x204e [ 527.795562][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 527.824347][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 527.838505][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 528.250385][T10288] No source specified [ 528.686156][T10291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1151'. [ 529.462690][ T5085] Bluetooth: hci2: unexpected event for opcode 0x204e [ 532.171675][T10347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1162'. [ 533.280651][T10366] ubi0: attaching mtd0 [ 533.304738][T10366] ubi0: scanning is finished [ 533.309809][T10366] ubi0: empty MTD device detected [ 534.061594][T10366] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 534.089346][T10366] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 534.132157][T10366] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 534.166067][T10366] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 534.173508][T10366] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 534.206752][T10366] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 534.215136][T10366] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 597713759 [ 534.246063][T10366] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 534.294195][T10368] ubi0: background thread "ubi_bgt0d" started, PID 10368 [ 534.362174][T10377] overlayfs: failed to clone upperpath [ 534.536445][T10382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1175'. [ 536.743162][T10405] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 536.754421][T10405] ref_ctr decrement failed for inode: 0x2c9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807af20000 [ 538.377673][T10443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1203'. [ 538.392582][T10443] tc_dump_action: action bad kind [ 542.039514][T10477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1214'. [ 542.056214][T10477] tc_dump_action: action bad kind [ 543.668265][T10504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1227'. [ 543.678976][T10504] tc_dump_action: action bad kind [ 545.275256][T10526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 545.320695][T10526] tc_dump_action: action bad kind [ 546.490795][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1246'. [ 546.501632][T10552] tc_dump_action: action bad kind [ 548.913055][T10584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1256'. [ 548.926064][T10584] tc_dump_action: action bad kind [ 549.248468][T10589] overlayfs: failed to clone upperpath [ 549.678629][T10621] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1263'. [ 549.702338][T10621] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1263'. [ 549.862073][T10626] overlayfs: failed to resolve './file0': -2 [ 550.241374][T10635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1269'. [ 550.257466][T10635] tc_dump_action: action bad kind [ 550.346977][T10637] overlayfs: failed to clone upperpath [ 551.144970][T10656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1278'. [ 551.196209][T10656] tc_dump_action: action bad kind [ 551.216087][T10657] No source specified [ 551.680761][ T5085] Bluetooth: hci4: unexpected event for opcode 0x702f [ 552.111359][T10675] ip_tables: iptables: counters copy to user failed while replacing table [ 552.212527][T10678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1288'. [ 552.222074][T10678] tc_dump_action: action bad kind [ 553.362628][T10696] Could not find key with description: [syz] [ 553.452004][T10696] process_request_key_err: No key [ 553.495923][T10696] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 553.566118][T10696] One or more global auth toks could not properly register; rc = [-2] [ 553.574627][T10696] Error parsing options; rc = [-2] [ 553.915300][T10713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1299'. [ 553.936409][ T5085] Bluetooth: hci4: unexpected event for opcode 0x704e [ 553.944433][T10713] tc_dump_action: action bad kind [ 554.817101][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1308'. [ 554.836029][T10733] tc_dump_action: action bad kind [ 555.685205][T10756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1319'. [ 555.704707][T10756] tc_dump_action: action bad kind [ 557.696956][T10786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1330'. [ 557.706190][T10786] tc_dump_action: action bad kind [ 557.950556][T10790] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 558.078981][T10798] overlayfs: failed to resolve './file0': -2 [ 559.525586][T10818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1340'. [ 559.565708][T10818] tc_dump_action: action bad kind [ 559.884294][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1342'. [ 560.204153][T10835] usb usb9: usbfs: process 10835 (syz.4.1347) did not claim interface 0 before use [ 560.432255][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1352'. [ 560.482329][T10846] tc_dump_action: action bad kind [ 560.869542][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 560.887028][ T5085] Bluetooth: hci4: unexpected event for opcode 0x0c24 [ 560.997507][T10869] FAULT_INJECTION: forcing a failure. [ 560.997507][T10869] name failslab, interval 1, probability 0, space 0, times 0 [ 561.010838][T10869] CPU: 0 PID: 10869 Comm: syz.4.1358 Not tainted syzkaller #0 [ 561.018350][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.028450][T10869] Call Trace: [ 561.031751][T10869] [ 561.034697][T10869] dump_stack_lvl+0x18c/0x250 [ 561.039407][T10869] ? __lock_acquire+0x7d80/0x7d80 [ 561.044506][T10869] ? show_regs_print_info+0x20/0x20 [ 561.049750][T10869] ? load_image+0x420/0x420 [ 561.054308][T10869] should_fail_ex+0x394/0x4c0 [ 561.059036][T10869] should_failslab+0x9/0x20 [ 561.063583][T10869] slab_pre_alloc_hook+0x59/0x300 [ 561.068651][T10869] ? hash_ipmark4_add+0x183e/0x2080 [ 561.073888][T10869] ? hash_ipmark4_add+0x183e/0x2080 [ 561.079133][T10869] __kmem_cache_alloc_node+0x53/0x250 [ 561.084557][T10869] ? hash_ipmark4_add+0x183e/0x2080 [ 561.089803][T10869] __kmalloc+0xa7/0x240 [ 561.093998][T10869] ? hash_ipmark4_add+0x806/0x2080 [ 561.099158][T10869] hash_ipmark4_add+0x183e/0x2080 [ 561.104258][T10869] hash_ipmark4_uadt+0x780/0x9e0 [ 561.108341][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'. [ 561.109212][T10869] ? hash_ipmark4_uadt+0x9e0/0x9e0 [ 561.123319][T10869] ? hash_ipmark4_kadt+0x4c0/0x4c0 [ 561.128483][T10869] ? __lock_acquire+0x1262/0x7d80 [ 561.133550][T10869] call_ad+0x185/0xb30 [ 561.137664][T10869] ? ip_set_ad+0x9c0/0x9c0 [ 561.142153][T10869] ? __nla_parse+0x40/0x50 [ 561.146608][T10869] ip_set_ad+0x81a/0x9c0 [ 561.150903][T10869] ? ip_set_dump_done+0x320/0x320 [ 561.155959][T10869] ? rcu_is_watching+0x15/0xb0 [ 561.160827][T10869] nfnetlink_rcv_msg+0xcaf/0x1290 [ 561.165884][T10869] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.171995][T10869] ? nfnetlink_rcv_msg+0x228/0x1290 [ 561.177249][T10869] ? nfnetlink_unbind+0x160/0x160 [ 561.182329][T10869] ? __dev_queue_xmit+0x1be8/0x37e0 [ 561.187555][T10869] ? __netlink_deliver_tap+0x579/0x7f0 [ 561.193048][T10869] ? netlink_deliver_tap+0x19c/0x1b0 [ 561.198365][T10869] ? netlink_unicast+0x77b/0x930 [ 561.203333][T10869] ? netlink_sendmsg+0x8d0/0xbf0 [ 561.208304][T10869] ? ____sys_sendmsg+0x61b/0x980 [ 561.213286][T10869] ? ___sys_sendmsg+0x2a6/0x360 [ 561.218177][T10869] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 561.223305][T10869] ? do_syscall_64+0x55/0xb0 [ 561.227960][T10869] netlink_rcv_skb+0x235/0x4c0 [ 561.232773][T10869] ? nfnetlink_unbind+0x160/0x160 [ 561.237853][T10869] ? netlink_ack+0x1160/0x1160 [ 561.242688][T10869] ? apparmor_capable+0x137/0x1a0 [ 561.247849][T10869] ? bpf_lsm_capable+0x9/0x10 [ 561.252558][T10869] ? security_capable+0x89/0xb0 [ 561.257495][T10869] nfnetlink_rcv+0x2c9/0x2490 [ 561.262215][T10869] ? __local_bh_enable_ip+0x13a/0x1c0 [ 561.267714][T10869] ? lockdep_hardirqs_on+0x98/0x150 [ 561.272954][T10869] ? __local_bh_enable_ip+0x13a/0x1c0 [ 561.278375][T10869] ? _local_bh_enable+0xa0/0xa0 [ 561.283292][T10869] ? __dev_queue_xmit+0x272/0x37e0 [ 561.288453][T10869] ? __dev_queue_xmit+0x1329/0x37e0 [ 561.293697][T10869] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 561.299602][T10869] ? __dev_queue_xmit+0x272/0x37e0 [ 561.304756][T10869] ? ref_tracker_free+0x686/0x830 [ 561.309786][T10869] ? refcount_inc+0x70/0x70 [ 561.314288][T10869] ? __asan_memcpy+0x40/0x70 [ 561.318895][T10869] ? __skb_clone+0x5c/0x6c0 [ 561.323534][T10869] ? __skb_clone+0x446/0x6c0 [ 561.328141][T10869] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.333363][T10869] ? __lock_acquire+0x7d80/0x7d80 [ 561.338512][T10869] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.343739][T10869] netlink_unicast+0x7b1/0x930 [ 561.348519][T10869] netlink_sendmsg+0x8d0/0xbf0 [ 561.353377][T10869] ? netlink_getsockopt+0x590/0x590 [ 561.358607][T10869] ? apparmor_socket_sendmsg+0x8e/0x330 [ 561.364181][T10869] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.369482][T10869] ? security_socket_sendmsg+0x80/0xa0 [ 561.374954][T10869] ? netlink_getsockopt+0x590/0x590 [ 561.380203][T10869] ____sys_sendmsg+0x61b/0x980 [ 561.384985][T10869] ? __asan_memset+0x22/0x40 [ 561.389684][T10869] ? __sys_sendmsg_sock+0x30/0x30 [ 561.394742][T10869] ? __import_iovec+0x5f2/0x850 [ 561.399693][T10869] ? import_iovec+0x73/0xa0 [ 561.404201][T10869] ___sys_sendmsg+0x2a6/0x360 [ 561.408891][T10869] ? __sys_sendmsg+0x2b0/0x2b0 [ 561.413681][T10869] __se_sys_sendmsg+0x1d0/0x2c0 [ 561.418546][T10869] ? __x64_sys_sendmsg+0x80/0x80 [ 561.423527][T10869] ? lockdep_hardirqs_on+0x98/0x150 [ 561.429093][T10869] do_syscall_64+0x55/0xb0 [ 561.433607][T10869] ? clear_bhb_loop+0x40/0x90 [ 561.438298][T10869] ? clear_bhb_loop+0x40/0x90 [ 561.443010][T10869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.449089][T10869] RIP: 0033:0x7f0d88d9e159 [ 561.453512][T10869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.473154][T10869] RSP: 002b:00007f0d89c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.481575][T10869] RAX: ffffffffffffffda RBX: 00007f0d89025fa0 RCX: 00007f0d88d9e159 [ 561.489599][T10869] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 561.497594][T10869] RBP: 00007f0d88e3506b R08: 0000000000000000 R09: 0000000000000000 [ 561.505644][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.514056][T10869] R13: 00007f0d89026038 R14: 00007f0d89025fa0 R15: 00007fffac01d578 [ 561.522044][T10869] [ 561.759451][T10884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1363'. [ 561.782004][T10884] tc_dump_action: action bad kind [ 561.972478][T10895] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1367'. [ 562.334759][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1374'. [ 562.366639][T10910] tc_dump_action: action bad kind [ 562.954262][T10935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1387'. [ 562.980990][T10935] tc_dump_action: action bad kind [ 563.176548][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183004][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.283340][T10947] No source specified [ 563.991731][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1400'. [ 564.004218][T10969] tc_dump_action: action bad kind [ 564.170590][T10975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.194107][T10975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.383483][T10975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.409775][T10975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.542240][T10975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.552918][T10975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.708787][T10975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.746054][T10975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.918642][T10975] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.930773][T10975] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.957134][T10975] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.971738][T10975] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.994126][T10975] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.009295][T10975] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.038542][T10975] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.054583][T10975] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.604341][T11049] bond0: (slave bond_slave_0): Releasing backup interface [ 566.785765][T11051] bond0: (slave bond_slave_1): Releasing backup interface [ 567.282391][T11075] overlayfs: workdir and upperdir must be separate subtrees [ 567.351701][ T5085] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 567.549215][T11082] FAULT_INJECTION: forcing a failure. [ 567.549215][T11082] name failslab, interval 1, probability 0, space 0, times 0 [ 567.618573][T11082] CPU: 0 PID: 11082 Comm: syz.4.1434 Not tainted syzkaller #0 [ 567.626350][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.636452][T11082] Call Trace: [ 567.639757][T11082] [ 567.642807][T11082] dump_stack_lvl+0x18c/0x250 [ 567.647627][T11082] ? show_regs_print_info+0x20/0x20 [ 567.653906][T11082] ? load_image+0x420/0x420 [ 567.658471][T11082] ? __might_sleep+0xe0/0xe0 [ 567.663136][T11082] ? __lock_acquire+0x7d80/0x7d80 [ 567.668206][T11082] should_fail_ex+0x394/0x4c0 [ 567.672941][T11082] should_failslab+0x9/0x20 [ 567.677504][T11082] slab_pre_alloc_hook+0x59/0x300 [ 567.682573][T11082] ? __lock_acquire+0x7d80/0x7d80 [ 567.687633][T11082] ? security_sk_alloc+0x4b/0x130 [ 567.692695][T11082] ? security_sk_alloc+0x4b/0x130 [ 567.697757][T11082] __kmem_cache_alloc_node+0x53/0x250 [ 567.703185][T11082] ? security_sk_alloc+0x4b/0x130 [ 567.708257][T11082] __kmalloc+0xa7/0x240 [ 567.712563][T11082] security_sk_alloc+0x4b/0x130 [ 567.717467][T11082] sk_prot_alloc+0x101/0x210 [ 567.722112][T11082] sk_alloc+0x3a/0x350 [ 567.726227][T11082] unix_create1+0xb0/0x780 [ 567.730710][T11082] unix_create+0x14a/0x1f0 [ 567.735182][T11082] __sock_create+0x49e/0x940 [ 567.739820][T11082] __sys_socketpair+0x236/0x550 [ 567.744711][T11082] __x64_sys_socketpair+0x9b/0xb0 [ 567.749770][T11082] do_syscall_64+0x55/0xb0 [ 567.754218][T11082] ? clear_bhb_loop+0x40/0x90 [ 567.758930][T11082] ? clear_bhb_loop+0x40/0x90 [ 567.763652][T11082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.769612][T11082] RIP: 0033:0x7f0d88d9e159 [ 567.774056][T11082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.793781][T11082] RSP: 002b:00007f0d89c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 567.802205][T11082] RAX: ffffffffffffffda RBX: 00007f0d89025fa0 RCX: 00007f0d88d9e159 [ 567.810175][T11082] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 567.818141][T11082] RBP: 00007f0d88e3506b R08: 0000000000000000 R09: 0000000000000000 [ 567.826119][T11082] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 567.834120][T11082] R13: 00007f0d89026038 R14: 00007f0d89025fa0 R15: 00007fffac01d578 [ 567.842123][T11082] [ 569.813356][T11108] No source specified [ 571.280452][T11138] ipvlan2: entered promiscuous mode [ 571.287134][T11138] bridge0: port 3(ipvlan2) entered blocking state [ 571.293788][T11138] bridge0: port 3(ipvlan2) entered disabled state [ 571.301597][T11138] ipvlan2: entered allmulticast mode [ 571.309218][T11138] bridge0: entered allmulticast mode [ 571.321943][T11138] ipvlan2: left allmulticast mode [ 571.334716][T11138] bridge0: left allmulticast mode [ 574.784148][T11077] Set syz0 is full, maxelem 65536 reached [ 574.912798][ T27] audit: type=1326 audit(1790297580.098:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1474" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4cd9e159 code=0x7ffc0000 [ 574.996524][ T27] audit: type=1326 audit(1790297580.098:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1474" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4cd9e159 code=0x7ffc0000 [ 576.003898][T11242] No source specified [ 578.399524][T11311] No source specified [ 578.842511][T11324] type: 635427838 invalid [ 582.315235][T11384] overlayfs: failed to clone upperpath [ 582.806302][T11388] type: 635427838 invalid [ 588.352363][ T5085] Bluetooth: hci4: unexpected event for opcode 0x204e [ 588.924805][T11455] overlayfs: failed to clone upperpath [ 589.124087][T11458] FAULT_INJECTION: forcing a failure. [ 589.124087][T11458] name failslab, interval 1, probability 0, space 0, times 0 [ 589.161826][T11458] CPU: 0 PID: 11458 Comm: syz.4.1556 Not tainted syzkaller #0 [ 589.169367][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.179454][T11458] Call Trace: [ 589.182754][T11458] [ 589.185706][T11458] dump_stack_lvl+0x18c/0x250 [ 589.190428][T11458] ? show_regs_print_info+0x20/0x20 [ 589.195953][T11458] ? load_image+0x420/0x420 [ 589.200492][T11458] ? __might_sleep+0xe0/0xe0 [ 589.205120][T11458] ? __lock_acquire+0x7d80/0x7d80 [ 589.210182][T11458] should_fail_ex+0x394/0x4c0 [ 589.214900][T11458] should_failslab+0x9/0x20 [ 589.219532][T11458] slab_pre_alloc_hook+0x59/0x300 [ 589.224592][T11458] ? __register_sysctl_table+0xa15/0x1210 [ 589.230350][T11458] ? __register_sysctl_table+0xa2c/0x1210 [ 589.236104][T11458] ? __register_sysctl_table+0xa2c/0x1210 [ 589.241947][T11458] __kmem_cache_alloc_node+0x53/0x250 [ 589.247365][T11458] ? __rwlock_init+0x150/0x150 [ 589.252175][T11458] ? __register_sysctl_table+0xa2c/0x1210 [ 589.257934][T11458] __kmalloc+0xa7/0x240 [ 589.262135][T11458] __register_sysctl_table+0xa2c/0x1210 [ 589.267726][T11458] setup_mq_sysctls+0x4da/0x570 [ 589.272620][T11458] copy_ipcs+0x327/0x500 [ 589.276903][T11458] create_new_namespaces+0x212/0x700 [ 589.282231][T11458] unshare_nsproxy_namespaces+0x11a/0x160 [ 589.287990][T11458] ksys_unshare+0x4fa/0x8f0 [ 589.292540][T11458] ? sighand_ctor+0x50/0x50 [ 589.297127][T11458] ? lock_chain_count+0x20/0x20 [ 589.302007][T11458] ? syscall_enter_from_user_mode+0x25/0x80 [ 589.307933][T11458] __x64_sys_unshare+0x38/0x40 [ 589.312729][T11458] do_syscall_64+0x55/0xb0 [ 589.317176][T11458] ? clear_bhb_loop+0x40/0x90 [ 589.321884][T11458] ? clear_bhb_loop+0x40/0x90 [ 589.326599][T11458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.332525][T11458] RIP: 0033:0x7f0d88d9e159 [ 589.336963][T11458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.356616][T11458] RSP: 002b:00007f0d89c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.365070][T11458] RAX: ffffffffffffffda RBX: 00007f0d89025fa0 RCX: 00007f0d88d9e159 [ 589.373076][T11458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 589.381100][T11458] RBP: 00007f0d88e3506b R08: 0000000000000000 R09: 0000000000000000 [ 589.389101][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.397187][T11458] R13: 00007f0d89026038 R14: 00007f0d89025fa0 R15: 00007fffac01d578 [ 589.405207][T11458] [ 589.423905][T11458] sysctl could not get directory: /fs/mqueue -12 [ 589.718856][T11461] FAULT_INJECTION: forcing a failure. [ 589.718856][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 589.756115][T11461] CPU: 1 PID: 11461 Comm: syz.4.1558 Not tainted syzkaller #0 [ 589.764039][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.774154][T11461] Call Trace: [ 589.777456][T11461] [ 589.780402][T11461] dump_stack_lvl+0x18c/0x250 [ 589.785118][T11461] ? show_regs_print_info+0x20/0x20 [ 589.790356][T11461] ? load_image+0x420/0x420 [ 589.794986][T11461] ? __might_sleep+0xe0/0xe0 [ 589.799610][T11461] ? __lock_acquire+0x7d80/0x7d80 [ 589.804670][T11461] should_fail_ex+0x394/0x4c0 [ 589.809407][T11461] should_failslab+0x9/0x20 [ 589.813940][T11461] slab_pre_alloc_hook+0x59/0x300 [ 589.819013][T11461] ? get_fs_type+0x3f9/0x480 [ 589.823646][T11461] ? tomoyo_encode+0x2ad/0x570 [ 589.828446][T11461] ? tomoyo_encode+0x2ad/0x570 [ 589.833238][T11461] __kmem_cache_alloc_node+0x53/0x250 [ 589.838655][T11461] ? tomoyo_encode+0x2ad/0x570 [ 589.843456][T11461] __kmalloc+0xa7/0x240 [ 589.847652][T11461] tomoyo_encode+0x2ad/0x570 [ 589.852303][T11461] tomoyo_mount_permission+0x50b/0x9d0 [ 589.857826][T11461] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 589.863505][T11461] ? kasan_set_track+0x4e/0x70 [ 589.868306][T11461] ? tomoyo_get_name+0x570/0x570 [ 589.873281][T11461] ? user_path_at_empty+0x4c/0x60 [ 589.878349][T11461] ? kasan_quarantine_put+0xd8/0x220 [ 589.883651][T11461] ? lockdep_hardirqs_on+0x98/0x150 [ 589.888898][T11461] security_sb_mount+0x87/0xc0 [ 589.893697][T11461] path_mount+0xbc/0xfa0 [ 589.897942][T11461] ? kmem_cache_free+0xf8/0x290 [ 589.902804][T11461] __se_sys_mount+0x2e7/0x3d0 [ 589.907485][T11461] ? __x64_sys_mount+0xc0/0xc0 [ 589.912252][T11461] ? lockdep_hardirqs_on+0x98/0x150 [ 589.917888][T11461] ? __x64_sys_mount+0x20/0xc0 [ 589.922652][T11461] do_syscall_64+0x55/0xb0 [ 589.927076][T11461] ? clear_bhb_loop+0x40/0x90 [ 589.931860][T11461] ? clear_bhb_loop+0x40/0x90 [ 589.936571][T11461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.942470][T11461] RIP: 0033:0x7f0d88d9e159 [ 589.946912][T11461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.967044][T11461] RSP: 002b:00007f0d89c77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.975462][T11461] RAX: ffffffffffffffda RBX: 00007f0d89025fa0 RCX: 00007f0d88d9e159 [ 589.983441][T11461] RDX: 0000200000000180 RSI: 0000200000000400 RDI: 0000000000000000 [ 589.991439][T11461] RBP: 00007f0d88e3506b R08: 0000200000000580 R09: 0000000000000000 [ 589.999430][T11461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.007398][T11461] R13: 00007f0d89026038 R14: 00007f0d89025fa0 R15: 00007fffac01d578 [ 590.015381][T11461] [ 590.457288][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1559'. [ 590.996492][ T5085] Bluetooth: hci0: unexpected event for opcode 0x204e [ 595.500580][T11585] overlayfs: failed to clone upperpath [ 596.291654][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 596.304078][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 596.313454][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 596.322040][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 596.330546][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 596.338845][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 596.934421][T11601] chnl_net:caif_netlink_parms(): no params data found [ 597.442355][T11601] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.492938][T11601] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.556590][T11601] bridge_slave_0: entered allmulticast mode [ 597.603362][T11601] bridge_slave_0: entered promiscuous mode [ 597.649738][T11601] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.697353][T11601] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.738468][T11601] bridge_slave_1: entered allmulticast mode [ 597.819267][T11601] bridge_slave_1: entered promiscuous mode [ 597.968514][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.010753][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.162552][T11601] team0: Port device team_slave_0 added [ 598.204602][T11601] team0: Port device team_slave_1 added [ 598.296150][T11601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.303143][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.395307][T11601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.446216][ T5777] Bluetooth: hci1: command tx timeout [ 598.453164][T11601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.461196][ T5777] Bluetooth: hci0: unexpected event for opcode 0x204e [ 598.478863][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.595956][T11601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.753087][T11601] hsr_slave_0: entered promiscuous mode [ 598.812377][T11601] hsr_slave_1: entered promiscuous mode [ 598.831100][T11601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.855498][T11601] Cannot create hsr debugfs directory [ 599.506526][T11601] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 599.565295][T11601] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 599.620177][T11601] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 599.688442][T11601] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 600.005421][T11601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.074411][T11601] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.103827][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.111078][T10595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.224562][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.232114][T10595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.348421][T11601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.480558][ T5777] Bluetooth: hci0: unexpected event for opcode 0x204e [ 600.527363][ T5777] Bluetooth: hci1: command tx timeout [ 600.825845][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.654849][T10597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.813603][T10597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.829801][T11601] veth0_vlan: entered promiscuous mode [ 601.871703][T11601] veth1_vlan: entered promiscuous mode [ 601.943461][T11712] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1631'. [ 601.958345][T10597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.983972][T11712] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1631'. [ 602.070304][T10597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.180812][T11601] veth0_macvtap: entered promiscuous mode [ 602.217520][T11601] veth1_macvtap: entered promiscuous mode [ 602.273145][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.296356][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.316739][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.336181][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.356482][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.368043][ T5777] Bluetooth: hci0: unexpected event for opcode 0x204e [ 602.375258][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.387662][T11601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.493984][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.516052][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.536175][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.555993][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.565853][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.606154][ T5777] Bluetooth: hci1: command tx timeout [ 602.611663][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.628116][T11601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.710958][T11601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.726406][T11601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.735412][T11601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.745251][T11601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.007063][T10606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.025599][T10606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.299823][T10595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.346160][T10595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.797179][ T5777] Bluetooth: hci0: unexpected event for opcode 0x204e [ 603.829119][T11759] loop5: detected capacity change from 0 to 2048 [ 603.961598][T11759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.317842][T11756] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 604.366184][T11756] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 604.385291][T11756] EXT4-fs (loop5): This should not happen!! Data will be lost [ 604.385291][T11756] [ 604.395155][T11756] EXT4-fs (loop5): Total free blocks count 0 [ 604.409318][T11756] EXT4-fs (loop5): Free/Dirty block details [ 604.415292][T11756] EXT4-fs (loop5): free_blocks=4096 [ 604.423398][T11756] EXT4-fs (loop5): dirty_blocks=64 [ 604.439784][T11756] EXT4-fs (loop5): Block reservation details [ 604.456427][T11756] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 604.649158][T10599] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 604.686327][ T5777] Bluetooth: hci1: command tx timeout [ 604.919344][T10597] hsr_slave_0: left promiscuous mode [ 604.946819][T10597] hsr_slave_1: left promiscuous mode [ 604.948190][T11791] xt_hashlimit: size too large, truncated to 1048576 [ 604.959957][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.988950][T10597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.047277][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.075391][T10597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.112900][T10597] bridge_slave_1: left allmulticast mode [ 605.136147][T10597] bridge_slave_1: left promiscuous mode [ 605.156808][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.180206][T10597] bridge_slave_0: left allmulticast mode [ 605.221461][T10597] bridge_slave_0: left promiscuous mode [ 605.243812][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.381378][T10597] veth1_macvtap: left promiscuous mode [ 605.396458][T10597] veth0_macvtap: left promiscuous mode [ 605.404687][T10597] veth1_vlan: left promiscuous mode [ 605.422258][T10597] veth0_vlan: left promiscuous mode [ 605.538491][T11805] No source specified [ 605.996240][T11810] type: 635427838 invalid [ 607.152360][T10597] team0 (unregistering): Port device team_slave_1 removed [ 607.232946][T10597] team0 (unregistering): Port device team_slave_0 removed [ 607.304985][T10597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.393345][T10597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.951354][T10597] bond0 (unregistering): Released all slaves [ 608.088025][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 610.645331][ T5777] Bluetooth: hci2: unexpected event for opcode 0x204e [ 612.178846][ T5777] Bluetooth: hci0: unexpected event for opcode 0x204e [ 612.925096][T11937] type: 635427838 invalid [ 613.458049][T11955] FAULT_INJECTION: forcing a failure. [ 613.458049][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 613.493061][T11955] CPU: 0 PID: 11955 Comm: syz.5.1693 Not tainted syzkaller #0 [ 613.500613][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.510698][T11955] Call Trace: [ 613.514010][T11955] [ 613.516981][T11955] dump_stack_lvl+0x18c/0x250 [ 613.521693][T11955] ? show_regs_print_info+0x20/0x20 [ 613.526929][T11955] ? load_image+0x420/0x420 [ 613.531462][T11955] ? __might_sleep+0xe0/0xe0 [ 613.536071][T11955] ? __lock_acquire+0x7d80/0x7d80 [ 613.541125][T11955] should_fail_ex+0x394/0x4c0 [ 613.545960][T11955] should_failslab+0x9/0x20 [ 613.550513][T11955] slab_pre_alloc_hook+0x59/0x300 [ 613.555589][T11955] ? ctrl_dumppolicy_put_op+0xa30/0xa30 [ 613.561169][T11955] ? ops_init+0x8b/0x640 [ 613.565437][T11955] ? ops_init+0x8b/0x640 [ 613.569738][T11955] __kmem_cache_alloc_node+0x53/0x250 [ 613.575167][T11955] ? ops_init+0x8b/0x640 [ 613.579455][T11955] __kmalloc+0xa7/0x240 [ 613.583669][T11955] ops_init+0x8b/0x640 [ 613.587813][T11955] setup_net+0x3b6/0xa20 [ 613.592100][T11955] ? copy_net_ns+0x530/0x530 [ 613.596723][T11955] ? copy_net_ns+0x347/0x530 [ 613.601332][T11955] ? down_read_killable+0x1d0/0x340 [ 613.606563][T11955] copy_net_ns+0x361/0x530 [ 613.610988][T11955] create_new_namespaces+0x3ce/0x700 [ 613.616287][T11955] unshare_nsproxy_namespaces+0x11a/0x160 [ 613.622014][T11955] ksys_unshare+0x4fa/0x8f0 [ 613.626531][T11955] ? sighand_ctor+0x50/0x50 [ 613.631032][T11955] ? lock_chain_count+0x20/0x20 [ 613.635883][T11955] ? syscall_enter_from_user_mode+0x25/0x80 [ 613.641784][T11955] __x64_sys_unshare+0x38/0x40 [ 613.646548][T11955] do_syscall_64+0x55/0xb0 [ 613.650967][T11955] ? clear_bhb_loop+0x40/0x90 [ 613.655647][T11955] ? clear_bhb_loop+0x40/0x90 [ 613.660324][T11955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.666219][T11955] RIP: 0033:0x7ff496b9e159 [ 613.670637][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.690248][T11955] RSP: 002b:00007ff494df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 613.698668][T11955] RAX: ffffffffffffffda RBX: 00007ff496e25fa0 RCX: 00007ff496b9e159 [ 613.706641][T11955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 613.714610][T11955] RBP: 00007ff496c3506b R08: 0000000000000000 R09: 0000000000000000 [ 613.722608][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.730588][T11955] R13: 00007ff496e26038 R14: 00007ff496e25fa0 R15: 00007ffc06ec9fb8 [ 613.738608][T11955] PÚÿÿÿ-D devtmpfs./dev/consolesit0 ÿ€Iš$d/‹.¬»¬ª”üÿ ÛŸ{‡N¼`tunl0€ [ 614.975603][T12008] ip_tables: iptables: counters copy to user failed while replacing table [ 615.306191][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 615.386074][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 615.395343][T12015] 8021q: VLANs not supported on gre0 [ 617.252673][T12081] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1727'. [ 617.280309][T12081] tc_dump_action: action bad kind [ 617.457162][T12090] type: 635427838 invalid [ 618.414495][T12110] tipc: Started in network mode [ 618.419946][T12110] tipc: Node identity 1, cluster identity 4711 [ 618.426416][T12110] tipc: Node number set to 1 [ 618.444941][T12110] tipc: Enabling of bearer rejected, failed to enable media [ 622.072537][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1736'. [ 622.111984][T12130] tc_dump_action: action bad kind [ 623.100515][T12154] loop5: detected capacity change from 0 to 512 [ 623.165308][T12154] EXT4-fs (loop5): Test dummy encryption mode enabled [ 623.234407][T12154] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #11: comm syz.5.1742: casefold flag without casefold feature [ 623.312738][T12154] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1742: couldn't read orphan inode 11 (err -117) [ 623.369971][T12154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.566363][T12185] syzkaller0: entered promiscuous mode [ 624.572083][T12185] syzkaller0: entered allmulticast mode [ 624.616475][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.623067][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.629734][T12189] tipc: Started in network mode [ 624.656434][T12189] tipc: Node identity aa78f0d6bbc3, cluster identity 4711 [ 624.685430][T12189] tipc: Enabled bearer , priority 0 [ 624.708483][T12184] tipc: Resetting bearer [ 624.776158][T12158] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 624.858287][T12184] tipc: Disabling bearer [ 625.286183][T12200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1748'. [ 625.326173][T12200] tc_dump_action: action bad kind [ 628.306216][ T9857] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 628.998543][T12238] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 629.015094][T12238] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 629.168884][ T9857] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 629.267981][ T9857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.761617][ T9857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.777107][ T9857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 629.793406][ T9857] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 629.816344][ T9857] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 629.825325][ T9857] usb 5-1: Manufacturer: syz [ 629.877349][ T9857] usb 5-1: config 0 descriptor?? [ 629.972182][T12251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1758'. [ 630.027658][T12251] tc_dump_action: action bad kind [ 630.324028][ T9857] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 630.372588][ T9857] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 630.425458][ T9857] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 633.221196][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.367384][ T5811] usb 5-1: USB disconnect, device number 4 [ 634.727180][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1768'. [ 634.776113][T12315] tc_dump_action: action bad kind [ 636.585571][T12357] type: 635427838 invalid [ 637.405741][T12367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1780'. [ 637.436370][T12367] tc_dump_action: action bad kind [ 638.626188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 641.258528][T12399] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 643.685837][T12414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1790'. [ 643.738363][T12414] tc_dump_action: action bad kind [ 644.025044][T12416] serio: Serial port ttyS3 [ 644.719119][T12424] No source specified [ 646.886061][ T5848] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 647.081321][ T5848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.112164][ T5848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.146130][ T5848] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 647.176004][ T5848] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.219102][ T5848] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 647.246183][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.730277][ T5848] gud: probe of 5-1:1.0 failed with error -121 [ 647.975289][ T9857] usb 5-1: USB disconnect, device number 5 [ 648.055291][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1800'. [ 648.080349][T12463] tc_dump_action: action bad kind [ 649.266041][ T6071] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 649.607472][ T6071] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.635977][ T6071] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.645776][ T6071] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.666343][ T6071] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.673053][ T6071] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 649.684129][ T6071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.705204][ T6071] usb 6-1: config 0 descriptor?? [ 649.790093][T12494] No source specified [ 650.349420][ T6071] hid-multitouch 0003:0EEF:72D0.0002: No inputs registered, leaving [ 650.609894][ T6071] hid-multitouch 0003:0EEF:72D0.0002: hidraw0: USB HID v0.00 Joystick [HID 0eef:72d0] on usb-dummy_hcd.5-1/input0 [ 650.796917][ T6071] usb 6-1: USB disconnect, device number 2 [ 651.045792][T12504] fido_id[12504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 652.599574][T12513] syz.5.1809 (12513): drop_caches: 2 [ 652.993885][T12536] loop5: detected capacity change from 0 to 2048 [ 653.156283][T12536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.389724][T12536] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 653.507018][T12536] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 653.581962][T12536] EXT4-fs (loop5): This should not happen!! Data will be lost [ 653.581962][T12536] [ 653.612351][T12536] EXT4-fs (loop5): Total free blocks count 0 [ 653.656031][T12536] EXT4-fs (loop5): Free/Dirty block details [ 653.686046][T12536] EXT4-fs (loop5): free_blocks=4096 [ 653.714401][T12536] EXT4-fs (loop5): dirty_blocks=64 [ 653.739304][T12536] EXT4-fs (loop5): Block reservation details [ 653.768831][T12536] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 653.833712][T12536] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 18 with error 28 [ 655.212457][T12568] loop5: detected capacity change from 0 to 512 [ 655.239579][T12568] EXT4-fs: Ignoring removed i_version option [ 655.275493][T12568] EXT4-fs: Ignoring removed oldalloc option [ 655.348311][T12568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.738967][T12588] overlayfs: failed to clone upperpath [ 655.792228][T12591] No source specified [ 655.904054][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.116237][T12650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 660.152178][T12661] No source specified [ 660.166048][ T5811] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 661.301325][ T5811] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.316419][ T5811] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.330125][ T5811] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.344415][ T5811] usb 5-1: config 0 interface 0 has no altsetting 0 [ 661.354647][ T5811] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 661.364888][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.382070][ T5811] usb 5-1: config 0 descriptor?? [ 661.812105][ T5811] usbhid 5-1:0.0: can't add hid device: -71 [ 661.824135][ T5811] usbhid: probe of 5-1:0.0 failed with error -71 [ 661.859144][ T5811] usb 5-1: USB disconnect, device number 6 [ 663.031591][T12702] loop5: detected capacity change from 0 to 40427 [ 663.067969][T12702] F2FS-fs (loop5): invalid crc_offset: 4177530876 [ 663.112291][T12702] F2FS-fs (loop5): Wrong journal entry on segno 65538 [ 663.120012][T12702] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 663.232101][T12716] random: crng reseeded on system resumption [ 663.291524][T12717] syz.4.1858: attempt to access beyond end of device [ 663.291524][T12717] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 663.306120][T12717] gfs2: error 10 reading superblock [ 663.960409][T12731] type: 635427838 invalid [ 667.559764][ T27] audit: type=1800 audit(1790821960.801:43): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1887" name="ipv4_address" dev="configfs" ino=27315 res=0 errno=0 [ 667.684827][ T27] audit: type=1800 audit(1790821960.862:44): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1887" name="ipv4_port" dev="configfs" ino=27316 res=0 errno=0 [ 667.725424][ T27] audit: type=1800 audit(1790821960.873:45): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1887" name="num" dev="configfs" ino=27317 res=0 errno=0 [ 667.817933][ T5831] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 667.854744][ T27] audit: type=1800 audit(1790821960.883:46): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1887" name="local" dev="configfs" ino=27318 res=0 errno=0 [ 667.877348][ T27] audit: type=1800 audit(1790821960.883:47): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1887" name="ipv4_address" dev="configfs" ino=27320 res=0 errno=0 [ 668.061122][ T5831] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.073557][ T5831] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.088307][ T5831] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.116394][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0 [ 668.131013][ T5831] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 668.150901][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.177251][ T5831] usb 6-1: config 0 descriptor?? [ 668.589387][ T5831] usbhid 6-1:0.0: can't add hid device: -71 [ 668.609140][ T5831] usbhid: probe of 6-1:0.0 failed with error -71 [ 668.644511][ T5831] usb 6-1: USB disconnect, device number 3 [ 668.955663][T12833] FAULT_INJECTION: forcing a failure. [ 668.955663][T12833] name failslab, interval 1, probability 0, space 0, times 0 [ 668.969016][T12833] CPU: 1 PID: 12833 Comm: syz.4.1889 Not tainted syzkaller #0 [ 668.976521][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.986615][T12833] Call Trace: [ 668.989923][T12833] [ 668.992976][T12833] dump_stack_lvl+0x18c/0x250 [ 668.997696][T12833] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 669.003409][T12833] ? show_regs_print_info+0x20/0x20 [ 669.008660][T12833] ? load_image+0x420/0x420 [ 669.013235][T12833] should_fail_ex+0x394/0x4c0 [ 669.017963][T12833] should_failslab+0x9/0x20 [ 669.022506][T12833] slab_pre_alloc_hook+0x59/0x300 [ 669.027588][T12833] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 669.033276][T12833] kmem_cache_alloc_lru+0x4d/0x2b0 [ 669.038423][T12833] ? sock_alloc_inode+0x28/0xc0 [ 669.043319][T12833] sock_alloc_inode+0x28/0xc0 [ 669.048034][T12833] ? sockfs_init_fs_context+0xb0/0xb0 [ 669.053448][T12833] new_inode_pseudo+0x63/0x1d0 [ 669.058258][T12833] __sock_create+0x12d/0x940 [ 669.062882][T12833] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 669.068921][T12833] __sys_socket+0xd7/0x1b0 [ 669.073385][T12833] __x64_sys_socket+0x7a/0x90 [ 669.078110][T12833] do_syscall_64+0x55/0xb0 [ 669.082586][T12833] ? clear_bhb_loop+0x40/0x90 [ 669.087357][T12833] ? clear_bhb_loop+0x40/0x90 [ 669.092081][T12833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.098019][T12833] RIP: 0033:0x7f0d88d9e159 [ 669.102462][T12833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.122103][T12833] RSP: 002b:00007f0d89c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 669.130558][T12833] RAX: ffffffffffffffda RBX: 00007f0d89026090 RCX: 00007f0d88d9e159 [ 669.138610][T12833] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 669.146799][T12833] RBP: 00007f0d88e3506b R08: 0000000000000000 R09: 0000000000000000 [ 669.154808][T12833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.162813][T12833] R13: 00007f0d89026128 R14: 00007f0d89026090 R15: 00007fffac01d578 [ 669.170836][T12833] [ 669.174329][T12833] socket: no more sockets [ 671.327805][ T9856] IPVS: starting estimator thread 0... [ 671.454510][T12855] IPVS: using max 21 ests per chain, 50400 per kthread [ 672.262476][T12879] No source specified [ 674.530220][T12912] loop5: detected capacity change from 0 to 2048 [ 674.560531][T12912] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 676.450565][ T27] audit: type=1326 audit(1790821969.884:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.5.1910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff496b9e159 code=0x0 [ 678.957295][T12925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 679.495002][T12958] No source specified [ 681.827707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 682.731138][T12991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1925'. [ 682.756796][T12991] tc_dump_action: action bad kind [ 683.214457][T13002] No source specified [ 684.359933][T13023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1934'. [ 684.374305][T13023] tc_dump_action: action bad kind [ 685.224987][T13038] No source specified [ 685.693769][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.700274][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.878148][T13049] loop5: detected capacity change from 0 to 512 [ 685.895898][T13049] EXT4-fs: Ignoring removed i_version option [ 685.931184][T13049] EXT4-fs: Ignoring removed oldalloc option [ 685.941602][T13051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1944'. [ 685.957405][T13051] tc_dump_action: action bad kind [ 685.971538][T13049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.102944][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.923121][T13075] No source specified [ 687.600419][T13080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1954'. [ 687.615313][T13080] tc_dump_action: action bad kind [ 688.857893][T13093] type: 635427838 invalid [ 689.374146][T13089] loop5: detected capacity change from 0 to 512 [ 689.398371][T13089] EXT4-fs: Ignoring removed i_version option [ 689.413355][T13089] EXT4-fs: Ignoring removed oldalloc option [ 689.439130][T13089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.670430][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.105516][T13111] No source specified [ 690.170882][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1961'. [ 690.227948][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 690.274577][T13113] tc_dump_action: action bad kind [ 691.258696][ T9856] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 691.487527][ T9856] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.510156][ T9856] usb 6-1: config 0 interface 0 has no altsetting 0 [ 691.517196][ T9856] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 691.530955][ T9856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.548333][ T9856] usb 6-1: config 0 descriptor?? [ 692.351775][ T9856] input: HID 1e7d:3264 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1E7D:3264.0003/input/input14 [ 692.564374][T13141] type: 635427838 invalid [ 692.570201][ T9856] isku 0003:1E7D:3264.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.5-1/input0 [ 692.654297][ T9856] usb 6-1: USB disconnect, device number 4 [ 692.983902][T13140] fido_id[13140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 693.485230][T13151] No source specified [ 693.526915][T13152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1974'. [ 693.546475][T13152] tc_dump_action: action bad kind [ 693.866097][T13161] Bluetooth: MGMT ver 1.22 [ 693.883102][T13161] Cannot find add_set index 0 as target [ 694.848835][ T27] audit: type=1326 audit(1790821988.455:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13167 comm="syz.2.1981" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f2799e159 code=0x0 [ 695.324653][T13175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1983'. [ 695.380757][T13175] tc_dump_action: action bad kind [ 696.539502][T13194] No source specified [ 697.409572][T13198] Bluetooth: MGMT ver 1.22 [ 698.872926][T13210] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1996'. [ 698.913142][T13210] tc_dump_action: action bad kind [ 698.951779][T13212] No source specified [ 699.257053][ T27] audit: type=1326 audit(1790821992.884:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13217 comm="syz.1.1995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f409af9e159 code=0x0 [ 699.450038][T13201] Bluetooth: hci0: command 0x0c1a tx timeout [ 699.456758][T13201] Bluetooth: hci1: command 0x0c24 tx timeout [ 699.489676][ T5085] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 699.497165][ T5777] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 700.652264][T13232] Bluetooth: ISO socket layer initialized [ 701.663588][ T9856] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 701.894310][T13238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2006'. [ 701.903561][T13238] tc_dump_action: action bad kind [ 701.980483][ T9856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.015085][ T5777] Bluetooth: hci2: Malformed LE Event: 0x0d [ 702.052417][ T9856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 702.509826][ T9856] usb 6-1: string descriptor 0 read error: -71 [ 702.526935][ T9856] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 702.548923][ T9856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 702.581907][ T9856] usb 6-1: can't set config #1, error -71 [ 702.601011][ T9856] usb 6-1: USB disconnect, device number 5 [ 703.070497][T13249] No source specified [ 705.362984][ T27] audit: type=1326 audit(1790821998.972:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.5.2012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff496b9e159 code=0x0 [ 705.782828][T13269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2015'. [ 705.805520][T13269] tc_dump_action: action bad kind [ 706.265380][T13283] No source specified [ 707.308035][T13296] ubi: mtd0 is already attached to ubi0 [ 707.321485][ T5777] Bluetooth: hci4: Malformed LE Event: 0x0d [ 710.691638][T13324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2029'. [ 710.716452][T13324] tc_dump_action: action bad kind [ 710.756835][ T27] audit: type=1326 audit(1790822004.413:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13328 comm="syz.1.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f409af9e159 code=0x0 [ 714.910504][T13359] input: syz1 as /devices/virtual/input/input16 [ 717.699944][T13382] loop5: detected capacity change from 0 to 512 [ 718.760036][ T5085] Bluetooth: hci1: command 0x0c24 tx timeout [ 718.880054][T13382] EXT4-fs (loop5): Test dummy encryption mode enabled [ 718.909825][ T27] audit: type=1326 audit(1790822012.054:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.2051" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d88d9e159 code=0x0 [ 719.006453][T13382] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #11: comm syz.5.2048: casefold flag without casefold feature [ 719.060285][T13382] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2048: couldn't read orphan inode 11 (err -117) [ 719.126493][T13382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.011586][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 721.263425][T13419] ªªªªªª: renamed from vlan0 (while UP) [ 721.849648][T13431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2062'. [ 722.536789][T13434] input: syz1 as /devices/virtual/input/input17 [ 724.045404][T13393] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 725.134948][ T5811] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 725.321682][ T5811] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.339375][ T5811] usb 5-1: config 0 interface 0 has no altsetting 0 [ 725.346292][ T5811] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 725.355732][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.370495][ T5811] usb 5-1: config 0 descriptor?? [ 725.389694][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.497945][T13460] loop5: detected capacity change from 0 to 128 [ 725.740687][T13463] loop5: detected capacity change from 0 to 512 [ 725.765009][T13463] EXT4-fs: Ignoring removed i_version option [ 725.801426][T13463] EXT4-fs: Ignoring removed oldalloc option [ 725.814339][ T5811] usbhid 5-1:0.0: can't add hid device: -71 [ 725.820399][ T5811] usbhid: probe of 5-1:0.0 failed with error -71 [ 725.857331][ T5811] usb 5-1: USB disconnect, device number 7 [ 725.894703][T13463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.112390][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.316431][ T27] audit: type=1326 audit(1790822020.991:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.1.2077" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f409af9e159 code=0x0 [ 727.353348][ T5831] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 727.553244][ T5831] usb 6-1: device descriptor read/64, error -71 [ 727.846639][ T5831] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 728.032980][ T5831] usb 6-1: device descriptor read/64, error -71 [ 728.372964][ T5831] usb usb6-port1: attempt power cycle [ 728.784110][ T5831] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 728.834554][ T5831] usb 6-1: device descriptor read/8, error -71 [ 729.811876][ T5831] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 729.862174][T13500] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 730.041883][ T5831] usb 6-1: device not accepting address 9, error -71 [ 730.066059][T13500] team0 (unregistering): Port device team_slave_0 removed [ 730.069748][ T5831] usb usb6-port1: unable to enumerate USB device [ 730.123338][T13500] team0 (unregistering): Port device team_slave_1 removed [ 730.627682][T13502] loop5: detected capacity change from 0 to 40427 [ 730.789130][T13502] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 730.876641][T13502] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 731.242815][T13502] F2FS-fs (loop5): Found nat_bits in checkpoint [ 731.401233][T13502] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 731.421188][T13502] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 733.594147][ T27] audit: type=1326 audit(1790822027.274:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13526 comm="syz.2.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f2799e159 code=0x0 [ 735.684561][T13546] No source specified [ 736.192534][T13552] loop5: detected capacity change from 0 to 128 [ 737.447515][ T27] audit: type=1326 audit(1790822031.115:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.5.2099" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff496b9e159 code=0x0 [ 739.310222][T13581] fuse: Unknown parameter '0x0000000000000005' [ 739.616135][T13588] loop5: detected capacity change from 0 to 512 [ 739.641038][T13588] EXT4-fs (loop5): Test dummy encryption mode enabled [ 739.655260][T13588] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #11: comm syz.5.2101: casefold flag without casefold feature [ 739.686310][T13588] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2101: couldn't read orphan inode 11 (err -117) [ 739.709492][T13588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.778953][ T5777] Bluetooth: hci2: unexpected event for opcode 0x042e [ 741.816448][ T27] audit: type=1326 audit(1791346323.022:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13603 comm="syz.4.2109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d88d9e159 code=0x0 [ 742.311253][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.765565][T13633] ubi: mtd0 is already attached to ubi0 [ 743.772942][ T5777] Bluetooth: hci4: Malformed LE Event: 0x0d [ 745.083978][T13637] loop5: detected capacity change from 0 to 512 [ 745.092252][T13637] EXT4-fs: Ignoring removed i_version option [ 745.098986][T13637] EXT4-fs: Ignoring removed oldalloc option [ 745.317715][T13637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.658478][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.366271][ T27] audit: type=1326 audit(1791870615.839:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13648 comm="syz.1.2121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f409af9e159 code=0x0 [ 746.879690][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.890798][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.161701][T13657] input: syz1 as /devices/virtual/input/input18 [ 749.972854][T13681] ubi: mtd0 is already attached to ubi0 [ 749.983020][ T5777] Bluetooth: hci1: Malformed LE Event: 0x0d [ 751.078982][ C0] hrtimer: interrupt took 36522 ns [ 752.929634][ T27] audit: type=1800 audit(1792394910.949:59): pid=13702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2137" name="UDC" dev="configfs" ino=30847 res=0 errno=0 [ 752.950283][T13702] UDC core: g1: couldn't find an available UDC or it's busy [ 762.639852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 766.549481][ T27] audit: type=1326 audit(1792394924.807:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13814 comm="syz.5.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff496b9e159 code=0x0 [ 767.975583][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 767.989514][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 767.999905][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 768.011916][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 768.025622][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 768.047740][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 769.036928][T13840] FAULT_INJECTION: forcing a failure. [ 769.036928][T13840] name failslab, interval 1, probability 0, space 0, times 0 [ 769.139624][T13840] CPU: 1 PID: 13840 Comm: syz.4.2177 Not tainted syzkaller #0 [ 769.147179][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.157280][T13840] Call Trace: [ 769.160583][T13840] [ 769.163533][T13840] dump_stack_lvl+0x18c/0x250 [ 769.168248][T13840] ? show_regs_print_info+0x20/0x20 [ 769.173494][T13840] ? load_image+0x420/0x420 [ 769.178037][T13840] ? __might_sleep+0xe0/0xe0 [ 769.182675][T13840] ? __lock_acquire+0x7d80/0x7d80 [ 769.187738][T13840] should_fail_ex+0x394/0x4c0 [ 769.192463][T13840] should_failslab+0x9/0x20 [ 769.197008][T13840] slab_pre_alloc_hook+0x59/0x300 [ 769.202087][T13840] kmem_cache_alloc+0x5a/0x2c0 [ 769.206890][T13840] ? mm_alloc+0x23/0xc0 [ 769.211088][T13840] mm_alloc+0x23/0xc0 [ 769.215115][T13840] alloc_bprm+0x21f/0x9a0 [ 769.219496][T13840] ? strncpy_from_user+0x1a1/0x2f0 [ 769.224663][T13840] do_execveat_common+0x18a/0x6b0 [ 769.229744][T13840] __x64_sys_execve+0x92/0xa0 [ 769.234466][T13840] do_syscall_64+0x55/0xb0 [ 769.238930][T13840] ? clear_bhb_loop+0x40/0x90 [ 769.243649][T13840] ? clear_bhb_loop+0x40/0x90 [ 769.248363][T13840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.254385][T13840] RIP: 0033:0x7f0d88d9e159 [ 769.258832][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.278475][T13840] RSP: 002b:00007f0d89c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 769.286939][T13840] RAX: ffffffffffffffda RBX: 00007f0d89025fa0 RCX: 00007f0d88d9e159 [ 769.294956][T13840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001380 [ 769.302980][T13840] RBP: 00007f0d88e3506b R08: 0000000000000000 R09: 0000000000000000 [ 769.310985][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.318990][T13840] R13: 00007f0d89026038 R14: 00007f0d89025fa0 R15: 00007fffac01d578 [ 769.327052][T13840] [ 770.063202][ T5777] Bluetooth: hci3: command tx timeout [ 771.267322][ T27] audit: type=1326 audit(1792919217.572:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.4.2180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d88d9e159 code=0x0 [ 772.009222][T13833] chnl_net:caif_netlink_parms(): no params data found [ 772.070829][ T5085] Bluetooth: hci3: command tx timeout [ 772.224516][T13833] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.248540][T13833] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.256503][T13833] bridge_slave_0: entered allmulticast mode [ 772.264072][T13833] bridge_slave_0: entered promiscuous mode [ 772.273587][T13833] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.280974][T13833] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.288333][T13833] bridge_slave_1: entered allmulticast mode [ 772.299173][T13833] bridge_slave_1: entered promiscuous mode [ 772.364524][T13833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.433941][T13833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.589907][T13833] team0: Port device team_slave_0 added [ 772.882580][T13833] team0: Port device team_slave_1 added [ 773.759261][T13833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.783098][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.865119][T13833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.996015][T13833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.022743][T13833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.108677][ T5085] Bluetooth: hci3: command tx timeout [ 774.114315][T13833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.396264][T13833] hsr_slave_0: entered promiscuous mode [ 774.431924][T13833] hsr_slave_1: entered promiscuous mode [ 774.486882][T13833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.494513][T13833] Cannot create hsr debugfs directory [ 776.128650][ T5085] Bluetooth: hci3: command tx timeout [ 776.855957][T10607] hsr_slave_0: left promiscuous mode [ 776.917532][T10607] hsr_slave_1: left promiscuous mode [ 777.036257][T10607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.062628][T10607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.095353][T10607] bridge_slave_1: left allmulticast mode [ 777.120674][T10607] bridge_slave_1: left promiscuous mode [ 777.144549][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.178347][T10607] bridge_slave_0: left allmulticast mode [ 777.205807][T10607] bridge_slave_0: left promiscuous mode [ 777.229103][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.372045][T10607] bond1 (unregistering): (slave veth3): Releasing active interface [ 777.409030][T10607] bond1 (unregistering): Released all slaves [ 778.318289][T13960] loop5: detected capacity change from 0 to 512 [ 778.343746][T13960] EXT4-fs (loop5): Test dummy encryption mode enabled [ 778.365923][T13960] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #11: comm syz.5.2192: casefold flag without casefold feature [ 778.384979][T13960] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2192: couldn't read orphan inode 11 (err -117) [ 778.507598][T13960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.573760][T11601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.478096][T10607] team0 (unregistering): Port device team_slave_1 removed [ 782.635679][T10607] team0 (unregistering): Port device team_slave_0 removed [ 782.770101][T10607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.881839][T10607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.137099][ T5831] infiniband syz1: ib_query_port failed (-19) [ 784.110540][T10607] bond0 (unregistering): Released all slaves [ 784.980874][T13833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 785.200259][T13833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 785.296230][T13833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 785.331764][T13833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 785.541365][T13833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.618442][T13833] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.650361][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.657635][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.689708][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.698045][ T6759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.639898][T14021] ceph: No mds server is up or the cluster is laggy [ 786.683342][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 786.805098][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 787.255225][ T5763] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 787.482162][ T5763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.531512][ T5763] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 1.00 [ 787.556686][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.542886][ T5763] input: USB Touchscreen 0596:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input19 [ 788.558195][T13833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.099111][ T5763] usb 6-1: USB disconnect, device number 10 [ 789.099198][ C1] usbtouchscreen 6-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 789.216606][T13833] veth0_vlan: entered promiscuous mode [ 789.294419][T13833] veth1_vlan: entered promiscuous mode [ 789.419320][T13833] veth0_macvtap: entered promiscuous mode [ 789.457524][T13833] veth1_macvtap: entered promiscuous mode [ 789.528858][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.561945][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.743217][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.802017][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.851966][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.874940][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.998466][T14071] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2214'. [ 790.007553][T14071] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2214'. [ 790.185448][T13833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.632447][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.659431][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.695903][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.707117][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.729896][T13833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.746824][T13833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.767204][T13833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.865435][T13833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.933761][T13833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.943108][T13833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.952261][T13833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.838582][T10592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.864484][T10592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.006418][T10593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.075475][T10593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.491206][T14111] loop5: detected capacity change from 0 to 512 [ 793.541113][T14111] EXT4-fs (loop5): Test dummy encryption mode enabled [ 793.738499][T14111] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #11: comm syz.5.2221: casefold flag without casefold feature [ 793.810149][T14111] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2221: couldn't read orphan inode 11 (err -117) [ 793.847736][T14111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.627603][T14117] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 797.487794][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.506033][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.518130][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.531936][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.539984][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 797.549579][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.593506][T14143] loop2: detected capacity change from 0 to 512 [ 797.605415][T14143] EXT4-fs: Ignoring removed i_version option [ 797.612726][T14143] EXT4-fs: Ignoring removed oldalloc option [ 797.669778][T14143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.228083][T13833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.530875][T10607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.682017][T10607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.918328][T10607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.072844][T10607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.119240][T14165] loop2: detected capacity change from 0 to 40427 [ 799.135279][T14165] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 799.173175][T14165] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 799.180192][T14165] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 799.181049][T14140] chnl_net:caif_netlink_parms(): no params data found [ 799.565660][ T5085] Bluetooth: hci0: command tx timeout [ 801.615480][ T5085] Bluetooth: hci0: command tx timeout [ 801.812001][T14204] loop2: detected capacity change from 0 to 512 [ 801.822898][T14204] EXT4-fs: Ignoring removed i_version option [ 801.870683][T14204] EXT4-fs: Ignoring removed oldalloc option [ 801.889578][T14140] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.897159][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.906680][T14140] bridge_slave_0: entered allmulticast mode [ 801.915129][T14140] bridge_slave_0: entered promiscuous mode [ 801.927107][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.967727][T14204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.086509][T14140] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.110428][T14140] bridge_slave_1: entered allmulticast mode [ 802.130996][T14140] bridge_slave_1: entered promiscuous mode [ 802.263297][T13833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.392622][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.452859][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.503914][T10607] tipc: Left network mode [ 802.841683][T14140] team0: Port device team_slave_0 added [ 802.884689][T14140] team0: Port device team_slave_1 added [ 804.133603][ T5085] Bluetooth: hci0: command tx timeout [ 804.450663][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.457671][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.596945][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.760278][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.778719][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.961552][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.274726][ T5085] Bluetooth: hci0: command tx timeout [ 806.518785][T14140] hsr_slave_0: entered promiscuous mode [ 806.545469][T14140] hsr_slave_1: entered promiscuous mode [ 806.556368][T14140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.573235][T14140] Cannot create hsr debugfs directory [ 806.979798][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.986322][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.997940][T10607] hsr_slave_0: left promiscuous mode [ 810.020812][T10607] hsr_slave_1: left promiscuous mode [ 810.035682][T10607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.054167][T10607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.081322][T10607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.095134][T10607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.127597][T10607] bridge_slave_1: left allmulticast mode [ 810.150816][T10607] bridge_slave_1: left promiscuous mode [ 810.174489][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.229577][T10607] bridge_slave_0: left allmulticast mode [ 810.235293][T10607] bridge_slave_0: left promiscuous mode [ 810.243222][T14282] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2250'. [ 810.260213][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.356926][T10607] veth1_macvtap: left promiscuous mode [ 810.362557][T10607] veth0_macvtap: left promiscuous mode [ 810.386740][T10607] veth1_vlan: left promiscuous mode [ 810.400916][T10607] veth0_vlan: left promiscuous mode [ 812.894617][ T27] audit: type=1326 audit(1795016412.114:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14302 comm="syz.5.2253" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff496b9e159 code=0x0 [ 813.248316][T10607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.336813][T10607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.971766][T10607] bond0 (unregistering): Released all slaves [ 814.328187][T14140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 814.729770][T14140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 815.123625][T14140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 815.152719][T14140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 815.426581][T10607] IPVS: stop unused estimator thread 0... [ 815.463372][T14325] Bluetooth: MGMT ver 1.22 [ 815.505961][T14325] Cannot find add_set index 0 as target [ 815.579418][T14140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.640894][T14140] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.682859][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.690087][T10596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.720525][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.727787][T10596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.047796][T14338] loop2: detected capacity change from 0 to 128 [ 816.112842][T14338] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 818.162219][ T27] audit: type=1326 audit(1795016416.971:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14348 comm="syz.5.2261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff496b9e159 code=0x0 [ 818.461004][T14140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.711032][T14140] veth0_vlan: entered promiscuous mode [ 818.755603][T14140] veth1_vlan: entered promiscuous mode [ 818.975963][ T27] audit: type=1326 audit(1795016418.229:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.2.2262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f8ab9e159 code=0x0 [ 820.113323][T14140] veth0_macvtap: entered promiscuous mode [ 820.152137][T14140] veth1_macvtap: entered promiscuous mode [ 820.222546][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.251120][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.262553][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.273354][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.283629][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.295235][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.306771][T14140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.317599][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.328296][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.345036][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.377347][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.409133][T14140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.420011][T14140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.431427][T14140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.460310][T14140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.488481][T14140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.505541][T14140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.527448][T14140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.745019][T10597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.774419][T10597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.857852][T10597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.879632][T10597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.188611][T10592] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 824.485520][ T27] audit: type=1326 audit(1795016423.165:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14403 comm="syz.4.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d88d9e159 code=0x0 [ 825.016781][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 825.222652][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 825.238250][ T5831] usb 2-1: can't read configurations, error -61 [ 825.386587][T14430] [ 825.389065][T14430] ====================================================== [ 825.396104][T14430] WARNING: possible circular locking dependency detected [ 825.403154][T14430] syzkaller #0 Not tainted [ 825.407584][T14430] ------------------------------------------------------ [ 825.414607][T14430] syz.2.2274/14430 is trying to acquire lock: [ 825.420683][T14430] ffff888020060160 (&sb->s_type->i_mutex_key#34){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 825.432210][T14430] [ 825.432210][T14430] but task is already holding lock: [ 825.439612][T14430] ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 825.448886][T14430] [ 825.448886][T14430] which lock already depends on the new lock. [ 825.448886][T14430] [ 825.459338][T14430] [ 825.459338][T14430] the existing dependency chain (in reverse order) is: [ 825.468361][T14430] [ 825.468361][T14430] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 825.476287][T14430] __mutex_lock+0x135/0xc80 [ 825.481327][T14430] tcm_alloc+0x21/0x2d0 [ 825.486011][T14430] usb_get_function+0x5d/0xb0 [ 825.491216][T14430] config_usb_cfg_link+0x148/0x250 [ 825.496860][T14430] configfs_symlink+0x5a5/0xfe0 [ 825.502247][T14430] vfs_symlink+0x138/0x2b0 [ 825.507196][T14430] do_symlinkat+0x1ba/0x400 [ 825.512228][T14430] __x64_sys_symlinkat+0x99/0xb0 [ 825.517696][T14430] do_syscall_64+0x55/0xb0 [ 825.522656][T14430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.529101][T14430] [ 825.529101][T14430] -> #1 (&gi->lock){+.+.}-{3:3}: [ 825.536246][T14430] __mutex_lock+0x135/0xc80 [ 825.541288][T14430] config_usb_cfg_link+0x59/0x250 [ 825.546854][T14430] configfs_symlink+0x5a5/0xfe0 [ 825.552247][T14430] vfs_symlink+0x138/0x2b0 [ 825.557203][T14430] do_symlinkat+0x1ba/0x400 [ 825.562384][T14430] __x64_sys_symlinkat+0x99/0xb0 [ 825.567902][T14430] do_syscall_64+0x55/0xb0 [ 825.572903][T14430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.579349][T14430] [ 825.579349][T14430] -> #0 (&sb->s_type->i_mutex_key#34){++++}-{3:3}: [ 825.588067][T14430] __lock_acquire+0x37ef/0x7d80 [ 825.593485][T14430] lock_acquire+0x19e/0x420 [ 825.598626][T14430] down_write+0x97/0x200 [ 825.603669][T14430] configfs_depend_item_unlocked+0x157/0x430 [ 825.610186][T14430] usbg_make_tpg+0x1e1/0x550 [ 825.615319][T14430] target_fabric_make_tpg+0xa4/0x6d0 [ 825.621447][T14430] configfs_mkdir+0x515/0x9e0 [ 825.626716][T14430] vfs_mkdir+0x2a5/0x470 [ 825.631511][T14430] do_mkdirat+0x1dc/0x450 [ 825.636426][T14430] __x64_sys_mkdirat+0x89/0xa0 [ 825.641751][T14430] do_syscall_64+0x55/0xb0 [ 825.647157][T14430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.653634][T14430] [ 825.653634][T14430] other info that might help us debug this: [ 825.653634][T14430] [ 825.663878][T14430] Chain exists of: [ 825.663878][T14430] &sb->s_type->i_mutex_key#34 --> &gi->lock --> tpg_instances_lock [ 825.663878][T14430] [ 825.677742][T14430] Possible unsafe locking scenario: [ 825.677742][T14430] [ 825.685205][T14430] CPU0 CPU1 [ 825.690581][T14430] ---- ---- [ 825.695954][T14430] lock(tpg_instances_lock); [ 825.700663][T14430] lock(&gi->lock); [ 825.707106][T14430] lock(tpg_instances_lock); [ 825.714359][T14430] lock(&sb->s_type->i_mutex_key#34); [ 825.719845][T14430] [ 825.719845][T14430] *** DEADLOCK *** [ 825.719845][T14430] [ 825.728006][T14430] 4 locks held by syz.2.2274/14430: [ 825.733216][T14430] #0: ffff888018302418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 825.742489][T14430] #1: ffff8880798bdfc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 825.753328][T14430] #2: ffffffff8db2bdb0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 825.763116][T14430] #3: ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 825.772829][T14430] [ 825.772829][T14430] stack backtrace: [ 825.778746][T14430] CPU: 1 PID: 14430 Comm: syz.2.2274 Not tainted syzkaller #0 [ 825.786205][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.796279][T14430] Call Trace: [ 825.799574][T14430] [ 825.802521][T14430] dump_stack_lvl+0x18c/0x250 [ 825.807236][T14430] ? load_image+0x420/0x420 [ 825.811771][T14430] ? show_regs_print_info+0x20/0x20 [ 825.817013][T14430] ? print_circular_bug+0x12b/0x1a0 [ 825.822251][T14430] check_noncircular+0x2fc/0x400 [ 825.827221][T14430] ? look_up_lock_class+0x75/0x140 [ 825.832367][T14430] ? print_deadlock_bug+0x5d0/0x5d0 [ 825.837628][T14430] ? lockdep_lock+0xf5/0x230 [ 825.842248][T14430] ? __lock_acquire+0x357f/0x7d80 [ 825.847305][T14430] ? _find_first_zero_bit+0xd6/0x100 [ 825.852607][T14430] __lock_acquire+0x37ef/0x7d80 [ 825.857477][T14430] ? is_bpf_text_address+0x28f/0x2a0 [ 825.862793][T14430] ? verify_lock_unused+0x140/0x140 [ 825.868033][T14430] lock_acquire+0x19e/0x420 [ 825.872577][T14430] ? configfs_depend_item_unlocked+0x157/0x430 [ 825.878759][T14430] ? trace_raw_output_contention_end+0xd0/0xd0 [ 825.884948][T14430] ? __might_sleep+0xe0/0xe0 [ 825.889571][T14430] ? rcu_is_watching+0x15/0xb0 [ 825.894400][T14430] ? read_lock_is_recursive+0x20/0x20 [ 825.899800][T14430] ? trace_contention_end+0x39/0xe0 [ 825.905113][T14430] ? __mutex_lock+0x30d/0xc80 [ 825.909828][T14430] ? do_syscall_64+0x55/0xb0 [ 825.914452][T14430] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.920562][T14430] down_write+0x97/0x200 [ 825.924833][T14430] ? configfs_depend_item_unlocked+0x157/0x430 [ 825.931020][T14430] ? down_read_killable+0x340/0x340 [ 825.936252][T14430] configfs_depend_item_unlocked+0x157/0x430 [ 825.942271][T14430] usbg_make_tpg+0x1e1/0x550 [ 825.946903][T14430] ? snprintf+0xe9/0x140 [ 825.951175][T14430] ? configfs_mkdir+0x4b9/0x9e0 [ 825.956057][T14430] ? usbg_drop_tport+0x20/0x20 [ 825.960873][T14430] ? vscnprintf+0x80/0x80 [ 825.965255][T14430] target_fabric_make_tpg+0xa4/0x6d0 [ 825.970575][T14430] ? target_fabric_release_wwn+0xb0/0xb0 [ 825.976244][T14430] configfs_mkdir+0x515/0x9e0 [ 825.980970][T14430] vfs_mkdir+0x2a5/0x470 [ 825.985239][T14430] do_mkdirat+0x1dc/0x450 [ 825.989598][T14430] ? vfs_mkdir+0x470/0x470 [ 825.994044][T14430] __x64_sys_mkdirat+0x89/0xa0 [ 825.998846][T14430] do_syscall_64+0x55/0xb0 [ 826.003288][T14430] ? clear_bhb_loop+0x40/0x90 [ 826.007989][T14430] ? clear_bhb_loop+0x40/0x90 [ 826.012168][ T5811] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 826.012681][T14430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.026031][T14430] RIP: 0033:0x7f5f8ab9e159 [ 826.030461][T14430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.050104][T14430] RSP: 002b:00007f5f8ba03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 826.058553][T14430] RAX: ffffffffffffffda RBX: 00007f5f8ae25fa0 RCX: 00007f5f8ab9e159 [ 826.066582][T14430] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 826.074582][T14430] RBP: 00007f5f8ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 826.082576][T14430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.090568][T14430] R13: 00007f5f8ae26038 R14: 00007f5f8ae25fa0 R15: 00007ffc6d79ced8 [ 826.098573][T14430] [ 826.177744][ T5831] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 826.226799][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 826.249979][ T5811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 826.276707][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 826.289852][ T5811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 826.299863][ T5811] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 826.308975][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.323644][ T5811] usb 5-1: config 0 descriptor?? [ 826.362471][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 826.370579][ T5831] usb 2-1: can't read configurations, error -61 [ 826.377670][ T5831] usb usb2-port1: attempt power cycle [ 826.534287][ T5811] hdpvr 5-1:0.0: firmware version 0x12 dated ¾@µ2Ì7ÔB½•ËDŠ^jvi0ì [ 826.534287][ T5811] †Ã›‘êpY [ 826.734710][ T5811] hdpvr 5-1:0.0: device init failed [ 826.742964][ T5811] hdpvr: probe of 5-1:0.0 failed with error -12 [ 826.751560][ T5811] usb 5-1: USB disconnect, device number 8 [ 826.799149][ T5831] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 826.831054][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 826.838724][ T5831] usb 2-1: can't read configurations, error -61 [ 826.988694][ T5831] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 827.031144][ T5831] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 827.038890][ T5831] usb 2-1: can't read configurations, error -61 [ 827.045319][ T5831] usb usb2-port1: unable to enumerate USB device