last executing test programs: 7m10.196075945s ago: executing program 32 (id=84): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x2, 0x2, 0x1800}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5, 0x1000}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 6m23.014760745s ago: executing program 33 (id=444): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 5m44.103345325s ago: executing program 34 (id=704): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0xa1d, @private0, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000002c80)=[@dstopts_2292={{0xe}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x21}}}], 0x30}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x4, @private2, 0x80000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000002c0)="ff2996c56e6e5e4f7eb1996f1184d5298e3afc49198dbdb328449f680ff14e2791b3065d1599", 0x26}, {&(0x7f0000000340)="b2fb70b03b10f3cfacd4ad3ddf011aa1d9fcd2ac25b6272ccb5c436a80b77b8a7288ff6487bf8af249bf86500b392b", 0x2f}, {&(0x7f00000013c0)="40e78852846618709cf95ad46ad27d1b35c1e180a9b2547246b5423f5df0ea748c6265", 0x23}, {&(0x7f0000001400)="ae0dfb9384edcd26e485d638538409fab3ae3610cf79c2e5fb9e7e08629b695fd59ab59f5d0e7067a5a589ca464597f7cc33b8cd624f2a4786400ec1b590d0fcfd669decaf8a36948f6ba70bd2cbaeba88bd683b456ecda46006019b5c1363066fcdc929f3d001c4efa774e187e20fc94616d88038f69283cddc2fd5942452391eaa16b86ff84c4f23d41d3e382a8ef04267aa3900ea2d3f1d12a44fa10ec008e17dbeec411163301a742f15a8d055646e39526c96cfd50fc258cd52f66dd92a57660d82345f003fe3d55a1ed42abb22fd8c949c0c05ae1b15b5b47b040725c667d3042691bac464f16f5819582736f6", 0xf0}, {&(0x7f0000001500)="54762e80c1fe3e5f7ebd10d45cf4467adaca9051d865aef2cfef6444ecf1", 0x1e}, {&(0x7f0000001540)="4ae221d7123acdc1786bd4f51e4bd7a185ef5b369c1bb4454ec2871a0a03baff316eed12b245baa7e8fe87853afb2cf500a978fb5bb1f0eabc025f77d2083d96adc36c388922a1b24581909cd9946ed05569cb519a38212ed31c40803b829922ba1d1eb1a5081e8d861f6529b358bfa67e8f1bf91dbcd2356cb8fe270343550a868c7d02f71eefc047f64c3234939006072524fd84a3059677e738005604cb40fbfa340866cd2282af53b6b09c50a14d99f2dace0b262ed485a687225dee2cdee4769e75bcf80abdb2fa29e4b8c3fb03fa5c845fb484c638502d9560c2", 0xdd}, {&(0x7f0000001640)="e444e309045a7f4a6780b8e9fcc944b8998a5d33bd6eef9a8fb0df8131a2835adbe5312ad5385b188517910f49354d9494c56d9360129e5480025d1db5a59ce2dab1ca615adc023c97d2299f8ba7fc15d39b406a2ee7069c2792b0dbf880b16f345d9a636fe71355c652f30d85ce9cc2837bea50be5f5bf4374f7c434b10a43d4a184fc7ef184083c93c7b161af021f6312b", 0x92}, {&(0x7f0000001700)="2fd264d21d17315d6b2521f5a9d7a23a2b7e88c53cb5fb8da02f0494bc210d6d9f2ac28cf6b0d5ef9ccfd674d4c98404863e62a9daeda8ce1f2dbe11fcbf23b0daaea965bf1cfcc774d1da442c75a8ab3bfbc2f8d8df", 0x56}], 0x8, &(0x7f0000001800)=[@tclass={{0x14, 0x29, 0x43, 0xffff}}, @rthdr={{0x38, 0x29, 0x39, {0x67, 0x4, 0x2, 0x6, 0x0, [@mcast2, @rand_addr=' \x01\x00']}}}, @tclass={{0x14, 0x29, 0x43, 0x13}}, @rthdr={{0x58, 0x29, 0x39, {0xff, 0x8, 0x2, 0x3, 0x0, [@mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x62, 0x12, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @empty, @private0, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts={{0x48, 0x29, 0x36, {0x3a, 0x5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8f47}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x4}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, '\x00', [@pad1, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x2, 0x0, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @remote}]}}}], 0x208}}], 0x3, 0x0) 4m47.584087953s ago: executing program 35 (id=980): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) setxattr$incfs_metadata(&(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000180)="bb3cfb61cc3d05c2e8e3cc81758e28aae95fb75a24fd691e8dc73bc7a9ca431b81276bc4c187b1232cf3286e5854db58bb2496aba872c5f039", 0x39, 0x1) setxattr$incfs_metadata(&(0x7f0000000240)='./bus\x00', &(0x7f0000000080), &(0x7f0000000040)="bb3cfb61cc3d05c2e8e3cc81758e28aae95fb75a24fd691e8dc73bc7a9ca431b81276bc4c187b1232cf3286e5854db58bb2496aba872c5f039", 0x39, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000002380), 0x0, 0x40488c1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x80803, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) 3m39.371961361s ago: executing program 36 (id=1361): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000610000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0xda65a0362935c855, r0, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000aaaaaaaaaaaaaaaa0806030588f506000001aaaaaaaaaaaaaaaaaa"], &(0x7f0000000140)={0x1, 0x3, [0xa79, 0x868, 0x3d9, 0xe28]}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x4}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0xf5c, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x8001, @remote, 0x74}], 0xa0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000280)={0x4, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) r5 = socket(0x11, 0x80803, 0x0) setsockopt(r5, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) semop(0x0, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) io_uring_setup(0x3204, &(0x7f000000c480)={0x0, 0xe8dd, 0x800, 0x20001, 0x1c3}) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x4000000) 3m31.32167132s ago: executing program 37 (id=1398): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) chown(&(0x7f0000002140)='./file0\x00', 0x0, 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r2, 0x4068aea3, &(0x7f00000000c0)) write$tcp_congestion(r2, 0x0, 0x0) dup2(r2, r0) 2m53.904361s ago: executing program 38 (id=1574): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x9) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)=',/\x00', 0x0, 0xffffffffffffffff) 2m25.594637377s ago: executing program 39 (id=1768): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64], 0x4, 0x129c, &(0x7f0000002d80)="$eJzs3U9rI2UcB/Bf2nTbdN2m6rq6C+KDXhQhbvfgyUuRXRALSrUL6ilrUw1N/9AJhSzixpMnwZch6tGbIL6BXrx4FgSRXjzuQRxpJ9Q2adOubXdRPp9LHp6Z7zPPk8wMPGEeZvu1L1eWl7LaUr0dI6VSlNfHonw/RYqRGI1CN166/fMvz77z3vtvzs7N3ZxP6dbsuzOvppSmnvvhg0++ff7H9sXb3019Px5b0yPbf9z4devK1tXtv76JZpaaWVpda6d6urO21q7faTXSYjNbrqX0dqtRzxqpuZo1Ng5sX2qtra93Un118dLk+kYjy1J9tZOWG53ULqX2RifVP6o3V1OtVkuXJoPTWPj6fp7nEXk+Fhciz/O8EpNxMR6LSzEV1ZiOx+OJeDIux1NxJZ6OZ+Jq5I+60wAAAAAAAAAAAAAAAAAAAPC/c8z6/9Ih6/93EwAAAAAAAAAAAAAAAAAAAMDZ6V//X4447v3/1v8DAAAAAAAAAAAAAAAAAADAGavG0Pf/963/f9n6fwAAAAAAAAAAAAAAAAAAADgPE8XHfEoTESufby5sLhSfRf3sUjSjFY24HtX4M3ZX/xeK8q035m5eT7um45WVe738vc2F0YP5mbFqTJcOzc9UIiKldDA/HpP78zeiGpcPP/6N4vh9+Yl48YWd/GdFvhbV+OnDWItWLEaUeqPfzX86k9Lrb81VDuav7ex3pNFz/lkAAADgLNXSnsH5e7c3T97bPh7/bC/yvfl56jVXGvL/QN/8vBzXyo9u3BSyzt3leqvV2PiXhQtHt3PhdC0PFHbOxXrsr5ma/G1+5+Ab2ehJhlPudfaM+rOvMHrWDQ4tjA3f5xS/aZR3vsyh+5SLQuVk589YHNtgX+e7/TV5NeJBh/P7V/tqJh44frrCSO+rqbe6Jz7Zopvn59qxgYux0rm7PD4sdfQ9o3ReNyMeuv2XCQAAAAAAAAAAAP8d2cQhT/9VImLgecCPB2q6vTYOxvdaHqgZ9MVDGCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dc7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+84bx3") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0xc) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) 1m49.110586507s ago: executing program 40 (id=1896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000fc0)={"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"}) 1m48.794778462s ago: executing program 2 (id=1978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="306663353a313232373a3f7092c0f0bccc488e937ed29879b4b95a1998cbbb31a7ce557cfcf761ad80bd22f87e048939666a69", 0x33) 1m48.476070587s ago: executing program 2 (id=1980): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f00323723e7eecdf40236b423ebf9259266ec9c37865c6c1a4614ef4f001d34c09f6e9e4f8d3e68b257ff3e24852548deb00efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8f4e97da2213f9d500000400080000000000e279f0155828390666682700000000633b257d250b5a293ec1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c8092628321d97afc3612e325c1eb4a3ab2e156a974548000000000500", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m48.207748019s ago: executing program 2 (id=1982): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x42}, {0x804, 0x2, 0x1, 0x45, 0x3, 0x0, 0x4, 0xff, 0xfc, 0x4, 0x6, 0x6f, 0x20c}, {0xffffffff, 0x3, 0x38, 0x3, 0x84, 0x3, 0x3, 0x50, 0xc, 0x2, 0x6f, 0x8, 0x9}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m47.54075931s ago: executing program 2 (id=1984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 1m47.324440781s ago: executing program 41 (id=1911): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/43, 0x0, 0x25000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1m47.048811494s ago: executing program 2 (id=1987): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a82e0081003c00080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec771f225c41a3ee584ee920e4202845dd1a42cc4c2ae10a666a3c2993763b9d94e750e568259a3b3d47b39c34faad38df748ce48338ec260538301d09088d1893855fc5a5db304fafb033779b028b0d6b7ee1a3091be9c5"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x39163000) 1m46.48528332s ago: executing program 2 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="306663353a313232373a3f7092c0f0bccc488e937ed29879b4b95a1998cbbb31a7ce557cfcf761ad80bd22f87e048939666a69", 0x33) 1m34.96062297s ago: executing program 42 (id=1972): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 1m31.216453935s ago: executing program 43 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="306663353a313232373a3f7092c0f0bccc488e937ed29879b4b95a1998cbbb31a7ce557cfcf761ad80bd22f87e048939666a69", 0x33) 1m29.739908775s ago: executing program 6 (id=2040): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x40444c4) readv(r0, &(0x7f0000001a40)=[{0x0}], 0x1) 1m29.588746802s ago: executing program 6 (id=2041): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x42}, {0x804, 0x2, 0x1, 0x45, 0x3, 0x0, 0x4, 0xff, 0xfc, 0x4, 0x6, 0x6f, 0x20c}, {0xffffffff, 0x3, 0x38, 0x3, 0x84, 0x3, 0x3, 0x50, 0xc, 0x2, 0x6f, 0x8, 0x9}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m29.391614531s ago: executing program 6 (id=2042): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$alg(0x26, 0x5, 0x0) 1m29.293332206s ago: executing program 6 (id=2043): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00'}) socket(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x64) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) close(r0) 1m28.544030821s ago: executing program 6 (id=2044): syz_open_procfs$namespace(0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a82e0081003c00080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec771f225c41a3ee584ee920e4202845dd1a42cc4c2ae10a666a3c2993763b9d94e750e568259a3b3d47b39c34faad38df748ce48338ec260538301d09088d1893855fc5a5db304fafb033779b028b0d6b7ee1a3091be9c5"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x39163000) 1m28.220211706s ago: executing program 6 (id=2045): mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xb, 0x6, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m22.643043787s ago: executing program 3 (id=2052): gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x88c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000a80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000000)="f5", 0x1, 0x10000008080c61) io_setup(0x91, &(0x7f0000000400)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 1m21.372442957s ago: executing program 3 (id=2053): mount$9p_fd(0x0, 0x0, 0x0, 0xc, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x40032, 0xffffffffffffffff, 0x40000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) madvise(&(0x7f00001c2000/0x2000)=nil, 0x2000, 0x64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) 1m20.801708494s ago: executing program 3 (id=2054): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x225, &(0x7f0000000480)="$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") fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000140)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8461c39b9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m20.107034106s ago: executing program 3 (id=2055): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x81, &(0x7f0000000900)=ANY=[], 0x81, 0x1d5, &(0x7f00000001c0)="$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") r0 = socket(0x11, 0x800000003, 0x0) setns(0xc9, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 1m19.669935557s ago: executing program 3 (id=2056): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x39163000) 1m19.38957962s ago: executing program 3 (id=2057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000040)={0x1, 0x8, 0x9, 0x6, 0x4, 0x10}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m15.791680478s ago: executing program 8 (id=2068): unshare(0x8000000) r0 = semget(0x1, 0x4, 0x3c4) semtimedop(r0, &(0x7f0000000140)=[{0x2, 0xa}], 0x1, 0x0) unshare(0x48020400) 1m12.156018239s ago: executing program 44 (id=2045): mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xb, 0x6, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m8.844420904s ago: executing program 8 (id=2070): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x8001, 0x3a, '', 0x3a, 'bond\x00', 0x3a, './file0'}, 0x2c) 1m8.600092655s ago: executing program 8 (id=2071): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x2, 0x12) write$cgroup_int(r0, &(0x7f0000000140)=0xd3c, 0x12) 1m8.408279164s ago: executing program 8 (id=2072): bpf$MAP_CREATE(0x0, 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000240)={0x43, 0x9, 0x1, {0x9, 0x12d5, 0x8, 0x5, 0x8, 0x2, 0x0, 0x39, 0xc}}, 0x43) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') 1m8.096607429s ago: executing program 8 (id=2073): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x39163000) 1m7.744040115s ago: executing program 8 (id=2074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1d, 0xb}, {0x3, 0x5}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m4.094732326s ago: executing program 45 (id=2057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000040)={0x1, 0x8, 0x9, 0x6, 0x4, 0x10}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m4.086584547s ago: executing program 4 (id=2020): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x0, 0x8, 0x37}) 1m3.702383605s ago: executing program 4 (id=2076): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') writev(r1, &(0x7f0000000380)=[{0x0}], 0x1) 1m3.39193842s ago: executing program 4 (id=2077): userfaultfd(0x80001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x122, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m2.658475264s ago: executing program 4 (id=2079): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x2, 0x12) write$cgroup_int(r0, &(0x7f0000000140)=0xd3c, 0x12) 1m2.372955777s ago: executing program 4 (id=2081): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x39163000) 1m1.972103506s ago: executing program 4 (id=2083): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000001, 0x0, 0x6, 0x800, 0xef, 0x8100001, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0xc8}, 0x0, 0x0) 52.638628393s ago: executing program 46 (id=2074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1d, 0xb}, {0x3, 0x5}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.73756057s ago: executing program 47 (id=2083): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000001, 0x0, 0x6, 0x800, 0xef, 0x8100001, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0xc8}, 0x0, 0x0) 20.91775478s ago: executing program 9 (id=2218): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x1) 20.596594155s ago: executing program 9 (id=2222): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/19, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 20.008799243s ago: executing program 9 (id=2229): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x2f, 0x0, @empty, @local}}}}) 19.769897114s ago: executing program 9 (id=2232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x9, 0x2, 0x7}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xe2, 0x2, 0x17, 0xe, 0x2, 0x2000009, {0x3, 0x8003, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0x7f, 0x3, 0x2, 0x100, 0x4, 0x3}}, {0xa, 0x2, [0x1, 0x7fff, 0x3]}}, {{0xfe2a, 0x1, {0x2, 0x3, 0x0, 0xfffffff8, 0x0, 0x1, 0x100, 0x6}}, {0x10, 0x2, [0x1, 0x4, 0x9, 0x6, 0xa, 0xc7]}}, {{0x1c, 0x1, {0x27, 0x0, 0x2009, 0x6, 0x1, 0x3, 0x3, 0x4}}, {0xc, 0x2, [0x80, 0x9, 0x9, 0x400]}}, {{0x1c, 0x1, {0x2, 0xe, 0x200, 0x1, 0x0, 0x3, 0x80, 0x5}}, {0xe, 0x2, [0x0, 0xf, 0x3, 0x3, 0x7]}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) 19.511463776s ago: executing program 9 (id=2236): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x39163000) 19.196244961s ago: executing program 9 (id=2239): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e", 0x5) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x9}) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000080)={0x8, 0x1, 0x40, 0x8001, 0x4}) r7 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000140)={0x90000010}) flock(r1, 0x2) 16.449045419s ago: executing program 5 (id=2265): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x225, &(0x7f0000000480)="$eJzslc2KE0EQx//dk8xMlkU8e/HgguvBzkxWjwv7Dn7hQTC4E4k7i5LkYAISfALv3jz4GIJH8SFk9bKC6EUFQaGlv2Z68uUGRz1Yv0PnP9XV1dXVkxoQBPHf8u7t1yP5Zfc4BtDCFiJrfx8UEtzzfxN/etQA8OTW89fRUTQTbeb5h5Ry5e4mcoAAI7CFHlv29yp4oa+B44LVN8AgrL4NjutWZ2C4afW9UjfVIMT3zX6eiTv38/1eP8+SXr+JVKmOGnaKzaeAOuvHxwz71iSllH6mw/HkoJvn2cCJVy6BwjJgmPFRQk5LS4DK1EGcn/adVbj56rz8oEadXwzsevn59yXsysSrXwqO1OodMFzR6ljfnxDCliTPUpTnP9Mo4werzj8IF512lXBH0xbEWpc+vYpzq1rZ4XgSmsXf5HqbGqEWz05tzFmqwqXLFpx9OJ4w38LXzKceoTI0ZcSvnO2bF/hXUHc+rmCFZfMvVgON2gLKCKg9w1Mncw4Xv2xOvNirXrecmuf18tlbMhWeJE40V3m4/iSfMZz3+pNpJU/1x6I9OnzQHo4nF/uH3bv2v4zkUpJc7rR1IzLjXPdzNNDS/WmjjN9a5huyEA+7o9EgNWPx3DFjteMauO5/HNvnzLdDvcw6zaaZV5t9tr9untl1TKvtYGnyWJoqQRDEH+csmO7Jui87Yb8mxYSUzX+cJkEQBEEQBEEQBEEQv8HPAAAA//9p1D4U") fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000140)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8461c39b9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.754442692s ago: executing program 7 (id=2269): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 15.562536571s ago: executing program 5 (id=2271): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580315bdc4, 0x12, r0, 0x4000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002ec0)={0x2020}, 0x2020) 15.562057091s ago: executing program 7 (id=2272): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000100)="4d2e2e66972ce298f4681e", 0xb, 0x400000000000003) 15.311387013s ago: executing program 5 (id=2273): r0 = fsopen(&(0x7f0000000440)='proc\x00', 0x1) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x0, &(0x7f0000040fe0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) close(0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 15.243971686s ago: executing program 7 (id=2275): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e", 0x5) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000180)={0x9}) 14.872925393s ago: executing program 7 (id=2278): openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.457138723s ago: executing program 7 (id=2281): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a82e0081003c00080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec771f225c41a3ee584ee920e4202845dd1a42cc4c2ae10a666a3c2993763b9d94e750e568259a3b3d47b39c"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000400)={0x80400, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r0}}, 0x58) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 14.229065893s ago: executing program 5 (id=2282): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x225, &(0x7f0000000480)="$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") fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000140)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8461c39b9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.687299809s ago: executing program 7 (id=2285): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018010000202069250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.323201956s ago: executing program 5 (id=2286): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000400)={0x80400, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x39163000) 12.951826423s ago: executing program 5 (id=2287): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x1) 3.969509024s ago: executing program 48 (id=2239): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e", 0x5) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x9}) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000080)={0x8, 0x1, 0x40, 0x8001, 0x4}) r7 = epoll_create(0x10003) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000140)={0x90000010}) flock(r1, 0x2) 3.503738206s ago: executing program 0 (id=2327): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000401000/0x400000)=nil) 3.134415043s ago: executing program 0 (id=2329): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5350d675) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) 3.027925539s ago: executing program 1 (id=2330): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r0, 0x0, 0x100000004, 0x0) 2.730265612s ago: executing program 0 (id=2331): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002ec0)={0x2020}, 0x2020) 1.91999163s ago: executing program 1 (id=2332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x2, 0x12) write$cgroup_int(r0, 0x0, 0x0) 1.72415082s ago: executing program 1 (id=2333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x2, 0x1, 0xe, 0x80}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.624596544s ago: executing program 0 (id=2334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.224007833s ago: executing program 0 (id=2335): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone3(&(0x7f0000000400)={0x80400, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x1a}, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, {r0}}, 0x58) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 1.139617657s ago: executing program 1 (id=2336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="9a0fd2520038cf5be8e1419c4669e075e4c76d6ef1a69b1f4d8a85ebe7ed91e745b24c924f82fea816506abb47717933f2f1283a27a97ef4ebca819033bc531a2f74fd5915b71ecde7e61d958ab8ce3ff0d9415069f265554bbcb4b578689273c1", 0x61}], 0x1}}], 0x1, 0x4040000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x5000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0xff, 0xff, 0x1, '\x00', 0x0, 0x800000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 909.465047ms ago: executing program 0 (id=2337): fcntl$getflags(0xffffffffffffffff, 0x40a) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) read(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x10000011) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000800450000280000400040113cc37f0000017f00000112"], 0x36) 665.611599ms ago: executing program 1 (id=2338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x182, 0x2, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x29, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x400000000000803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xf, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xfec00000, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x3, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xf, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x91}, {0xffff1000, 0x30}, {0x100000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0xdc01, 0x100000, [0x6800000000000000, 0x3, 0x4, 0x8]}) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=2339): r0 = dup(0xffffffffffffffff) r1 = socket(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r4 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r4, 0x0) write$binfmt_elf32(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02fda16d3040d75ff1ade9eb0"}, 0x69) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x8001021, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f00000b3000/0x4000)=nil, 0x4000) read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): TDEV_CHANGE): macvtap0: link becomes ready [ 396.136121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.186019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.225877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.237273][T10691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.283628][T10691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.337870][T10691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.381143][T10691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.432152][T10691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.466076][T10691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.500083][T10691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.535416][T10691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.595063][T10691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.620958][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.640323][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.688872][T10691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.724537][T10691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.748913][T10691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.765521][T11017] loop9: detected capacity change from 0 to 128 [ 396.773895][T10691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.879693][T11017] syz.9.1862: attempt to access beyond end of device [ 396.879693][T11017] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 397.012641][T11017] syz.9.1862: attempt to access beyond end of device [ 397.012641][T11017] loop9: rw=34817, sector=113, nr_sectors = 16 limit=128 [ 397.027091][ T8808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.035014][ T8808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.091835][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.128257][T11017] syz.9.1862: attempt to access beyond end of device [ 397.128257][T11017] loop9: rw=34817, sector=145, nr_sectors = 16 limit=128 [ 397.194894][ T4723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.210940][ T4723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.228807][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.643161][T11032] loop2: detected capacity change from 0 to 128 [ 397.977387][T11047] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 398.011733][T11047] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 399.435017][T11087] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 401.024600][T11125] loop2: detected capacity change from 0 to 7 [ 401.046702][ T8055] Dev loop2: unable to read RDB block 7 [ 401.052348][ T8055] loop2: AHDI p2 p3 [ 401.077160][ T8055] loop2: partition table partially beyond EOD, truncated [ 401.100194][ T8055] loop2: p2 start 1702059890 is beyond EOD, truncated [ 401.125605][T11125] Dev loop2: unable to read RDB block 7 [ 401.131655][T11125] loop2: AHDI p2 p3 [ 401.142422][T11125] loop2: partition table partially beyond EOD, truncated [ 401.161709][T11125] loop2: p2 start 1702059890 is beyond EOD, truncated [ 403.556294][T11186] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 404.336740][T11205] loop2: detected capacity change from 0 to 7 [ 404.364392][ T8054] Dev loop2: unable to read RDB block 7 [ 404.371520][ T8054] loop2: AHDI p2 p3 [ 404.391361][ T8054] loop2: partition table partially beyond EOD, truncated [ 404.420580][ T8054] loop2: p2 start 1702059890 is beyond EOD, truncated [ 404.455821][T11205] Dev loop2: unable to read RDB block 7 [ 404.464095][T11205] loop2: AHDI p2 p3 [ 404.504791][T11205] loop2: partition table partially beyond EOD, truncated [ 404.525018][T11205] loop2: p2 start 1702059890 is beyond EOD, truncated [ 405.113994][T11218] program syz.6.1921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.434173][T11227] device bridge0 entered promiscuous mode [ 405.454542][T11227] device macvlan2 entered promiscuous mode [ 408.002456][T11280] loop2: detected capacity change from 0 to 7 [ 408.032938][T11280] Dev loop2: unable to read RDB block 7 [ 408.057283][T11280] loop2: AHDI p2 p3 [ 408.078495][T11280] loop2: partition table partially beyond EOD, truncated [ 408.105902][T11280] loop2: p2 start 1702059890 is beyond EOD, truncated [ 411.208937][T11318] FAULT_INJECTION: forcing a failure. [ 411.208937][T11318] name failslab, interval 1, probability 0, space 0, times 0 [ 411.225403][T11318] CPU: 1 PID: 11318 Comm: syz.6.1951 Not tainted syzkaller #0 [ 411.232935][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.243466][T11318] Call Trace: [ 411.246793][T11318] [ 411.249752][T11318] dump_stack_lvl+0x188/0x24e [ 411.254480][T11318] ? show_regs_print_info+0x12/0x12 [ 411.259748][T11318] ? load_image+0x410/0x410 [ 411.264311][T11318] ? __might_sleep+0xd0/0xd0 [ 411.268938][T11318] ? __lock_acquire+0x7c40/0x7c40 [ 411.274016][T11318] should_fail_ex+0x390/0x4c0 [ 411.278741][T11318] should_failslab+0x5/0x20 [ 411.283288][T11318] slab_pre_alloc_hook+0x59/0x300 [ 411.288357][T11318] kmem_cache_alloc_lru+0x49/0x2e0 [ 411.293508][T11318] ? __d_alloc+0x2e/0x6e0 [ 411.297885][T11318] __d_alloc+0x2e/0x6e0 [ 411.302780][T11318] ? d_alloc_pseudo+0xe/0x70 [ 411.307416][T11318] d_alloc_pseudo+0x19/0x70 [ 411.311938][T11318] alloc_file_pseudo+0xe0/0x200 [ 411.316834][T11318] ? alloc_empty_file_noaccount+0x80/0x80 [ 411.322595][T11318] ? alloc_fd+0x590/0x640 [ 411.326957][T11318] sock_alloc_file+0xb3/0x240 [ 411.331661][T11318] __sys_socket+0x12d/0x190 [ 411.336188][T11318] __x64_sys_socket+0x76/0x80 [ 411.340908][T11318] do_syscall_64+0x4c/0xa0 [ 411.345359][T11318] ? clear_bhb_loop+0x60/0xb0 [ 411.350045][T11318] ? clear_bhb_loop+0x60/0xb0 [ 411.354736][T11318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.360651][T11318] RIP: 0033:0x7fd0e1f9e159 [ 411.365076][T11318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.384718][T11318] RSP: 002b:00007fd0e2dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 411.393153][T11318] RAX: ffffffffffffffda RBX: 00007fd0e2225fa0 RCX: 00007fd0e1f9e159 [ 411.401135][T11318] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 411.409118][T11318] RBP: 00007fd0e203506b R08: 0000000000000000 R09: 0000000000000000 [ 411.417095][T11318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.425071][T11318] R13: 00007fd0e2226038 R14: 00007fd0e2225fa0 R15: 00007ffd9fe63fa8 [ 411.433107][T11318] [ 411.782122][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 411.782138][ T26] audit: type=1326 audit(1790130907.986:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a76d9e159 code=0x7ffc0000 [ 411.894294][ T26] audit: type=1326 audit(1790130908.026:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a76d9e159 code=0x7ffc0000 [ 412.021152][ T26] audit: type=1326 audit(1790130908.136:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a76d9e159 code=0x7ffc0000 [ 412.130961][ T26] audit: type=1326 audit(1790130908.136:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f4a76d9e159 code=0x7ffc0000 [ 412.233537][ T26] audit: type=1326 audit(1790130908.136:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a76d9e159 code=0x7ffc0000 [ 412.356723][ T26] audit: type=1326 audit(1790130908.136:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a76d9e159 code=0x7ffc0000 [ 412.445014][ T26] audit: type=1326 audit(1790130908.146:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a76d9e159 code=0x7ffc0000 [ 412.583939][ T26] audit: type=1326 audit(1790130908.146:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a76d5e98e code=0x7ffc0000 [ 412.674118][ T26] audit: type=1326 audit(1790130908.156:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a76d5e98e code=0x7ffc0000 [ 412.833285][ T26] audit: type=1326 audit(1790130908.166:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.2.1952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a76d5e98e code=0x7ffc0000 [ 417.131756][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 417.131783][ T26] audit: type=1800 audit(1790130913.336:410): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1979" name="(" dev="sda1" ino=2065 res=0 errno=0 [ 417.629883][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.655204][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.671992][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.686076][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.696448][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.705689][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 417.714234][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.932638][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.137142][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.350016][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.928239][T11436] chnl_net:caif_netlink_parms(): no params data found [ 419.536492][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.554827][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.567327][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.575447][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.583200][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 419.594589][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.661469][ T26] audit: type=1326 audit(1790130915.866:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 419.756079][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 419.802086][ T26] audit: type=1326 audit(1790130915.866:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 419.827281][ T26] audit: type=1326 audit(1790130915.866:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 419.865024][ T26] audit: type=1326 audit(1790130915.866:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 419.925892][T11436] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.931231][ T26] audit: type=1326 audit(1790130915.866:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 419.933016][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.017748][ T26] audit: type=1326 audit(1790130915.866:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 420.076601][T11436] device bridge_slave_0 entered promiscuous mode [ 420.125340][ T26] audit: type=1326 audit(1790130915.866:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 420.165227][T11485] loop2: detected capacity change from 0 to 7 [ 420.205663][T11436] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.206932][ T8055] Dev loop2: unable to read RDB block 7 [ 420.212795][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.230108][ T8055] loop2: unable to read partition table [ 420.235767][ T26] audit: type=1326 audit(1790130915.866:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 420.235807][ T26] audit: type=1326 audit(1790130915.866:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.6.1991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1f9e159 code=0x7ffc0000 [ 420.250502][T11436] device bridge_slave_1 entered promiscuous mode [ 420.329973][ T8055] loop2: partition table beyond EOD, truncated [ 420.354853][T11485] Dev loop2: unable to read RDB block 7 [ 420.363454][T11485] loop2: unable to read partition table [ 420.376551][T11485] loop2: partition table beyond EOD, truncated [ 420.412916][T11485] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 420.454045][ T3639] Dev loop2: unable to read RDB block 7 [ 420.479785][ T3639] loop2: unable to read partition table [ 420.506975][ T3639] loop2: partition table beyond EOD, truncated [ 420.782977][T11436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.881109][T11436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.127876][T11436] team0: Port device team_slave_0 added [ 421.311519][T11436] team0: Port device team_slave_1 added [ 421.432579][T11436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.466523][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.516451][T11436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.675832][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 421.836522][T11436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.843433][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 421.855660][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.924067][T11436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.980216][T11473] chnl_net:caif_netlink_parms(): no params data found [ 422.279459][T11436] device hsr_slave_0 entered promiscuous mode [ 422.306309][T11436] device hsr_slave_1 entered promiscuous mode [ 422.345991][T11436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.353626][T11436] Cannot create hsr debugfs directory [ 422.446251][ T9] device hsr_slave_0 left promiscuous mode [ 422.514086][ T9] device hsr_slave_1 left promiscuous mode [ 422.521509][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.546154][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.576833][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.584322][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.636265][ T9] device bridge_slave_1 left promiscuous mode [ 422.642571][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.756771][ T9] device bridge_slave_0 left promiscuous mode [ 422.769770][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.916254][ T9] device veth1_macvtap left promiscuous mode [ 422.922368][ T9] device veth0_macvtap left promiscuous mode [ 422.951163][ T9] device veth1_vlan left promiscuous mode [ 422.965649][ T9] device veth0_vlan left promiscuous mode [ 423.760327][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 423.916238][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 425.499835][ T9] team0 (unregistering): Port device team_slave_1 removed [ 425.542084][T11568] overlayfs: unrecognized mount option "verity=on" or missing value [ 425.678625][ T9] team0 (unregistering): Port device team_slave_0 removed [ 425.810161][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.835834][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 425.965105][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.996128][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 426.915109][ T9] bond0 (unregistering): Released all slaves [ 427.411529][T11473] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.419260][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.466412][T11473] device bridge_slave_0 entered promiscuous mode [ 427.531596][T11473] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.545419][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.555618][T11473] device bridge_slave_1 entered promiscuous mode [ 427.915726][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 428.269920][T11473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.298365][T11473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.385976][T11591] loop2: detected capacity change from 0 to 7 [ 428.406845][ T8055] Dev loop2: unable to read RDB block 7 [ 428.412497][ T8055] loop2: unable to read partition table [ 428.435464][ T8055] loop2: partition table beyond EOD, truncated [ 428.463091][T11591] Dev loop2: unable to read RDB block 7 [ 428.470046][T11591] loop2: unable to read partition table [ 428.487415][T11591] loop2: partition table beyond EOD, truncated [ 428.510405][T11591] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.750319][T11473] team0: Port device team_slave_0 added [ 428.996785][T11473] team0: Port device team_slave_1 added [ 429.099996][T11473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.142403][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.245435][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.301285][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.315533][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.385344][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.578671][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.797998][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.899101][T11473] device hsr_slave_0 entered promiscuous mode [ 429.919422][T11473] device hsr_slave_1 entered promiscuous mode [ 429.946252][T11473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.953873][T11473] Cannot create hsr debugfs directory [ 430.044897][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.104818][T11436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.146291][T11436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.185556][T11436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.219144][T11436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.347904][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.703828][T11436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.792882][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 430.826502][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.861085][T11436] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.252856][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.295005][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.356512][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.363668][ T8810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.729842][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.740797][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.755985][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.764077][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.776435][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.784552][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.794803][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.801969][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.810299][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.818634][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.827454][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 431.834797][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.177113][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 432.492985][T11654] loop2: detected capacity change from 0 to 7 [ 432.500875][T11654] Dev loop2: unable to read RDB block 7 [ 432.508078][T11654] loop2: unable to read partition table [ 432.514009][T11654] loop2: partition table beyond EOD, truncated [ 432.542919][T11654] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 432.591574][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 432.606361][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.635762][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 432.666634][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.704294][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 432.736068][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.803513][T11436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.841000][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.872073][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 432.881960][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.896409][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.452484][T11473] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 433.552681][T11473] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 433.654368][T11679] loop6: detected capacity change from 0 to 128 [ 433.684849][T11473] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 433.741640][T11473] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 433.799591][T11638] chnl_net:caif_netlink_parms(): no params data found [ 433.856054][T11679] syz.6.2031: attempt to access beyond end of device [ 433.856054][T11679] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 433.917694][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 434.014089][T11682] syz.6.2031: attempt to access beyond end of device [ 434.014089][T11682] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 434.428813][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.438009][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.493726][T11436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.579724][ T9] device hsr_slave_0 left promiscuous mode [ 434.596379][ T9] device hsr_slave_1 left promiscuous mode [ 434.615591][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.623067][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.696261][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.703756][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.756116][ T9] device bridge_slave_1 left promiscuous mode [ 434.762410][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.802678][ T9] device bridge_slave_0 left promiscuous mode [ 434.825458][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.906608][ T9] device veth1_macvtap left promiscuous mode [ 434.912957][ T9] device veth0_macvtap left promiscuous mode [ 434.928965][ T9] device veth1_vlan left promiscuous mode [ 434.934861][ T9] device veth0_vlan left promiscuous mode [ 434.993629][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 435.004848][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 435.013601][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 435.024047][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.032186][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 435.042216][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.248369][T11696] loop2: detected capacity change from 0 to 7 [ 435.260118][ T8055] Dev loop2: unable to read RDB block 7 [ 435.266315][ T8055] loop2: unable to read partition table [ 435.272373][ T8055] loop2: partition table beyond EOD, truncated [ 435.280115][T11696] Dev loop2: unable to read RDB block 7 [ 435.286547][T11696] loop2: unable to read partition table [ 435.292391][T11696] loop2: partition table beyond EOD, truncated [ 435.299412][T11696] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 435.333641][ T3639] Dev loop2: unable to read RDB block 7 [ 435.339469][ T3639] loop2: unable to read partition table [ 435.345779][ T3639] loop2: partition table beyond EOD, truncated [ 435.999604][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 436.023884][ T9] team0 (unregistering): Port device team_slave_1 removed [ 436.085717][ T9] team0 (unregistering): Port device team_slave_0 removed [ 436.137313][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.204232][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.605095][ T9] bond0 (unregistering): Released all slaves [ 436.756189][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.779951][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.870330][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.877944][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.887987][T11638] device bridge_slave_0 entered promiscuous mode [ 436.897785][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.905135][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.914307][T11638] device bridge_slave_1 entered promiscuous mode [ 437.041431][T11638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.066141][T11638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.089990][T11473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.123668][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 437.178632][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.208840][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.222372][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.230625][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.279480][T11638] team0: Port device team_slave_0 added [ 437.297884][T11436] device veth0_vlan entered promiscuous mode [ 437.324514][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.350471][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.384012][T11638] team0: Port device team_slave_1 added [ 437.410017][T11473] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.441901][T11436] device veth1_vlan entered promiscuous mode [ 437.504531][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.536186][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.563423][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.573688][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.580902][ T8808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.683431][T11638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.724764][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.760513][T11638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.774693][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.788912][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.822248][T11436] device veth0_macvtap entered promiscuous mode [ 437.851032][T11638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.860055][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.896297][T11638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.933676][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.952911][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.962744][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.972392][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.981201][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.988371][ T8808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.997514][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.007090][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.026592][T11436] device veth1_macvtap entered promiscuous mode [ 438.066473][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.075707][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 438.096244][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.104501][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.129355][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.138696][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 438.147957][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 438.157893][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.167459][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 438.209941][T11473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.236610][T11473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.251430][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.263635][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.274045][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 438.309340][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.335473][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.362057][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.385288][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.395165][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.425330][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.456973][T11436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.522012][T11638] device hsr_slave_0 entered promiscuous mode [ 438.547895][T11638] device hsr_slave_1 entered promiscuous mode [ 438.557981][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.586977][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.609757][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.628703][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.643329][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.661443][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.671506][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.686951][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.698653][T11436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.726212][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.735163][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.940954][T11436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.978235][T11436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.992426][T11436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.001596][T11436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.072873][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.153901][T11691] chnl_net:caif_netlink_parms(): no params data found [ 439.195540][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 439.299019][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.479424][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.591489][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.627856][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.672938][T11473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.787415][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.922914][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.925390][ T8937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.950571][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.964036][ T8937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.980004][T11691] device bridge_slave_0 entered promiscuous mode [ 440.080583][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.086984][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.127994][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.151167][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.163369][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 440.171286][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.179826][T11691] device bridge_slave_1 entered promiscuous mode [ 440.296030][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.303921][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.314043][T11691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.371364][T11691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.440673][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.661501][ T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.992898][ T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.060040][T11691] team0: Port device team_slave_0 added [ 441.154814][ T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.206249][T11691] team0: Port device team_slave_1 added [ 441.213143][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.220605][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.238430][T11691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.285643][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 441.293131][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.374502][T11691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.488014][ T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.541520][T11691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.574777][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.639503][T11691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.743969][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.774459][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.816755][T11473] device veth0_vlan entered promiscuous mode [ 441.871871][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.890243][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.944096][T11691] device hsr_slave_0 entered promiscuous mode [ 441.951888][T11691] device hsr_slave_1 entered promiscuous mode [ 441.985469][T11691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.993101][T11691] Cannot create hsr debugfs directory [ 442.105077][T11473] device veth1_vlan entered promiscuous mode [ 442.127620][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.197699][T11638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.205615][T11799] loop3: detected capacity change from 0 to 256 [ 442.225796][T11638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.300454][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.333508][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.377584][T11638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.436316][T11473] device veth0_macvtap entered promiscuous mode [ 442.449823][T11638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.823844][T11473] device veth1_macvtap entered promiscuous mode [ 443.073309][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.105372][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.135455][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.155359][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.185327][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.205551][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.239844][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.259625][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.284768][T11473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.355650][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 443.439902][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.458232][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.469021][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.488195][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.508789][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.520373][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.537485][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.565327][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.575205][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.596865][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.620965][T11822] loop3: detected capacity change from 0 to 512 [ 443.634701][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.658875][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.697315][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.876179][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 443.876195][ T26] audit: type=1800 audit(1790130940.086:425): pid=11816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2052" name="file1" dev="loop3" ino=1048667 res=0 errno=0 [ 443.913306][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.933015][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.982279][T11473] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.015882][T11473] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.024656][T11473] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.054355][T11473] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.424169][T11638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.572717][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.592442][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.651150][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.734190][ T9] bond1: (slave gretap0): Releasing active interface [ 444.871290][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.875809][T11834] loop3: detected capacity change from 0 to 16 [ 444.919696][T11834] erofs: (device loop3): erofs_read_inode: bogus i_mode (3) @ nid 36 [ 444.930120][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.944247][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.951454][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.963720][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.103038][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.124481][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.144364][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.151600][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.195149][ T9106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.239068][ T9106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.436164][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.445597][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.488886][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.506406][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.528732][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.549125][T11848] loop3: detected capacity change from 0 to 16 [ 445.574768][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.586429][T11848] erofs: (device loop3): mounted with root inode @ nid 36. [ 445.754382][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.771914][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.859886][ T8808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.880336][ T8808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.904350][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.916649][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.926285][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.939511][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.975876][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.025681][T11691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.053993][T11691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.087036][T11638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.225515][T11691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.259879][T11691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.074613][T11691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.143911][ T9] device hsr_slave_0 left promiscuous mode [ 447.162149][ T9] device hsr_slave_1 left promiscuous mode [ 447.179587][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.206344][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.254409][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.275959][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.316326][ T9] device bridge_slave_1 left promiscuous mode [ 447.322670][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.347013][ T9] device bridge_slave_0 left promiscuous mode [ 447.353299][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.419183][ T9] device hsr_slave_0 left promiscuous mode [ 447.446131][ T9] device hsr_slave_1 left promiscuous mode [ 447.456129][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.463606][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.496619][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.504119][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.535616][ T9] device bridge_slave_1 left promiscuous mode [ 447.541895][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.586841][ T9] device bridge_slave_0 left promiscuous mode [ 447.593210][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.742754][ T9] device veth1_macvtap left promiscuous mode [ 447.758414][ T9] device veth1_vlan left promiscuous mode [ 447.764382][ T9] device veth0_vlan left promiscuous mode [ 447.798307][ T9] device veth1_macvtap left promiscuous mode [ 447.804494][ T9] device veth0_macvtap left promiscuous mode [ 447.825801][ T9] device veth1_vlan left promiscuous mode [ 447.831690][ T9] device veth0_vlan left promiscuous mode [ 448.102890][T11874] FAULT_INJECTION: forcing a failure. [ 448.102890][T11874] name failslab, interval 1, probability 0, space 0, times 0 [ 448.165350][T11874] CPU: 0 PID: 11874 Comm: syz.8.2062 Not tainted syzkaller #0 [ 448.172903][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.182999][T11874] Call Trace: [ 448.186314][T11874] [ 448.189273][T11874] dump_stack_lvl+0x188/0x24e [ 448.193999][T11874] ? show_regs_print_info+0x12/0x12 [ 448.199238][T11874] ? load_image+0x410/0x410 [ 448.203825][T11874] ? __might_sleep+0xd0/0xd0 [ 448.208457][T11874] ? __lock_acquire+0x7c40/0x7c40 [ 448.213529][T11874] ? is_bpf_text_address+0x28b/0x2a0 [ 448.218860][T11874] should_fail_ex+0x390/0x4c0 [ 448.223592][T11874] should_failslab+0x5/0x20 [ 448.228134][T11874] slab_pre_alloc_hook+0x59/0x300 [ 448.233200][T11874] ? tomoyo_encode+0x28a/0x550 [ 448.238009][T11874] __kmem_cache_alloc_node+0x4f/0x270 [ 448.243427][T11874] ? tomoyo_encode+0x28a/0x550 [ 448.248235][T11874] __kmalloc+0xa3/0x240 [ 448.252437][T11874] ? stack_trace_snprint+0xe0/0xe0 [ 448.257594][T11874] tomoyo_encode+0x28a/0x550 [ 448.262230][T11874] tomoyo_mount_permission+0x38d/0x9b0 [ 448.267731][T11874] ? tomoyo_mount_permission+0x2a1/0x9b0 [ 448.273408][T11874] ? slab_free_freelist_hook+0x133/0x1b0 [ 448.279083][T11874] ? kmem_cache_free+0xf7/0x2a0 [ 448.283972][T11874] ? user_path_at_empty+0x48/0x60 [ 448.289027][T11874] ? tomoyo_get_name+0x520/0x520 [ 448.294014][T11874] ? lockdep_hardirqs_on+0x94/0x140 [ 448.299240][T11874] security_sb_mount+0x83/0xb0 [ 448.304058][T11874] path_mount+0xb8/0xfb0 [ 448.308324][T11874] __se_sys_mount+0x2e3/0x3d0 [ 448.313017][T11874] ? __x64_sys_mount+0xc0/0xc0 [ 448.317792][T11874] ? lockdep_hardirqs_on+0x94/0x140 [ 448.323006][T11874] ? __x64_sys_mount+0x1c/0xc0 [ 448.327782][T11874] do_syscall_64+0x4c/0xa0 [ 448.332211][T11874] ? clear_bhb_loop+0x60/0xb0 [ 448.336899][T11874] ? clear_bhb_loop+0x60/0xb0 [ 448.341586][T11874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.347494][T11874] RIP: 0033:0x7f44bb99e159 [ 448.351918][T11874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.371532][T11874] RSP: 002b:00007f44b9bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 448.379957][T11874] RAX: ffffffffffffffda RBX: 00007f44bbc25fa0 RCX: 00007f44bb99e159 [ 448.387938][T11874] RDX: 0000200000001600 RSI: 0000200000001500 RDI: 0000000000000000 [ 448.395919][T11874] RBP: 00007f44bba3506b R08: 0000000000000000 R09: 0000000000000000 [ 448.403896][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.411875][T11874] R13: 00007f44bbc26038 R14: 00007f44bbc25fa0 R15: 00007ffe486ac2e8 [ 448.419867][T11874] [ 448.659109][T11877] loop8: detected capacity change from 0 to 128 [ 449.217548][ T9] bond1 (unregistering): Released all slaves [ 450.824793][ T9] team0 (unregistering): Port device team_slave_1 removed [ 450.997624][ T9] team0 (unregistering): Port device team_slave_0 removed [ 451.224266][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.431495][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.405142][ T9] bond0 (unregistering): Released all slaves [ 454.094182][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.104459][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.117928][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.129465][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.142892][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 454.150552][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.247307][ T9] team0 (unregistering): Port device team_slave_1 removed [ 454.319100][ T9] team0 (unregistering): Port device team_slave_0 removed [ 454.386184][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.437106][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.940834][ T9] bond0 (unregistering): Released all slaves [ 455.085073][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.106014][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.159244][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.168132][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.207267][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.219356][T11638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.274344][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.316082][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.335736][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.342873][ T4723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.384030][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 455.429024][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 455.446318][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.456057][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.463201][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.549756][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 455.590779][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 455.616750][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 455.638320][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 455.656662][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 455.684347][T11691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.708325][T11691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.749881][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 455.761371][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 455.790002][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.799447][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.808621][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.817674][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.827099][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 456.179558][T11895] chnl_net:caif_netlink_parms(): no params data found [ 456.245660][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 456.534471][T11895] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.553667][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.594561][T11895] device bridge_slave_0 entered promiscuous mode [ 456.619538][T11895] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.632528][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.666327][T11895] device bridge_slave_1 entered promiscuous mode [ 456.723910][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 456.734557][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.844900][T11691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.878298][T11895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.904338][T11895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.950684][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.996323][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.076753][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.086589][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.118264][T11638] device veth0_vlan entered promiscuous mode [ 457.141176][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.159683][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.172144][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.224022][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.250961][T11895] team0: Port device team_slave_0 added [ 457.262938][T11638] device veth1_vlan entered promiscuous mode [ 457.315003][T11895] team0: Port device team_slave_1 added [ 457.350873][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.374497][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.399625][T11691] device veth0_vlan entered promiscuous mode [ 457.448749][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.466185][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.570360][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.629110][T11895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.646767][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.745853][T11895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.814167][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.869255][T11691] device veth1_vlan entered promiscuous mode [ 457.889694][T11895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.905299][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.961135][T11895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.096167][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.155980][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 458.195821][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 458.243561][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.276447][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.325947][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 458.354883][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.439764][T11895] device hsr_slave_0 entered promiscuous mode [ 458.468889][T11895] device hsr_slave_1 entered promiscuous mode [ 458.486057][T11895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.493681][T11895] Cannot create hsr debugfs directory [ 458.531001][T11638] device veth0_macvtap entered promiscuous mode [ 458.588496][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 458.622058][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.650305][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.684417][T11638] device veth1_macvtap entered promiscuous mode [ 458.703308][T11691] device veth0_macvtap entered promiscuous mode [ 458.873776][T11638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.901029][T11638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.928386][T11638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.946404][T11638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.965649][T11638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.995650][T11638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.017376][T11638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.025871][T11691] device veth1_macvtap entered promiscuous mode [ 459.067049][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.101846][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 459.137004][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.155741][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.176434][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.198886][T11638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.223148][T11638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.234036][T11638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.256728][T11638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.312474][T11638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.335653][T11638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.387545][T11638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.438115][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 459.476069][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.499136][T11638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.525296][T11638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.534071][T11638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.575551][T11638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.675644][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.715394][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.735457][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.755282][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.765189][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.786428][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.815651][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.835837][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.866133][T11691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.941589][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.974857][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.257309][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.275329][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.322744][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.362254][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.386769][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.398969][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 460.433152][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.444406][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.462255][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.474034][T11691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.685869][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.706135][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.735960][T11691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.744732][T11691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.782194][T11691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.794513][T11691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.846275][ T4723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.867570][ T4723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.934724][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 461.273873][ T8810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.315462][ T8810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.401971][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 461.659949][T11975] program syz.4.2020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.694727][ T4723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.702787][ T4723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.007060][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 462.162045][ T4723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.195445][ T4723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.204252][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 462.476398][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 462.731367][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.749971][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.760622][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.772918][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.790530][T11895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 462.813287][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 462.825420][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.855110][T11895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 462.897520][T11895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 463.038403][T11895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 463.207590][ T9] device hsr_slave_0 left promiscuous mode [ 463.225643][ T9] device hsr_slave_1 left promiscuous mode [ 463.264593][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.294314][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.316163][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.323658][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.365415][ T9] device bridge_slave_1 left promiscuous mode [ 463.386477][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.415630][ T9] device bridge_slave_0 left promiscuous mode [ 463.421926][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.532321][ T9] device bridge0 left promiscuous mode [ 463.565468][ T9] device veth1_macvtap left promiscuous mode [ 463.571663][ T9] device veth1_vlan left promiscuous mode [ 463.605394][ T9] device veth0_vlan left promiscuous mode [ 464.828884][T12022] loop1: detected capacity change from 0 to 128 [ 464.875585][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 465.011083][T12022] syz.1.2084: attempt to access beyond end of device [ 465.011083][T12022] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 465.751512][ T9] team0 (unregistering): Port device team_slave_1 removed [ 465.927245][ T9] team0 (unregistering): Port device team_slave_0 removed [ 466.057288][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.246268][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.386260][T12035] loop1: detected capacity change from 0 to 128 [ 466.469385][ T26] audit: type=1804 audit(1790130962.676:426): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2089" name="/newroot/9/file0/bus" dev="loop1" ino=1048678 res=1 errno=0 [ 466.513764][ T26] audit: type=1800 audit(1790130962.696:427): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2089" name="bus" dev="loop1" ino=1048678 res=0 errno=0 [ 466.964689][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 467.526292][ T9] bond0 (unregistering): Released all slaves [ 468.126927][T11895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.149873][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.187643][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.223694][T11895] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.266269][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.332372][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.358617][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.365844][ T9106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.375695][T12051] loop1: detected capacity change from 0 to 2048 [ 468.394448][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.428205][T11990] chnl_net:caif_netlink_parms(): no params data found [ 468.471157][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.488305][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.499206][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.506374][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.557605][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.655733][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.675887][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.744055][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.807536][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.833224][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.859644][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.873279][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.894804][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.945873][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.972616][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.035866][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 469.077131][T11895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.123409][T11990] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.165862][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.202707][T11990] device bridge_slave_0 entered promiscuous mode [ 469.242629][T11990] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.275945][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.284090][T11990] device bridge_slave_1 entered promiscuous mode [ 469.442267][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.500768][T11990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.597705][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.683992][T11990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.809366][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.967955][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.030478][T11990] team0: Port device team_slave_0 added [ 470.111437][T11990] team0: Port device team_slave_1 added [ 470.194449][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.202936][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.236340][T11990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.243347][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.340013][T11990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.384472][T11895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.464568][T11990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.481309][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.598999][T11990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.888353][T11990] device hsr_slave_0 entered promiscuous mode [ 470.951780][T11990] device hsr_slave_1 entered promiscuous mode [ 471.004820][T11990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.035322][T11990] Cannot create hsr debugfs directory [ 471.117258][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 473.953414][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.965389][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.973761][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.989474][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.008227][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 474.017361][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.230302][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 474.257046][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.351668][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.385737][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.468918][T11895] device veth0_vlan entered promiscuous mode [ 474.476172][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.497347][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.528913][T11895] device veth1_vlan entered promiscuous mode [ 474.783406][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.797845][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.890207][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.938322][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.950133][T11895] device veth0_macvtap entered promiscuous mode [ 475.139341][T11895] device veth1_macvtap entered promiscuous mode [ 475.269865][ T9] device hsr_slave_0 left promiscuous mode [ 475.283566][ T9] device hsr_slave_1 left promiscuous mode [ 475.313784][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.325723][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.352390][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.385485][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.412939][ T9] device bridge_slave_1 left promiscuous mode [ 475.442707][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.469111][ T9] device bridge_slave_0 left promiscuous mode [ 475.503635][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.607089][ T9] device veth1_macvtap left promiscuous mode [ 475.613193][ T9] device veth0_macvtap left promiscuous mode [ 475.642907][ T9] device veth1_vlan left promiscuous mode [ 475.656168][ T9] device veth0_vlan left promiscuous mode [ 476.080732][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 477.069355][ T9] team0 (unregistering): Port device team_slave_1 removed [ 477.198861][ T9] team0 (unregistering): Port device team_slave_0 removed [ 477.318446][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.383705][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.111038][ T9] bond0 (unregistering): Released all slaves [ 478.167366][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 478.358234][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.379418][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.420529][T11990] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.443483][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.475633][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.502655][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.544114][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.571195][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.589105][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.633462][T11895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.661873][T11990] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.684416][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.707454][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.763475][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.825264][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.835151][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.885261][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.895157][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.955356][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.006067][T11895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.013458][T11990] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 479.054341][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.074990][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.101974][T11990] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 479.150868][T11895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.165270][T11895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.174019][T11895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.226980][T11895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.348953][T12105] chnl_net:caif_netlink_parms(): no params data found [ 479.594828][ T8858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.655705][ T8858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.669750][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 479.680980][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 479.689589][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 479.707234][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 479.714935][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 479.734837][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.875479][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 479.927266][ T8808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.955840][ T8808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.962892][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.974915][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.001647][T12105] device bridge_slave_0 entered promiscuous mode [ 480.020916][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.051730][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.073982][T12105] device bridge_slave_1 entered promiscuous mode [ 480.088801][T11990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.121858][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.219244][T12105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.235378][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 480.284920][T11990] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.306909][T12204] loop1: detected capacity change from 0 to 128 [ 480.413090][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.563274][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.588475][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.633007][T12105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.716860][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.766248][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.789182][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.796398][ T8808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.864378][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.952165][T12105] team0: Port device team_slave_0 added [ 481.013610][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.024314][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 481.073824][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.091488][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.098694][ T8808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.107572][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 481.117141][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.157872][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.225663][T12105] team0: Port device team_slave_1 added [ 481.286539][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 481.319240][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 481.328380][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 481.406304][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.463796][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 481.494526][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 481.544875][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.573259][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.632819][T11990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.653353][T11990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.694354][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.731446][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.744450][T12105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.759430][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.794916][T12105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.831991][T12105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.839189][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 481.925045][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.005386][T12105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.089196][T12190] chnl_net:caif_netlink_parms(): no params data found [ 482.198965][T12249] loop5: detected capacity change from 0 to 128 [ 482.290639][T12105] device hsr_slave_0 entered promiscuous mode [ 482.316213][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 482.367079][T12105] device hsr_slave_1 entered promiscuous mode [ 482.376574][T12105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.384181][T12105] Cannot create hsr debugfs directory [ 482.500341][ T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.612164][ T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.678488][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.696017][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.704355][T12190] device bridge_slave_0 entered promiscuous mode [ 482.802631][ T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.832252][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.856851][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.867996][T12190] device bridge_slave_1 entered promiscuous mode [ 482.934973][T12268] kvm: pic: level sensitive irq not supported [ 482.971595][ T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.065464][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 483.084079][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 483.180141][T11990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.224501][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.279655][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.496581][T12190] team0: Port device team_slave_0 added [ 483.536177][T12190] team0: Port device team_slave_1 added [ 483.620261][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.656339][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.703588][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.765727][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.773492][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.793773][T12289] loop5: detected capacity change from 0 to 128 [ 483.855911][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.916447][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 484.412852][T12190] device hsr_slave_0 entered promiscuous mode [ 484.427570][T12190] device hsr_slave_1 entered promiscuous mode [ 484.436691][T12190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.468001][T12190] Cannot create hsr debugfs directory [ 485.024824][T12105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 485.076147][T12105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 485.096244][T12105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 485.232199][T12327] loop1: detected capacity change from 0 to 128 [ 485.311740][T12105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 485.330279][T12327] syz.1.2142: attempt to access beyond end of device [ 485.330279][T12327] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 485.369933][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.390758][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.914240][T11990] device veth0_vlan entered promiscuous mode [ 485.958801][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.983708][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.245608][T11990] device veth1_vlan entered promiscuous mode [ 486.309780][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.326990][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.376395][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 486.518948][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 486.655918][T12105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.758246][T12105] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.011150][T12105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.065383][T12105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.932526][T11990] device veth0_macvtap entered promiscuous mode [ 487.996222][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.004375][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.061516][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.116400][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.170985][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.178240][ T8808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.256834][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.307277][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.361645][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.368895][ T8808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.469805][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.498210][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.507369][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.516375][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.525104][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.555400][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 488.607614][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.643871][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.674197][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.708798][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.766521][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.815775][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.846536][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.899581][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.938786][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.969334][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.006488][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.728428][T11990] device veth1_macvtap entered promiscuous mode [ 490.410355][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.682029][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.694834][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.757146][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.787307][T12388] FAULT_INJECTION: forcing a failure. [ 490.787307][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 490.796190][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.801202][T12388] CPU: 0 PID: 12388 Comm: syz.5.2154 Not tainted syzkaller #0 [ 490.815609][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.825701][T12388] Call Trace: [ 490.829001][T12388] [ 490.831949][T12388] dump_stack_lvl+0x188/0x24e [ 490.836729][T12388] ? show_regs_print_info+0x12/0x12 [ 490.842027][T12388] ? load_image+0x410/0x410 [ 490.846594][T12388] ? __might_sleep+0xd0/0xd0 [ 490.851275][T12388] ? __lock_acquire+0x7c40/0x7c40 [ 490.856396][T12388] should_fail_ex+0x390/0x4c0 [ 490.861197][T12388] should_failslab+0x5/0x20 [ 490.865785][T12388] slab_pre_alloc_hook+0x59/0x300 [ 490.870917][T12388] kmem_cache_alloc_lru+0x49/0x2e0 [ 490.876061][T12388] ? __d_alloc+0x2e/0x6e0 [ 490.880458][T12388] __d_alloc+0x2e/0x6e0 [ 490.883883][T12105] device veth0_vlan entered promiscuous mode [ 490.884639][T12388] ? d_alloc_pseudo+0xe/0x70 [ 490.895260][T12388] d_alloc_pseudo+0x19/0x70 [ 490.899813][T12388] alloc_file_pseudo+0xe0/0x200 [ 490.904770][T12388] ? alloc_empty_file_noaccount+0x80/0x80 [ 490.910518][T12388] ? alloc_fd+0x590/0x640 [ 490.914897][T12388] sock_alloc_file+0xb3/0x240 [ 490.919648][T12388] __sys_socket+0x12d/0x190 [ 490.924173][T12388] __x64_sys_socket+0x76/0x80 [ 490.928877][T12388] do_syscall_64+0x4c/0xa0 [ 490.933308][T12388] ? clear_bhb_loop+0x60/0xb0 [ 490.938038][T12388] ? clear_bhb_loop+0x60/0xb0 [ 490.942727][T12388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.948667][T12388] RIP: 0033:0x7f21da59e159 [ 490.953089][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.972989][T12388] RSP: 002b:00007f21db39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 490.981428][T12388] RAX: ffffffffffffffda RBX: 00007f21da825fa0 RCX: 00007f21da59e159 [ 490.989419][T12388] RDX: 0000000000000008 RSI: 000000000000000a RDI: 0000000000000011 [ 490.997402][T12388] RBP: 00007f21da63506b R08: 0000000000000000 R09: 0000000000000000 [ 491.005390][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.013376][T12388] R13: 00007f21da826038 R14: 00007f21da825fa0 R15: 00007ffca0b8fd18 [ 491.021369][T12388] [ 491.098397][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.125502][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.148972][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.167822][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.178026][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.192297][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.211626][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.222383][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.255502][T11990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.262943][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.303914][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.344002][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.368747][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.433173][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.454314][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.680730][T12105] device veth1_vlan entered promiscuous mode [ 491.701525][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.725433][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.739396][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.751002][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.761246][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.772108][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.782434][T11990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.794000][T11990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.809241][T11990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.836123][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 491.847240][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.876481][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.067720][T11990] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.085635][T11990] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.825313][T11990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.847324][T11990] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.572797][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.596528][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.658006][T12105] device veth0_macvtap entered promiscuous mode [ 493.838047][T12105] device veth1_macvtap entered promiscuous mode [ 493.894806][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.930014][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.952201][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.978863][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.992653][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.008448][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.023398][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.037779][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.055000][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.075613][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.100244][T12105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.143802][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.165141][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 494.184385][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 494.203441][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 494.217061][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.240463][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.262404][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.276742][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.297653][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.313283][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.331209][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.353049][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.380139][T12105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.412936][T12105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.434255][T12105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.647802][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 494.657312][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 494.671694][T12105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.675367][ T8858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.694083][T12105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.712292][ T8858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.712894][T12105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.730462][T12105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.747965][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 494.762269][T12190] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 494.821904][ T9] device hsr_slave_0 left promiscuous mode [ 494.835009][ T9] device hsr_slave_1 left promiscuous mode [ 494.848707][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.865195][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.889226][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.897337][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.905148][ T9] device bridge_slave_1 left promiscuous mode [ 494.912008][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.983301][ T9] device bridge_slave_0 left promiscuous mode [ 495.002696][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.045582][ T9] device hsr_slave_0 left promiscuous mode [ 495.061442][ T9] device hsr_slave_1 left promiscuous mode [ 495.082130][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.107709][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.147006][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.154485][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.196801][ T9] device bridge_slave_1 left promiscuous mode [ 495.203079][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.227369][ T9] device bridge_slave_0 left promiscuous mode [ 495.233650][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.362578][ T9] device veth1_macvtap left promiscuous mode [ 495.375832][ T9] device veth0_macvtap left promiscuous mode [ 495.389068][ T9] device veth1_vlan left promiscuous mode [ 495.408245][ T9] device veth0_vlan left promiscuous mode [ 495.427369][ T9] device veth1_macvtap left promiscuous mode [ 495.437083][ T9] device veth0_macvtap left promiscuous mode [ 495.450051][ T9] device veth1_vlan left promiscuous mode [ 495.469164][ T9] device veth0_vlan left promiscuous mode [ 496.677252][ T9] team0 (unregistering): Port device team_slave_1 removed [ 496.723950][ T9] team0 (unregistering): Port device team_slave_0 removed [ 496.769938][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.818213][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.171616][ T9] bond0 (unregistering): Released all slaves [ 497.692850][ T9] team0 (unregistering): Port device team_slave_1 removed [ 497.739671][ T9] team0 (unregistering): Port device team_slave_0 removed [ 497.788558][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.833536][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.158809][ T9] bond0 (unregistering): Released all slaves [ 498.253192][T12190] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 498.262285][T12190] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 498.274782][T12190] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 498.315934][ T7987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.323821][ T7987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.368602][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.548918][ T7987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.566015][ T7987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.608171][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.633059][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2075'. [ 498.709252][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.785017][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.815414][T12190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.822923][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.878114][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.922329][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.943145][T12190] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.993234][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.037432][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.080658][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.087869][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.108477][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.128793][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.142602][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.149796][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.176521][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.193238][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.228404][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 499.263848][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 499.291511][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 499.346498][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 499.386207][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 499.425947][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 499.445527][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.473421][T12190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.505324][T12190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.552426][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.568436][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 499.586693][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.218831][T12517] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 500.268384][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.282015][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.303842][T12190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.132639][T12549] loop1: detected capacity change from 0 to 128 [ 501.268581][T12551] overlayfs: conflicting lowerdir path [ 501.314292][T12551] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 501.366947][T12551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 501.518486][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.524829][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.804216][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.846351][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.914947][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.952679][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.993168][T12190] device veth0_vlan entered promiscuous mode [ 502.004681][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.033819][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.089564][T12190] device veth1_vlan entered promiscuous mode [ 502.212252][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.266178][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.294524][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.331507][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.393339][T12190] device veth0_macvtap entered promiscuous mode [ 502.434983][T12190] device veth1_macvtap entered promiscuous mode [ 502.496909][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.543078][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.573782][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.635335][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.665637][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.716315][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.747453][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.796341][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.826395][T12190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.839654][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.856168][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.905859][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.914697][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.959725][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.995337][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.025657][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.075322][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.116117][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.141645][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.174071][T12190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.197415][T12190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.231040][T12190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.255610][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.270646][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.304572][T12190] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.341193][T12190] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.365311][T12190] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.411398][T12190] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.456231][T12613] FAULT_INJECTION: forcing a failure. [ 503.456231][T12613] name failslab, interval 1, probability 0, space 0, times 0 [ 503.489533][T12613] CPU: 1 PID: 12613 Comm: syz.1.2208 Not tainted syzkaller #0 [ 503.497083][T12613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.507181][T12613] Call Trace: [ 503.510490][T12613] [ 503.513450][T12613] dump_stack_lvl+0x188/0x24e [ 503.518184][T12613] ? show_regs_print_info+0x12/0x12 [ 503.523427][T12613] ? load_image+0x410/0x410 [ 503.527974][T12613] ? __might_sleep+0xd0/0xd0 [ 503.532601][T12613] ? __lock_acquire+0x7c40/0x7c40 [ 503.537683][T12613] should_fail_ex+0x390/0x4c0 [ 503.542411][T12613] should_failslab+0x5/0x20 [ 503.546943][T12613] slab_pre_alloc_hook+0x59/0x300 [ 503.552005][T12613] kmem_cache_alloc+0x56/0x2f0 [ 503.556799][T12613] ? __alloc_file+0x25/0x230 [ 503.561426][T12613] __alloc_file+0x25/0x230 [ 503.565884][T12613] alloc_empty_file+0x90/0x180 [ 503.570692][T12613] alloc_file+0x5b/0x5f0 [ 503.574973][T12613] alloc_file_pseudo+0x180/0x200 [ 503.579948][T12613] ? alloc_empty_file_noaccount+0x80/0x80 [ 503.585701][T12613] ? do_raw_spin_unlock+0x11d/0x230 [ 503.590936][T12613] ? put_pid+0xc3/0x120 [ 503.595210][T12613] sock_alloc_file+0xb3/0x240 [ 503.599937][T12613] __sys_socketpair+0x2cc/0x540 [ 503.604836][T12613] __x64_sys_socketpair+0x97/0xb0 [ 503.609906][T12613] do_syscall_64+0x4c/0xa0 [ 503.614359][T12613] ? clear_bhb_loop+0x60/0xb0 [ 503.619093][T12613] ? clear_bhb_loop+0x60/0xb0 [ 503.623807][T12613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.629749][T12613] RIP: 0033:0x7f9ad759e159 [ 503.634200][T12613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.653856][T12613] RSP: 002b:00007f9ad83e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 503.662320][T12613] RAX: ffffffffffffffda RBX: 00007f9ad7825fa0 RCX: 00007f9ad759e159 [ 503.670423][T12613] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 503.678429][T12613] RBP: 00007f9ad763506b R08: 0000000000000000 R09: 0000000000000000 [ 503.686438][T12613] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 503.694443][T12613] R13: 00007f9ad7826038 R14: 00007f9ad7825fa0 R15: 00007ffd1c247a78 [ 503.702471][T12613] [ 503.879192][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.915821][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.945646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.011053][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.036350][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.064797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.216634][T12663] loop2: detected capacity change from 0 to 7 [ 505.282282][T12663] Dev loop2: unable to read RDB block 7 [ 505.312716][T12663] loop2: unable to read partition table [ 505.329595][T12663] loop2: partition table beyond EOD, truncated [ 505.372445][T12663] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 505.955435][T12693] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2232'. [ 506.408882][T12708] loop5: detected capacity change from 0 to 128 [ 507.382674][T12734] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 509.058217][T12781] FAULT_INJECTION: forcing a failure. [ 509.058217][T12781] name fail_futex, interval 1, probability 0, space 0, times 0 [ 509.225429][T12781] CPU: 1 PID: 12781 Comm: syz.0.2261 Not tainted syzkaller #0 [ 509.232972][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.243039][T12781] Call Trace: [ 509.246323][T12781] [ 509.249264][T12781] dump_stack_lvl+0x188/0x24e [ 509.253954][T12781] ? show_regs_print_info+0x12/0x12 [ 509.259161][T12781] ? load_image+0x410/0x410 [ 509.263682][T12781] ? cgroup_rstat_updated+0xce/0x350 [ 509.269056][T12781] ? rcu_read_lock_sched_held+0x86/0x110 [ 509.274728][T12781] ? sched_slice+0x430/0x430 [ 509.279334][T12781] should_fail_ex+0x390/0x4c0 [ 509.284027][T12781] get_futex_key+0x1b1/0x1000 [ 509.288764][T12781] ? futex_setup_timer+0xc0/0xc0 [ 509.293707][T12781] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 509.299705][T12781] ? __lock_acquire+0x7c40/0x7c40 [ 509.304737][T12781] ? lock_chain_count+0x20/0x20 [ 509.309599][T12781] futex_wait_setup+0xb8/0x270 [ 509.314386][T12781] ? futex_wait_multiple+0x920/0x920 [ 509.319679][T12781] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 509.325587][T12781] ? _raw_spin_unlock+0x40/0x40 [ 509.330452][T12781] futex_wait+0x1b8/0x5c0 [ 509.334795][T12781] ? futex_wait_setup+0x270/0x270 [ 509.339843][T12781] ? file_end_write+0x156/0x250 [ 509.344756][T12781] ? vfs_write+0x777/0x9a0 [ 509.349187][T12781] do_futex+0x310/0x320 [ 509.353353][T12781] ? __ia32_sys_get_robust_list+0x100/0x100 [ 509.359260][T12781] __se_sys_futex+0x381/0x410 [ 509.363946][T12781] ? __x64_sys_futex+0xf0/0xf0 [ 509.368722][T12781] ? __x64_sys_futex+0x1d/0xf0 [ 509.373493][T12781] do_syscall_64+0x4c/0xa0 [ 509.377917][T12781] ? clear_bhb_loop+0x60/0xb0 [ 509.382598][T12781] ? clear_bhb_loop+0x60/0xb0 [ 509.387284][T12781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.393192][T12781] RIP: 0033:0x7fb3f379e159 [ 509.397616][T12781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.417240][T12781] RSP: 002b:00007fb3f45aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 509.425667][T12781] RAX: ffffffffffffffda RBX: 00007fb3f3a25fa8 RCX: 00007fb3f379e159 [ 509.433652][T12781] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb3f3a25fa8 [ 509.441634][T12781] RBP: 00007fb3f3a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 509.449617][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.457596][T12781] R13: 00007fb3f3a26038 R14: 00007fff6aa0fe70 R15: 00007fff6aa0ff58 [ 509.465586][T12781] [ 509.544279][T12790] loop5: detected capacity change from 0 to 16 [ 509.600314][T12790] erofs: (device loop5): erofs_read_inode: bogus i_mode (3) @ nid 36 [ 509.863516][T12799] kvm: pic: single mode not supported [ 509.863539][T12799] kvm: pic: level sensitive irq not supported [ 509.890326][T12799] kvm: pic: level sensitive irq not supported [ 509.914082][T12799] kvm: pic: level sensitive irq not supported [ 509.926808][T12799] kvm: pic: level sensitive irq not supported [ 509.955163][T12799] kvm: pic: level sensitive irq not supported [ 509.967992][T12799] kvm: pic: single mode not supported [ 509.974699][T12799] kvm: pic: level sensitive irq not supported [ 509.994549][T12799] kvm: pic: single mode not supported [ 510.000931][T12799] kvm: pic: level sensitive irq not supported [ 511.187930][T12840] loop1: detected capacity change from 0 to 512 [ 511.514645][T12848] loop5: detected capacity change from 0 to 16 [ 511.555126][T12848] erofs: (device loop5): erofs_read_inode: bogus i_mode (3) @ nid 36 [ 514.855915][T12904] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 514.878106][T12904] overlayfs: failed to set xattr on upper [ 514.899818][T12904] overlayfs: ...falling back to index=off,metacopy=off. [ 516.614465][T12941] loop2: detected capacity change from 0 to 7 [ 516.638839][T12941] Dev loop2: unable to read RDB block 7 [ 516.644481][T12941] loop2: unable to read partition table [ 516.679314][T12941] loop2: partition table beyond EOD, truncated [ 516.775278][T12941] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.306422][T12988] tap0: tun_chr_ioctl cmd 1074025677 [ 519.311941][T12988] tap0: linktype set to 6 [ 522.649418][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.660696][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.675349][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.693025][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.702078][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 522.709887][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.914750][ T40] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.097192][ T40] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.248068][ T40] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.350922][ T40] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.699741][T13049] chnl_net:caif_netlink_parms(): no params data found [ 524.325808][T13049] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.332979][T13049] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.376547][T13049] device bridge_slave_0 entered promiscuous mode [ 524.403108][T13049] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.431486][T13049] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.518043][T13049] device bridge_slave_1 entered promiscuous mode [ 524.756207][T13049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.795560][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 524.798014][T13049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.123887][T13097] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 525.170444][T13049] team0: Port device team_slave_0 added [ 525.195054][T13049] team0: Port device team_slave_1 added [ 525.454875][T13049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.496988][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.605302][T13049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.670818][T13108] page:ffffea0002c6de40 refcount:4 mapcount:1 mapping:ffff88802f76f508 index:0x0 pfn:0xb1b79 [ 525.682194][T13108] memcg:ffff88805415c000 [ 525.686483][T13108] aops:shmem_aops ino:f0 [ 525.690817][T13108] flags: 0xfff80000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 525.700664][T13108] raw: 00fff80000080015 ffffea0002e3b408 ffffea0002af6088 ffff88802f76f508 [ 525.709279][T13108] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88805415c000 [ 525.717888][T13108] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 525.725195][T13108] page_owner tracks the page as allocated [ 525.732098][T13108] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 13109, tgid 13108 (syz.1.2339), ts 525650490619, free_ts 525487646723 [ 525.750046][T13108] post_alloc_hook+0x173/0x1a0 [ 525.754936][T13108] get_page_from_freelist+0x206b/0x2180 [ 525.760528][T13108] __alloc_pages+0x1ec/0x4f0 [ 525.765166][T13108] __folio_alloc+0xe/0x30 [ 525.769525][T13108] vma_alloc_folio+0x499/0x900 [ 525.774321][T13108] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 525.780162][T13108] shmem_get_folio_gfp+0x1439/0x35e0 [ 525.785459][T13108] shmem_read_mapping_page_gfp+0x99/0x2c0 [ 525.791184][T13108] udmabuf_create+0x992/0x1000 [ 525.796020][T13108] udmabuf_ioctl+0x1f3/0x300 [ 525.800618][T13108] __se_sys_ioctl+0xfa/0x170 [ 525.805220][T13108] do_syscall_64+0x4c/0xa0 [ 525.809644][T13108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.815546][T13108] page last free stack trace: [ 525.820219][T13108] free_unref_page_prepare+0x8e5/0x9e0 [ 525.825685][T13108] free_unref_page_list+0xbb/0x8e0 [ 525.830805][T13108] release_pages+0x20d1/0x2340 [ 525.835617][T13108] tlb_flush_mmu+0x105/0x220 [ 525.840240][T13108] tlb_finish_mmu+0xf0/0x220 [ 525.844841][T13108] exit_mmap+0x388/0x970 [ 525.849090][T13108] __mmput+0x118/0x3a0 [ 525.853175][T13108] exit_mm+0x24d/0x350 [ 525.857250][T13108] do_exit+0x958/0x2570 [ 525.861411][T13108] do_group_exit+0x229/0x2e0 [ 525.866007][T13108] __x64_sys_exit_group+0x3b/0x40 [ 525.871050][T13108] do_syscall_64+0x4c/0xa0 [ 525.875469][T13108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.881453][T13108] ------------[ cut here ]------------ [ 525.886910][T13108] kernel BUG at mm/filemap.c:153! [ 525.891940][T13108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 525.898010][T13108] CPU: 0 PID: 13108 Comm: syz.1.2339 Not tainted syzkaller #0 [ 525.905468][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.915520][T13108] RIP: 0010:filemap_unaccount_folio+0x559/0xa00 [ 525.921766][T13108] Code: 07 38 c1 0f 8c 35 fe ff ff 4c 89 e7 e8 30 33 28 00 e9 28 fe ff ff e8 96 ee d6 ff 48 89 df 48 c7 c6 20 fd 94 8a e8 27 24 12 00 <0f> 0b e8 80 ee d6 ff 48 89 df 48 c7 c6 80 02 95 8a e8 11 24 12 00 [ 525.941374][T13108] RSP: 0018:ffffc90004b9f660 EFLAGS: 00010046 [ 525.947442][T13108] RAX: a46b0ac892bb3200 RBX: ffffea0002c6de40 RCX: a46b0ac892bb3200 [ 525.955423][T13108] RDX: 0000000000000002 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 525.963397][T13108] RBP: ffffc90004b9f7b8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 525.971369][T13108] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff88802f76f508 [ 525.979342][T13108] R13: ffffc90004b9f700 R14: dffffc0000000000 R15: ffff88802f76f508 [ 525.987317][T13108] FS: 0000555580c55500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 525.996247][T13108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.002828][T13108] CR2: 0000200000001000 CR3: 00000000729f4000 CR4: 00000000003506f0 [ 526.010802][T13108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 526.018777][T13108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 526.026747][T13108] Call Trace: [ 526.030026][T13108] [ 526.032970][T13108] ? trace_mm_filemap_delete_from_page_cache+0x9c/0x220 [ 526.039913][T13108] __filemap_remove_folio+0xc1/0x900 [ 526.045208][T13108] ? __rwlock_init+0x140/0x140 [ 526.049971][T13108] ? __up_read+0x2b4/0x6b0 [ 526.054392][T13108] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 526.061416][T13108] ? _raw_spin_lock_irq+0xb7/0xf0 [ 526.066452][T13108] ? _raw_spin_lock_irqsave+0x100/0x100 [ 526.072003][T13108] filemap_remove_folio+0xed/0x2c0 [ 526.077123][T13108] truncate_inode_folio+0x59/0x70 [ 526.082156][T13108] shmem_undo_range+0x554/0x21d0 [ 526.087110][T13108] ? verify_lock_unused+0x140/0x140 [ 526.092319][T13108] ? shmem_truncate_range+0xb0/0xb0 [ 526.097527][T13108] ? do_raw_spin_lock+0x128/0x2f0 [ 526.102553][T13108] ? __rwlock_init+0x140/0x140 [ 526.107316][T13108] shmem_evict_inode+0x225/0x9f0 [ 526.112260][T13108] ? _raw_spin_unlock+0x24/0x40 [ 526.117115][T13108] ? inode_wait_for_writeback+0x1df/0x220 [ 526.122896][T13108] ? shmem_free_in_core_inode+0xb0/0xb0 [ 526.128445][T13108] ? do_raw_spin_lock+0x128/0x2f0 [ 526.133471][T13108] ? bit_waitqueue+0x30/0x30 [ 526.138069][T13108] ? do_raw_spin_unlock+0x11d/0x230 [ 526.143268][T13108] ? shmem_free_in_core_inode+0xb0/0xb0 [ 526.148817][T13108] evict+0x4b6/0x8b0 [ 526.152718][T13108] ? proc_nr_inodes+0x2f0/0x2f0 [ 526.157577][T13108] ? do_raw_spin_unlock+0x11d/0x230 [ 526.162780][T13108] ? _raw_spin_unlock+0x24/0x40 [ 526.167634][T13108] ? iput+0x79f/0x9c0 [ 526.171621][T13108] __dentry_kill+0x412/0x630 [ 526.176214][T13108] dentry_kill+0xb8/0x290 [ 526.180541][T13108] ? dput+0x37/0x1d0 [ 526.184447][T13108] dput+0xfa/0x1d0 [ 526.188179][T13108] __fput+0x597/0x8b0 [ 526.192162][T13108] task_work_run+0x1d0/0x260 [ 526.196799][T13108] ? task_work_cancel+0x220/0x220 [ 526.201830][T13108] ? __close_range+0x20c/0x770 [ 526.206601][T13108] ? exit_to_user_mode_loop+0x3b/0x110 [ 526.212113][T13108] exit_to_user_mode_loop+0xe6/0x110 [ 526.217404][T13108] exit_to_user_mode_prepare+0xee/0x180 [ 526.222957][T13108] syscall_exit_to_user_mode+0x16/0x40 [ 526.228427][T13108] do_syscall_64+0x58/0xa0 [ 526.232844][T13108] ? clear_bhb_loop+0x60/0xb0 [ 526.237521][T13108] ? clear_bhb_loop+0x60/0xb0 [ 526.242203][T13108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.248104][T13108] RIP: 0033:0x7f9ad759e159 [ 526.252524][T13108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.272134][T13108] RSP: 002b:00007ffd1c247bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 526.280552][T13108] RAX: 0000000000000000 RBX: 00007ffd1c247cc0 RCX: 00007f9ad759e159 [ 526.288528][T13108] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 526.296506][T13108] RBP: 0000000000080500 R08: 0000000000000001 R09: 0000000000000000 [ 526.304478][T13108] R10: 0000001b2e520000 R11: 0000000000000246 R12: 00007ffd1c247d00 [ 526.312449][T13108] R13: 00007f9ad7825fac R14: 0000000000080560 R15: 00007f9ad7825fa0 [ 526.320433][T13108] [ 526.323451][T13108] Modules linked in: [ 526.327353][T13108] ---[ end trace 0000000000000000 ]--- [ 526.332806][T13108] RIP: 0010:filemap_unaccount_folio+0x559/0xa00 [ 526.339057][T13108] Code: 07 38 c1 0f 8c 35 fe ff ff 4c 89 e7 e8 30 33 28 00 e9 28 fe ff ff e8 96 ee d6 ff 48 89 df 48 c7 c6 20 fd 94 8a e8 27 24 12 00 <0f> 0b e8 80 ee d6 ff 48 89 df 48 c7 c6 80 02 95 8a e8 11 24 12 00 [ 526.358667][T13108] RSP: 0018:ffffc90004b9f660 EFLAGS: 00010046 [ 526.364733][T13108] RAX: a46b0ac892bb3200 RBX: ffffea0002c6de40 RCX: a46b0ac892bb3200 [ 526.372709][T13108] RDX: 0000000000000002 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 526.380683][T13108] RBP: ffffc90004b9f7b8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 526.388659][T13108] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff88802f76f508 [ 526.396639][T13108] R13: ffffc90004b9f700 R14: dffffc0000000000 R15: ffff88802f76f508 [ 526.404619][T13108] FS: 0000555580c55500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 526.413553][T13108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.420148][T13108] CR2: 0000200000001000 CR3: 00000000729f4000 CR4: 00000000003506f0 [ 526.428129][T13108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 526.436102][T13108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 526.444077][T13108] Kernel panic - not syncing: Fatal exception [ 526.450292][T13108] Kernel Offset: disabled [ 526.454609][T13108] Rebooting in 86400 seconds..