last executing test programs: 4m43.475510648s ago: executing program 2 (id=2283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x248, 0x20a, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [0x0, 0x0, 0xffffffff], [], 'ipvlan0\x00', 'veth0_macvtap\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [0x10], 0x0, 0x0, 0x10, 0x1e}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xfc97f2427bb8791, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'bridge_slave_0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0xc, 0x4, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001e001e6c35964760065200000c00000006000100"], 0x58}}, 0x8000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x75d, &(0x7f0000000b40)={[{@resuid}, {@noblock_validity}, {@resuid}, {@errors_remount}, {@max_batch_time, 0x0}, {@sb={'sb', 0x3d, 0x96}}, {@grpjquota}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@bh}, {@dax_never}, {@dax_inode}], [{@subj_user={'subj_user', 0x3d, 'audit'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '@-\x80{+#{'}}, {@euid_eq}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq}], 0x2c}, 0xa, 0x526, &(0x7f0000001240)="$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") 4m41.360461556s ago: executing program 2 (id=2288): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x101000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000240)={0x0, 0x9e, 0x1003}) 4m36.98710865s ago: executing program 2 (id=2297): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x8885) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x8, 0x5, 0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xff}]}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDFONTOP_GET(r4, 0x4b72, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r4, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) 4m36.017813457s ago: executing program 2 (id=2299): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) kexec_load(0xf5, 0x0, 0x0, 0x30000) eventfd2(0x1, 0x1) 4m35.800924112s ago: executing program 2 (id=2302): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 4m32.438837014s ago: executing program 2 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000c000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x4005) 4m16.8134164s ago: executing program 32 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000c000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x4005) 3m13.586056255s ago: executing program 4 (id=2529): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 3m10.128342421s ago: executing program 4 (id=2536): syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x10, 0x89, 0x0, 0xee01}, {0xfffffffe, 0x2, 0x100000001, 0x1, 0xfffffffffffffffb, 0x3, 0x8, 0x4}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x210000, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 3m8.25419905s ago: executing program 4 (id=2544): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) listen(0xffffffffffffffff, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x208080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3m8.037152947s ago: executing program 4 (id=2545): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000001c0)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141104, 0x128) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 3m7.059517914s ago: executing program 4 (id=2547): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1d, 0x5}, {0x0, 0xc}, {0x3, 0x8}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xffff4bbd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 3m6.41688518s ago: executing program 4 (id=2551): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x67) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 3m5.228142704s ago: executing program 33 (id=2551): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x67) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7ff, 0x12) 34.284680925s ago: executing program 5 (id=3045): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(r0, &(0x7f0000000300)='mnt\x00', 0x88101) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r1, 0x0, r2, 0x0, 0x46) unlink(&(0x7f0000000440)='./cgroup\x00') fanotify_init(0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB='\f\x00'], 0x24}}, 0x44004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) 33.873847462s ago: executing program 3 (id=3047): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x1, 0x100000000, 0xb, 0xffffffffffffc474, 0x8, 0x5, 0x200000000, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0x3) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0xcf80) 33.045196288s ago: executing program 3 (id=3048): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c60511920000010203010902200001010080fa0904000002ffffff000705810200020007050202"], 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) io_uring_setup(0x70c4, 0x0) 32.998760779s ago: executing program 5 (id=3050): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 32.428491531s ago: executing program 3 (id=3051): r0 = socket$igmp(0x2, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xbc}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) getsockopt$MRT(r0, 0x0, 0x53, 0xffffffffffffffff, &(0x7f0000000000)=0xff00) 31.765076011s ago: executing program 5 (id=3052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x8000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x176, [0x0, 0x200027c0, 0x200029ec, 0x20002b82], 0x0, 0x0, &(0x7f00000027c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x60, 0x8917, 'veth1_to_bridge\x00', 'nicvf0\x00', 'veth1_to_batadv\x00', 'veth0_to_bond\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x2, 0x4, 0x0, 0x0, "eda2aededb46cf1cd942696e782c84e94c8aadd296787439ae1c0ee400ec150796e9178168e0c3d3cf5f02b734591749de3428d7ecf71ea2fc50442b82d939e6"}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x1ee) 31.436418966s ago: executing program 3 (id=3053): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0xa, 0x3, 0xff) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x800}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) 30.42071872s ago: executing program 3 (id=3057): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@session={'session', 0x3d, 0x23}}, {@sbsector={'sbsector', 0x3d, 0x1ff}}, {@map_acorn}, {@nocompress}, {@cruft}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@overriderock}]}, 0x0, 0x57a, &(0x7f00000003c0)="$eJzs3V9v0+odwPGfSwtRJlVoTAhVBR7KJrVSCU4CQRFXnvMkfSCxI9tB7RWqaIoqUpgok9beMG7YJm23u98udzGdV3DeETqv4Igj20kb2vw5/d/T8/1U1E+cn58/TuQfTuPHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHIrtp23pG681rIazq0EfmPvYXfr/hXf1f4f7Fa7MLZdESv+J5mM3EpX3frd3tM3419zMps+mpVMvMjIzm9uXn96Y3Kit/2IDh/Kf49Y09b2zpvVTqf9/qQ6cgFc3ffa3r42PLamPRP6puHUtDKhr8qlkv1wqRqqqqnrcCWMdEO5gXYiP1Dz7oLKl8tFpXMrfsurVZy67q188qBg2yX1LNe86gSh7z18lgvdJVOvG6+WxMRPxzFP4jficxOpSDsNpdY3Ou3iuAHFQfmfE1QYF1SwC4V8vlDIlx6XHz+x7ckDK+x95EDEyb1p8ct0Ysdu4Lgmuvlf6mLEk5Ysixr440pFAvGlMeT5rm7iX/jDQz2y3f7838vyt/aenpEk/99JH90Zlv+H9OVIP197bR9mqy3Zlh15I6vSkY605f2gKOsoNe/t1RMc44n/1ESLJ0ZC8cVIQ5xkjequUVKWkpTElpeyJFUJRUlVjNRFSygrEkokOnlHuRKIFkci8SUQJfPiyoIoyUtZylIUJVpysiK+tMSTmlTESWpZl41kvxdFWUP34bpcT4LyQ4eR7b1CbSmMGC35H8d37GM2cFK+9vI/AAAAAAC4tKzk0/f4/H9Kbielqqlr+7y7BQAAAAAATlDyl//ZeDEVl26Lxfk/AAAAAACXjZVcY2eJSFbupqV1sZLLpfgQAAAAAACASyL5+/+deJHMgXJXrN05VTj/BwAAAADgkvj72Dn2w+Y16/sfJAimrE/N5d9bm8ncvM7mlXS7K/trjKoz1nS3kmRRSheTk66etTJp0O4kmF+6i/Vx/bD2OuDsduCvh+nAjUn5p9xLY+6tpcu13jNpK9mqqeuc69ef5sVxpicivRz9+e3GXyQZ/j+8xrSVkY1OO/fqXWct6cunuJZPm90JFA/MoziiLx+S+RaSay4GjngquRCj227WkvWNTtvuH/9EuvnEty1+nB7R5meZS6PmujPeZr8dfyZuM58bNvpuL/LHHPlnuZ/G3J+/ny4G9KIwrheF/l4M3hfH70VxXC+Kx+wFAJyX9TFZyJIDefcIR7mjZXc5ZHb/LPNpzPxMcmCNfx04otvjjuj2MbPb/3bvgdALHpZj43b/1Z9Ve+ngP0PbDesFK96FVz5s/klubm3vPNjYXH3dft1+WygUS/Yj235ckKlkGN0FuQcAMED/PXasgfm/F/Hjv9PAg7n70Ziz6t/ufqUgJ6/knXRkTRaTqw2SbxwM/B9Btu9rCItjzlqzSZpM7/CyOOKs7mpylUOv3sLI2G/7UDz9FwIAgDM0NyYPW+Pvwmct7j/vnhmWR+NcPvrseC82f8Z7AgCAXw8dfLGy0d+sIDDNl/lyOe9ES1oFvvtcBaZS08p4kQ7cJceradUM/Mh3/XpceGEqOlRhq9n0g0hV/UA1/dAsJ9MHqu6t30PdcLzIuL2PsV3fixw3UhUTuqrZ+mPdhEs6SDYOm9o1VeM6kfE9FfqtwNU5pUKt+wJNRXuRqZq46KlmYBpOkFEv/HqroVVFh25gmpGfVthry3hVP2gk1ebOeV8DAHBRbG3vvFntdNrvT7EwsOHMmQ8VAAB0jcnSAAAAAAAAAAAAAAAAAAAAAADgAjiL6/8onE0hfj3PpfXeVNAXYScctpC5GN24eIWxh46Pp31sAnC6fgoAAP//WHxK5g==") 30.211881814s ago: executing program 5 (id=3058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc8a88000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 29.179663812s ago: executing program 5 (id=3061): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 29.132919337s ago: executing program 3 (id=3062): r0 = socket$igmp(0x2, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xbc}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) getsockopt$MRT(r0, 0x0, 0x53, 0xffffffffffffffff, &(0x7f0000000000)=0xff00) 27.655550571s ago: executing program 5 (id=3066): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000280)={0x2, 0x1, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000047c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000037c0)=""/4096, 0x82, 0x1000, 0x1, 0xe36a}, 0x28) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0xffffffff, 0x1, {0x0}}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) write(r5, &(0x7f0000000000)="0aa9e544", 0x4) r6 = openat(0xffffffffffffff9c, 0x0, 0x10042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x1000000000007) 14.952988349s ago: executing program 1 (id=3088): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 11.739582905s ago: executing program 34 (id=3066): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000280)={0x2, 0x1, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000047c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000037c0)=""/4096, 0x82, 0x1000, 0x1, 0xe36a}, 0x28) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0xffffffff, 0x1, {0x0}}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) write(r5, &(0x7f0000000000)="0aa9e544", 0x4) r6 = openat(0xffffffffffffff9c, 0x0, 0x10042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x1000000000007) 11.08963859s ago: executing program 1 (id=3093): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x4, 0x80a00) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x88) 10.864355084s ago: executing program 0 (id=3094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fcffffff0000000003000008850000002800000085000000a0"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf, r0, 0x4b36baea9e1c7e99}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000126bd700001b133d62ec562bab7670a5b99ea33d7"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000500)={0x0, 0x12d9, 0x20, 0x3, 0xe9}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r5}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r10, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 8.399259373s ago: executing program 0 (id=3095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) listen(r1, 0x10001) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 7.794585494s ago: executing program 6 (id=3097): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x0, 0x3401f7f1, 0x700000, 0xdae, 0x1a, "74e2e5213806c189dea55d031bfbf0f6ed1c08"}) 7.492089339s ago: executing program 6 (id=3098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000e4ffffffffff0500000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 6.532558482s ago: executing program 6 (id=3099): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) 6.080733709s ago: executing program 1 (id=3100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x8000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x176, [0x0, 0x200027c0, 0x200029ec, 0x20002b82], 0x0, 0x0, &(0x7f00000027c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x60, 0x8917, 'veth1_to_bridge\x00', 'nicvf0\x00', 'veth1_to_batadv\x00', 'veth0_to_bond\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x2, 0x4, 0x0, 0x0, "eda2aededb46cf1cd942696e782c84e94c8aadd296787439ae1c0ee400ec150796e9178168e0c3d3cf5f02b734591749de3428d7ecf71ea2fc50442b82d939e6"}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x1ee) 5.980639625s ago: executing program 0 (id=3101): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 5.019045959s ago: executing program 6 (id=3102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.481641846s ago: executing program 1 (id=3103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fcffffff0000000003000008850000002800000085000000a0"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xf, r0, 0x4b36baea9e1c7e99}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000126bd700001b133d62ec562bab7670a5b99ea33d7"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000500)={0x0, 0x12d9, 0x20, 0x3, 0xe9}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r5}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r10, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 2.37932662s ago: executing program 0 (id=3104): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x11, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888", 0x0, 0x1200}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="4c00000011001600001100020004040002000400200000", 0x17) 1.355306051s ago: executing program 1 (id=3105): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x5}}, 0x44) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) socket$inet_tcp(0x2, 0x1, 0x0) 1.086658635s ago: executing program 0 (id=3106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0), 0x0) 919.896124ms ago: executing program 6 (id=3107): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="2c736d61636b667364656630233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0x0, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xfffffff7ffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) socket(0x10, 0x2, 0x4) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)={[{@resuid}, {@minixdf}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5c2, &(0x7f0000000600)="$eJzs3V2IXGcdB+D/mdlJ87E1aWy1rbFZDbWB0JnNZhMS8cISP2pNakXxIhTCkp3OhszurNkJdKeCLd4UBRG8EUGo2AsrooHcVEptL1q8UVDqB5UaF1QQoWilIII6cuZjMzaTbHQ/Du55Hji773nP2Xnf2eE358yc95wTQG6NpT+SiNGIuBQRO7uz/7nCWPdX69DFmXRKot3+1J+TznrThy7O9Fft/92O9MdIxNaI2H08iX2lq9tdWGydm6rXq+d785Xm7HxlYbF179nZqVq1Vp07fHTy2MSRyaOTa/dcx3+y/bY/3P3g0tMv/e0f3/jVke+l/R3tLRt8HmtlLMZ6/5NS3DJQP5JEPLDWjWWk2H2p4+6BumQkww5xw9rt3d9NX7+3R8S+Tv53RjG6L96rzz38153xi/uz7iOwftp9wxe/0QY2rUJnHzgplCOiWy4UyuXuPvytsb1Qbyw0DzzSuDA33d1X3hWlwiNn69Xx3meFXVFK0vmDnfKV+Ym3zB+K6OwDP1nc1pkvn2nUpzf6zQ7oGI24fOmzZ7bseEv+/1js5h/YvNL8//zlZ19Iy28Ws+4NsJHS/H/nzdmPh/xD7sg/5Jf8Q37JP+SX/EN+yT/kl/xDfsk/5Jf8Q37JP+RXP/8PnTwZD5082W71zn+fa9TOnpuZPzYxXp69cKZ8pnF+vlxrNGqdM3ZmV37ceqMxf3AiLjxaaVYXmpWFxdbp2caFuebpznn9p6tDLgUAZODU0tYHbtn74qtJRDz+/m2dKbWlt1xWYXNrt5PI+hxkIBs++kN+uVQb5JfP+ECywvKt11pQX/u+ABujkHUHgMzcc4fjf5BXvv+H/PL9P+SXfXzA9/+QP77/h/wavcb9v24euHfXeES8LSJ+XCzd1L/XF/D/5fYdV8qjEZcvf+szleX7cCsoKCgsF7J8pwI2wpXQZ90TICvThy7O9Kc1fNjrHlZ4vraGLQH/tdfv6w4CSnPf6k3dJSPLxwZK6zRO6LUnI8biB795av9MMZ2i9z60Dk0BQzz+RETcPmz7n3SODezqrbe7u1rcGhG3RcQ7IuKdq2z7a59M8/9ydbBO/mHj3Gj+74iIuyLizoh4V0TsiYh3r7Ltn11K8//LbYN18g/58LmXsu4BkJWPPZt1D4CsnDLGAHLr249l3QMgK899P+seAFn58itZ9wDy7cX7ImJ82PG/Qud4f1+pd13Am3rXAtgWEdsjYkfvHMKbe+cI7hw4ZriS05+IGIu7fjhY5/gfbJz++L/WVeP/Csvj/4oRsXcVbTz/gdEvDauf2pPm/+nH+uP/0iltvz8WEFhfrz8RcefQ/CfLY36TSHMa8Z7/sY2xzy89M6z+lQfTxy39VP4hG+1vRrwvhue/Ly1VmrPzlYXF1r2d+3jXqnOHj04emzgyeXSy0rlESKV/oZAhTvzljQPD6l+bSPP/9cPyD9lIt//br5H/wf3/966ijeNf/eKpYfWjv0vzv+eF6+e/8Kctyac78/37Ejw61WyePxixJTlxdf3EKjoKm1w/I/0Mpfnfv2/45//dvb9Jt//HI+JD6f5CRPwzIv4VER+OiI9ExEcj4v7rtPmVe2pLw+p/+0ya/6fO2f5DNtL8T6+w/U9//30VbRzY/6MvDKv/4N40/+Vf//7EwyPpJP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa29hsXVuql6vnl/HQtbPEQAAAAAAAPLi3wEAAP//wpg1Fg==") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000001340)={[{@bsdgroups}, {@errors_remount}, {@nombcache}, {@noload}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x460, &(0x7f0000000d80)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000100), 0xfe, 0x5f3, &(0x7f0000000680)="$eJzs3U9vHGcdB/DvbGLHG6R0kyZNQUhY5QBqROI/kQkSElAKslCFKnHp1Uqc2somjewtcnuAgDi3b6EczJkDJxSkHDjzFox6RMDZN6OZnVlvHNe1E+Ndp5+PNPs8M8/MM7/np9knM2NFG+Ara/G9TDxpJ4vX3tko17c257tbm/P3m3qSc0layVSSotz8lySfJ4/SX/L1pmGofEbx6eLtlcefXO2vTdVLtX9x0HGHM4il04+1Ko+rv7kX7m93hNNJLtUljNxO45/7Nr/g9xIAGGdFcma/7Z3kfH2zXj4H9O+K+/fYabadRo9GHQAAAACcgFe2s52NXBh1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCa1L//X9RLq6lPp2h+/3+y3pa6fqo9GXUAAAAAAAAAAHAMvrWd7WzkQrO+U1R/83+jWrlcfX4tH2Y9y1nL9WxkKb30spbZJJ2hjiY3lnq9tdlDHDm375FzJzNeAAAAAAAAAHhJ/T6Lu3//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcVAkZ/pFtVxu6p20ziaZSjJZ7vcoedzUT7Mnow4AAAAATsAr29nORi406ztF9cz/WvXcP5UP8yC9rKaXbpZzp3oX0H/qb21tzne3Nufvl8uz/f7kP0cKo+ox/XcP+595ptrjyuCIxfw8v8q1TOfdrGU1v85SelnOdN6uaksp0qnfXnSaOPeP98dPrb37ZbG+XkXSzt2sVrFdT7tuaVVjqPY5+Iy/K7NT/Kh2yBzdqctyRL+oy/HQqcY+McjITJ37MhsXD87EEa+TvWeaTWvwDury8eX8XFM5X5dlrt8e55xPzA1dfa8dnIlkZu7fD1e6D+6t3F2/Nj5Dek57r4n5oUxcPXImdnZ2fnviQzgmk3U2+rPo0WbLN6pjL2Q1v8wHuZPl3MpMbmUhNzOfhfwgC0N5vXKI71rraPPbt79bVyaS/Kwux0OZ14tDeR2e6TpV2/CW/w6Ou3T8/wqc/UZdKS/Wt8ZuRrq4Z25urpdXn87E2T2H/nGn/FzvPri3trL08JDn+05dlhn46fNlYm8cx6S8Xi4Nun/66ijbXt23bbZquzxoaz3TdmXQ9mXf1Mn6Hu7Znuaqtqv7ts1Xba8PtQ3f5dzOB+kO7kIAGGPn3zw/2f5X+x/tz9p/aK+035l669ytc9+czMTfz/71zJ9bf2r9sHgzn+U3u8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA81v/6ON7S93u8pqKyugrU0kOu3Pzu0+jjvklreyZKCZHMDkB/1c3evcf3lj/6OPvrd5fen/5/eUHN2cX5m7enFn4/q0bd1e7yzP9z1GHCQAco92b/lFHAgAAAAAAAAAAAAAAfJGT+O/Eox4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwclt8LxNPUmR25vpMub61Od8tl6a+u+dUkqKs/C3J58mj9Jd0hrorvug8xaeLt1cef3J1t6+pZv/ioOMO56lYWntietH+5l64v90RTie5VJcwcv8LAAD//1dWAHo=") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000840)=""/73, 0x49) getdents(r3, 0xfffffffffffffffd, 0x58) 290.323938ms ago: executing program 1 (id=3108): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x4, 0x80a00) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x88) 278.45029ms ago: executing program 0 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) listen(r1, 0x10001) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 0s ago: executing program 6 (id=3110): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) kernel console output (not intermixed with test programs): 8/0x100 [ 639.418264][T12518] ? blk_alloc_queue+0x2f/0x690 [ 639.418288][T12518] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 639.418324][T12518] ? blk_alloc_queue+0x2f/0x690 [ 639.418356][T12518] blk_alloc_queue+0x2f/0x690 [ 639.418387][T12518] __blk_alloc_disk+0xe3/0x1d0 [ 639.418439][T12518] ? __pfx___blk_alloc_disk+0x10/0x10 [ 639.418491][T12518] ? __raw_spin_lock_init+0x45/0x100 [ 639.418532][T12518] dm_create+0x476/0xf70 [ 639.418566][T12518] dev_create+0x1f7/0x400 [ 639.418592][T12518] ? __pfx_dev_create+0x10/0x10 [ 639.418615][T12518] ? __might_fault+0xaf/0x130 [ 639.418652][T12518] dm_ctl_ioctl+0x9ec/0xe10 [ 639.418685][T12518] ? __pfx_dev_create+0x10/0x10 [ 639.418708][T12518] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 639.418766][T12518] ? __fget_files+0x2a/0x420 [ 639.418792][T12518] ? bpf_lsm_file_ioctl+0x9/0x20 [ 639.418818][T12518] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 639.418841][T12518] __se_sys_ioctl+0xfc/0x170 [ 639.418883][T12518] do_syscall_64+0x166/0x520 [ 639.418913][T12518] ? trace_irq_disable+0x3b/0x140 [ 639.418940][T12518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.418962][T12518] ? clear_bhb_loop+0x70/0xc0 [ 639.418989][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.419009][T12518] RIP: 0033:0x7f467779e159 [ 639.419030][T12518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.419049][T12518] RSP: 002b:00007f4678634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.419073][T12518] RAX: ffffffffffffffda RBX: 00007f4677a25fa0 RCX: 00007f467779e159 [ 639.419089][T12518] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 639.419103][T12518] RBP: 00007f467783506b R08: 0000000000000000 R09: 0000000000000000 [ 639.419116][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.419129][T12518] R13: 00007f4677a26038 R14: 00007f4677a25fa0 R15: 00007ffd96ee54d8 [ 639.419163][T12518] [ 639.633415][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 640.746918][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 641.004785][T12457] syzkaller1: entered promiscuous mode [ 641.004807][T12457] syzkaller1: entered allmulticast mode [ 642.317861][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 643.736046][T12581] syzkaller1: entered promiscuous mode [ 643.736072][T12581] syzkaller1: entered allmulticast mode [ 643.972266][ T33] kauditd_printk_skb: 8 callbacks suppressed [ 643.972297][ T33] audit: type=1326 audit(1790207756.500:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 643.972556][ T33] audit: type=1326 audit(1790207756.500:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 644.036563][ T33] audit: type=1326 audit(1790207756.500:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 644.037032][ T33] audit: type=1326 audit(1790207756.570:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 644.037255][ T33] audit: type=1326 audit(1790207756.570:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 644.037560][ T33] audit: type=1326 audit(1790207756.570:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 644.103462][ T33] audit: type=1326 audit(1790207756.570:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 644.103527][ T33] audit: type=1326 audit(1790207756.600:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 644.103572][ T33] audit: type=1326 audit(1790207756.600:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.3.1932" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 646.212690][T12628] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 647.527365][T12651] syzkaller1: entered promiscuous mode [ 647.527392][T12651] syzkaller1: entered allmulticast mode [ 649.129488][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 649.938906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 653.062445][T12728] loop2: detected capacity change from 0 to 7 [ 653.077697][T12728] loop2: [ 653.077729][T12728] loop2: partition table partially beyond EOD, truncated [ 654.592776][ T5616] kernel read not supported for file /vga_arbiter (pid: 5616 comm: kworker/1:3) [ 654.761062][T12755] loop4: detected capacity change from 0 to 512 [ 654.766564][T12755] EXT4-fs: Ignoring removed orlov option [ 654.975031][T12755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.975150][T12755] ext4 filesystem being mounted at /407/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.214965][T12755] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1978: corrupted xattr block 33: overlapping e_value [ 655.957033][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.906617][T12783] syzkaller0: entered promiscuous mode [ 657.906647][T12783] syzkaller0: entered allmulticast mode [ 659.901118][T12816] loop3: detected capacity change from 0 to 4096 [ 659.915730][T12816] EXT4-fs: Ignoring removed nobh option [ 659.950792][T12816] EXT4-fs (loop3): Test dummy encryption mode enabled [ 659.994223][T12816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.093743][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.576658][T12846] FAULT_INJECTION: forcing a failure. [ 664.576658][T12846] name failslab, interval 1, probability 0, space 0, times 0 [ 664.576697][T12846] CPU: 1 UID: 0 PID: 12846 Comm: syz.4.2003 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 664.576728][T12846] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 664.576737][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 664.576749][T12846] Call Trace: [ 664.576758][T12846] [ 664.576767][T12846] dump_stack_lvl+0xe8/0x150 [ 664.576809][T12846] should_fail_ex+0x3eb/0x540 [ 664.576845][T12846] should_failslab+0xa8/0x100 [ 664.576878][T12846] __kmalloc_cache_noprof+0x9e/0x600 [ 664.576901][T12846] ? rdma_resolve_addr+0x868/0x2110 [ 664.577007][T12846] ? rdma_resolve_addr+0x868/0x2110 [ 664.577044][T12846] rdma_resolve_addr+0x868/0x2110 [ 664.577080][T12846] ? lockdep_hardirqs_on+0x7b/0x110 [ 664.577120][T12846] ? do_raw_spin_lock+0x12b/0x2f0 [ 664.577144][T12846] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 664.577175][T12846] ? pcpu_alloc+0x10/0x310 [ 664.577265][T12846] ? __raw_spin_lock_init+0x45/0x100 [ 664.577302][T12846] ? rdma_restrack_set_name+0x24/0x200 [ 664.577387][T12846] ? in_aton+0x3b4/0x450 [ 664.577474][T12846] rdma_create_trans+0x960/0x1350 [ 664.577570][T12846] ? __pfx_rdma_create_trans+0x10/0x10 [ 664.577621][T12846] ? __kmalloc_cache_noprof+0x31c/0x600 [ 664.577643][T12846] ? __kmalloc_cache_noprof+0x148/0x600 [ 664.577673][T12846] p9_client_create+0x3e5/0xc60 [ 664.577702][T12846] ? __pfx_p9_client_create+0x10/0x10 [ 664.577746][T12846] v9fs_session_init+0x46/0xd40 [ 664.577824][T12846] ? __kmalloc_cache_noprof+0x148/0x600 [ 664.577844][T12846] ? v9fs_get_tree+0xaa/0xac0 [ 664.577895][T12846] ? v9fs_get_tree+0xaa/0xac0 [ 664.577930][T12846] v9fs_get_tree+0xbd/0xac0 [ 664.577958][T12846] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 664.577990][T12846] ? __pfx_v9fs_get_tree+0x10/0x10 [ 664.578031][T12846] vfs_get_tree+0x92/0x2a0 [ 664.578068][T12846] do_new_mount+0x319/0xdc0 [ 664.578106][T12846] ? __pfx_do_new_mount+0x10/0x10 [ 664.578140][T12846] ? ns_capable+0x84/0xe0 [ 664.578172][T12846] ? path_mount+0x647/0x1050 [ 664.578207][T12846] ? user_path_at+0xd4/0x160 [ 664.578232][T12846] __se_sys_mount+0x31d/0x420 [ 664.578260][T12846] ? __pfx___se_sys_mount+0x10/0x10 [ 664.578287][T12846] ? __x64_sys_mount+0x20/0xc0 [ 664.578310][T12846] do_syscall_64+0x166/0x520 [ 664.578339][T12846] ? trace_irq_disable+0x3b/0x140 [ 664.578367][T12846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.578391][T12846] ? clear_bhb_loop+0x70/0xc0 [ 664.578417][T12846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.578438][T12846] RIP: 0033:0x7f50f8b9e159 [ 664.578459][T12846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.578477][T12846] RSP: 002b:00007f50f9a34028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 664.578502][T12846] RAX: ffffffffffffffda RBX: 00007f50f8e25fa0 RCX: 00007f50f8b9e159 [ 664.578518][T12846] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000200000000040 [ 664.578533][T12846] RBP: 00007f50f8c3506b R08: 00002000000001c0 R09: 0000000000000000 [ 664.578546][T12846] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.578558][T12846] R13: 00007f50f8e26038 R14: 00007f50f8e25fa0 R15: 00007ffd69a13008 [ 664.578592][T12846] [ 666.999407][T12869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2010'. [ 667.118566][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 667.878051][T12872] overlayfs: failed to resolve './file0/file1': -2 [ 668.077307][T12880] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 669.686500][T12900] ip_tables: iptables: counters copy to user failed while replacing table [ 672.072381][ T33] audit: type=1326 audit(1790207784.600:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.072440][ T33] audit: type=1326 audit(1790207784.600:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.095177][ T33] audit: type=1326 audit(1790207784.620:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.102688][ T33] audit: type=1326 audit(1790207784.630:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.108636][ T33] audit: type=1326 audit(1790207784.640:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.108879][ T33] audit: type=1326 audit(1790207784.640:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.109119][ T33] audit: type=1326 audit(1790207784.640:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.115303][ T33] audit: type=1326 audit(1790207784.640:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.115354][ T33] audit: type=1326 audit(1790207784.640:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.115784][ T33] audit: type=1326 audit(1790207784.640:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.0.2020" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f1879e159 code=0x7ffc0000 [ 672.131436][T12923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 685.208849][T13096] loop2: detected capacity change from 0 to 2048 [ 685.964323][T13096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.964394][T13096] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.180252][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.180317][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.211137][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.616357][T13136] loop4: detected capacity change from 0 to 512 [ 689.720942][T13136] EXT4-fs (loop4): 1 truncate cleaned up [ 689.722962][T13136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.868531][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.160953][T13168] loop4: detected capacity change from 0 to 512 [ 691.199136][T13168] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 691.218455][T13168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 691.218598][T13168] System zones: 1-12 [ 691.218876][T13168] EXT4-fs (loop4): orphan cleanup on readonly fs [ 691.281255][T13168] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.2100: bg 0: block 361: padding at end of block bitmap is not set [ 691.281293][T13168] loop4: lost filesystem error report for type 5 error -117 [ 691.287521][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 691.287545][ C0] EXT4-fs (loop4): initial error at time 1790207803: ext4_validate_block_bitmap:445 [ 691.287567][ C0] EXT4-fs (loop4): last error at time 1790207803: ext4_validate_block_bitmap:445 [ 691.346952][T13168] EXT4-fs (loop4): Remounting filesystem read-only [ 691.354803][T13168] EXT4-fs (loop4): 1 truncate cleaned up [ 691.357103][T13168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 691.549110][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 696.980132][T13256] syzkaller0: entered promiscuous mode [ 696.980164][T13256] syzkaller0: entered allmulticast mode [ 697.639633][T13264] trusted_key: encrypted_key: insufficient parameters specified [ 697.640237][T13264] trusted_key: encrypted_key: keylen parameter is missing [ 702.276918][T13309] overlay: Unknown parameter 'audit' [ 702.651100][T13290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.119956][T13314] trusted_key: encrypted_key: insufficient parameters specified [ 703.120480][T13314] trusted_key: encrypted_key: keylen parameter is missing [ 705.559937][T13320] loop5: detected capacity change from 0 to 7 [ 705.603396][T13320] Dev loop5: unable to read RDB block 7 [ 705.603447][T13320] loop5: unable to read partition table [ 705.603697][T13320] loop5: partition table beyond EOD, truncated [ 705.603746][T13320] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 705.772755][T13322] loop3: detected capacity change from 0 to 4096 [ 705.781289][T13322] EXT4-fs: Ignoring removed nobh option [ 705.793414][T13322] EXT4-fs (loop3): Test dummy encryption mode enabled [ 705.830685][T13322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.808101][T13351] trusted_key: encrypted_key: insufficient parameters specified [ 706.808609][T13351] trusted_key: encrypted_key: keylen parameter is missing [ 707.447841][T13356] loop2: detected capacity change from 0 to 8192 [ 707.619730][T13356] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 708.890402][T13364] overlay: Unknown parameter 'audit' [ 709.155639][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.122294][T13393] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 712.122368][T13393] device-mapper: ioctl: error adding target to table [ 712.881047][T13403] loop4: detected capacity change from 0 to 4096 [ 712.882268][T13403] EXT4-fs: Ignoring removed nobh option [ 712.886255][T13403] EXT4-fs (loop4): Test dummy encryption mode enabled [ 712.950237][T13403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.827639][T13423] overlay: Unknown parameter 'audit' [ 715.572956][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.104988][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2180'. [ 718.129899][T13443] syzkaller1: entered promiscuous mode [ 718.129926][T13443] syzkaller1: entered allmulticast mode [ 718.639613][T13455] loop3: detected capacity change from 0 to 4096 [ 718.644264][T13455] EXT4-fs: Ignoring removed nobh option [ 718.663155][T13455] EXT4-fs (loop3): Test dummy encryption mode enabled [ 718.692272][T13455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.076281][T13473] loop1: detected capacity change from 0 to 4096 [ 721.103331][T13473] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 721.103356][T13473] EXT4-fs (loop1): Test dummy encryption mode enabled [ 721.379522][T13479] overlay: Unknown parameter 'audit' [ 721.401612][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.502032][T13473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.365525][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'. [ 724.095432][T13491] loop4: detected capacity change from 0 to 1024 [ 724.097304][T13491] EXT4-fs (loop4): unable to read superblock [ 724.162393][T13473] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 724.229483][ T84] Bluetooth: hci5: Frame reassembly failed (-84) [ 724.282260][ T5850] Bluetooth: hci5: Frame reassembly failed (-84) [ 724.913589][T13491] loop4: detected capacity change from 0 to 1024 [ 724.923618][T13491] EXT4-fs: Ignoring removed orlov option [ 724.971188][T13491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.102082][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2195'. [ 725.426164][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.460512][T13509] syzkaller1: entered promiscuous mode [ 725.460540][T13509] syzkaller1: entered allmulticast mode [ 725.759390][T13521] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 725.759419][T13521] overlayfs: failed to set xattr on upper [ 725.759429][T13521] overlayfs: ...falling back to redirect_dir=nofollow. [ 725.759438][T13521] overlayfs: ...falling back to index=off. [ 725.759446][T13521] overlayfs: ...falling back to uuid=null. [ 726.109343][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 726.846279][T13537] overlay: Unknown parameter 'audit' [ 728.265184][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.119865][T13557] FAULT_INJECTION: forcing a failure. [ 731.119865][T13557] name failslab, interval 1, probability 0, space 0, times 0 [ 731.119905][T13557] CPU: 0 UID: 0 PID: 13557 Comm: syz.3.2211 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 731.119933][T13557] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 731.119940][T13557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 731.119951][T13557] Call Trace: [ 731.119959][T13557] [ 731.119966][T13557] dump_stack_lvl+0xe8/0x150 [ 731.119997][T13557] should_fail_ex+0x3eb/0x540 [ 731.120022][T13557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 731.120044][T13557] should_failslab+0xa8/0x100 [ 731.120066][T13557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 731.120082][T13557] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 731.120117][T13557] ? sock_alloc_inode+0x2c/0x1a0 [ 731.120133][T13557] ? sock_alloc_inode+0x2c/0x1a0 [ 731.120149][T13557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 731.120174][T13557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 731.120190][T13557] sock_alloc_inode+0x2c/0x1a0 [ 731.120207][T13557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 731.120225][T13557] alloc_inode+0x6a/0x1b0 [ 731.120249][T13557] __sock_create+0x127/0xac0 [ 731.120332][T13557] __sys_socket+0xd6/0x1b0 [ 731.120354][T13557] __x64_sys_socket+0x7a/0x90 [ 731.120381][T13557] do_syscall_64+0x166/0x520 [ 731.120403][T13557] ? trace_irq_disable+0x3b/0x140 [ 731.120423][T13557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.120438][T13557] ? clear_bhb_loop+0x70/0xc0 [ 731.120458][T13557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.120473][T13557] RIP: 0033:0x7f467779e159 [ 731.120489][T13557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.120503][T13557] RSP: 002b:00007f4678634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 731.120522][T13557] RAX: ffffffffffffffda RBX: 00007f4677a25fa0 RCX: 00007f467779e159 [ 731.120549][T13557] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 731.120559][T13557] RBP: 00007f467783506b R08: 0000000000000000 R09: 0000000000000000 [ 731.120570][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.120580][T13557] R13: 00007f4677a26038 R14: 00007f4677a25fa0 R15: 00007ffd96ee54d8 [ 731.120607][T13557] [ 731.120623][T13557] socket: no more sockets [ 731.232009][T13562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2212'. [ 731.244090][T13562] syzkaller1: entered promiscuous mode [ 731.244113][T13562] syzkaller1: entered allmulticast mode [ 733.236462][T13600] misc userio: Invalid payload size [ 733.628365][T13603] overlay: Unknown parameter 'audit' [ 734.453543][ T5616] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 734.932940][ T5616] usb 3-1: Using ep0 maxpacket: 8 [ 734.970468][ T5616] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 735.634647][ T5616] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 735.634980][ T5616] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 735.635025][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 735.635053][ T5616] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.635079][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.635104][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 735.635131][ T5616] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 735.635168][ T5616] usb 3-1: config 168 interface 0 has no altsetting 0 [ 735.835088][ T5616] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 735.835136][ T5616] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 735.835175][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 735.835203][ T5616] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.835227][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.835253][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 735.835287][ T5616] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 735.835313][ T5616] usb 3-1: config 168 interface 0 has no altsetting 0 [ 735.972652][ T5616] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 735.972700][ T5616] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 735.972741][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 735.972767][ T5616] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.972793][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.972818][ T5616] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 735.972844][ T5616] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 735.972871][ T5616] usb 3-1: config 168 interface 0 has no altsetting 0 [ 736.197144][ T5616] usb 3-1: string descriptor 0 read error: -22 [ 736.197318][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.213731][ T5616] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 736.428676][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2231'. [ 736.433149][T13618] syzkaller1: entered promiscuous mode [ 736.433173][T13618] syzkaller1: entered allmulticast mode [ 736.658342][ T5616] usb 3-1: USB disconnect, device number 14 [ 736.807256][T13630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2237'. [ 738.013075][T13640] loop4: detected capacity change from 0 to 8192 [ 738.085180][T13640] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 739.486843][T13649] misc userio: Invalid payload size [ 740.325031][T13649] overlay: Unknown parameter 'audit' [ 743.969069][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 743.988840][T13664] syzkaller1: entered promiscuous mode [ 743.988864][T13664] syzkaller1: entered allmulticast mode [ 744.248949][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.254062][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.855699][T13683] loop1: detected capacity change from 0 to 8192 [ 745.618179][T13683] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 747.018614][T13696] syzkaller0: entered promiscuous mode [ 747.018644][T13696] syzkaller0: entered allmulticast mode [ 747.563772][T13706] misc userio: Invalid payload size [ 747.621293][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.622542][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.689205][T13708] overlay: Unknown parameter 'audit' [ 754.287412][T13721] syzkaller0: entered promiscuous mode [ 754.287487][T13721] syzkaller0: entered allmulticast mode [ 754.636513][T13746] loop4: detected capacity change from 0 to 512 [ 754.639549][T13746] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 755.398274][T13746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 755.398541][T13746] EXT4-fs (loop4): orphan cleanup on readonly fs [ 755.398561][T13746] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.2266: bad orphan inode 267 [ 755.398585][T13746] loop4: lost filesystem error report for type 5 error -117 [ 755.407510][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 755.407540][ C1] EXT4-fs (loop4): initial error at time 1790207867: ext4_orphan_get:1429 [ 755.407567][ C1] EXT4-fs (loop4): last error at time 1790207867: ext4_orphan_get:1429 [ 755.903704][T13746] EXT4-fs (loop4): Remounting filesystem read-only [ 755.905842][T13746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 756.517207][T13767] overlay: Unknown parameter 'audit' [ 757.206010][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 764.270142][T13827] loop2: detected capacity change from 0 to 512 [ 764.330882][T13826] loop3: detected capacity change from 0 to 8192 [ 764.769708][T13827] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 764.775546][T13826] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 764.795763][T13827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 764.796049][T13827] EXT4-fs (loop2): orphan cleanup on readonly fs [ 764.796069][T13827] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2283: bad orphan inode 267 [ 764.796092][T13827] loop2: lost filesystem error report for type 5 error -117 [ 764.796884][T13827] EXT4-fs (loop2): Remounting filesystem read-only [ 764.799083][T13827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 765.206998][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 765.939545][T13832] overlay: Unknown parameter 'audit' [ 766.285855][T13838] lapbether: lapb_data_request error - 4 [ 769.451840][T13858] syzkaller0: entered promiscuous mode [ 769.451864][T13858] syzkaller0: entered allmulticast mode [ 770.590310][T13863] syzkaller0: entered promiscuous mode [ 770.590336][T13863] syzkaller0: entered allmulticast mode [ 770.711689][T13868] lapbether: lapb_data_request error - 4 [ 771.211617][T13883] overlay: Unknown parameter 'audit' [ 774.955402][T13893] syzkaller0: entered promiscuous mode [ 774.955433][T13893] syzkaller0: entered allmulticast mode [ 776.687633][ T84] IPVS: starting estimator thread 0... [ 776.837572][T13929] IPVS: using max 24 ests per chain, 57600 per kthread [ 779.764291][T13958] overlay: Unknown parameter 'audit' [ 782.210158][T13913] syzkaller0: entered promiscuous mode [ 782.210189][T13913] syzkaller0: entered allmulticast mode [ 786.472848][T13994] overlay: Unknown parameter 'audit' [ 788.536169][T13999] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 788.536287][T13999] netlink: 'syz.0.2328': attribute type 2 has an invalid length. [ 788.536330][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2328'. [ 790.392113][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 790.407385][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 790.409359][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 790.410326][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 790.411774][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.497842][ T5615] Bluetooth: hci5: command tx timeout [ 792.976071][T14048] loop5: detected capacity change from 0 to 7 [ 792.987971][T14048] Dev loop5: unable to read RDB block 7 [ 792.988037][T14048] loop5: unable to read partition table [ 792.988274][T14048] loop5: partition table beyond EOD, truncated [ 792.988294][T14048] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 794.587609][ T5615] Bluetooth: hci5: command tx timeout [ 795.203581][T14067] overlay: Unknown parameter 'audit' [ 795.241036][T14069] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 795.241070][T14069] netlink: 'syz.1.2343': attribute type 2 has an invalid length. [ 795.241084][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2343'. [ 795.319784][ T8405] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.743444][T14075] syzkaller0: entered promiscuous mode [ 795.743473][T14075] syzkaller0: entered allmulticast mode [ 795.805189][ T8405] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.669003][ T5615] Bluetooth: hci5: command tx timeout [ 798.747572][ T5615] Bluetooth: hci5: command tx timeout [ 800.331925][T14109] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 800.331970][T14109] netlink: 'syz.0.2354': attribute type 2 has an invalid length. [ 800.332019][T14109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2354'. [ 801.882813][ T8405] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.023949][T14119] overlay: Unknown parameter 'audit' [ 802.148138][ T8405] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.090146][T14036] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.091799][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.099911][T14036] bridge_slave_0: entered allmulticast mode [ 804.106210][T14036] bridge_slave_0: entered promiscuous mode [ 804.133784][T14036] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.134281][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.135226][T14036] bridge_slave_1: entered allmulticast mode [ 804.183580][T14036] bridge_slave_1: entered promiscuous mode [ 804.645759][ T8405] bridge_slave_1: left allmulticast mode [ 804.645812][ T8405] bridge_slave_1: left promiscuous mode [ 804.648093][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.746483][ T8405] bridge_slave_0: left allmulticast mode [ 804.746512][ T8405] bridge_slave_0: left promiscuous mode [ 804.746770][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.227082][ T8405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.249365][ T8405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.251568][ T8405] bond0 (unregistering): Released all slaves [ 805.282616][ T8405] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 805.282647][ T8405] wireguard0: left promiscuous mode [ 805.284431][ T8405] bond1 (unregistering): Released all slaves [ 805.349449][T14036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.388485][T14036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.554231][T14036] team0: Port device team_slave_0 added [ 805.574115][T14036] team0: Port device team_slave_1 added [ 805.875807][T14180] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 805.875835][T14180] device-mapper: ioctl: error adding target to table [ 806.069406][T14036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.069425][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.069448][T14036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.073627][T14036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.073644][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.073666][T14036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.492630][T14036] hsr_slave_0: entered promiscuous mode [ 806.493756][T14036] hsr_slave_1: entered promiscuous mode [ 806.494564][T14036] debugfs: 'hsr0' already exists in 'hsr' [ 806.494584][T14036] Cannot create hsr debugfs directory [ 807.644482][T14200] overlay: Unknown parameter 'audit' [ 807.877911][ T8405] hsr_slave_0: left promiscuous mode [ 807.880821][ T8405] hsr_slave_1: left promiscuous mode [ 807.881982][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.882023][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.893915][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.893940][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.017842][ T8405] veth1_macvtap: left promiscuous mode [ 808.017921][ T8405] veth0_macvtap: left promiscuous mode [ 808.018116][ T8405] veth1_vlan: left promiscuous mode [ 808.018222][ T8405] veth0_vlan: left promiscuous mode [ 808.708853][ T8405] team0 (unregistering): Port device team_slave_1 removed [ 808.733818][ T8405] team0 (unregistering): Port device team_slave_0 removed [ 808.867978][T14208] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 808.872723][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 809.060685][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.060749][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.986925][T14263] overlay: Unknown parameter 'audit' [ 813.712417][T14036] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 813.780895][T14036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.781934][T14036] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 813.813106][T14036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.826072][T14036] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 813.894372][T14036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.907260][T14036] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 813.931979][T14036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.064679][T14290] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 814.332349][T14036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.413852][T14036] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.473097][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.473221][ T8405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.535456][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 814.571475][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.571597][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.611295][T14296] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 814.611322][T14296] device-mapper: ioctl: error adding target to table [ 816.043309][T14344] overlay: Unknown parameter 'audit' [ 816.374158][T14036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.520159][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 817.476030][T14036] veth0_vlan: entered promiscuous mode [ 817.519255][T14036] veth1_vlan: entered promiscuous mode [ 817.572862][T14376] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 817.572888][T14376] device-mapper: ioctl: error adding target to table [ 817.685460][T14036] veth0_macvtap: entered promiscuous mode [ 817.759700][T14036] veth1_macvtap: entered promiscuous mode [ 817.862884][T14036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.910749][T14036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.083221][ T8405] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.084031][ T8405] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.084070][ T8405] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.084104][ T8405] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.291123][ T8405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.291150][ T8405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.469107][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 818.568286][T14407] overlay: Unknown parameter 'audit' [ 818.607322][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.607346][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.099149][T14421] overlayfs: missing 'lowerdir' [ 820.057765][T14440] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 820.057793][T14440] device-mapper: ioctl: error adding target to table [ 821.186210][T14453] syzkaller0: entered promiscuous mode [ 821.186494][T14453] syzkaller0: entered allmulticast mode [ 821.436065][T14453] tipc: Started in network mode [ 821.445700][T14453] tipc: Node identity 3e1d7b2202c7, cluster identity 4711 [ 821.549054][T14453] tipc: Enabled bearer , priority 0 [ 821.661082][T14458] tipc: Resetting bearer [ 822.072503][T14452] tipc: Resetting bearer [ 823.051304][T14452] tipc: Disabling bearer [ 823.660786][T14166] tipc: Node number set to 1020951330 [ 823.990151][T14478] overlayfs: missing 'lowerdir' [ 824.500166][T14494] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 824.500194][T14494] device-mapper: ioctl: error adding target to table [ 824.965315][T14507] overlay: Unknown parameter 'audit' [ 825.665760][T14528] overlayfs: missing 'lowerdir' [ 827.411763][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 827.751332][T14578] overlayfs: missing 'lowerdir' [ 828.095531][T14586] FAULT_INJECTION: forcing a failure. [ 828.095531][T14586] name failslab, interval 1, probability 0, space 0, times 0 [ 828.095568][T14586] CPU: 1 UID: 0 PID: 14586 Comm: syz.5.2458 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 828.095599][T14586] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 828.095607][T14586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 828.095619][T14586] Call Trace: [ 828.095627][T14586] [ 828.095636][T14586] dump_stack_lvl+0xe8/0x150 [ 828.095676][T14586] should_fail_ex+0x3eb/0x540 [ 828.095712][T14586] should_failslab+0xa8/0x100 [ 828.095743][T14586] __kmalloc_noprof+0xf9/0x710 [ 828.095763][T14586] ? sock_kmalloc+0xd6/0x160 [ 828.095796][T14586] ? sock_kmalloc+0xd6/0x160 [ 828.095835][T14586] sock_kmalloc+0xd6/0x160 [ 828.095868][T14586] ip6_mc_msfilter+0x773/0xf10 [ 828.095969][T14586] ipv6_set_mcast_msfilter+0x25e/0x310 [ 828.096075][T14586] do_ipv6_setsockopt+0x1203/0x2960 [ 828.096111][T14586] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 828.096149][T14586] ? aa_inet_opt_perm+0x94d/0xcd0 [ 828.096193][T14586] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 828.096232][T14586] ? __raw_spin_lock_init+0x45/0x100 [ 828.096267][T14586] ? do_futex+0x3e7/0x4e0 [ 828.096289][T14586] ? __asan_memcpy+0x40/0x70 [ 828.096311][T14586] ? lock_acquire+0x115/0x350 [ 828.096349][T14586] ? aa_sock_opt_perm+0xe1/0x1e0 [ 828.096381][T14586] ipv6_setsockopt+0x59/0x170 [ 828.096406][T14586] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 828.096461][T14586] do_sock_setsockopt+0x17c/0x1b0 [ 828.096495][T14586] __x64_sys_setsockopt+0x13d/0x1b0 [ 828.096528][T14586] do_syscall_64+0x166/0x520 [ 828.096559][T14586] ? trace_irq_disable+0x3b/0x140 [ 828.096587][T14586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.096608][T14586] ? clear_bhb_loop+0x70/0xc0 [ 828.096632][T14586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.096652][T14586] RIP: 0033:0x7fc7e2b9e159 [ 828.096672][T14586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.096689][T14586] RSP: 002b:00007fc7e3aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 828.096713][T14586] RAX: ffffffffffffffda RBX: 00007fc7e2e25fa0 RCX: 00007fc7e2b9e159 [ 828.096729][T14586] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000005 [ 828.096742][T14586] RBP: 00007fc7e2c3506b R08: 0000000000000310 R09: 0000000000000000 [ 828.096755][T14586] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 828.096767][T14586] R13: 00007fc7e2e26038 R14: 00007fc7e2e25fa0 R15: 00007ffe653d46f8 [ 828.096800][T14586] [ 829.949903][T14616] loop3: detected capacity change from 0 to 4096 [ 829.951192][T14616] EXT4-fs: Ignoring removed nobh option [ 829.961229][T14616] EXT4-fs (loop3): Test dummy encryption mode enabled [ 830.025766][T14616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.437014][T14645] loop1: detected capacity change from 0 to 512 [ 833.203015][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2475'. [ 833.286980][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 833.433574][T14673] overlayfs: failed to resolve './file0/file1': -2 [ 837.722547][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 843.773275][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.927506][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 845.081450][ T10] usb 2-1: New USB device found: idVendor=05c6, idProduct=9211, bcdDevice=0.00 [ 845.105757][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.105785][ T10] usb 2-1: Product: syz [ 845.105799][ T10] usb 2-1: Manufacturer: syz [ 845.105812][ T10] usb 2-1: SerialNumber: syz [ 845.150988][ T10] qcserial 2-1:1.0: Qualcomm USB modem converter detected [ 845.646747][ T10] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 845.707574][ T10] usb 2-1: USB disconnect, device number 17 [ 845.724850][ T10] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 845.725719][ T10] qcserial 2-1:1.0: device disconnected [ 846.888718][T14867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 847.050386][T14871] loop4: detected capacity change from 0 to 8192 [ 847.167356][T14871] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 847.572702][T14875] loop1: detected capacity change from 0 to 512 [ 847.812433][T14875] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 847.812459][T14875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 847.871648][T14875] EXT4-fs (loop1): 1 truncate cleaned up [ 847.905344][T14875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.584486][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.932980][T14887] loop5: detected capacity change from 0 to 7 [ 848.947117][T14887] Dev loop5: unable to read RDB block 7 [ 848.947151][T14887] loop5: AHDI p1 p2 p3 [ 848.947173][T14887] loop5: partition table partially beyond EOD, truncated [ 848.947377][T14887] loop5: p1 start 1818582900 is beyond EOD, truncated [ 848.947513][T14887] loop5: p3 start 335544320 is beyond EOD, truncated [ 857.737055][T14973] loop5: detected capacity change from 0 to 512 [ 857.882629][T14973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.882745][T14973] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.295433][T14036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.678465][T14996] loop4: detected capacity change from 0 to 512 [ 858.707311][T14996] EXT4-fs (loop4): orphan cleanup on readonly fs [ 858.707337][T14996] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 858.726889][T14996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 858.747506][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 858.747530][ C0] EXT4-fs (loop4): initial error at time 1790207971: ext4_mb_generate_buddy:1317 [ 858.747555][ C0] EXT4-fs (loop4): last error at time 1790207971: ext4_mb_generate_buddy:1317 [ 858.767167][T14996] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2545: attempt to clear invalid blocks 2 len 1 [ 858.767381][T14996] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 858.776496][T14996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2545: invalid indirect mapped block 1819239214 (level 0) [ 858.776533][T14996] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 858.777078][T14996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2545: invalid indirect mapped block 1819239214 (level 1) [ 858.777108][T14996] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 858.778858][T14996] EXT4-fs (loop4): 1 truncate cleaned up [ 858.786397][T14996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 858.826304][T14996] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 859.293099][T14996] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.2545: invalid fast symlink length 39 [ 859.318997][T14996] overlayfs: failed to look up (file1) for ino (-117) [ 859.440100][ T5606] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 859.767280][T15011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 859.954199][ T5606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.655820][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 862.678800][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 862.681433][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 862.705081][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 862.707170][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.762497][T15064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2561'. [ 863.605748][T15064] bond0: (slave bond_slave_0): Releasing backup interface [ 863.702468][T15064] bond_slave_0: entered promiscuous mode [ 863.702497][T15064] bond_slave_0: entered allmulticast mode [ 863.754463][T15076] capability: warning: `syz.1.2562' uses deprecated v2 capabilities in a way that may be insecure [ 864.897996][ T5615] Bluetooth: hci0: command tx timeout [ 865.836839][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 865.836858][ T33] audit: type=1326 audit(1790207978.360:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.836904][ T33] audit: type=1326 audit(1790207978.360:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.851099][ T33] audit: type=1326 audit(1790207978.380:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.854059][ T33] audit: type=1326 audit(1790207978.380:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.855896][ T33] audit: type=1326 audit(1790207978.380:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.856099][ T33] audit: type=1326 audit(1790207978.380:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.856304][ T33] audit: type=1326 audit(1790207978.380:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.861478][ T33] audit: type=1326 audit(1790207978.380:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 865.863355][ T33] audit: type=1326 audit(1790207978.390:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.2570" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f467779e159 code=0x7ffc0000 [ 866.977661][ T5615] Bluetooth: hci0: command tx timeout [ 867.197976][ T5713] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 867.350193][ T5713] usb 4-1: New USB device found: idVendor=05c6, idProduct=9211, bcdDevice=0.00 [ 867.373608][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.373639][ T5713] usb 4-1: Product: syz [ 867.373654][ T5713] usb 4-1: Manufacturer: syz [ 867.373668][ T5713] usb 4-1: SerialNumber: syz [ 867.414732][ T5713] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 867.428547][ T5713] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 867.628420][ T5713] usb 4-1: USB disconnect, device number 26 [ 867.649491][ T5713] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 867.654874][ T5713] qcserial 4-1:1.0: device disconnected [ 867.810041][T14927] syz.0.2525 (14927) used greatest stack depth: 18920 bytes left [ 869.057840][ T5615] Bluetooth: hci0: command tx timeout [ 869.193119][T15058] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.193238][T15058] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.198264][T15058] bridge_slave_0: entered allmulticast mode [ 869.205546][T15058] bridge_slave_0: entered promiscuous mode [ 869.220908][T15058] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.221021][T15058] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.221199][T15058] bridge_slave_1: entered allmulticast mode [ 869.234897][T15058] bridge_slave_1: entered promiscuous mode [ 869.375305][T15058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.391758][T15058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.394416][T15161] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 869.606081][T15058] team0: Port device team_slave_0 added [ 869.617323][T15058] team0: Port device team_slave_1 added [ 869.771447][T15058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.771468][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.771496][T15058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.775250][T15058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.775268][T15058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.775293][T15058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.944404][T15174] loop3: detected capacity change from 0 to 1024 [ 869.993927][T15058] hsr_slave_0: entered promiscuous mode [ 870.003780][T15058] hsr_slave_1: entered promiscuous mode [ 870.015166][T15174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 870.015286][T15174] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.193452][T15174] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.2582: lblock 3 mapped to illegal pblock 3 (length 3) [ 870.245992][T15174] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 870.246031][T15174] EXT4-fs (loop3): This should not happen!! Data will be lost [ 870.246031][T15174] [ 870.283354][T15181] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.2582: Freeing blocks not in datazone - block = 3, count = 3 [ 870.310936][T15181] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.2582: Freeing blocks not in datazone - block = 0, count = 16 [ 870.467289][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 870.520382][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.520455][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.713370][T15188] syzkaller0: entered promiscuous mode [ 870.713394][T15188] syzkaller0: entered allmulticast mode [ 871.063652][T15194] loop3: detected capacity change from 0 to 512 [ 871.079281][T15194] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 871.103949][T15194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 871.104227][T15194] EXT4-fs (loop3): orphan cleanup on readonly fs [ 871.104246][T15194] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2584: bad orphan inode 267 [ 871.104269][T15194] loop3: lost filesystem error report for type 5 error -117 [ 871.104749][T15194] EXT4-fs (loop3): Remounting filesystem read-only [ 871.106788][T15194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 871.144489][ T5614] Bluetooth: hci0: command tx timeout [ 871.528240][T15058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 871.550860][T15058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.553532][T15058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 871.582634][T15058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.585365][T15058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 871.609886][T15058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.612440][T15058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 871.730342][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 871.754580][T15058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.310504][T15215] loop5: detected capacity change from 0 to 7 [ 872.375930][T15215] Dev loop5: unable to read RDB block 7 [ 872.375970][T15215] loop5: AHDI p1 p2 p3 [ 872.375993][T15215] loop5: partition table partially beyond EOD, truncated [ 872.376217][T15215] loop5: p1 start 1818582900 is beyond EOD, truncated [ 872.376238][T15215] loop5: p3 start 335544320 is beyond EOD, truncated [ 872.805923][T15227] syzkaller1: entered promiscuous mode [ 872.805949][T15227] syzkaller1: entered allmulticast mode [ 872.860881][T15058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.905647][T15058] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.925210][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.925388][ T8406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.952444][T15229] FAULT_INJECTION: forcing a failure. [ 872.952444][T15229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.952485][T15229] CPU: 1 UID: 0 PID: 15229 Comm: syz.3.2592 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 872.952516][T15229] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 872.952525][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 872.952537][T15229] Call Trace: [ 872.952550][T15229] [ 872.952559][T15229] dump_stack_lvl+0xe8/0x150 [ 872.952596][T15229] should_fail_ex+0x3eb/0x540 [ 872.952630][T15229] _copy_to_user+0x31/0xb0 [ 872.952664][T15229] io_uring_create+0x4e5/0x980 [ 872.952722][T15229] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 872.952830][T15229] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 872.952873][T15229] ? rcu_is_watching+0x16/0xb0 [ 872.952919][T15229] do_syscall_64+0x166/0x520 [ 872.952946][T15229] ? trace_irq_disable+0x3b/0x140 [ 872.952972][T15229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.952991][T15229] ? clear_bhb_loop+0x70/0xc0 [ 872.953018][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.953038][T15229] RIP: 0033:0x7f467779e159 [ 872.953059][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.953120][T15229] RSP: 002b:00007f4678633fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 872.953146][T15229] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f467779e159 [ 872.953162][T15229] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000007b37 [ 872.953176][T15229] RBP: 00007f467783506b R08: 0000000000000000 R09: 0000000000000000 [ 872.953199][T15229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 872.953211][T15229] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd96ee54d8 [ 872.953245][T15229] [ 872.985853][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.985987][ T8405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.535370][T15244] loop1: detected capacity change from 0 to 512 [ 873.611129][T15244] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 873.647110][T15239] syzkaller0: entered promiscuous mode [ 873.647149][T15239] syzkaller0: entered allmulticast mode [ 873.710975][T15244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 873.711230][T15244] EXT4-fs (loop1): orphan cleanup on readonly fs [ 873.711246][T15244] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.2596: bad orphan inode 267 [ 873.711268][T15244] loop1: lost filesystem error report for type 5 error -117 [ 873.717461][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 873.717488][ C1] EXT4-fs (loop1): initial error at time 1790207986: ext4_orphan_get:1429 [ 873.717513][ C1] EXT4-fs (loop1): last error at time 1790207986: ext4_orphan_get:1429 [ 873.721051][T15244] EXT4-fs (loop1): Remounting filesystem read-only [ 873.722994][T15244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 874.278605][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 878.424950][T15058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.582583][T15314] syzkaller1: entered promiscuous mode [ 878.582608][T15314] syzkaller1: entered allmulticast mode [ 878.964010][T15324] loop1: detected capacity change from 0 to 512 [ 878.966660][T15324] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 879.012550][T15324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 879.012804][T15324] EXT4-fs (loop1): orphan cleanup on readonly fs [ 879.012822][T15324] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.2608: bad orphan inode 267 [ 879.012845][T15324] loop1: lost filesystem error report for type 5 error -117 [ 879.013301][T15324] EXT4-fs (loop1): Remounting filesystem read-only [ 879.015483][T15324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 879.692143][T15341] overlayfs: failed to resolve './file1': -2 [ 879.728191][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 880.449359][T15058] veth0_vlan: entered promiscuous mode [ 880.539375][T15058] veth1_vlan: entered promiscuous mode [ 880.717058][T15058] veth0_macvtap: entered promiscuous mode [ 880.759204][T15058] veth1_macvtap: entered promiscuous mode [ 880.884271][T15058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.942166][T15058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.530266][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 881.585814][T15377] FAULT_INJECTION: forcing a failure. [ 881.585814][T15377] name failslab, interval 1, probability 0, space 0, times 0 [ 881.585851][T15377] CPU: 1 UID: 0 PID: 15377 Comm: syz.3.2616 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 881.585882][T15377] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 881.585889][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 881.585900][T15377] Call Trace: [ 881.585908][T15377] [ 881.585918][T15377] dump_stack_lvl+0xe8/0x150 [ 881.585958][T15377] should_fail_ex+0x3eb/0x540 [ 881.585991][T15377] should_failslab+0xa8/0x100 [ 881.586017][T15377] ? dup_fd+0x56/0xaf0 [ 881.586043][T15377] kmem_cache_alloc_noprof+0x9c/0x600 [ 881.586074][T15377] ? dup_fd+0x56/0xaf0 [ 881.586098][T15377] ? do_futex+0x3e7/0x4e0 [ 881.586123][T15377] dup_fd+0x56/0xaf0 [ 881.586149][T15377] ? __pfx_do_futex+0x10/0x10 [ 881.586165][T15377] ? __fget_files+0x3a2/0x420 [ 881.586184][T15377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 881.586224][T15377] __se_sys_close_range+0x1ac/0x8e0 [ 881.586253][T15377] ? __pfx___se_sys_close_range+0x10/0x10 [ 881.586285][T15377] do_syscall_64+0x166/0x520 [ 881.586312][T15377] ? trace_irq_disable+0x3b/0x140 [ 881.586337][T15377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.586359][T15377] ? clear_bhb_loop+0x70/0xc0 [ 881.586384][T15377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.586403][T15377] RIP: 0033:0x7f467779e159 [ 881.586424][T15377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.586440][T15377] RSP: 002b:00007f4678634028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 881.586462][T15377] RAX: ffffffffffffffda RBX: 00007f4677a25fa0 RCX: 00007f467779e159 [ 881.586477][T15377] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 881.586490][T15377] RBP: 00007f467783506b R08: 0000000000000000 R09: 0000000000000000 [ 881.586503][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.586516][T15377] R13: 00007f4677a26038 R14: 00007f4677a25fa0 R15: 00007ffd96ee54d8 [ 881.586549][T15377] [ 881.613073][ T8406] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.614505][ T5850] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.614540][ T5850] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.618765][ T6491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.796767][T15377] Bluetooth: MGMT ver 1.23 [ 881.972742][ T8405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.972766][ T8405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.167613][ T5850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.167638][ T5850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.338835][T15396] loop3: detected capacity change from 0 to 512 [ 882.353058][T15396] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 882.372719][T15396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 882.373034][T15396] EXT4-fs (loop3): orphan cleanup on readonly fs [ 882.373056][T15396] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2621: bad orphan inode 267 [ 882.373079][T15396] loop3: lost filesystem error report for type 5 error -117 [ 882.375127][T15396] EXT4-fs (loop3): Remounting filesystem read-only [ 882.381773][T15396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 882.594650][T15405] overlayfs: failed to resolve './file1': -2 [ 883.033780][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 883.706456][T15434] loop5: detected capacity change from 0 to 7 [ 883.713677][T15434] Dev loop5: unable to read RDB block 7 [ 883.713710][T15434] loop5: AHDI p1 p2 p3 [ 883.713733][T15434] loop5: partition table partially beyond EOD, truncated [ 883.713958][T15434] loop5: p1 start 1818582900 is beyond EOD, truncated [ 883.713978][T15434] loop5: p3 start 335544320 is beyond EOD, truncated [ 884.610766][T15461] loop5: detected capacity change from 0 to 512 [ 884.686794][T15461] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 884.974929][T15461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 884.975207][T15461] EXT4-fs (loop5): orphan cleanup on readonly fs [ 884.975226][T15461] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2638: bad orphan inode 267 [ 884.975249][T15461] loop5: lost filesystem error report for type 5 error -117 [ 884.976592][T15461] EXT4-fs (loop5): Remounting filesystem read-only [ 884.978983][T15461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 885.245368][T14036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 885.519576][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2646'. [ 885.519695][T15481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.519709][T15481] IPv6: NLM_F_CREATE should be set when creating new route [ 885.529370][T15481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.529391][T15481] IPv6: NLM_F_CREATE should be set when creating new route [ 889.240049][T15561] SET target dimension over the limit! [ 890.327531][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'. [ 893.387350][T15623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2673'. [ 893.389499][ T5615] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 894.053713][ T33] audit: type=1326 audit(1790208006.580:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.054778][ T33] audit: type=1326 audit(1790208006.580:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.055033][ T33] audit: type=1326 audit(1790208006.580:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.116608][T15629] loop5: detected capacity change from 0 to 1024 [ 894.152357][ T33] audit: type=1326 audit(1790208006.680:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.154158][ T33] audit: type=1326 audit(1790208006.680:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.154425][ T33] audit: type=1326 audit(1790208006.680:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.154734][ T33] audit: type=1326 audit(1790208006.680:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.155479][ T33] audit: type=1326 audit(1790208006.680:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.155694][ T33] audit: type=1326 audit(1790208006.680:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.157136][ T33] audit: type=1326 audit(1790208006.680:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15630 comm="syz.6.2677" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fab4b19e159 code=0x7ffc0000 [ 894.359013][T15629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.301409][T15652] loop1: detected capacity change from 0 to 512 [ 895.390445][T15652] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 895.903421][T15652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 895.903705][T15652] EXT4-fs (loop1): orphan cleanup on readonly fs [ 895.903725][T15652] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.2682: bad orphan inode 267 [ 895.903749][T15652] loop1: lost filesystem error report for type 5 error -117 [ 895.904226][T15652] EXT4-fs (loop1): Remounting filesystem read-only [ 895.906312][T15652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 896.159739][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 897.325233][T15678] loop5: detected capacity change from 0 to 512 [ 897.326357][T15678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 897.326406][T15678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 897.388249][T15682] hugetlbfs: Bad value for 'uid' [ 897.388274][T15682] hugetlbfs: Bad value for 'uid' [ 897.403542][T15678] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 897.500458][T15678] EXT4-fs (loop5): 1 truncate cleaned up [ 897.563255][T15678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.333768][T14036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.572778][T15766] FAULT_INJECTION: forcing a failure. [ 902.572778][T15766] name failslab, interval 1, probability 0, space 0, times 0 [ 902.572813][T15766] CPU: 0 UID: 0 PID: 15766 Comm: syz.1.2710 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 902.572841][T15766] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 902.572849][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 902.572861][T15766] Call Trace: [ 902.572869][T15766] [ 902.572879][T15766] dump_stack_lvl+0xe8/0x150 [ 902.572914][T15766] should_fail_ex+0x3eb/0x540 [ 902.572947][T15766] should_failslab+0xa8/0x100 [ 902.572974][T15766] __kmalloc_noprof+0xf9/0x710 [ 902.572994][T15766] ? copy_net_ns+0x1ac/0x770 [ 902.573083][T15766] ? copy_net_ns+0x1ac/0x770 [ 902.573114][T15766] copy_net_ns+0x1ac/0x770 [ 902.573135][T15766] ? copy_cgroup_ns+0x263/0x890 [ 902.573167][T15766] create_new_namespaces+0x3f0/0x6b0 [ 902.573203][T15766] ? security_capable+0x7e/0x2c0 [ 902.573281][T15766] unshare_nsproxy_namespaces+0x144/0x190 [ 902.573315][T15766] ksys_unshare+0x53c/0x890 [ 902.573357][T15766] ? __pfx_ksys_unshare+0x10/0x10 [ 902.573389][T15766] ? rcu_is_watching+0x16/0xb0 [ 902.573430][T15766] __x64_sys_unshare+0x38/0x50 [ 902.573448][T15766] do_syscall_64+0x166/0x520 [ 902.573475][T15766] ? trace_irq_disable+0x3b/0x140 [ 902.573501][T15766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.573522][T15766] ? clear_bhb_loop+0x70/0xc0 [ 902.573546][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.573565][T15766] RIP: 0033:0x7fd940f9e159 [ 902.573589][T15766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.573611][T15766] RSP: 002b:00007fd93f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 902.573634][T15766] RAX: ffffffffffffffda RBX: 00007fd941225fa0 RCX: 00007fd940f9e159 [ 902.573649][T15766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 902.573661][T15766] RBP: 00007fd94103506b R08: 0000000000000000 R09: 0000000000000000 [ 902.573673][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.573685][T15766] R13: 00007fd941226038 R14: 00007fd941225fa0 R15: 00007ffe604d8ad8 [ 902.573719][T15766] [ 904.872975][T15810] No memory to map [ 909.923194][T15896] syzkaller0: entered promiscuous mode [ 909.923221][T15896] syzkaller0: entered allmulticast mode [ 910.966159][T15919] FAULT_INJECTION: forcing a failure. [ 910.966159][T15919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.966209][T15919] CPU: 1 UID: 0 PID: 15919 Comm: syz.1.2746 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 910.966240][T15919] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 910.966257][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 910.966269][T15919] Call Trace: [ 910.966278][T15919] [ 910.966288][T15919] dump_stack_lvl+0xe8/0x150 [ 910.966324][T15919] should_fail_ex+0x3eb/0x540 [ 910.966359][T15919] _copy_to_user+0x31/0xb0 [ 910.966393][T15919] bpf_verifier_vlog+0x52a/0x900 [ 910.966435][T15919] __btf_verifier_log+0xe2/0x140 [ 910.966466][T15919] ? __pfx___btf_verifier_log+0x10/0x10 [ 910.966496][T15919] ? btf_parse_hdr+0x1da/0x810 [ 910.966530][T15919] btf_parse_hdr+0x4a2/0x810 [ 910.966564][T15919] btf_new_fd+0x337/0xc20 [ 910.966607][T15919] __sys_bpf+0xd2e/0xd90 [ 910.966645][T15919] ? __pfx___sys_bpf+0x10/0x10 [ 910.966678][T15919] ? do_futex+0x3e7/0x4e0 [ 910.966731][T15919] ? rcu_is_watching+0x16/0xb0 [ 910.966766][T15919] __x64_sys_bpf+0xba/0xd0 [ 910.966797][T15919] do_syscall_64+0x166/0x520 [ 910.966825][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.966847][T15919] ? clear_bhb_loop+0x70/0xc0 [ 910.966872][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.966893][T15919] RIP: 0033:0x7fd940f9e159 [ 910.966914][T15919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.966931][T15919] RSP: 002b:00007fd93f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 910.966955][T15919] RAX: ffffffffffffffda RBX: 00007fd941225fa0 RCX: 00007fd940f9e159 [ 910.966971][T15919] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 910.966984][T15919] RBP: 00007fd94103506b R08: 0000000000000000 R09: 0000000000000000 [ 910.966998][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.967011][T15919] R13: 00007fd941226038 R14: 00007fd941225fa0 R15: 00007ffe604d8ad8 [ 910.967046][T15919] [ 912.819023][T15950] loop5: detected capacity change from 0 to 7 [ 912.822960][T15950] Dev loop5: unable to read RDB block 7 [ 912.822994][T15950] loop5: AHDI p1 p2 p3 [ 912.823015][T15950] loop5: partition table partially beyond EOD, truncated [ 912.823225][T15950] loop5: p1 start 1818582900 is beyond EOD, truncated [ 912.823243][T15950] loop5: p3 start 335544320 is beyond EOD, truncated [ 913.490237][T15971] ipt_rpfilter: unknown options [ 913.538152][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 915.554673][T16023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 916.589408][T16044] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 916.589440][T16044] device-mapper: ioctl: error adding target to table [ 917.614404][T15993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 923.224208][T16105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 924.627656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 926.511283][T16210] overlay: Unknown parameter 'audit' [ 926.721984][T16218] FAULT_INJECTION: forcing a failure. [ 926.721984][T16218] name fail_futex, interval 1, probability 0, space 0, times 0 [ 926.722022][T16218] CPU: 0 UID: 0 PID: 16218 Comm: syz.3.2823 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 926.722056][T16218] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 926.722065][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.722077][T16218] Call Trace: [ 926.722086][T16218] [ 926.722096][T16218] dump_stack_lvl+0xe8/0x150 [ 926.722131][T16218] should_fail_ex+0x3eb/0x540 [ 926.722164][T16218] get_futex_key+0x1b4/0x1580 [ 926.722206][T16218] ? __pfx_get_futex_key+0x10/0x10 [ 926.722236][T16218] ? __pfx_futex_wake_mark+0x10/0x10 [ 926.722276][T16218] futex_wake_op+0x15c/0xdc0 [ 926.722314][T16218] ? futex_wait+0x2a2/0x390 [ 926.722338][T16218] ? __pfx_futex_wake_op+0x10/0x10 [ 926.722384][T16218] do_futex+0x480/0x4e0 [ 926.722410][T16218] ? __pfx_do_futex+0x10/0x10 [ 926.722426][T16218] ? __fget_files+0x3a2/0x420 [ 926.722446][T16218] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.722482][T16218] __se_sys_futex+0x3a8/0x450 [ 926.722510][T16218] ? __pfx___se_sys_futex+0x10/0x10 [ 926.722531][T16218] ? rcu_is_watching+0x16/0xb0 [ 926.722566][T16218] ? __x64_sys_futex+0x21/0xf0 [ 926.722590][T16218] do_syscall_64+0x166/0x520 [ 926.722616][T16218] ? trace_irq_disable+0x3b/0x140 [ 926.722641][T16218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.722662][T16218] ? clear_bhb_loop+0x70/0xc0 [ 926.722687][T16218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.722709][T16218] RIP: 0033:0x7f467779e159 [ 926.722730][T16218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.722749][T16218] RSP: 002b:00007f4678634028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 926.722773][T16218] RAX: ffffffffffffffda RBX: 00007f4677a25fa0 RCX: 00007f467779e159 [ 926.722788][T16218] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 926.722801][T16218] RBP: 00007f467783506b R08: 0000000000000000 R09: 0000000000000400 [ 926.722815][T16218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.722828][T16218] R13: 00007f4677a26038 R14: 00007f4677a25fa0 R15: 00007ffd96ee54d8 [ 926.722864][T16218] [ 931.948752][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.948844][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.801746][T16274] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 933.072857][T16274] bond1: entered promiscuous mode [ 933.077311][T16274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 933.260278][T16279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 933.260693][T16279] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 933.260713][T16279] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 933.443296][T16289] overlay: Unknown parameter 'audit' [ 933.571745][T16279] bond1: (slave wireguard0): making interface the new active one [ 933.571776][T16279] wireguard0: entered promiscuous mode [ 933.627062][T16279] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 936.543813][T16301] FAULT_INJECTION: forcing a failure. [ 936.543813][T16301] name failslab, interval 1, probability 0, space 0, times 0 [ 936.543851][T16301] CPU: 1 UID: 0 PID: 16301 Comm: syz.1.2840 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 936.543884][T16301] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 936.543893][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 936.543905][T16301] Call Trace: [ 936.543915][T16301] [ 936.543926][T16301] dump_stack_lvl+0xe8/0x150 [ 936.543963][T16301] should_fail_ex+0x3eb/0x540 [ 936.544006][T16301] should_failslab+0xa8/0x100 [ 936.544033][T16301] ? vm_area_alloc+0x24/0x140 [ 936.544062][T16301] kmem_cache_alloc_noprof+0x9c/0x600 [ 936.544093][T16301] ? vm_area_alloc+0x24/0x140 [ 936.544127][T16301] vm_area_alloc+0x24/0x140 [ 936.544156][T16301] mmap_region+0x1827/0x2c60 [ 936.544192][T16301] ? __lock_acquire+0x747/0x2de0 [ 936.544226][T16301] ? __lock_acquire+0x747/0x2de0 [ 936.544253][T16301] ? __pfx_mmap_region+0x10/0x10 [ 936.544277][T16301] ? lock_acquire+0x115/0x350 [ 936.544310][T16301] ? mas_ascend+0x2f9/0x8b0 [ 936.544417][T16301] ? mas_prev_node+0xbfd/0xe80 [ 936.544454][T16301] ? mas_prev_slot+0xb76/0xbf0 [ 936.544565][T16301] ? vm_unmapped_area+0xde/0x230 [ 936.544609][T16301] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 936.544673][T16301] ? thp_get_unmapped_area_vmaflags+0x25b/0x2d0 [ 936.544698][T16301] ? cap_mmap_addr+0xaa/0xf0 [ 936.544726][T16301] ? bpf_lsm_mmap_addr+0x9/0x50 [ 936.544750][T16301] ? security_mmap_addr+0x71/0x240 [ 936.544812][T16301] do_mmap+0xe0a/0x1300 [ 936.544837][T16301] ? kasan_save_track+0x3e/0x80 [ 936.544858][T16301] ? kasan_save_free_info+0x40/0x50 [ 936.544897][T16301] ? __pfx_do_mmap+0x10/0x10 [ 936.544937][T16301] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 936.544966][T16301] ? down_write_killable+0x179/0x230 [ 936.544999][T16301] ? __pfx_down_write_killable+0x10/0x10 [ 936.545021][T16301] ? apparmor_mmap_file+0x1cc/0x390 [ 936.545044][T16301] ? security_mmap_file+0xf9/0xa20 [ 936.545074][T16301] vm_mmap_pgoff+0x272/0x4e0 [ 936.545105][T16301] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 936.545134][T16301] ? kfree+0x1c5/0x650 [ 936.545161][T16301] ? __se_sys_memfd_create+0x2e6/0x410 [ 936.545194][T16301] ? ksys_mmap_pgoff+0xf3/0x760 [ 936.545221][T16301] ? __x64_sys_mmap+0x7f/0x140 [ 936.545248][T16301] do_syscall_64+0x166/0x520 [ 936.545275][T16301] ? trace_irq_disable+0x3b/0x140 [ 936.545301][T16301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.545320][T16301] ? clear_bhb_loop+0x70/0xc0 [ 936.545344][T16301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.545363][T16301] RIP: 0033:0x7fd940f9dec2 [ 936.545382][T16301] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 936.545399][T16301] RSP: 002b:00007fd93f1f5df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 936.545421][T16301] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd940f9dec2 [ 936.545435][T16301] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 936.545447][T16301] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 936.545460][T16301] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 936.545472][T16301] R13: 00007fd93f1f5ee0 R14: 00007fd93f1f5ea0 R15: 0000200000000280 [ 936.545503][T16301] [ 939.935089][T16343] loop5: detected capacity change from 0 to 512 [ 939.991208][T16343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.991318][T16343] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.375085][T16353] overlay: Unknown parameter 'audit' [ 940.385828][T14036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.809984][T16314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 941.811707][T16371] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 941.954328][T16371] bond2: entered promiscuous mode [ 941.959329][T16371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 942.479925][T16376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 942.485707][T16376] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 942.485733][T16376] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 942.725970][T16376] bond2: (slave wireguard1): making interface the new active one [ 942.725997][T16376] wireguard1: entered promiscuous mode [ 942.739746][T16376] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 943.630821][T16394] loop1: detected capacity change from 0 to 512 [ 943.803668][T16394] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2865: corrupted in-inode xattr: invalid ea_ino [ 943.803748][T16394] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 943.806431][T16394] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2865: couldn't read orphan inode 15 (err -117) [ 943.806483][T16394] loop1: lost filesystem error report for type 5 error -117 [ 943.820272][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 943.820298][ C0] EXT4-fs (loop1): initial error at time 1790208056: ext4_iget_extra_inode:5210: inode 15 [ 943.820349][ C0] EXT4-fs (loop1): last error at time 1790208056: ext4_orphan_get:1408 [ 943.861994][T16394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.205618][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.207107][T16397] overlay: Unknown parameter 'audit' [ 944.312783][T16393] loop6: detected capacity change from 0 to 4096 [ 944.342640][T16393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 944.342668][T16393] EXT4-fs (loop6): Test dummy encryption mode enabled [ 944.387877][T16393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.546902][T16402] syzkaller0: entered promiscuous mode [ 944.546930][T16402] syzkaller0: entered allmulticast mode [ 945.591660][T16402] tipc: Enabled bearer , priority 0 [ 945.623569][T16401] tipc: Resetting bearer [ 945.632234][T16393] workqueue: Failed to create a rescuer kthread for wq "blk_crypto_wq": -EINTR [ 945.701733][T16393] fscrypt (loop6): Error -12 starting to use blk-crypto [ 945.702315][T16393] overlayfs: upper fs does not support tmpfile. [ 945.711858][T16393] workqueue: Failed to create a rescuer kthread for wq "blk_crypto_wq": -EINTR [ 945.747635][T16393] fscrypt (loop6): Error -12 starting to use blk-crypto [ 945.896821][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 945.911189][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 945.922302][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 945.947158][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 945.956772][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 946.042686][T15058] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.043300][T16401] tipc: Disabling bearer [ 946.651561][T16426] loop5: detected capacity change from 0 to 128 [ 946.656737][T16426] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 946.728143][T16428] 9pnet_fd: Insufficient options for proto=fd [ 948.017508][ T5614] Bluetooth: hci1: command tx timeout [ 948.251917][ T6551] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 948.294574][T16445] overlay: Unknown parameter 'audit' [ 948.506489][T16448] syzkaller0: entered promiscuous mode [ 948.506517][T16448] syzkaller0: entered allmulticast mode [ 948.530589][T16448] tipc: Enabled bearer , priority 0 [ 948.556449][T16448] tipc: Resetting bearer [ 948.566621][T16447] tipc: Resetting bearer [ 948.638679][T16447] tipc: Disabling bearer [ 948.930358][T16405] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.932124][T16405] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.935460][T16405] bridge_slave_0: entered allmulticast mode [ 948.952743][T16405] bridge_slave_0: entered promiscuous mode [ 948.975124][T16405] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.975322][T16405] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.975493][T16405] bridge_slave_1: entered allmulticast mode [ 948.992419][T16405] bridge_slave_1: entered promiscuous mode [ 949.041511][T16405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.045453][T16405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.103910][T16405] team0: Port device team_slave_0 added [ 949.113559][T16405] team0: Port device team_slave_1 added [ 949.156092][T16405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.156111][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.156138][T16405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.207889][T16405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.207909][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.207937][T16405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.249572][T16468] netlink: 'syz.5.2885': attribute type 1 has an invalid length. [ 949.991412][T16468] bond1: entered promiscuous mode [ 949.995563][T16468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 950.097730][ T5614] Bluetooth: hci1: command tx timeout [ 950.193317][T16405] hsr_slave_0: entered promiscuous mode [ 950.203004][T16405] hsr_slave_1: entered promiscuous mode [ 950.213586][T16405] debugfs: 'hsr0' already exists in 'hsr' [ 950.213620][T16405] Cannot create hsr debugfs directory [ 950.324470][T16474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 950.337159][T16474] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 950.337187][T16474] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 950.445683][T16474] bond1: (slave wireguard0): making interface the new active one [ 950.445713][T16474] wireguard0: entered promiscuous mode [ 950.463135][T16474] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 950.590227][T16484] syzkaller0: entered promiscuous mode [ 950.590253][T16484] syzkaller0: entered allmulticast mode [ 950.625893][T16484] tipc: Started in network mode [ 950.625928][T16484] tipc: Node identity 361f18ef98e1, cluster identity 4711 [ 950.626189][T16484] tipc: Enabled bearer , priority 0 [ 950.670638][T16484] tipc: Resetting bearer [ 950.712891][T16483] tipc: Resetting bearer [ 950.756555][T16483] tipc: Disabling bearer [ 951.002630][T16491] overlay: Unknown parameter 'audit' [ 952.177516][ T5614] Bluetooth: hci1: command tx timeout [ 953.932696][T16405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.996756][T16511] loop6: detected capacity change from 0 to 512 [ 954.006198][T16511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 954.051712][T16511] EXT4-fs (loop6): 1 truncate cleaned up [ 954.055564][T16511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.259980][ T5614] Bluetooth: hci1: command tx timeout [ 955.003065][T16405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.050931][T16525] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 955.058834][T15058] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.362347][T16525] bond3: entered promiscuous mode [ 955.363868][T16525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 955.581526][T16405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.629931][T16528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 955.633119][T16528] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address [ 955.633143][T16528] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 955.675907][T16528] bond3: (slave wireguard2): making interface the new active one [ 955.675936][T16528] wireguard2: entered promiscuous mode [ 955.696585][T16528] bond3: (slave wireguard2): Enslaving as an active interface with an up link [ 955.738591][T16536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.769286][T16536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.772509][T16536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.776937][T16405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.836092][T16536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.542357][T16405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 956.563789][T16405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.572014][T16405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 956.607168][T16405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.692635][T16551] overlay: Unknown parameter 'audit' [ 956.710880][T16405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 957.188905][T16405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.323257][T16405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 957.935645][T16405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 959.682508][T16405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.706755][T16405] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.726927][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.727050][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.743431][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.743550][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.152371][T16585] netlink: 'syz.0.2915': attribute type 1 has an invalid length. [ 960.218314][T16585] bond2: entered promiscuous mode [ 960.223969][T16585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 960.295637][T16587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 960.311015][T16587] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 960.311042][T16587] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 960.348298][T16587] bond2: (slave wireguard1): making interface the new active one [ 960.348326][T16587] wireguard1: entered promiscuous mode [ 960.358773][T16587] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 961.981525][T16405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.115599][T16405] veth0_vlan: entered promiscuous mode [ 962.178014][T16405] veth1_vlan: entered promiscuous mode [ 962.247240][T16405] veth0_macvtap: entered promiscuous mode [ 962.263237][T16405] veth1_macvtap: entered promiscuous mode [ 962.296310][T16405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.411210][T16405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.809567][T16627] syzkaller0: entered promiscuous mode [ 963.809669][T16627] syzkaller0: entered allmulticast mode [ 964.678036][T14006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.900843][ T8404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.947491][ T4003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.968676][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.318502][ T8404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.318525][ T8404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.826276][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.826302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.010410][T16666] netlink: 'syz.3.2935': attribute type 1 has an invalid length. [ 968.119890][T16672] overlay: Unknown parameter 'audit' [ 971.296167][T16666] bond4: entered promiscuous mode [ 971.325162][T16666] 8021q: adding VLAN 0 to HW filter on device bond4 [ 971.350846][T16673] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 971.607556][ T5622] syz_tun (unregistering): left allmulticast mode [ 971.920567][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 971.924878][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 971.948524][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 971.954515][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 971.955233][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 973.924048][T16737] overlay: Unknown parameter 'audit' [ 974.097570][ T5614] Bluetooth: hci3: command tx timeout [ 976.207570][ T5614] Bluetooth: hci3: command tx timeout [ 977.075722][T14006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.342127][T16759] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 977.386968][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2953'. [ 977.492901][T14006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.261382][ T5614] Bluetooth: hci3: command tx timeout [ 978.362026][T16759] bond5: entered promiscuous mode [ 978.362529][T16759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 978.513880][T16762] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 978.618407][T16776] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 980.337537][ T5614] Bluetooth: hci3: command tx timeout [ 980.973231][T14006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.200838][T16813] loop5: detected capacity change from 0 to 256 [ 981.205192][T16813] exfat: Invalid gid '0x00000000ffffffff' [ 984.192494][T14006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.220988][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 986.517329][T16847] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 987.557705][T14006] bridge_slave_1: left allmulticast mode [ 987.557736][T14006] bridge_slave_1: left promiscuous mode [ 987.561258][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.609460][T14006] bridge_slave_0: left allmulticast mode [ 987.609493][T14006] bridge_slave_0: left promiscuous mode [ 987.609765][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.279108][T14006] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 990.479130][T14006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.509015][T14006] bond0 (unregistering): Released all slaves [ 990.619533][T14006] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 990.619562][T14006] wireguard0: left promiscuous mode [ 990.663347][T14006] bond1 (unregistering): Released all slaves [ 990.763359][T16893] program syz.3.2976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.814391][T14006] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 990.814421][T14006] wireguard1: left promiscuous mode [ 990.836492][T14006] bond2 (unregistering): Released all slaves [ 991.189844][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 992.067031][T16699] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.067140][T16699] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.067299][T16699] bridge_slave_0: entered allmulticast mode [ 992.070828][T16699] bridge_slave_0: entered promiscuous mode [ 992.077638][T16699] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.077806][T16699] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.077954][T16699] bridge_slave_1: entered allmulticast mode [ 992.079860][T16699] bridge_slave_1: entered promiscuous mode [ 992.232679][T16919] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 993.018159][T16699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.026558][T16699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.260446][T14006] hsr_slave_0: left promiscuous mode [ 993.262841][T14006] hsr_slave_1: left promiscuous mode [ 993.263873][T14006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.263894][T14006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.264924][T14006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.264942][T14006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.332491][T14006] veth1_macvtap: left promiscuous mode [ 993.332535][T14006] veth0_macvtap: left promiscuous mode [ 993.332654][T14006] veth1_vlan: left promiscuous mode [ 993.381797][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.381861][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.127228][T16900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 994.619365][T16941] loop1: detected capacity change from 0 to 512 [ 994.673001][T14006] team0 (unregistering): Port device team_slave_1 removed [ 994.729176][T16941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.729298][T16941] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.835805][T14006] team0 (unregistering): Port device team_slave_0 removed [ 994.851548][T16941] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 3: comm syz.1.2989: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 994.988606][T16405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.192339][T16950] loop5: detected capacity change from 0 to 512 [ 995.204398][T16950] EXT4-fs (loop5): 1 truncate cleaned up [ 995.224550][T16950] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.328620][T14036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.497548][T15381] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 995.652736][T15381] usb 2-1: Using ep0 maxpacket: 32 [ 995.654498][T15381] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 995.657729][T15381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.657758][T15381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.657795][T15381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.671032][T15381] usb 2-1: config 0 descriptor?? [ 995.873405][T16699] team0: Port device team_slave_0 added [ 995.921314][T16699] team0: Port device team_slave_1 added [ 996.193551][T16699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.193571][T16699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.193625][T16699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.203163][T16699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.203180][T16699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.203203][T16699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.573437][T16699] hsr_slave_0: entered promiscuous mode [ 996.583532][T16699] hsr_slave_1: entered promiscuous mode [ 996.601334][T16699] debugfs: 'hsr0' already exists in 'hsr' [ 996.601372][T16699] Cannot create hsr debugfs directory [ 996.615141][T15381] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 996.724393][T15381] usb 2-1: USB disconnect, device number 18 [ 997.313449][T16980] fido_id[16980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 997.341652][T14006] IPVS: stop unused estimator thread 0... [ 998.049360][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 998.241726][T17015] syzkaller0: entered promiscuous mode [ 998.241756][T17015] syzkaller0: entered allmulticast mode [ 998.699185][T17025] loop6: detected capacity change from 0 to 2048 [ 1005.741593][ T12] IPVS: starting estimator thread 0... [ 1005.887551][T17082] IPVS: using max 24 ests per chain, 57600 per kthread [ 1005.923003][T16699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1005.979383][T16699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.980375][T16699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1005.989316][T16699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.991716][T16699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1006.684764][T16699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1006.687593][T16699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1006.732833][T16699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.470208][T17108] loop6: detected capacity change from 0 to 8192 [ 1008.893660][T17120] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5611] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[17120] [ 1009.369590][T17108] loop6: p1 p2 p4 [ 1009.369622][T17108] loop6: partition table partially beyond EOD, truncated [ 1009.369868][T17108] loop6: p1 start 51379968 is beyond EOD, truncated [ 1009.460272][T17108] loop6: p4 start 33554440 is beyond EOD, truncated [ 1009.691304][T16699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.793057][T17130] syzkaller0: entered promiscuous mode [ 1009.793084][T17130] syzkaller0: entered allmulticast mode [ 1009.810193][T16699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.862566][T17083] udevd[17083]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1009.968450][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.968575][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.006822][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.006942][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.245556][ T6494] IPVS: starting estimator thread 0... [ 1011.523685][T17158] IPVS: using max 28 ests per chain, 67200 per kthread [ 1014.862462][T16699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.044471][T16699] veth0_vlan: entered promiscuous mode [ 1015.083755][T16699] veth1_vlan: entered promiscuous mode [ 1015.287803][T16699] veth0_macvtap: entered promiscuous mode [ 1015.340607][T16699] veth1_macvtap: entered promiscuous mode [ 1015.473455][ T5615] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1015.525047][T16699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.568305][T16699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.608155][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.649022][ T6491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.652729][ T4003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.656547][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.741644][T17236] netlink: 'syz.6.3055': attribute type 3 has an invalid length. [ 1015.741669][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3055'. [ 1015.801244][T17239] loop1: detected capacity change from 0 to 256 [ 1016.325485][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.325511][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.441649][ T6491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.441673][ T6491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.127792][ T5745] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1018.353530][ T5745] usb 2-1: not running at top speed; connect to a high speed hub [ 1018.353572][ T5745] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 1018.409477][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.409507][ T5745] usb 2-1: Product: syz [ 1018.409521][ T5745] usb 2-1: Manufacturer: syz [ 1018.409534][ T5745] usb 2-1: SerialNumber: syz [ 1018.458604][ T5745] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1018.483449][ T5745] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1018.505191][ T5745] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1018.521044][ T5745] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1018.547008][ T5745] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1018.888075][T10551] bridge0: port 3(syz_tun) entered disabled state [ 1019.049306][T10551] syz_tun (unregistering): left allmulticast mode [ 1019.049335][T10551] syz_tun (unregistering): left promiscuous mode [ 1019.049434][T10551] bridge0: port 3(syz_tun) entered disabled state [ 1019.087012][T17289] loop1: detected capacity change from 0 to 1024 [ 1019.110592][T17289] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1020.050297][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1020.069777][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1020.071643][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1020.083080][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1020.151263][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1020.470660][T17289] EXT4-fs error (device loop1): ext4_quota_enable:7260: comm syz.1.3063: inode #111: comm syz.1.3063: iget: illegal inode # [ 1020.470741][T17289] loop1: lost filesystem error report for type 5 error -117 [ 1020.477432][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1020.477465][ C1] EXT4-fs (loop1): initial error at time 1790208133: ext4_quota_enable:7260 [ 1020.477502][ C1] EXT4-fs (loop1): last error at time 1790208133: ext4_quota_enable:7260 [ 1020.519374][T17289] EXT4-fs (loop1): Remounting filesystem read-only [ 1020.519397][T17289] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=111). Please run e2fsck to fix. [ 1020.520196][T17289] EXT4-fs (loop1): mount failed [ 1020.844725][ T10] usb 2-1: USB disconnect, device number 19 [ 1021.287202][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1021.683056][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1021.713652][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1021.759044][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1021.760731][ T10] keyspan 2-1:1.0: device disconnected [ 1022.164282][T17324] tipc: Enabling of bearer rejected, failed to enable media [ 1022.257662][ T5614] Bluetooth: hci4: command tx timeout [ 1023.586512][T17345] loop1: detected capacity change from 0 to 256 [ 1023.623329][T17345] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1024.351970][ T5614] Bluetooth: hci4: command tx timeout [ 1025.766058][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.417728][ T5614] Bluetooth: hci4: command tx timeout [ 1027.248049][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.348509][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.379940][T17374] loop1: detected capacity change from 0 to 8 [ 1028.497524][ T5614] Bluetooth: hci4: command tx timeout [ 1028.644824][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.665688][T17408] loop6: detected capacity change from 0 to 1024 [ 1031.678924][T17406] pimreg: tun_chr_ioctl cmd 2147767519 [ 1031.717237][T17408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.732271][T17408] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.822446][T17408] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: block 3: comm syz.6.3087: lblock 3 mapped to illegal pblock 3 (length 3) [ 1031.846141][T17408] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1031.846177][T17408] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1031.846177][T17408] [ 1032.484357][T17417] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: block 8: comm syz.6.3087: lblock 8 mapped to illegal pblock 8 (length 8) [ 1032.755841][T17417] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1032.755935][T17417] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1032.755935][T17417] [ 1034.071747][T15058] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1035.729052][T17439] loop6: detected capacity change from 0 to 128 [ 1035.934592][T17439] FAT-fs (loop6): data area starts beyond volume (33 > 0) [ 1035.934646][T17439] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1036.477910][ T32] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 1036.535330][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1036.561486][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1036.565618][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1036.589607][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1036.592138][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1036.682092][ T32] usb 7-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1036.688541][ T32] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1036.688571][ T32] usb 7-1: config 179 has no interface number 0 [ 1036.688612][ T32] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1036.688637][ T32] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1036.688663][ T32] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1036.688688][ T32] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1036.688712][ T32] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1036.688754][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.708910][T17439] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1036.709050][T17439] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1036.780842][ T12] bridge_slave_1: left allmulticast mode [ 1036.780869][ T12] bridge_slave_1: left promiscuous mode [ 1036.781487][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.929587][ T12] bridge_slave_0: left allmulticast mode [ 1036.929620][ T12] bridge_slave_0: left promiscuous mode [ 1036.932012][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.502803][ T10] usb 7-1: USB disconnect, device number 2 [ 1038.502886][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1038.502937][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1038.665132][T17475] loop5: detected capacity change from 0 to 7 [ 1038.674041][T17475] Dev loop5: unable to read RDB block 7 [ 1038.674075][T17475] loop5: AHDI p1 p2 p3 [ 1038.674097][T17475] loop5: partition table partially beyond EOD, truncated [ 1038.674345][T17475] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1038.674366][T17475] loop5: p3 start 335544320 is beyond EOD, truncated [ 1038.738027][ T5615] Bluetooth: hci2: command tx timeout [ 1039.106518][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3098'. [ 1039.284024][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.303664][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.316603][ T12] bond0 (unregistering): Released all slaves [ 1039.355659][ T12] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1039.355692][ T12] wireguard0: left promiscuous mode [ 1039.376813][ T12] bond1 (unregistering): Released all slaves [ 1039.472557][ T12] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 1039.472587][ T12] wireguard1: left promiscuous mode [ 1039.511769][ T12] bond2 (unregistering): Released all slaves [ 1039.633046][ T12] bond3 (unregistering): (slave wireguard2): Releasing backup interface [ 1039.633076][ T12] wireguard2: left promiscuous mode [ 1039.653792][ T12] bond3 (unregistering): Released all slaves [ 1039.699635][ T12] bond4 (unregistering): Released all slaves [ 1039.754761][ T12] bond5 (unregistering): Released all slaves [ 1040.123703][T17291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.123827][T17291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.124026][T17291] bridge_slave_0: entered allmulticast mode [ 1040.127967][T17291] bridge_slave_0: entered promiscuous mode [ 1040.166115][ T12] tipc: Left network mode [ 1040.176239][T17291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.176434][T17291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.176625][T17291] bridge_slave_1: entered allmulticast mode [ 1040.200027][T17291] bridge_slave_1: entered promiscuous mode [ 1040.248341][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.252365][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.307064][T17291] team0: Port device team_slave_0 added [ 1040.316454][T17291] team0: Port device team_slave_1 added [ 1040.359953][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.359973][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.360000][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.362199][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.362214][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.362240][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.837811][ T5615] Bluetooth: hci2: command tx timeout [ 1042.897407][ T5615] Bluetooth: hci2: command tx timeout [ 1044.152379][T17291] hsr_slave_0: entered promiscuous mode [ 1044.165570][T17291] hsr_slave_1: entered promiscuous mode [ 1044.179610][T17291] debugfs: 'hsr0' already exists in 'hsr' [ 1044.179639][T17291] Cannot create hsr debugfs directory [ 1044.981038][ T5615] Bluetooth: hci2: command tx timeout [ 1045.138759][T17520] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1046.190619][T17535] loop6: detected capacity change from 0 to 2048 [ 1046.194925][T17535] udf: Bad value for 'anchor' [ 1046.413348][ T12] hsr_slave_0: left promiscuous mode [ 1046.424594][ T12] hsr_slave_1: left promiscuous mode [ 1046.425657][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.425679][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.454189][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.454215][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.623992][ T12] veth1_macvtap: left promiscuous mode [ 1046.624039][ T12] veth0_macvtap: left promiscuous mode [ 1046.624154][ T12] veth1_vlan: left promiscuous mode [ 1047.100059][ T12] ------------[ cut here ]------------ [ 1047.100079][ T12] debug_locks && !(lock_is_held(&(&n->tbl->lock)->dep_map) != 0) [ 1047.100090][ T12] WARNING: net/core/neighbour.c:154 at neigh_mark_dead+0x2fb/0x340, CPU#0: kworker/u8:0/12 [ 1047.126986][ T12] Modules linked in: [ 1047.133102][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1047.144829][ T12] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1047.150806][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1047.161276][ T12] Workqueue: netns cleanup_net [ 1047.166095][ T12] RIP: 0010:neigh_mark_dead+0x2fb/0x340 [ 1047.171771][ T12] Code: e8 03 42 80 3c 28 00 74 08 48 89 df e8 3e 6f 7f f8 4c 89 33 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c 37 33 02 cc e8 d6 20 0e f8 90 <0f> 0b 90 e9 8f fd ff ff 48 c7 c1 d0 4e 7a 90 80 e1 07 80 c1 03 38 [ 1047.191466][ T12] RSP: 0018:ffffc900001170a0 EFLAGS: 00010293 [ 1047.197637][ T12] RAX: ffffffff89bac1da RBX: ffff88807ce35800 RCX: ffff88801e2b8000 [ 1047.205643][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1047.213737][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1047.221878][ T12] R10: dffffc0000000000 R11: fffff52000022e0c R12: ffff88807ce3593c [ 1047.230021][ T12] R13: dffffc0000000000 R14: ffff88807ce35820 R15: ffff88807ce35800 [ 1047.238087][ T12] FS: 0000000000000000(0000) GS:ffff888124caf000(0000) knlGS:0000000000000000 [ 1047.247144][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.253845][ T12] CR2: 00007fab4b1eb840 CR3: 000000005daea000 CR4: 00000000003526f0 [ 1047.261961][ T12] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1047.270059][ T12] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1047.278206][ T12] Call Trace: [ 1047.281524][ T12] [ 1047.284490][ T12] neigh_flush_one+0x27c/0x5a0 [ 1047.289388][ T12] ? kvfree_call_rcu+0x9c/0x430 [ 1047.294294][ T12] __neigh_ifdown+0x1fb/0xc70 [ 1047.299225][ T12] ? __fib6_clean_all+0xb8/0x5d0 [ 1047.304263][ T12] ? __pfx___neigh_ifdown+0x10/0x10 [ 1047.309739][ T12] ? __pfx___fib6_clean_all+0x10/0x10 [ 1047.315742][ T12] ? __pfx_fib6_clean_node+0x10/0x10 [ 1047.321212][ T12] ? __pfx_fib6_ifdown+0x10/0x10 [ 1047.326332][ T12] neigh_ifdown+0x1f/0x30 [ 1047.330818][ T12] rt6_disable_ip+0x751/0x7e0 [ 1047.335554][ T12] ? trace_contention_end+0x3d/0x140 [ 1047.341120][ T12] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1047.346413][ T12] addrconf_ifdown+0x155/0x1ad0 [ 1047.351508][ T12] ? __mutex_unlock_slowpath+0x731/0x900 [ 1047.357194][ T12] ? net_generic+0x1e/0x240 [ 1047.361936][ T12] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1047.367396][ T12] ? net_generic+0x1e/0x240 [ 1047.372040][ T12] addrconf_notify+0x1bc/0x1050 [ 1047.376934][ T12] notifier_call_chain+0x1a5/0x3d0 [ 1047.382245][ T12] netif_close_many+0x463/0x660 [ 1047.387201][ T12] ? __pfx_netif_close_many+0x10/0x10 [ 1047.392687][ T12] unregister_netdevice_many_notify+0xb76/0x2140 [ 1047.399110][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1047.406322][ T12] ? unregister_netdevice_queue+0x17d/0x340 [ 1047.412369][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1047.418755][ T12] default_device_exit_batch+0x6cf/0x760 [ 1047.424474][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1047.430752][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1047.436954][ T12] ops_undo_list+0x4d7/0x8f0 [ 1047.441646][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 1047.446795][ T12] ? idr_destroy+0x218/0x290 [ 1047.451450][ T12] ? do_raw_spin_unlock+0xf5/0x200 [ 1047.456603][ T12] cleanup_net+0x572/0x810 [ 1047.461087][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 1047.466074][ T12] ? rcu_is_watching+0x16/0xb0 [ 1047.470918][ T12] ? process_scheduled_works+0x97a/0x1630 [ 1047.476678][ T12] process_scheduled_works+0xc3d/0x1630 [ 1047.482354][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.488424][ T12] ? assign_work+0x3cf/0x5d0 [ 1047.493153][ T12] worker_thread+0xa47/0xfb0 [ 1047.497843][ T12] kthread+0x38b/0x480 [ 1047.501956][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1047.507171][ T12] ? __pfx_kthread+0x10/0x10 [ 1047.512098][ T12] ret_from_fork+0x514/0xb70 [ 1047.516931][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.522226][ T12] ? __switch_to+0xc78/0x1410 [ 1047.526957][ T12] ? __pfx_kthread+0x10/0x10 [ 1047.531618][ T12] ret_from_fork_asm+0x1a/0x30 [ 1047.536447][ T12] [ 1047.539528][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1047.546833][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1047.557980][ T12] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1047.563817][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1047.574001][ T12] Workqueue: netns cleanup_net [ 1047.578901][ T12] Call Trace: [ 1047.582215][ T12] [ 1047.585164][ T12] vpanic+0x26f/0x710 [ 1047.589183][ T12] panic+0xc5/0xd0 [ 1047.593112][ T12] ? __pfx_panic+0x10/0x10 [ 1047.597576][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1047.602827][ T12] __warn+0x315/0x4c0 [ 1047.606842][ T12] ? neigh_mark_dead+0x2fb/0x340 [ 1047.611819][ T12] ? neigh_mark_dead+0x2fb/0x340 [ 1047.616794][ T12] __report_bug+0x276/0x570 [ 1047.621410][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1047.626809][ T12] ? neigh_mark_dead+0x2fb/0x340 [ 1047.631971][ T12] ? __pfx___report_bug+0x10/0x10 [ 1047.637039][ T12] ? __lock_acquire+0x747/0x2de0 [ 1047.642021][ T12] ? lockdep_hardirqs_on+0x7b/0x110 [ 1047.647694][ T12] ? neigh_mark_dead+0x2fb/0x340 [ 1047.652916][ T12] report_bug+0x16b/0x220 [ 1047.657279][ T12] ? neigh_mark_dead+0x2fb/0x340 [ 1047.662320][ T12] ? neigh_mark_dead+0x2fd/0x340 [ 1047.667282][ T12] handle_bug+0x9c/0x200 [ 1047.671556][ T12] exc_invalid_op+0x1a/0x50 [ 1047.676155][ T12] asm_exc_invalid_op+0x1a/0x20 [ 1047.681189][ T12] RIP: 0010:neigh_mark_dead+0x2fb/0x340 [ 1047.686746][ T12] Code: e8 03 42 80 3c 28 00 74 08 48 89 df e8 3e 6f 7f f8 4c 89 33 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c 37 33 02 cc e8 d6 20 0e f8 90 <0f> 0b 90 e9 8f fd ff ff 48 c7 c1 d0 4e 7a 90 80 e1 07 80 c1 03 38 [ 1047.706367][ T12] RSP: 0018:ffffc900001170a0 EFLAGS: 00010293 [ 1047.712479][ T12] RAX: ffffffff89bac1da RBX: ffff88807ce35800 RCX: ffff88801e2b8000 [ 1047.720485][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1047.728473][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1047.736450][ T12] R10: dffffc0000000000 R11: fffff52000022e0c R12: ffff88807ce3593c [ 1047.744428][ T12] R13: dffffc0000000000 R14: ffff88807ce35820 R15: ffff88807ce35800 [ 1047.752420][ T12] ? neigh_mark_dead+0x2fa/0x340 [ 1047.757384][ T12] neigh_flush_one+0x27c/0x5a0 [ 1047.762161][ T12] ? kvfree_call_rcu+0x9c/0x430 [ 1047.767029][ T12] __neigh_ifdown+0x1fb/0xc70 [ 1047.771736][ T12] ? __fib6_clean_all+0xb8/0x5d0 [ 1047.776688][ T12] ? __pfx___neigh_ifdown+0x10/0x10 [ 1047.781921][ T12] ? __pfx___fib6_clean_all+0x10/0x10 [ 1047.787317][ T12] ? __pfx_fib6_clean_node+0x10/0x10 [ 1047.792641][ T12] ? __pfx_fib6_ifdown+0x10/0x10 [ 1047.797612][ T12] neigh_ifdown+0x1f/0x30 [ 1047.801973][ T12] rt6_disable_ip+0x751/0x7e0 [ 1047.806727][ T12] ? trace_contention_end+0x3d/0x140 [ 1047.812040][ T12] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1047.817278][ T12] addrconf_ifdown+0x155/0x1ad0 [ 1047.822188][ T12] ? __mutex_unlock_slowpath+0x731/0x900 [ 1047.828410][ T12] ? net_generic+0x1e/0x240 [ 1047.833094][ T12] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1047.838520][ T12] ? net_generic+0x1e/0x240 [ 1047.843069][ T12] addrconf_notify+0x1bc/0x1050 [ 1047.847938][ T12] notifier_call_chain+0x1a5/0x3d0 [ 1047.853424][ T12] netif_close_many+0x463/0x660 [ 1047.858579][ T12] ? __pfx_netif_close_many+0x10/0x10 [ 1047.863973][ T12] unregister_netdevice_many_notify+0xb76/0x2140 [ 1047.870523][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1047.878217][ T12] ? unregister_netdevice_queue+0x17d/0x340 [ 1047.884223][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1047.890668][ T12] default_device_exit_batch+0x6cf/0x760 [ 1047.896326][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1047.902550][ T12] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1047.908730][ T12] ops_undo_list+0x4d7/0x8f0 [ 1047.913358][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 1047.918585][ T12] ? idr_destroy+0x218/0x290 [ 1047.923217][ T12] ? do_raw_spin_unlock+0xf5/0x200 [ 1047.928368][ T12] cleanup_net+0x572/0x810 [ 1047.932811][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 1047.937784][ T12] ? rcu_is_watching+0x16/0xb0 [ 1047.942564][ T12] ? process_scheduled_works+0x97a/0x1630 [ 1047.948322][ T12] process_scheduled_works+0xc3d/0x1630 [ 1047.954111][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.960133][ T12] ? assign_work+0x3cf/0x5d0 [ 1047.964776][ T12] worker_thread+0xa47/0xfb0 [ 1047.969426][ T12] kthread+0x38b/0x480 [ 1047.973714][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1047.978846][ T12] ? __pfx_kthread+0x10/0x10 [ 1047.983451][ T12] ret_from_fork+0x514/0xb70 [ 1047.988069][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.993186][ T12] ? __switch_to+0xc78/0x1410 [ 1047.997934][ T12] ? __pfx_kthread+0x10/0x10 [ 1048.002540][ T12] ret_from_fork_asm+0x1a/0x30 [ 1048.007456][ T12] [ 1048.010659][ T12] Kernel Offset: disabled [ 1048.014996][ T12] Rebooting in 86400 seconds..