last executing test programs: 10m32.080829964s ago: executing program 32 (id=85): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x14, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) 9m37.271340455s ago: executing program 33 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000004e000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m30.485835395s ago: executing program 1 (id=308): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x2, "a895"}, 0x0, 0x0, 0x0, 0x0}) 8m28.319901125s ago: executing program 1 (id=315): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0xd, r0, 0x0, 0x0, 0xb17}, 0x0]) 8m27.805887429s ago: executing program 1 (id=317): syz_read_part_table(0x1065, &(0x7f0000000000)="$eJzsz7FJBVEQBdD75D/9GwiisLGl2IDh1qGpkdYjJiYGRvaibcjI2wVb2B+cEwzMcGdgwq568nWWPMzXtby93yRPH2OW9jlqfqv6mvq5TK4yJ1VVx9z+H2hJ7pL782l0z9vyS5JDm5JDjj1tZHKRXnnsa2DzneV1j58BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NT8BQAA//8aWhOB") 8m12.484170795s ago: executing program 34 (id=317): syz_read_part_table(0x1065, &(0x7f0000000000)="$eJzsz7FJBVEQBdD75D/9GwiisLGl2IDh1qGpkdYjJiYGRvaibcjI2wVb2B+cEwzMcGdgwq568nWWPMzXtby93yRPH2OW9jlqfqv6mvq5TK4yJ1VVx9z+H2hJ7pL782l0z9vyS5JDm5JDjj1tZHKRXnnsa2DzneV1j58BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NT8BQAA//8aWhOB") 5m57.254756362s ago: executing program 35 (id=613): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2b, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x21}, 0x80, 0x0, 0x1, 0x1}}) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x2300) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r5, 0x79}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc", 0x0) 5m48.93430934s ago: executing program 36 (id=624): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x8}}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='+=0', 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r4, &(0x7f0000000140), 0x1000000000000354, 0x9) 5m37.492107035s ago: executing program 4 (id=636): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x42002, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r1, &(0x7f0000001200)="0501", 0x2) 5m37.293833914s ago: executing program 4 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x8000000, 0x8004, 0x1, 0x6ab4, 0x0, [{0x7, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x1, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0x1, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x17, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x8, 0x9, 0xcb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x87, 0xe6, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x87, 0x4, '\x00', 0x2}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m36.53348348s ago: executing program 37 (id=638): fsopen(&(0x7f0000000180)='cgroup\x00', 0x1) 5m36.52033204s ago: executing program 4 (id=640): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") ftruncate(0xffffffffffffffff, 0xc17a) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpgrp(0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c006400004801907864010102ac1414aa0000907812340001bea67f717dfd14293e62b0fa6951e811d0ea311749c6ca2f2dc5692722ed31eab4af815a506e939e63cd49f94fb82ec9ff9d6a4c00ce64990a80d154666aaa5935bc9c5d805cfa0f8ab608cc0e9c59548937b8841ce6ba1fef"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000340), 0x24, 0x3) 5m35.210512891s ago: executing program 4 (id=641): sync() sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000900), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r1, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m34.371398801s ago: executing program 4 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x4, 0x0, 0x6, 0x4}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r2, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000", 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) getdents(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 5m33.654199234s ago: executing program 4 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x50, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x80}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 5m33.080802391s ago: executing program 38 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x50, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x80}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 5m1.337963853s ago: executing program 8 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500"], 0x4c}}, 0x0) 5m1.291571656s ago: executing program 8 (id=719): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000114) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m0.677721544s ago: executing program 8 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x4, 0x0, 0x6, 0x4}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r1, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000", 0x11) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) getdents(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 5m0.041753514s ago: executing program 8 (id=726): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r2, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000012c0), 0x4) 4m53.70187375s ago: executing program 8 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465") write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 sync 2 7:0 0 7:1 0', 0x46) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="04000000000000000000000090010000380100000100"/42) 4m53.361810636s ago: executing program 8 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x0, 0x63, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040400020806500007050102000200070582020002000904"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) tgkill(r0, r0, 0x12) socket(0x80000000000000a, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) r6 = creat(&(0x7f00000005c0)='./file2\x00', 0x60) sendmmsg$inet(r5, 0x0, 0x0, 0x2004000) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000480)={@multicast2, @remote, 0x1}, 0x10) write$binfmt_script(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m37.933911287s ago: executing program 39 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x0, 0x63, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040400020806500007050102000200070582020002000904"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) tgkill(r0, r0, 0x12) socket(0x80000000000000a, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) r6 = creat(&(0x7f00000005c0)='./file2\x00', 0x60) sendmmsg$inet(r5, 0x0, 0x0, 0x2004000) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000480)={@multicast2, @remote, 0x1}, 0x10) write$binfmt_script(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m36.113482432s ago: executing program 9 (id=791): sync() sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x4) 4m34.369948643s ago: executing program 9 (id=794): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) 4m33.535625432s ago: executing program 9 (id=798): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 4m33.353978451s ago: executing program 9 (id=799): sync() sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m31.713832427s ago: executing program 9 (id=802): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4c, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef852506b41edcd3beef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed54aba245e80eab18bc6f", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x403}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4m30.115056462s ago: executing program 9 (id=807): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffffd, 0x10000003, 0x0, 0xff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 4m29.543837469s ago: executing program 40 (id=807): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffffd, 0x10000003, 0x0, 0xff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 4m9.622309989s ago: executing program 1 (id=809): sync() sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$eJzs3c9vFOUbAPBnpttSCt9vF+NBjAk1HiAxbFtAQeIBPKoHE0nQE679QRoWUFoTS0gsNxMvavDkyZOa6NGrIUaNBw9GT/wHhqQxhT+gZmZny9ruthS2TFM+n2R233delvcZkmffd3beYQJ4bI1kL2nE/oj4NIkYLvanETGQlwYjFpp/7u7StYlsS2J5+c1/kkgi4s7StYnW35UU73uyl0r+yfjzp4gn+tb2Ozt/9UK90Zi6UtRH5y6+Nzo7f/XwzMX6+anzU5eOvDh2dPylYydeOHbvQ4MPd6zzx9NP/nj1lW9unPvy9+9PPPNxEqdib9HWfhy9MhIjK/8m7SoR8XavOytJX3E8nY4TAIDtJ22bw+2P4ejLS03DUZspNTgAAACgJz6KiGUAAABgh0uc/wMAAMAO11oHcGfp2kRrK3dFAvCoLJ6OiGoz/1v39zdbKrGQvw9Gf0QM3U3a7gxq3u9d7UH/IxHx3RfHD2RbbNF9+EBnC9cj4qlO43+S53+1+E83Vud/GhFjPeh/ZFVd/sOj0yn/m+cFG+f/qR70L/8BAAAAAACgd26ebl7IX3v9P11Z/xMdrv/1dbh29yA2vv6X3u5BN0AHi6cjXm57ts/dtvwvVPuK2v/y9QD9yfRMY2osIv4fEYeif1dWH1+nj69/OPlXt7b29X/ZlvXfWgtYxHG7suu/n5msz9Uf5piBpsXrEU9XOuV/sjL+J6vG/4Fi/e8b99nHL2d/nO7WtnH+A1tl+auIgx3H/3tPdEvWfz7faD4fGG3NCtY6++zP33brX/5DebLxf2j9/K8m7c/rnN18H2NDh893a3vQ+f9AciZ/quhAse/D+tzclfGIgeT1tfuPbD5m2Ila+dDKlyz/Dz3X+fy/2/w/it//3im+JdKIqBfvWf3dVX3uOvfrZ93iMf5DeRbfj5jc1Pi/+cLnby2d6db//Y3/x/Ix/VCxx+9/sL77TdCy4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDtJI2IvZGktZVymtZqEXsi4skYShuXZ+een778waXJrC2iGv3p9Exjaiwihpv1JKuP5+V79SOr6kcjYl9E3BjenddrE5cbk2UfPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv2RMTeSNJaRKR5OU1rtWbb38NlRwcAAAD0TLXsAAAAAIAt5/wfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIe078DNW0lELJzcnW+ZgaKtv9TIgK2WRsRvZQcBlKKv7ACA0lTKDgAojXN8INmgfbBrixkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPk4P6bt5KIWDi5O98yA0Vbf6mRAVstLTsAoDR9ZQcAlKZSdgBAaZzjA8kG7YNdWzrMIEwqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHas2fmrF+qNxtQVhXULlYjYBmH0ovBaui3CUNjehbK/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjJ/g0AAP//hpr+QQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync() mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m7.501888928s ago: executing program 1 (id=881): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, r1}) fcntl$getown(r0, 0x9) 4m6.853778539s ago: executing program 1 (id=886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0x98, 0x0, 0x348, 0x98, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffff00, 0xffffff00, 'pimreg\x00', 'vcan0\x00', {0xff}, {0xff}, 0x84, 0xfddd1e92b89f2843, 0x94}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x3, 0x1, 0x1, 0x0, 0x3], 0x4, 0x7}, {0x2, [0x3, 0x1, 0x6, 0x0, 0x4, 0x5], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 4m5.96541406s ago: executing program 41 (id=886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0x98, 0x0, 0x348, 0x98, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffff00, 0xffffff00, 'pimreg\x00', 'vcan0\x00', {0xff}, {0xff}, 0x84, 0xfddd1e92b89f2843, 0x94}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x3, 0x1, 0x1, 0x0, 0x3], 0x4, 0x7}, {0x2, [0x3, 0x1, 0x6, 0x0, 0x4, 0x5], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 3m47.171503038s ago: executing program 0 (id=941): sync() sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$eJzs3c9vFOUbAPBnpttSCt9vF+NBjAk1HiAxbFtAQeIBPKoHE0nQE679QRoWUFoTS0gsNxMvavDkyZOa6NGrIUaNBw9GT/wHhqQxhT+gZmZny9ruthS2TFM+n2R233delvcZkmffd3beYQJ4bI1kL2nE/oj4NIkYLvanETGQlwYjFpp/7u7StYlsS2J5+c1/kkgi4s7StYnW35UU73uyl0r+yfjzp4gn+tb2Ozt/9UK90Zi6UtRH5y6+Nzo7f/XwzMX6+anzU5eOvDh2dPylYydeOHbvQ4MPd6zzx9NP/nj1lW9unPvy9+9PPPNxEqdib9HWfhy9MhIjK/8m7SoR8XavOytJX3E8nY4TAIDtJ22bw+2P4ejLS03DUZspNTgAAACgJz6KiGUAAABgh0uc/wMAAMAO11oHcGfp2kRrK3dFAvCoLJ6OiGoz/1v39zdbKrGQvw9Gf0QM3U3a7gxq3u9d7UH/IxHx3RfHD2RbbNF9+EBnC9cj4qlO43+S53+1+E83Vud/GhFjPeh/ZFVd/sOj0yn/m+cFG+f/qR70L/8BAAAAAACgd26ebl7IX3v9P11Z/xMdrv/1dbh29yA2vv6X3u5BN0AHi6cjXm57ts/dtvwvVPuK2v/y9QD9yfRMY2osIv4fEYeif1dWH1+nj69/OPlXt7b29X/ZlvXfWgtYxHG7suu/n5msz9Uf5piBpsXrEU9XOuV/sjL+J6vG/4Fi/e8b99nHL2d/nO7WtnH+A1tl+auIgx3H/3tPdEvWfz7faD4fGG3NCtY6++zP33brX/5DebLxf2j9/K8m7c/rnN18H2NDh893a3vQ+f9AciZ/quhAse/D+tzclfGIgeT1tfuPbD5m2Ila+dDKlyz/Dz3X+fy/2/w/it//3im+JdKIqBfvWf3dVX3uOvfrZ93iMf5DeRbfj5jc1Pi/+cLnby2d6db//Y3/x/Ix/VCxx+9/sL77TdCy4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDtJI2IvZGktZVymtZqEXsi4skYShuXZ+een778waXJrC2iGv3p9Exjaiwihpv1JKuP5+V79SOr6kcjYl9E3BjenddrE5cbk2UfPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv2RMTeSNJaRKR5OU1rtWbb38NlRwcAAAD0TLXsAAAAAIAt5/wfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIe078DNW0lELJzcnW+ZgaKtv9TIgK2WRsRvZQcBlKKv7ACA0lTKDgAojXN8INmgfbBrixkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPk4P6bt5KIWDi5O98yA0Vbf6mRAVstLTsAoDR9ZQcAlKZSdgBAaZzjA8kG7YNdWzrMIEwqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHas2fmrF+qNxtQVhXULlYjYBmH0ovBaui3CUNjehbK/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjJ/g0AAP//hpr+QQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync() mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000900), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m46.457882302s ago: executing program 0 (id=946): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3m46.457587731s ago: executing program 7 (id=947): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x42002, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r2, 0x0, 0x0) 3m46.140520296s ago: executing program 7 (id=948): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6573, &(0x7f0000000040)={0x0, 0x30bf, 0xc000, 0x8, 0x1ff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) fcntl$dupfd(r1, 0x0, r0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000002c0)={0xa0000013}) 3m46.083377599s ago: executing program 0 (id=949): pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m45.657711639s ago: executing program 7 (id=951): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) 3m45.313227815s ago: executing program 7 (id=953): sync() sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000900), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m44.78810274s ago: executing program 7 (id=955): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open(0x0, 0x480000, 0x46) shutdown(r0, 0x1) 3m44.042738834s ago: executing program 7 (id=959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00006003aaaaaaaaaa42aaaaaaaaaa0208"], 0x32) 3m43.306609159s ago: executing program 42 (id=959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00006003aaaaaaaaaa42aaaaaaaaaa0208"], 0x32) 3m42.83752546s ago: executing program 0 (id=962): sync() sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsold}]}, 0x1, 0xb9b, &(0x7f00000017c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000900), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m41.99637026s ago: executing program 0 (id=964): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x403}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3m41.408919727s ago: executing program 0 (id=968): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8000, &(0x7f0000000240)={[{@resuid}, {}]}, 0x21, 0x4d2, &(0x7f0000000e40)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m40.946418149s ago: executing program 43 (id=968): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8000, &(0x7f0000000240)={[{@resuid}, {}]}, 0x21, 0x4d2, &(0x7f0000000e40)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m26.417576723s ago: executing program 5 (id=1508): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x7, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000800) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1m24.393423098s ago: executing program 5 (id=1511): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x100000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m24.189931536s ago: executing program 5 (id=1512): r0 = socket$rxrpc(0x21, 0x2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1m23.552233046s ago: executing program 6 (id=1516): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x400c4d01, 0x0) 1m22.62594403s ago: executing program 5 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af33da4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1m22.394316061s ago: executing program 6 (id=1520): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x100000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m22.175901761s ago: executing program 5 (id=1521): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x0) 1m21.902280994s ago: executing program 6 (id=1523): r0 = inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.604994808s ago: executing program 6 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(0x0) 1m21.312378082s ago: executing program 6 (id=1525): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1m21.033883844s ago: executing program 5 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008881}, 0x20002010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r4}, 0x14) 1m19.691139107s ago: executing program 3 (id=1528): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xf0}]) 1m19.585973892s ago: executing program 6 (id=1529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af33da4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1m15.362899339s ago: executing program 2 (id=1531): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x100000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m12.497723873s ago: executing program 3 (id=1532): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) open(&(0x7f0000000680)='./file0\x00', 0x0, 0x84) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 1m8.419266164s ago: executing program 2 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(0x0) 1m3.385955039s ago: executing program 44 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008881}, 0x20002010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r4}, 0x14) 1m2.615712375s ago: executing program 3 (id=1535): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2c73, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.885481202s ago: executing program 45 (id=1529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af33da4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 59.196786544s ago: executing program 2 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7f) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x63f3, 0x4) 49.804528523s ago: executing program 3 (id=1538): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000280)={0x8, {"e67f856826ffc83970f186b5ad9e0989a9a28a53157691574b98fbeee4bedb9a63cd0164195555e9ed41010c5de5c5137bff1be41b55a1aa01e2a296a4b28b41281b5b16b9e0e0f6169dcf9ba75ae933461457e275ee6929f47d8d5b9d6414a8af0fb3f215d71e1c23c32143745917098df251d41115c7acdcb04cc3dc54875d237a35deca29d8acfb5beec2284c32c3c277e0d0eac956e53c6d820d5807a143878060b07443162eddbec87730721f3c3f9996425ca5203ddc38a1b2b07f07b815e38506e64dc758bb2cd3dd7995880056aa36a057e3c2e07e15a8b914ec3995839387ed33ca5f73dfae5a6852b85977ba05ddd33b105241d9bd4e9b41d70391879bcf0ef8d9aa1fb199cdee26944886fb85a0e00a813b2f449088a169ea03b9a72b0b2a08bbcd54899c5dab16a9cfbc04749fe61f7717d651a024c1743e810c363ab4aee9a3428c721344ac4e09bd6a78b2b69884e030ede4e26145f59aac36bdc7cd8c6da11ee519da3f70ca8a2b8fd09a6b290b1ad92d730b06ae3624e72b6e00dfdd0ef9262d71bbbbc942bb95c134d23c95130ebee4cda11f2a1590013ac4cfdd704c921dc4d049c7dd1a53411336403e5b2abc222e3e8bad4ebfc602d10894734244294d4e1d48b258039a6a23db6c0eaa5bedb56213acc8522dfb6380e609da23ed5ab27a864ef06067875c4f727b65d833ba15f4b2e4f2a1c12a827259857d721281f87c34c43e6f0b1ce65f965a3059d4e1a24d2f33fdd927af8b743b4a86d2f7eec3402f042e489a38e4141fdf9425e23b550942cf3ac75bf7d8bbdabe8cad92f656c34a629512abea2931e76ae048b8adb0bbda0e71a6de1d00a3eafe1add974c1aa0df6b970fe3fe2456d9471be203fef8697e15c9242fa5258f5cd2fe847e6103c76f74186393fc38632b8ae4fa32afa427101351607bcefdbddd90e8f575f405d5829d3dc684fec3484f1bb2525fb6bc12415da564412ffbf023ea33533248d845f25fcf21a8d6d090c45a6884570cd629ff6a0c8eac8af78e9d114ad8d4349ab1be026ef19e5fbe26f7c6d9c4ed433fefe7085b496709cbe3d0d32cda1b49e9f2b37b5b2213e066c20befc8d91832bfd5b5d676eeee12d4fb431c6117a79c3a5e7a0310766eafafe21e71eadeb6b9cf4256d8be4234d3cd68a7a6cdc7f042ae35b89c378d7fb46e92c1b791c7bee4372f8198fed7e9af7cb1cdb678d82262cd6255a8fc973a27a4fb288adf255ed37b5e31670c01f9e7b7cc81e571239ed1538206dbc0dfcdfe612904fcb81efb9637546793368ca114086f9ee039ce9e743b163b55bf9f6a3938767094286dd6a5e2eab7e3e332613035810f1da81ff47e9bd5ec81ce6fef6cbecc8b8e143e6d0b764b50f80d064690023f90a337777e7d3a47e4ba334f4a424c2c60d9a65de793196752dd2c8482a09a82f6d43725570b080f38afe5769ca81c02240e2e56973d77277e60ca1be816b26f567f320d026580dd1e682e79885935b06751c7bc045dfe4e0a43553e71d22f96ebf994d83868345691473825ca912340e30d7e008205366119aa3df9b70126c7183e2aa349b7616cf3bf080af3d00e130bfe104dbac4b0fd9553822346c59bdf45af5dd6132214ab635fb0a639ddfbd6ab150a535ef3da955141a21bd6a5ba3ce890a94b14525981b7fda6e277ca46efd97e29f17c4e301624acfb9ebd6adc22748a71c0baf046c1554ff3c63085860ec82affab1eece71aebb5a5fd1414fc1a9e8a12939f71d2e5c0685ba0027ff32dca759d6a2623a54b5a361baf1d47002abd49cf1c52ec689b058fa3b08346e8ea9da82797db131d4a6cdd1426a597993fec5861609f6f8269874e8172f1b8a676cabf048919d88f7f472af6db0480e7d3c2b12a9bf19e0ebc507934f49e2ff9275dc4bd821c77571c5eed909f2f9574f3130fe89a4a6bf8e9dc75cc51d91ec332b6e01842d5088c17426aadf71cc8cb512f6c15b7e9f4232a00a6c9f1d3f6a8ba50308d1390e2656a8422a2e57a0745a37d79dcfa950d29933189ce22cf44387bf3795767304b82db1ab6d48f91f37c14a651574b5349b086bf214436c6616605ad54afd093354f77296250ecaee85108f3394e9d7d716feef6ab9472fc763e001757a80e29d7c63a79f7f5fdb50aee920d03443bdf6239e0a01ad585e856bd70bee6b6a5c134d6207fe8c105e1b8c7f80746c81b1577e909cb3b4c0393646424ce0196cf6c15bbd3629454c803f3f73719013683075420743a7b7a401e51ad48ac690f112e0a0661997dfeb79538b2effc94ea158d248790cb44632d474b97990242667fd7c293774aa690b5678c8e1ab2e8ed1aa856e5aa7f71e43650527833a2f6291914e7432d6d56e43bc4038c93b3e508c67cc438f6b1bc476c769d4829b1fc795fffcc6f423d6f828624f60c50b91d1da11f92b8769b23c0c760a0068712b69f1110034745d941458bfc6240acb40a2ac3f3a7e1b3d7d9098acaaabefd1dfe8dac915807c02f99c76b18b6b22690c0a2bd6183587e371fd96cc8fcfac71036f5c08a0f795e8d9cb993efc57932fb30a6709607f52b6f72aff18a68c78f2307f2e708fd92d4be70386118907f02afe19436403ffb7b3cbd355647f721c1adb76b5da6ada07aaa552b97881e7c6b917c8561fd97a50cf13d2e81fd7e225097232bc628aa6ef46edf6b09c5e08b84f163a205ef5a2c1ac5cc19826e0e0258d9b67207f338d52dd5754ce9b738253ae4cd921ab822a493a7a24b826bbd2aea587167253ed3e097e3425c7602eb915b389996c4caf8b64bb80ac05ca4e728c331d160f2a9aba9fae0481add902bf235f4276d8806332e47eba3321881a41c91dc411ebba6591265d579be8391104d3c76faf823babaeb384afdbb96af5132a6a0e828d309e45e73340caf6b5f4410a0196782480a3a95387fd1d27ff555ca2787ab013aa6e57f1e8ec05e5ed9dc70bbc972a56f5877eb887f53e235d85790965957f0be0d0779747331bbeb6135892ec5f1f34bbfdf8e409580da14ee468e3a5148224796d4b724f5b2420f3ac4772a965f3f413d11b3392fbbe3ff6e29055a8588320e1baa2d8eae19941c7566451c5a0f3a7a5c13ac0fa84fb66a3a6580d2a4f4dec025be843e10a559e0bb1dac267e4286f449c564abdc476fa3c29a84939d9e186d865d6f00f249bf28e93302dbac1fec09488e55296bc47f6a30085e952c1d41827049609b9ed0def71c0e37d076e5089a7fde50c4221ce63521d939fe38f059f8ef29fd28a8cd84df8dbba2ecc4bd894765c15af996f5d40f0b65cc2257b878924c51806f7ac55dcfe136027e31b26ef5e2879856f8974a290898d98db9561e36c75f381a2146befbec8a7d2057fc1551416685b1944d9e83e75cfd9965bab27d5a383e1bdd4e13cad968798a6bf8b8b84f8b002696a5a4cd7702549b318846483ecfe672a9681cfc8fed2bb43b1abf734d16266a4ce470dc149628f2d3c66ce027fc8e5765d4e73e89b6d0124e2956dc57caca757c3f27565fde6d434aaa08af9eb8b9d28b485135844e1f76f740a407c8b27834cd0ccb2e36ec8bdb921e26e0411ebb2b9fb8ae37a256434362bf38f9a514dd083de95249b446f89042dd0a466e5f7634067e93e920b3357298cfb424f1a675b632682a29c7b67fd3be24b032f30fbb3a42b0d2643bfe9bc049c5407ec57b996c12addede73fec7dec0506d144ef5ed6dd0b71adc3a55d54f88b279d9f1b2988218dddd6e4c1e311e0980d01e35a0d9b9bd44b8fdc7f7fd1601e803bcb7f071bdedb0ce0820a48f00356c335f9eceaa8ee7f5037ea9e8bd1e0dd6f89fc0295865c68c9df5531f84850c2bd9cd7ac78b999b07cfd1119dc5ede4c6112cc0b53d23d73fe8d58418f1215a7071ecb00eefbf28be4e611bd60804a38aeb46c152f2e98e6f47bf5e8aa8a4ff2a4fbfb2f541264e612941947c08e5ebcc9983f4ed2d647a5523e89c2328e737407f5db82953edad96ca0d67616d77d3c8d2540bd20b537b76225684a546d310b13d3b8160a768fff291135cc9912bf2ab2df8c1493826ffc21b036d9a93c8de8a47b0c82616383cf0a4faedabcf3dc4c8eaecf39eb90f8ab7ec3cb673540e40e1ab6902efdb40509cbc6b2aee0bf5db92c835df909a6faf9154c463941954ce797b500e375feb834a7fb03e2222c1b2a36116e73725a325311f0b17827677742c0dbffff94479ac8588897fd140dc82217d1a33ff7820e63a8bb72e0f372ba896436b65fed01a72eb0ac13dfda25c1a1329c078b0358665cd8cc6637071398dead22a16a7c59c51ab6bd7ad8a3fe4bfbe9d9dd6d8608d0bbe3d3dd7bc6edcab58adc07f824493386294ac9f6c3577118d1dd728829ecf2dd4ed29ebd5a5b822dc78700dc5a5979bcdaba6a5a31c3e13b5b805eef9947474cb21c7ffe7a52349198b6f177d74d7deadf9bd59b1ddf5881684edc5a52f54218f3a5841e63b111bcf0e584c6ad2c08e1ea10defebe5ecddf5059c0f78a50ea97ac68421a9c2c91a8bc5bb449acbdd2081f58fc2ff5463190ff841cba8a472986129f2ae0601e3111fb8af0bd4a5f65a400e5961edd2fe2aee05fe72987c5d568af3d4a8b1ef495c5240b3bb0db936659f3853ae2b253813ab53fb5cd6bcbdca40f42a65cdfed7c94d72c78f223e1c7c684c35af218e7e0f858993536e0d8c29eea0bef731104c0f988b18646272fc95db904fda9daa53a2bc846e76bca61cd2213719c4918e90e8827acde61742c78e7b360800f4d948420e2239c3ffae3406e38c0a314e471b6863756bfb2f20e3d59e0cb54408cd90efe29c805c45e1ef2c019696e18198153608743c161993dcebec9da2b9ae5e0edaed241a2b58bd4e37b07525b236bff69e1b3087fdb6e1a5003a8d224eb3d4b474488486047cc1caa03b84632956c832ee61c0c068e2e0e0633c5c169e7e43c6acfc0bac4ec5e42fad477cc4cdb5fb13dfd65808ed4dd8ccfa13f51ec3b3a6cadc24881f43567d68c7b9649be7c87ff4b28efc6133bcc2400849f0334d888eb07b2a6359feb4c5644e9b7363b8259903ab1d45898c98e8b911b178208f370d926e8db3bf18dd8359362092be5e11c852e9e628e96c46d71807dde3751766eda8a31243f27e1c9ea7941a429a79712d6632153839e0899c00df72ba3a94713207d906004b445bbd2ca213dbe372b2e478e89da31c02a1d81a51c1ae360217f9aaa353df9cbfb5e9c0b1d81688775e6780eb525e31dfd1ef591be3571ac8ce74d3ac56201e81912a557022028c09f3d61ece00b79b0379549f789af9de14064b5049724e86669736026f9d959dfdda8f5e96bb5458162086724e4e546cafb3a2d908e5726881935b8246c09817c8857cc155a1e0ccb90e339deabd48269b3b2b9804abd0c70ad72e5aa1313c9f394e6c9fcf33da6f2ea3aa20a45cf4d4518b23c3f1b01bb72108f53f43058520d17f816ae5ae406fccd113e8f96e7440ea844adcfe3ce285c02904a159fc074942153eb7f516d9d215bd391a10e050f1bb07f03decbca98ca7ed15c5ee7f30b26ca5bd429f651e64aeb65752073362b6811c0587356d0b19d8a9beab3c89da72c790a7e22d1d21c6b4017c773ce8e1167d50a7aa8e0d8c21318e05f63ca7ed886810e9dc3621c21c4da27500f37cd74694d684c6016b8014e0e56880a10f30da60ad1c8258bdae649ff97421ee0c3f4f4c5be9694bbad680b0d36ebd22c37306a26faa40f4386c701e62385cbcd3e2e6ca9c3af0", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = io_uring_setup(0x6ed6, &(0x7f00000004c0)={0x0, 0xbf59, 0x40000, 0x2, 0x26e}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x1) fsopen(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') 49.663856319s ago: executing program 2 (id=1539): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x7, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000800) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xc}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.133304568s ago: executing program 3 (id=1540): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) 35.043966003s ago: executing program 2 (id=1541): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'veth1\x00', @ifru_data=0x0}) 23.554366549s ago: executing program 2 (id=1542): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x453) 20.957796581s ago: executing program 3 (id=1543): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(0x0) 4.516569348s ago: executing program 46 (id=1542): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x453) 0s ago: executing program 47 (id=1543): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(0x0) kernel console output (not intermixed with test programs): [ 492.669581][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.679910][ T9555] Call Trace: [ 492.683300][ T9555] [ 492.686436][ T9555] dump_stack_lvl+0x18c/0x250 [ 492.691254][ T9555] ? show_regs_print_info+0x20/0x20 [ 492.696559][ T9555] ? load_image+0x420/0x420 [ 492.701298][ T9555] ? __lock_acquire+0x7d80/0x7d80 [ 492.706413][ T9555] mtrr_add+0xd0/0x100 [ 492.710742][ T9555] mtrr_ioctl+0xc96/0x13a0 [ 492.715304][ T9555] ? mtrr_close+0x200/0x200 [ 492.719890][ T9555] ? __fget_files+0x28/0x460 [ 492.724712][ T9555] ? mtrr_close+0x200/0x200 [ 492.729272][ T9555] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 492.734905][ T9555] ? proc_reg_poll+0x290/0x290 [ 492.739729][ T9555] __se_sys_ioctl+0xfd/0x170 [ 492.744751][ T9555] do_syscall_64+0x55/0xb0 [ 492.749228][ T9555] ? clear_bhb_loop+0x40/0x90 [ 492.754084][ T9555] ? clear_bhb_loop+0x40/0x90 [ 492.758915][ T9555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.764864][ T9555] RIP: 0033:0x7f5ca3f9e159 [ 492.769500][ T9555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.789660][ T9555] RSP: 002b:00007f5ca4d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.798151][ T9555] RAX: ffffffffffffffda RBX: 00007f5ca4225fa0 RCX: 00007f5ca3f9e159 [ 492.806203][ T9555] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000004 [ 492.814215][ T9555] RBP: 00007f5ca403506b R08: 0000000000000000 R09: 0000000000000000 [ 492.822221][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.830322][ T9555] R13: 00007f5ca4226038 R14: 00007f5ca4225fa0 R15: 00007ffeefb41c48 [ 492.838442][ T9555] [ 492.954235][ T5782] Bluetooth: hci4: command tx timeout [ 493.187643][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.205003][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.213823][ T9532] bridge_slave_0: entered allmulticast mode [ 493.249588][ T9532] bridge_slave_0: entered promiscuous mode [ 493.283299][ T9] usb 9-1: USB disconnect, device number 2 [ 493.315981][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.323211][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.429895][ T9532] bridge_slave_1: entered allmulticast mode [ 493.496220][ T9532] bridge_slave_1: entered promiscuous mode [ 494.219198][ T9570] loop9: detected capacity change from 0 to 4096 [ 494.303732][ T9570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 494.367934][ T9570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.733507][ T9582] loop7: detected capacity change from 0 to 4096 [ 494.744348][ T8802] EXT4-fs error (device loop9): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 494.825151][ T8802] EXT4-fs error (device loop9): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 494.849698][ T9582] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 494.936806][ T9582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.025726][ T5782] Bluetooth: hci4: command tx timeout [ 495.333276][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.403014][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.615866][ T9532] team0: Port device team_slave_0 added [ 495.643861][ T9532] team0: Port device team_slave_1 added [ 495.693612][ T8638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.866284][ T9595] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 495.926351][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.933396][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.995416][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.020242][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.038148][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.088030][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.105598][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.7.803'. [ 496.116999][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.7.803'. [ 496.150450][ T8802] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.289476][ T3538] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.510598][ T9532] hsr_slave_0: entered promiscuous mode [ 496.543793][ T9532] hsr_slave_1: entered promiscuous mode [ 496.576171][ T9532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.583909][ T9532] Cannot create hsr debugfs directory [ 496.662239][ T3538] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.777932][ T3538] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.019783][ T3538] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.125239][ T5782] Bluetooth: hci4: command tx timeout [ 497.345911][ T9620] loop7: detected capacity change from 0 to 512 [ 497.596032][ T9620] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.811: corrupted inode contents [ 497.613343][ T9620] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 497.635669][ T9620] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.811: corrupted inode contents [ 497.649323][ T9620] EXT4-fs error (device loop7): ext4_evict_inode:302: inode #15: comm syz.7.811: mark_inode_dirty error [ 497.675217][ T9620] EXT4-fs (loop7): 1 orphan inode deleted [ 497.690222][ T9620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.097030][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.111717][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.121288][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.130906][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.139225][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 499.148224][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.185484][ T5778] Bluetooth: hci4: command tx timeout [ 499.406844][ T8638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.805064][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.814'. [ 499.982671][ T9642] hsr_slave_1 (unregistering): left promiscuous mode [ 500.161874][ T9653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.817'. [ 500.196156][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 500.991740][ T9677] loop7: detected capacity change from 0 to 512 [ 501.134329][ T9677] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.820: corrupted inode contents [ 501.186517][ T5778] Bluetooth: hci1: command tx timeout [ 501.232957][ T9677] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 501.284991][ T9677] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.820: corrupted inode contents [ 501.369356][ T9677] EXT4-fs error (device loop7): ext4_evict_inode:302: inode #15: comm syz.7.820: mark_inode_dirty error [ 501.462889][ T9689] device-mapper: ioctl: name not supplied when creating device [ 501.471080][ T9677] EXT4-fs (loop7): 1 orphan inode deleted [ 501.499530][ T9677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.786779][ T9630] chnl_net:caif_netlink_parms(): no params data found [ 501.829366][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.835910][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.935419][ T1192] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.000A/input/input12 [ 501.961434][ T1192] asus 0018:0B05:0101.000A: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 501.992699][ T1192] asus 0018:0B05:0101.000A: Asus failed to start multitouch: -5 [ 502.180391][ T1192] asus: probe of 0018:0B05:0101.000A failed with error -5 [ 502.241046][ T9699] fido_id[9699]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 502.422100][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.825'. [ 502.456968][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.464353][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.476921][ T9630] bridge_slave_0: entered allmulticast mode [ 502.515598][ T9630] bridge_slave_0: entered promiscuous mode [ 502.626333][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.637764][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.667353][ T9630] bridge_slave_1: entered allmulticast mode [ 502.679180][ T9630] bridge_slave_1: entered promiscuous mode [ 502.932279][ T9630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.957324][ T9630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.986169][ T3538] hsr_slave_0: left promiscuous mode [ 502.994089][ T3538] hsr_slave_1: left promiscuous mode [ 503.011156][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.033716][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.056056][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.079399][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.087717][ T3538] bridge_slave_1: left allmulticast mode [ 503.093629][ T3538] bridge_slave_1: left promiscuous mode [ 503.099817][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.125763][ T3538] bridge_slave_0: left allmulticast mode [ 503.136597][ T3538] bridge_slave_0: left promiscuous mode [ 503.142691][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.210057][ T3538] veth1_macvtap: left promiscuous mode [ 503.228434][ T3538] veth0_macvtap: left promiscuous mode [ 503.246506][ T3538] veth1_vlan: left promiscuous mode [ 503.254048][ T3538] veth0_vlan: left promiscuous mode [ 503.275111][ T5778] Bluetooth: hci1: command tx timeout [ 504.130874][ T9732] device-mapper: ioctl: name not supplied when creating device [ 505.356195][ T5778] Bluetooth: hci1: command tx timeout [ 505.571272][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 505.675215][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 505.818768][ T8638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.828856][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.946590][ T9756] netlink: 112 bytes leftover after parsing attributes in process `syz.7.835'. [ 506.077253][ T9758] device-mapper: ioctl: name not supplied when creating device [ 506.092287][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.029438][ T3538] bond0 (unregistering): Released all slaves [ 507.205846][ T9532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 507.231855][ T9532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 507.354599][ T9532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 507.404349][ T9532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 507.427565][ T5778] Bluetooth: hci1: command tx timeout [ 507.522099][ T9630] team0: Port device team_slave_0 added [ 507.559315][ T9630] team0: Port device team_slave_1 added [ 507.765336][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.775250][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.803597][ T9630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.821717][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.844296][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.945210][ T9630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.128008][ T9630] hsr_slave_0: entered promiscuous mode [ 508.146628][ T9630] hsr_slave_1: entered promiscuous mode [ 508.153430][ T9630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.174768][ T9630] Cannot create hsr debugfs directory [ 508.298125][ T9786] device-mapper: ioctl: name not supplied when creating device [ 508.379369][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.618796][ T9532] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.717461][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.724788][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.766527][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.773897][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.601101][ T9630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.703498][ T9830] loop7: detected capacity change from 0 to 512 [ 511.116011][ T9630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.543574][ T9630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.606090][ T9630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.689949][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.972014][ T9532] veth0_vlan: entered promiscuous mode [ 512.050842][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.092401][ T9532] veth1_vlan: entered promiscuous mode [ 512.172388][ T9630] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.264683][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.271942][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.288474][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.295866][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.356503][ T9532] veth0_macvtap: entered promiscuous mode [ 512.427059][ T9532] veth1_macvtap: entered promiscuous mode [ 512.513410][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.546307][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.581909][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.605527][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.654036][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.705816][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.718234][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.745142][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.757751][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.769357][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.792873][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.830414][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.858479][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.884321][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.913803][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.933115][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.944550][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.963574][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.974591][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.994803][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.011927][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.024398][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.049125][ T9532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.067256][ T9532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.086806][ T9532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.103588][ T9532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.392374][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.452619][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.605295][ T5860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.613305][ T5860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.505443][ T9630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.790840][ T9630] veth0_vlan: entered promiscuous mode [ 514.868430][ T9630] veth1_vlan: entered promiscuous mode [ 515.007907][ T9630] veth0_macvtap: entered promiscuous mode [ 515.070160][ T9630] veth1_macvtap: entered promiscuous mode [ 515.131650][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.154734][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.174794][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.208742][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.234746][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.279140][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.304712][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.334733][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.367730][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.403064][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.444895][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.476552][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.515936][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.580229][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.626612][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.657384][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.673002][ T9898] loop7: detected capacity change from 0 to 512 [ 515.689620][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.744020][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.796179][ T9898] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.864: corrupted inode contents [ 515.829159][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.875108][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.886005][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.896394][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.908125][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.911958][ T9898] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 515.918298][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.918319][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.927768][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.985485][ T9898] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.864: corrupted inode contents [ 515.999535][ T9898] EXT4-fs error (device loop7): ext4_evict_inode:302: inode #15: comm syz.7.864: mark_inode_dirty error [ 516.014108][ T9898] EXT4-fs (loop7): 1 orphan inode deleted [ 516.021851][ T9898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.039198][ T9630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.095093][ T9630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.126041][ T9630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.145926][ T9630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.207421][ T9900] vlan0: entered promiscuous mode [ 516.419151][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 516.506880][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.547897][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.621972][ T5865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.642548][ T5865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.027822][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 518.290797][ T9936] loop1: detected capacity change from 0 to 4096 [ 518.390799][ T9936] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 518.409470][ T9940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.876'. [ 518.443369][ T9936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.882272][ T9630] EXT4-fs error (device loop1): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 518.945523][ T9630] EXT4-fs error (device loop1): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 519.375641][ T9630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.499833][ T2977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.678503][ T9968] random: crng reseeded on system resumption [ 519.726088][ T9968] FAULT_INJECTION: forcing a failure. [ 519.726088][ T9968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.767605][ T2977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.775520][ T9968] CPU: 1 PID: 9968 Comm: syz.0.885 Not tainted syzkaller #0 [ 519.785458][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.795750][ T9968] Call Trace: [ 519.799074][ T9968] [ 519.802060][ T9968] dump_stack_lvl+0x18c/0x250 [ 519.806809][ T9968] ? show_regs_print_info+0x20/0x20 [ 519.812148][ T9968] ? load_image+0x420/0x420 [ 519.816718][ T9968] ? __lock_acquire+0x7d80/0x7d80 [ 519.821800][ T9968] should_fail_ex+0x394/0x4c0 [ 519.826639][ T9968] prepare_alloc_pages+0x1e1/0x5b0 [ 519.831854][ T9968] __alloc_pages+0x134/0x460 [ 519.836499][ T9968] ? zone_statistics+0x170/0x170 [ 519.841500][ T9968] ? alloc_pages+0x4e1/0x740 [ 519.846146][ T9968] get_zeroed_page+0x17/0x40 [ 519.850881][ T9968] get_image_page+0x41/0x310 [ 519.855657][ T9968] alloc_rtree_node+0xfb/0x180 [ 519.860593][ T9968] memory_bm_create+0x50b/0x990 [ 519.865689][ T9968] create_basic_memory_bitmaps+0x99/0x380 [ 519.871737][ T9968] snapshot_open+0x1b0/0x280 [ 519.876378][ T9968] ? snapshot_compat_ioctl+0x90/0x90 [ 519.881709][ T9968] misc_open+0x326/0x3a0 [ 519.886176][ T9968] chrdev_open+0x58c/0x600 [ 519.890709][ T9968] ? cd_forget+0x160/0x160 [ 519.895420][ T9968] ? fsnotify_perm+0x3ed/0x5e0 [ 519.900302][ T9968] do_dentry_open+0x880/0x14b0 [ 519.905189][ T9968] ? cd_forget+0x160/0x160 [ 519.909635][ T9968] path_openat+0x284f/0x3270 [ 519.914268][ T9968] ? do_sys_openat2+0xda/0x1d0 [ 519.919176][ T9968] ? __x64_sys_openat+0x139/0x160 [ 519.924253][ T9968] ? verify_lock_unused+0x140/0x140 [ 519.929493][ T9968] ? do_filp_open+0x430/0x430 [ 519.934246][ T9968] do_filp_open+0x1f2/0x430 [ 519.938796][ T9968] ? vfs_tmpfile+0x620/0x620 [ 519.943454][ T9968] ? _raw_spin_unlock+0x28/0x40 [ 519.948614][ T9968] ? alloc_fd+0x590/0x640 [ 519.952991][ T9968] do_sys_openat2+0x134/0x1d0 [ 519.957708][ T9968] ? do_sys_open+0xe0/0xe0 [ 519.962167][ T9968] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 519.968183][ T9968] ? lock_chain_count+0x20/0x20 [ 519.973237][ T9968] __x64_sys_openat+0x139/0x160 [ 519.978129][ T9968] do_syscall_64+0x55/0xb0 [ 519.982581][ T9968] ? clear_bhb_loop+0x40/0x90 [ 519.987387][ T9968] ? clear_bhb_loop+0x40/0x90 [ 519.992181][ T9968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.998109][ T9968] RIP: 0033:0x7f5ca3f9e159 [ 520.002637][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.022544][ T9968] RSP: 002b:00007f5ca4d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.031026][ T9968] RAX: ffffffffffffffda RBX: 00007f5ca4225fa0 RCX: 00007f5ca3f9e159 [ 520.039049][ T9968] RDX: 0000000000020101 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 520.047141][ T9968] RBP: 00007f5ca403506b R08: 0000000000000000 R09: 0000000000000000 [ 520.055144][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.063410][ T9968] R13: 00007f5ca4226038 R14: 00007f5ca4225fa0 R15: 00007ffeefb41c48 [ 520.071782][ T9968] [ 520.301234][ T2977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.419412][ T2977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.546516][ T9993] block device autoloading is deprecated and will be removed. [ 521.664574][T10002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.689630][T10002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.707298][T10002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.746110][T10002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.765694][T10002] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 521.775111][T10002] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.348295][ T8638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.425775][T10016] loop7: detected capacity change from 0 to 128 [ 523.260821][T10031] loop7: detected capacity change from 0 to 4096 [ 523.316104][T10031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 523.483831][T10031] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.551416][ T9999] chnl_net:caif_netlink_parms(): no params data found [ 523.798082][ T8638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.824914][ T5778] Bluetooth: hci1: command tx timeout [ 524.255703][T10056] loop0: detected capacity change from 0 to 512 [ 524.440643][T10056] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.903: corrupted inode contents [ 524.494966][T10056] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 524.508335][T10056] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.903: corrupted inode contents [ 524.530050][T10056] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.903: mark_inode_dirty error [ 524.556791][T10056] EXT4-fs (loop0): 1 orphan inode deleted [ 524.569996][T10056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.964836][ T5778] Bluetooth: hci1: command tx timeout [ 526.346302][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.526179][ T2977] hsr_slave_0: left promiscuous mode [ 526.538349][ T2977] hsr_slave_1: left promiscuous mode [ 526.605677][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.613371][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.631886][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.644830][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.666197][ T2977] bridge_slave_1: left allmulticast mode [ 526.672023][ T2977] bridge_slave_1: left promiscuous mode [ 526.690006][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.728408][ T2977] bridge_slave_0: left allmulticast mode [ 526.745314][ T2977] bridge_slave_0: left promiscuous mode [ 526.751185][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.879292][ T2977] veth1_macvtap: left promiscuous mode [ 526.894919][ T2977] veth0_macvtap: left promiscuous mode [ 526.900683][ T2977] veth1_vlan: left promiscuous mode [ 526.930377][ T2977] veth0_vlan: left promiscuous mode [ 527.963152][T10104] loop0: detected capacity change from 0 to 512 [ 528.049664][ T5778] Bluetooth: hci1: command tx timeout [ 528.133496][T10104] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.916: corrupted inode contents [ 528.204856][T10104] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 528.247244][T10104] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.916: corrupted inode contents [ 528.273408][T10104] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.916: mark_inode_dirty error [ 528.292378][T10104] EXT4-fs (loop0): 1 orphan inode deleted [ 528.307135][T10104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.066197][ T5778] Bluetooth: hci1: command tx timeout [ 530.260452][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.241853][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 531.410583][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 531.543225][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.681471][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.387884][ T2977] bond0 (unregistering): Released all slaves [ 532.574379][T10072] netlink: 'syz.7.910': attribute type 3 has an invalid length. [ 532.662605][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.670059][T10111] bridge0: port 2(bridge_slave_1) entered listening state [ 532.677863][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.685140][T10111] bridge0: port 1(bridge_slave_0) entered listening state [ 532.727160][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.734415][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.806530][ T9999] bridge_slave_0: entered allmulticast mode [ 532.844276][ T9999] bridge_slave_0: entered promiscuous mode [ 532.868865][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.903293][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.915504][ T9999] bridge_slave_1: entered allmulticast mode [ 532.954481][ T9999] bridge_slave_1: entered promiscuous mode [ 537.484573][T10139] syzkaller1: entered promiscuous mode [ 537.490441][T10139] syzkaller1: entered allmulticast mode [ 537.642114][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.734613][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.773450][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.930'. [ 538.005250][ T9999] team0: Port device team_slave_0 added [ 538.039466][ T9999] team0: Port device team_slave_1 added [ 538.187809][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.204706][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.286637][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.343587][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.388873][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.475366][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.612833][T10169] program syz.2.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.845039][ T9999] hsr_slave_0: entered promiscuous mode [ 538.866154][ T9999] hsr_slave_1: entered promiscuous mode [ 538.894982][ T9999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.903099][ T9999] Cannot create hsr debugfs directory [ 539.521069][T10185] loop0: detected capacity change from 0 to 4096 [ 539.551676][T10185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 539.638478][T10185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.745382][T10002] Bluetooth: hci0: command 0x0406 tx timeout [ 539.913552][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.187898][T10205] program syz.0.946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.073658][T10222] program syz.2.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.351656][T10224] loop7: detected capacity change from 0 to 4096 [ 541.408682][T10224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 541.445060][T10224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.566977][ T9999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 541.611078][ T9999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 541.635106][ T9999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 541.657339][ T8638] EXT4-fs error (device loop7): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 541.679971][ T9999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 541.709158][ T8638] EXT4-fs error (device loop7): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 541.856503][T10232] program syz.2.956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.227352][ T8638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.384162][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.518527][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.572445][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.580018][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.702948][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.710243][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.947551][ T9999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.706550][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.956991][T10262] loop0: detected capacity change from 0 to 4096 [ 544.031290][T10002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.042397][T10002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.049930][T10262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 544.059957][T10002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.082215][T10002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.095711][T10002] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 544.103338][T10002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.152381][T10262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.423750][ T8847] EXT4-fs error (device loop0): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 544.479644][ T8847] EXT4-fs error (device loop0): ext4_lookup:1860: inode #17: comm syz-executor: iget: bogus i_mode (70755) [ 544.698653][ T9999] veth0_vlan: entered promiscuous mode [ 544.715932][ T9999] veth1_vlan: entered promiscuous mode [ 544.784199][ T9999] veth0_macvtap: entered promiscuous mode [ 544.809268][ T9999] veth1_macvtap: entered promiscuous mode [ 544.838063][ T8847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.899979][ T2977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.966003][T10265] chnl_net:caif_netlink_parms(): no params data found [ 545.092031][ T2977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.186604][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.209622][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.230766][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.248865][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.273700][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.286815][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.304786][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.326057][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.360923][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.372201][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.396509][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.415044][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.443260][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.521917][ T2977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.583298][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.600858][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.611935][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.623969][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.637310][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.650568][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.664510][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.677728][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.688322][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.699914][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.710258][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.721188][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.733876][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.829723][ T2977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.007720][ T9999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.025244][ T9999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.034050][ T9999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.056901][ T9999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.127596][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.145106][T10002] Bluetooth: hci0: command tx timeout [ 546.151588][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.162364][T10265] bridge_slave_0: entered allmulticast mode [ 546.170778][T10265] bridge_slave_0: entered promiscuous mode [ 546.247262][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.265670][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.279800][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.306752][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.312671][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.325115][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 546.341427][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 546.345198][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.371389][T10265] bridge_slave_1: entered allmulticast mode [ 546.413966][T10265] bridge_slave_1: entered promiscuous mode [ 546.527000][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.607605][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.696183][T10298] program syz.2.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.808622][T10265] team0: Port device team_slave_0 added [ 546.896863][T10265] team0: Port device team_slave_1 added [ 546.934342][T10265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.941768][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.979676][T10265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.076413][T10265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.083446][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.122471][T10265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.160265][ T5865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.171584][ T5865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.264135][T10265] hsr_slave_0: entered promiscuous mode [ 547.273726][T10265] hsr_slave_1: entered promiscuous mode [ 547.282935][T10265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.290807][T10265] Cannot create hsr debugfs directory [ 547.395107][ T5865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.420850][ T5865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.956703][T10320] program syz.5.980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.179276][T10265] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.233772][T10293] chnl_net:caif_netlink_parms(): no params data found [ 548.254751][ T5778] Bluetooth: hci0: command tx timeout [ 548.474786][ T5778] Bluetooth: hci2: command tx timeout [ 548.570973][T10265] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.633289][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 548.711946][T10322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.869243][T10265] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.148546][T10265] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.222619][ T2977] hsr_slave_0: left promiscuous mode [ 549.248183][ T2977] hsr_slave_1: left promiscuous mode [ 549.287881][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.302459][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.343742][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.360863][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.394899][ T2977] bridge_slave_1: left allmulticast mode [ 549.400657][ T2977] bridge_slave_1: left promiscuous mode [ 549.435747][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.572738][ T2977] bridge_slave_0: left allmulticast mode [ 549.612865][ T2977] bridge_slave_0: left promiscuous mode [ 549.625418][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.702608][ T2977] veth1_macvtap: left promiscuous mode [ 549.711299][ T2977] veth0_macvtap: left promiscuous mode [ 549.717727][ T2977] veth1_vlan: left promiscuous mode [ 549.723137][ T2977] veth0_vlan: left promiscuous mode [ 550.340043][ T5778] Bluetooth: hci0: command tx timeout [ 550.554725][ T5778] Bluetooth: hci2: command tx timeout [ 551.730132][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 551.826789][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 551.936653][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.046178][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.385127][ T5778] Bluetooth: hci0: command tx timeout [ 552.625742][ T5778] Bluetooth: hci2: command tx timeout [ 552.729196][ T2977] bond0 (unregistering): Released all slaves [ 552.902878][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.932851][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.955038][T10293] bridge_slave_0: entered allmulticast mode [ 552.962661][T10293] bridge_slave_0: entered promiscuous mode [ 553.030817][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.043470][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.054463][T10293] bridge_slave_1: entered allmulticast mode [ 553.067885][T10293] bridge_slave_1: entered promiscuous mode [ 553.171957][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.230119][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.149360][T10265] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 554.191431][T10265] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 554.270431][T10293] team0: Port device team_slave_0 added [ 554.332787][T10293] team0: Port device team_slave_1 added [ 554.384379][T10265] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 554.407658][T10265] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.486647][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.493797][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.524144][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.538663][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.546304][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.585262][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.714763][ T5778] Bluetooth: hci2: command tx timeout [ 554.891729][T10293] hsr_slave_0: entered promiscuous mode [ 554.939096][T10293] hsr_slave_1: entered promiscuous mode [ 554.961892][T10293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.982937][T10293] Cannot create hsr debugfs directory [ 556.137775][T10403] loop5: detected capacity change from 0 to 256 [ 556.246644][T10403] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.274265][T10403] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 559.123260][T10403] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 559.180808][T10403] exFAT-fs (loop5): failed to load alloc-bitmap [ 559.210197][T10403] exFAT-fs (loop5): failed to recognize exfat type [ 559.613428][T10293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.756475][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.839840][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.149693][T10420] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 560.266305][T10293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.932966][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.940342][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.157138][T10293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.200182][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.207531][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.245198][T10436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.247946][T10293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.465105][T10440] FAULT_INJECTION: forcing a failure. [ 562.465105][T10440] name failslab, interval 1, probability 0, space 0, times 0 [ 562.504987][T10440] CPU: 0 PID: 10440 Comm: syz.5.1017 Not tainted syzkaller #0 [ 562.512611][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.522731][T10440] Call Trace: [ 562.526086][T10440] [ 562.529085][T10440] dump_stack_lvl+0x18c/0x250 [ 562.533917][T10440] ? show_regs_print_info+0x20/0x20 [ 562.539267][T10440] ? load_image+0x420/0x420 [ 562.543933][T10440] ? __might_sleep+0xe0/0xe0 [ 562.548686][T10440] ? __lock_acquire+0x7d80/0x7d80 [ 562.553958][T10440] should_fail_ex+0x394/0x4c0 [ 562.558722][T10440] should_failslab+0x9/0x20 [ 562.563576][T10440] slab_pre_alloc_hook+0x59/0x300 [ 562.568749][T10440] ? proc_thread_self_get_link+0xfc/0x190 [ 562.575212][T10440] __kmem_cache_alloc_node+0x53/0x250 [ 562.580676][T10440] ? proc_thread_self_get_link+0xfc/0x190 [ 562.586551][T10440] kmalloc_trace+0x2a/0xe0 [ 562.591023][T10440] proc_thread_self_get_link+0xfc/0x190 [ 562.596808][T10440] ? proc_setup_thread_self+0x2c0/0x2c0 [ 562.602398][T10440] pick_link+0x666/0xdd0 [ 562.606722][T10440] step_into+0xc18/0xee0 [ 562.611018][T10440] ? set_root+0x3a0/0x3a0 [ 562.615401][T10440] ? lookup_fast+0x14a/0x4c0 [ 562.620158][T10440] ? security_inode_permission+0xb0/0xf0 [ 562.626039][T10440] link_path_walk+0x748/0xe40 [ 562.630993][T10440] ? handle_lookup_down+0x130/0x130 [ 562.636514][T10440] __filename_parentat+0x231/0x650 [ 562.641723][T10440] ? vfs_path_parent_lookup+0x50/0x50 [ 562.647609][T10440] ? __kasan_slab_alloc+0x6c/0x80 [ 562.652792][T10440] do_renameat2+0x25e/0xc80 [ 562.657449][T10440] ? fsnotify_move+0x4e0/0x4e0 [ 562.662312][T10440] ? __check_object_size+0x4fc/0xa40 [ 562.667956][T10440] ? strncpy_from_user+0x1a1/0x2f0 [ 562.673303][T10440] ? getname_flags+0x20a/0x500 [ 562.678353][T10440] __x64_sys_rename+0x86/0x90 [ 562.683204][T10440] do_syscall_64+0x55/0xb0 [ 562.687728][T10440] ? clear_bhb_loop+0x40/0x90 [ 562.692784][T10440] ? clear_bhb_loop+0x40/0x90 [ 562.697518][T10440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.703457][T10440] RIP: 0033:0x7fc190d9e159 [ 562.707911][T10440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.727832][T10440] RSP: 002b:00007fc191b82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 562.736343][T10440] RAX: ffffffffffffffda RBX: 00007fc191025fa0 RCX: 00007fc190d9e159 [ 562.744713][T10440] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000380 [ 562.752770][T10440] RBP: 00007fc190e3506b R08: 0000000000000000 R09: 0000000000000000 [ 562.760879][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.768911][T10440] R13: 00007fc191026038 R14: 00007fc191025fa0 R15: 00007ffed0aab298 [ 562.776953][T10440] [ 563.021548][T10293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.078016][T10293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.127456][T10293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.170565][T10293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.278322][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.285276][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.600421][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.619319][T10293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.659039][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.731732][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.739014][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.753629][T10463] loop5: detected capacity change from 0 to 512 [ 563.795252][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.802549][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.810432][T10463] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 563.911928][T10463] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1022: invalid indirect mapped block 83886080 (level 1) [ 563.926180][T10463] EXT4-fs (loop5): Remounting filesystem read-only [ 564.025304][T10463] EXT4-fs (loop5): 1 orphan inode deleted [ 564.039356][T10463] EXT4-fs (loop5): 1 truncate cleaned up [ 564.068175][T10463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.117570][T10293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.449629][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.945123][T10293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.166919][T10265] veth0_vlan: entered promiscuous mode [ 565.207608][T10293] veth0_vlan: entered promiscuous mode [ 565.222301][T10265] veth1_vlan: entered promiscuous mode [ 565.262706][T10293] veth1_vlan: entered promiscuous mode [ 565.466468][T10265] veth0_macvtap: entered promiscuous mode [ 565.500816][T10293] veth0_macvtap: entered promiscuous mode [ 565.541356][T10265] veth1_macvtap: entered promiscuous mode [ 565.563923][T10293] veth1_macvtap: entered promiscuous mode [ 565.627350][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.661628][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.684740][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.727110][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.756900][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.782493][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.815170][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.844767][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.865542][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.884708][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.905125][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.937572][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.972438][T10265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.026871][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.061000][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.073223][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.091149][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.116244][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.134605][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.148490][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.170791][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.183583][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.204349][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.215811][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.219678][T10511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.238914][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.250105][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.264002][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.280340][T10293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.289539][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.302101][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.314860][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.328510][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.339198][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.350159][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.360492][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.371581][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.382253][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.402102][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.412600][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.423780][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.437905][T10265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.447056][T10507] tipc: Enabling of bearer rejected, failed to enable media [ 566.497468][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.534711][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.575124][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.594706][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.612616][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.625700][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.638023][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.649971][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.660974][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.672472][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.683300][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.694436][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.708353][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.721541][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.742230][T10293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.757125][T10265] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.775707][T10265] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.794967][T10265] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.804206][T10265] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.848464][T10293] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.870454][T10293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.892484][T10293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.909494][T10293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.412423][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.444409][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.557111][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.624518][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.653152][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.686649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.796709][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.813217][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.046736][T10545] loop5: detected capacity change from 0 to 512 [ 568.126826][ T7336] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 568.351810][T10554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 568.495426][T10551] size and base must be multiples of 4 kiB [ 568.495444][T10551] CPU: 0 PID: 10551 Comm: syz.5.1038 Not tainted syzkaller #0 [ 568.495468][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.495481][T10551] Call Trace: [ 568.495490][T10551] [ 568.495500][T10551] dump_stack_lvl+0x18c/0x250 [ 568.495539][T10551] ? show_regs_print_info+0x20/0x20 [ 568.495569][T10551] ? load_image+0x420/0x420 [ 568.495598][T10551] ? __lock_acquire+0x7d80/0x7d80 [ 568.495633][T10551] mtrr_add+0xd0/0x100 [ 568.495681][T10551] mtrr_ioctl+0xc96/0x13a0 [ 568.495714][T10551] ? mtrr_close+0x200/0x200 [ 568.495751][T10551] ? __fget_files+0x28/0x460 [ 568.495790][T10551] ? mtrr_close+0x200/0x200 [ 568.495817][T10551] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 568.495853][T10551] ? proc_reg_poll+0x290/0x290 [ 568.495880][T10551] __se_sys_ioctl+0xfd/0x170 [ 568.495911][T10551] do_syscall_64+0x55/0xb0 [ 568.495939][T10551] ? clear_bhb_loop+0x40/0x90 [ 568.495968][T10551] ? clear_bhb_loop+0x40/0x90 [ 568.496000][T10551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.496030][T10551] RIP: 0033:0x7fc190d9e159 [ 568.496051][T10551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.496070][T10551] RSP: 002b:00007fc18eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.496096][T10551] RAX: ffffffffffffffda RBX: 00007fc191026090 RCX: 00007fc190d9e159 [ 568.496113][T10551] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000007 [ 568.496135][T10551] RBP: 00007fc190e3506b R08: 0000000000000000 R09: 0000000000000000 [ 568.496150][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.496164][T10551] R13: 00007fc191026128 R14: 00007fc191026090 R15: 00007ffed0aab298 [ 568.496197][T10551] [ 569.664085][T10589] loop5: detected capacity change from 0 to 512 [ 569.737513][T10589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.846727][T10595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.965449][T10600] FAULT_INJECTION: forcing a failure. [ 569.965449][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 569.979147][T10600] CPU: 1 PID: 10600 Comm: syz.3.1055 Not tainted syzkaller #0 [ 569.986732][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.997540][T10600] Call Trace: [ 570.000898][T10600] [ 570.003886][T10600] dump_stack_lvl+0x18c/0x250 [ 570.008730][T10600] ? show_regs_print_info+0x20/0x20 [ 570.014012][T10600] ? load_image+0x420/0x420 [ 570.018627][T10600] should_fail_ex+0x394/0x4c0 [ 570.023382][T10600] ? __sigqueue_alloc+0x32/0x520 [ 570.028611][T10600] should_failslab+0x9/0x20 [ 570.033429][T10600] slab_pre_alloc_hook+0x59/0x300 [ 570.038638][T10600] ? __lock_acquire+0x7d80/0x7d80 [ 570.044057][T10600] ? __sigqueue_alloc+0x32/0x520 [ 570.049209][T10600] kmem_cache_alloc+0x5a/0x2c0 [ 570.054650][T10600] ? __sigqueue_alloc+0x40c/0x520 [ 570.059765][T10600] ? __sigqueue_alloc+0x32/0x520 [ 570.064957][T10600] __sigqueue_alloc+0x40c/0x520 [ 570.069866][T10600] __send_signal_locked+0x22f/0xe00 [ 570.075312][T10600] send_signal_locked+0x7dc/0x940 [ 570.080499][T10600] ? signal_wake_up_state+0x120/0x120 [ 570.086125][T10600] ? _raw_spin_lock+0x40/0x40 [ 570.091019][T10600] ? __up_read+0x2b8/0x6b0 [ 570.095711][T10600] force_sig_info_to_task+0x347/0x490 [ 570.101223][T10600] force_sig_fault+0xf1/0x150 [ 570.106663][T10600] ? force_sig_fault_to_task+0x140/0x140 [ 570.112521][T10600] ? __bad_area_nosemaphore+0x31e/0x690 [ 570.118319][T10600] exc_page_fault+0x64/0x100 [ 570.123088][T10600] asm_exc_page_fault+0x26/0x30 [ 570.128130][T10600] RIP: 0033:0x7fa909d872df [ 570.132642][T10600] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 570.152647][T10600] RSP: 002b:00007fa90ab83bd8 EFLAGS: 00010283 [ 570.158767][T10600] RAX: 0000000000000000 RBX: 0000000000002aba RCX: 0000000000000000 [ 570.167082][T10600] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007fa90ab83c00 [ 570.175798][T10600] RBP: 00007fa90ab83c00 R08: 0000000000000000 R09: 0000000000000000 [ 570.183902][T10600] R10: 0000000000000000 R11: 0000000000204080 R12: cccccccccccccccd [ 570.192342][T10600] R13: 00007fa90a026038 R14: 00007fa90a025fa0 R15: 00007fff2e9d0e48 [ 570.200658][T10600] [ 570.203905][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.282887][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.167921][T10632] loop6: detected capacity change from 0 to 512 [ 571.250049][T10636] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 571.349407][T10632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.897531][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.125836][T10699] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 573.133137][T10699] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 573.234803][T10706] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 573.241511][T10706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 573.310090][T10706] vhci_hcd vhci_hcd.0: Device attached [ 573.330783][T10699] vhci_hcd vhci_hcd.0: Device attached [ 573.353549][T10714] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 573.360257][T10714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 573.387830][T10714] vhci_hcd vhci_hcd.0: Device attached [ 573.444056][T10715] vhci_hcd: connection closed [ 573.448294][T10709] vhci_hcd: connection closed [ 573.453941][T10700] vhci_hcd: connection closed [ 573.475695][ T12] vhci_hcd: stop threads [ 573.496957][ T12] vhci_hcd: release socket [ 573.544880][ T12] vhci_hcd: disconnect device [ 573.557511][ T12] vhci_hcd: stop threads [ 573.561999][ T12] vhci_hcd: release socket [ 573.585685][ T12] vhci_hcd: disconnect device [ 573.591083][ T12] vhci_hcd: stop threads [ 573.595409][ T1192] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 573.614553][ T12] vhci_hcd: release socket [ 573.625981][ T12] vhci_hcd: disconnect device [ 574.086217][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 574.328180][T10737] loop6: detected capacity change from 0 to 256 [ 574.686750][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1090'. [ 574.894293][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 575.662020][T10751] loop6: detected capacity change from 0 to 256 [ 575.739389][T10751] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 575.785410][T10751] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 575.826969][T10751] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 575.893381][T10751] exFAT-fs (loop6): failed to load alloc-bitmap [ 575.930298][T10751] exFAT-fs (loop6): failed to recognize exfat type [ 577.415679][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 578.280690][T10797] loop3: detected capacity change from 0 to 512 [ 578.615614][T10797] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1105: corrupted inode contents [ 578.663372][T10797] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 578.679294][T10797] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1105: corrupted inode contents [ 578.733445][ T1192] vhci_hcd: vhci_device speed not set [ 578.762492][T10797] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.1105: mark_inode_dirty error [ 578.817116][T10797] EXT4-fs (loop3): 1 orphan inode deleted [ 578.833214][T10797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.336054][T10801] FAULT_INJECTION: forcing a failure. [ 579.336054][T10801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.465066][T10801] CPU: 1 PID: 10801 Comm: syz.2.1107 Not tainted syzkaller #0 [ 579.472749][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.483744][T10801] Call Trace: [ 579.487106][T10801] [ 579.490173][T10801] dump_stack_lvl+0x18c/0x250 [ 579.495147][T10801] ? show_regs_print_info+0x20/0x20 [ 579.500539][T10801] ? load_image+0x420/0x420 [ 579.505128][T10801] ? __might_fault+0xaa/0x120 [ 579.510011][T10801] ? __lock_acquire+0x7d80/0x7d80 [ 579.515110][T10801] should_fail_ex+0x394/0x4c0 [ 579.520223][T10801] _copy_from_iter+0x1cd/0x1290 [ 579.525588][T10801] ? copyout_mc+0x70/0x70 [ 579.530077][T10801] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 579.536478][T10801] ? __lock_acquire+0x7d80/0x7d80 [ 579.541754][T10801] ? lock_chain_count+0x20/0x20 [ 579.546760][T10801] ? _raw_spin_lock_irq+0xbb/0xf0 [ 579.551987][T10801] ? _raw_spin_lock_irqsave+0x100/0x100 [ 579.557977][T10801] ? page_copy_sane+0x4e/0x270 [ 579.563096][T10801] copy_page_from_iter+0x7b/0x100 [ 579.568220][T10801] pipe_write+0x758/0x1b20 [ 579.572822][T10801] ? pipe_write+0xc21/0x1b20 [ 579.577633][T10801] ? pipe_read+0x1330/0x1330 [ 579.582380][T10801] ? wake_bit_function+0x200/0x200 [ 579.588086][T10801] ? common_file_perm+0x198/0x1f0 [ 579.593716][T10801] vfs_write+0x474/0x9a0 [ 579.598302][T10801] ? file_end_write+0x250/0x250 [ 579.603243][T10801] ? __fget_files+0x3fc/0x460 [ 579.608533][T10801] ? __fdget_pos+0x1d8/0x330 [ 579.613472][T10801] ? ksys_write+0x74/0x260 [ 579.618052][T10801] ksys_write+0x151/0x260 [ 579.622639][T10801] ? __ia32_sys_read+0x90/0x90 [ 579.628470][T10801] ? lockdep_hardirqs_on+0x98/0x150 [ 579.634031][T10801] do_syscall_64+0x55/0xb0 [ 579.638780][T10801] ? clear_bhb_loop+0x40/0x90 [ 579.643698][T10801] ? clear_bhb_loop+0x40/0x90 [ 579.649006][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.656070][T10801] RIP: 0033:0x7fa87af9e159 [ 579.660900][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.681173][T10801] RSP: 002b:00007fa87beb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.689856][T10801] RAX: ffffffffffffffda RBX: 00007fa87b225fa0 RCX: 00007fa87af9e159 [ 579.698144][T10801] RDX: 00000000200002e6 RSI: 0000200000000100 RDI: 0000000000000005 [ 579.706325][T10801] RBP: 00007fa87b03506b R08: 0000000000000000 R09: 0000000000000000 [ 579.715151][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.723340][T10801] R13: 00007fa87b226038 R14: 00007fa87b225fa0 R15: 00007ffee4ea5858 [ 579.731379][T10801] [ 579.840040][T10807] loop6: detected capacity change from 0 to 256 [ 579.888268][T10807] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 579.937081][T10807] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 580.161678][T10807] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 580.194488][T10807] exFAT-fs (loop6): failed to load alloc-bitmap [ 580.257007][T10807] exFAT-fs (loop6): failed to recognize exfat type [ 581.135450][T10293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.441905][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 581.526576][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1112'. [ 581.849240][T10834] loop6: detected capacity change from 0 to 512 [ 581.939096][T10836] loop3: detected capacity change from 0 to 164 [ 581.959384][T10838] tipc: Started in network mode [ 581.984400][T10838] tipc: Node identity ba4008f3894d, cluster identity 4711 [ 582.013096][T10838] tipc: Enabled bearer , priority 0 [ 582.027622][T10834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.048546][T10837] tipc: Disabling bearer [ 582.125438][T10834] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.356464][T10834] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 582.454232][T10834] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 29 with error 28 [ 582.480183][T10834] EXT4-fs (loop6): This should not happen!! Data will be lost [ 582.480183][T10834] [ 582.510678][T10834] EXT4-fs (loop6): Total free blocks count 0 [ 582.530918][T10834] EXT4-fs (loop6): Free/Dirty block details [ 582.551222][T10834] EXT4-fs (loop6): free_blocks=65280 [ 582.581610][T10834] EXT4-fs (loop6): dirty_blocks=29 [ 582.604813][T10834] EXT4-fs (loop6): Block reservation details [ 582.650582][T10834] EXT4-fs (loop6): i_reserved_data_blocks=29 [ 582.764498][T10856] loop5: detected capacity change from 0 to 256 [ 582.792833][T10856] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 582.807646][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.837833][T10856] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 582.985420][T10856] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 583.025856][T10856] exFAT-fs (loop5): failed to load alloc-bitmap [ 583.046219][T10856] exFAT-fs (loop5): failed to recognize exfat type [ 585.983368][T10881] tipc: Started in network mode [ 586.014929][T10881] tipc: Node identity 12f22f067583, cluster identity 4711 [ 586.022396][T10881] tipc: Enabled bearer , priority 0 [ 586.078199][T10879] tipc: Disabling bearer [ 587.147316][T10914] loop6: detected capacity change from 0 to 256 [ 587.214208][T10918] loop5: detected capacity change from 0 to 1024 [ 587.236356][T10914] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 587.304054][T10914] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 587.327633][T10918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.416146][T10914] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 587.464248][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.516876][T10914] exFAT-fs (loop6): failed to load alloc-bitmap [ 587.531048][T10914] exFAT-fs (loop6): failed to recognize exfat type [ 589.970535][T10967] loop5: detected capacity change from 0 to 512 [ 590.050084][T10967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.164876][T10967] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.380734][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.511433][T10979] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 590.565115][T10982] loop5: detected capacity change from 0 to 256 [ 590.585090][T10982] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 590.600384][T10982] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 590.702510][T10982] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 590.774767][T10982] exFAT-fs (loop5): failed to load alloc-bitmap [ 590.781293][T10982] exFAT-fs (loop5): failed to recognize exfat type [ 592.192251][T11000] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 592.543422][T11008] Invalid ELF header magic: != ELF [ 593.336755][T11021] device-mapper: ioctl: populate_table: no targets specified [ 593.426079][T11023] loop3: detected capacity change from 0 to 1024 [ 593.542213][T11023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 593.634961][T11023] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.708092][T11030] FAULT_INJECTION: forcing a failure. [ 593.708092][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 593.767300][T10293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 593.773963][T11030] CPU: 1 PID: 11030 Comm: syz.6.1162 Not tainted syzkaller #0 [ 593.783815][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 593.793922][T11030] Call Trace: [ 593.797254][T11030] [ 593.800241][T11030] dump_stack_lvl+0x18c/0x250 [ 593.805014][T11030] ? show_regs_print_info+0x20/0x20 [ 593.810283][T11030] ? load_image+0x420/0x420 [ 593.814859][T11030] ? __might_sleep+0xe0/0xe0 [ 593.819632][T11030] ? __lock_acquire+0x7d80/0x7d80 [ 593.824723][T11030] should_fail_ex+0x394/0x4c0 [ 593.829481][T11030] should_failslab+0x9/0x20 [ 593.834066][T11030] slab_pre_alloc_hook+0x59/0x300 [ 593.839338][T11030] ? d_instantiate+0x6f/0x90 [ 593.844019][T11030] kmem_cache_alloc+0x5a/0x2c0 [ 593.848857][T11030] ? alloc_empty_file+0x9e/0x1d0 [ 593.853875][T11030] alloc_empty_file+0x9e/0x1d0 [ 593.858731][T11030] alloc_file+0x5b/0x600 [ 593.863118][T11030] alloc_file_pseudo+0x184/0x210 [ 593.868134][T11030] ? fput+0x1a0/0x1a0 [ 593.872267][T11030] ? inode_update_timestamps+0x600/0x600 [ 593.878001][T11030] ? debug_mutex_init+0x38/0x70 [ 593.882917][T11030] ? create_pipe_files+0x2c7/0x700 [ 593.888204][T11030] create_pipe_files+0x3ac/0x700 [ 593.893228][T11030] __do_pipe_flags+0x4c/0x2c0 [ 593.898152][T11030] do_pipe2+0xab/0x190 [ 593.902344][T11030] ? _compound_head+0x120/0x120 [ 593.907294][T11030] ? lock_chain_count+0x20/0x20 [ 593.912229][T11030] ? syscall_enter_from_user_mode+0x25/0x80 [ 593.918336][T11030] __x64_sys_pipe+0x3a/0x40 [ 593.922921][T11030] do_syscall_64+0x55/0xb0 [ 593.927465][T11030] ? clear_bhb_loop+0x40/0x90 [ 593.932364][T11030] ? clear_bhb_loop+0x40/0x90 [ 593.937121][T11030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.943096][T11030] RIP: 0033:0x7f27b6f9e159 [ 593.947581][T11030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.967781][T11030] RSP: 002b:00007f27b7de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 593.976330][T11030] RAX: ffffffffffffffda RBX: 00007f27b7225fa0 RCX: 00007f27b6f9e159 [ 593.984355][T11030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.992471][T11030] RBP: 00007f27b703506b R08: 0000000000000000 R09: 0000000000000000 [ 594.000509][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.008545][T11030] R13: 00007f27b7226038 R14: 00007f27b7225fa0 R15: 00007fff65873cd8 [ 594.016605][T11030] [ 595.675302][T11062] device-mapper: ioctl: populate_table: no targets specified [ 597.677425][T11104] loop3: detected capacity change from 0 to 512 [ 597.868439][T11104] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1172: corrupted inode contents [ 597.935009][T11104] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 597.993880][T11104] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1172: corrupted inode contents [ 598.050084][T11111] device-mapper: ioctl: populate_table: no targets specified [ 598.084962][T11104] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.1172: mark_inode_dirty error [ 598.107633][T11117] tipc: Enabled bearer , priority 0 [ 598.145458][T11104] EXT4-fs (loop3): 1 orphan inode deleted [ 598.168720][T11104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.185673][T11116] tipc: Disabling bearer [ 599.180231][T11151] device-mapper: ioctl: populate_table: no targets specified [ 599.281052][T11155] tipc: Started in network mode [ 599.291695][T11155] tipc: Node identity 2e1e9fcb4eeb, cluster identity 4711 [ 599.321654][T11155] tipc: Enabled bearer , priority 0 [ 599.339426][T11154] tipc: Disabling bearer [ 599.881205][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1201'. [ 600.036116][T11179] loop4: detected capacity change from 0 to 7 [ 600.062894][T11179] Dev loop4: unable to read RDB block 7 [ 600.075209][T11179] loop4: AHDI p1 p2 p3 [ 600.079479][T11179] loop4: partition table partially beyond EOD, truncated [ 600.115158][T11179] loop4: p1 start 1601398130 is beyond EOD, truncated [ 600.154723][T11179] loop4: p2 start 1702059890 is beyond EOD, truncated [ 600.431215][T11191] device-mapper: ioctl: populate_table: no targets specified [ 601.388528][T11212] loop6: detected capacity change from 0 to 512 [ 601.444388][T11212] EXT4-fs error (device loop6): __ext4_iget:5091: inode #11: block 1: comm syz.6.1212: invalid block [ 601.528792][T11212] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1212: couldn't read orphan inode 11 (err -117) [ 601.566632][T11212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.792618][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.698385][T11230] device-mapper: ioctl: populate_table: no targets specified [ 603.049743][T11240] tipc: Enabled bearer , priority 0 [ 603.116233][T11239] tipc: Disabling bearer [ 603.474894][T11248] FAULT_INJECTION: forcing a failure. [ 603.474894][T11248] name failslab, interval 1, probability 0, space 0, times 0 [ 603.544838][T11248] CPU: 0 PID: 11248 Comm: syz.6.1221 Not tainted syzkaller #0 [ 603.552570][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.562769][T11248] Call Trace: [ 603.566097][T11248] [ 603.569071][T11248] dump_stack_lvl+0x18c/0x250 [ 603.573810][T11248] ? show_regs_print_info+0x20/0x20 [ 603.579053][T11248] ? load_image+0x420/0x420 [ 603.583632][T11248] ? __might_sleep+0xe0/0xe0 [ 603.588268][T11248] ? __lock_acquire+0x7d80/0x7d80 [ 603.593501][T11248] should_fail_ex+0x394/0x4c0 [ 603.598252][T11248] should_failslab+0x9/0x20 [ 603.602813][T11248] slab_pre_alloc_hook+0x59/0x300 [ 603.608001][T11248] kmem_cache_alloc+0x5a/0x2c0 [ 603.612808][T11248] ? create_new_namespaces+0x34/0x700 [ 603.618284][T11248] create_new_namespaces+0x34/0x700 [ 603.623745][T11248] ? bpf_lsm_capable+0x9/0x10 [ 603.628647][T11248] ? security_capable+0x89/0xb0 [ 603.633655][T11248] unshare_nsproxy_namespaces+0x11a/0x160 [ 603.639526][T11248] ksys_unshare+0x4fa/0x8f0 [ 603.644241][T11248] ? sighand_ctor+0x50/0x50 [ 603.648789][T11248] ? lock_chain_count+0x20/0x20 [ 603.653793][T11248] ? syscall_enter_from_user_mode+0x25/0x80 [ 603.659916][T11248] __x64_sys_unshare+0x38/0x40 [ 603.664991][T11248] do_syscall_64+0x55/0xb0 [ 603.669459][T11248] ? clear_bhb_loop+0x40/0x90 [ 603.674449][T11248] ? clear_bhb_loop+0x40/0x90 [ 603.679179][T11248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.685303][T11248] RIP: 0033:0x7f27b6f9e159 [ 603.690188][T11248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.709939][T11248] RSP: 002b:00007f27b7de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 603.718424][T11248] RAX: ffffffffffffffda RBX: 00007f27b7225fa0 RCX: 00007f27b6f9e159 [ 603.726453][T11248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 603.734484][T11248] RBP: 00007f27b703506b R08: 0000000000000000 R09: 0000000000000000 [ 603.742494][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.750506][T11248] R13: 00007f27b7226038 R14: 00007f27b7225fa0 R15: 00007fff65873cd8 [ 603.758536][T11248] [ 603.864890][T11250] loop5: detected capacity change from 0 to 512 [ 604.006431][T11250] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 604.110131][T11250] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1222: corrupted in-inode xattr: invalid ea_ino [ 604.211229][T11250] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1222: couldn't read orphan inode 15 (err -117) [ 604.243625][T11250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.302679][ T27] audit: type=1800 audit(1789633680.638:12): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1222" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 604.575301][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.876348][T11266] device-mapper: ioctl: populate_table: no targets specified [ 605.067136][T10293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.219010][T11276] tipc: Started in network mode [ 605.224059][T11276] tipc: Node identity 4246676842ff, cluster identity 4711 [ 605.288543][T11276] tipc: Enabled bearer , priority 0 [ 605.402952][T11274] tipc: Disabling bearer [ 606.489499][ T5778] Bluetooth: hci2: link tx timeout [ 606.496602][ T5778] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.686104][T11308] device-mapper: ioctl: populate_table: no targets specified [ 606.929672][T10002] Bluetooth: hci2: link tx timeout [ 606.934929][T10002] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 607.350651][T11312] loop5: detected capacity change from 0 to 512 [ 607.450700][T11316] random: crng reseeded on system resumption [ 607.528313][T11312] size and base must be multiples of 4 kiB [ 607.534210][T11312] CPU: 1 PID: 11312 Comm: syz.5.1239 Not tainted syzkaller #0 [ 607.541722][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.551832][T11312] Call Trace: [ 607.555167][T11312] [ 607.558152][T11312] dump_stack_lvl+0x18c/0x250 [ 607.562912][T11312] ? show_regs_print_info+0x20/0x20 [ 607.568176][T11312] ? load_image+0x420/0x420 [ 607.572786][T11312] ? __lock_acquire+0x7d80/0x7d80 [ 607.577976][T11312] mtrr_add+0xd0/0x100 [ 607.582147][T11312] mtrr_ioctl+0xc96/0x13a0 [ 607.586629][T11312] ? mtrr_close+0x200/0x200 [ 607.591329][T11312] ? __fget_files+0x28/0x460 [ 607.596027][T11312] ? mtrr_close+0x200/0x200 [ 607.600672][T11312] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 607.606293][T11312] ? proc_reg_poll+0x290/0x290 [ 607.611264][T11312] __se_sys_ioctl+0xfd/0x170 [ 607.616018][T11312] do_syscall_64+0x55/0xb0 [ 607.620591][T11312] ? clear_bhb_loop+0x40/0x90 [ 607.625677][T11312] ? clear_bhb_loop+0x40/0x90 [ 607.630430][T11312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.636593][T11312] RIP: 0033:0x7fc190d9e159 [ 607.641066][T11312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.661001][T11312] RSP: 002b:00007fc191b82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.669482][T11312] RAX: ffffffffffffffda RBX: 00007fc191025fa0 RCX: 00007fc190d9e159 [ 607.677621][T11312] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 607.685759][T11312] RBP: 00007fc190e3506b R08: 0000000000000000 R09: 0000000000000000 [ 607.693884][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.702380][T11312] R13: 00007fc191026038 R14: 00007fc191025fa0 R15: 00007ffed0aab298 [ 607.710468][T11312] [ 607.937347][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 608.559123][T10002] Bluetooth: hci2: command 0x0406 tx timeout [ 608.862436][ T8] wiimote 0005:057E:0306.000B: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 608.917350][ T8] wiimote 0005:057E:0306.000B: New device registered [ 608.923099][T11354] device-mapper: ioctl: populate_table: no targets specified [ 608.999727][T11348] wiimote 0005:057E:0306.000B: Device removed [ 609.168377][T11356] fido_id[11356]: Failed to get parent HID device: No such file or directory [ 609.594918][T11366] bond0: entered promiscuous mode [ 609.600158][T11366] bond_slave_0: entered promiscuous mode [ 609.624291][T11366] bond_slave_1: entered promiscuous mode [ 609.675384][T11368] loop5: detected capacity change from 0 to 512 [ 609.676039][T11366] ipvlan1: entered promiscuous mode [ 609.729129][T11366] ipvlan1: left promiscuous mode [ 609.753753][T11366] bond0: left promiscuous mode [ 609.763469][T11366] bond_slave_0: left promiscuous mode [ 609.783816][T11366] bond_slave_1: left promiscuous mode [ 609.817364][T11368] size and base must be multiples of 4 kiB [ 609.823301][T11368] CPU: 1 PID: 11368 Comm: syz.5.1252 Not tainted syzkaller #0 [ 609.830905][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.841663][T11368] Call Trace: [ 609.845281][T11368] [ 609.848265][T11368] dump_stack_lvl+0x18c/0x250 [ 609.853185][T11368] ? show_regs_print_info+0x20/0x20 [ 609.858826][T11368] ? load_image+0x420/0x420 [ 609.863576][T11368] ? __lock_acquire+0x7d80/0x7d80 [ 609.868677][T11368] mtrr_add+0xd0/0x100 [ 609.873521][T11368] mtrr_ioctl+0xc96/0x13a0 [ 609.878186][T11368] ? mtrr_close+0x200/0x200 [ 609.883023][T11368] ? __fget_files+0x28/0x460 [ 609.887949][T11368] ? mtrr_close+0x200/0x200 [ 609.892511][T11368] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 609.898210][T11368] ? proc_reg_poll+0x290/0x290 [ 609.903132][T11368] __se_sys_ioctl+0xfd/0x170 [ 609.908025][T11368] do_syscall_64+0x55/0xb0 [ 609.912505][T11368] ? clear_bhb_loop+0x40/0x90 [ 609.917591][T11368] ? clear_bhb_loop+0x40/0x90 [ 609.922435][T11368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.928827][T11368] RIP: 0033:0x7fc190d9e159 [ 609.934249][T11368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.954331][T11368] RSP: 002b:00007fc191b82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.963076][T11368] RAX: ffffffffffffffda RBX: 00007fc191025fa0 RCX: 00007fc190d9e159 [ 609.971668][T11368] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 609.979677][T11368] RBP: 00007fc190e3506b R08: 0000000000000000 R09: 0000000000000000 [ 609.987971][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.996155][T11368] R13: 00007fc191026038 R14: 00007fc191025fa0 R15: 00007ffed0aab298 [ 610.004444][T11368] [ 610.033094][ T175] wiimote 0005:057E:0306.000B: detected device: Nintendo Wii Remote (Gen 1) [ 610.134359][ T175] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input14 [ 610.203119][ T175] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input15 [ 610.293412][ T175] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input13 [ 610.365534][T11379] loop6: detected capacity change from 0 to 128 [ 610.750903][T11391] device-mapper: ioctl: populate_table: no targets specified [ 611.379975][T11407] loop5: detected capacity change from 0 to 1024 [ 611.462685][T11407] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 611.535174][T11407] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 611.544561][T11407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.403628][ T27] audit: type=1800 audit(1789633688.618:13): pid=11421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1262" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 612.484070][T11423] bridge0: port 3(bond0) entered blocking state [ 612.547548][T11423] bridge0: port 3(bond0) entered disabled state [ 612.595007][T11423] bond0: entered allmulticast mode [ 612.635922][T11423] bond_slave_0: entered allmulticast mode [ 612.674814][T11423] bond_slave_1: entered allmulticast mode [ 612.725637][T11423] bond0: entered promiscuous mode [ 612.778320][T11423] bond_slave_0: entered promiscuous mode [ 612.787667][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.806280][T11423] bond_slave_1: entered promiscuous mode [ 612.813904][T11423] bridge0: port 3(bond0) entered blocking state [ 612.820627][T11423] bridge0: port 3(bond0) entered forwarding state [ 612.829956][T11427] loop6: detected capacity change from 0 to 128 [ 613.007426][T11427] syz.6.1266: attempt to access beyond end of device [ 613.007426][T11427] loop6: rw=2049, sector=138, nr_sectors = 10 limit=128 [ 613.228011][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 613.606061][T11443] device-mapper: ioctl: populate_table: no targets specified [ 614.749990][T11464] loop5: detected capacity change from 0 to 128 [ 614.916448][T11464] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.002062][T11464] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.525917][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 616.554994][T10002] Bluetooth: hci4: command 0x0406 tx timeout [ 616.611986][ T9999] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.985182][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 617.224852][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 617.255534][ T23] usb 3-1: config 0 has no interfaces? [ 617.284757][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 617.323759][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.364514][ T23] usb 3-1: config 0 descriptor?? [ 619.626304][T11530] tipc: Enabling of bearer rejected, failed to enable media [ 619.716366][T11532] loop6: detected capacity change from 0 to 512 [ 619.797913][T11532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.956086][T11539] loop5: detected capacity change from 0 to 2048 [ 620.076979][T11539] loop5: p1 < > p4 < > [ 620.512577][ T175] usb 3-1: USB disconnect, device number 5 [ 620.629608][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.715734][T11552] FAULT_INJECTION: forcing a failure. [ 620.715734][T11552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.785529][T11552] CPU: 0 PID: 11552 Comm: syz.2.1293 Not tainted syzkaller #0 [ 620.793207][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.803667][T11552] Call Trace: [ 620.807090][T11552] [ 620.810081][T11552] dump_stack_lvl+0x18c/0x250 [ 620.814825][T11552] ? show_regs_print_info+0x20/0x20 [ 620.820291][T11552] ? load_image+0x420/0x420 [ 620.824893][T11552] ? __might_fault+0xaa/0x120 [ 620.829626][T11552] ? __lock_acquire+0x7d80/0x7d80 [ 620.834712][T11552] should_fail_ex+0x394/0x4c0 [ 620.839639][T11552] strncpy_from_user+0x36/0x2f0 [ 620.844724][T11552] getname_flags+0xf6/0x500 [ 620.849325][T11552] do_sys_openat2+0xda/0x1d0 [ 620.853998][T11552] ? do_sys_open+0xe0/0xe0 [ 620.858581][T11552] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 620.864823][T11552] ? lock_chain_count+0x20/0x20 [ 620.869745][T11552] __x64_sys_openat+0x139/0x160 [ 620.874747][T11552] do_syscall_64+0x55/0xb0 [ 620.879207][T11552] ? clear_bhb_loop+0x40/0x90 [ 620.883942][T11552] ? clear_bhb_loop+0x40/0x90 [ 620.888664][T11552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.894686][T11552] RIP: 0033:0x7fa87af9e159 [ 620.899400][T11552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.919229][T11552] RSP: 002b:00007fa87beb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.927867][T11552] RAX: ffffffffffffffda RBX: 00007fa87b225fa0 RCX: 00007fa87af9e159 [ 620.935871][T11552] RDX: 00000000000026e1 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 620.943870][T11552] RBP: 00007fa87b03506b R08: 0000000000000000 R09: 0000000000000000 [ 620.952251][T11552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.960430][T11552] R13: 00007fa87b226038 R14: 00007fa87b225fa0 R15: 00007ffee4ea5858 [ 620.968548][T11552] [ 623.505513][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1308'. [ 623.586686][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1308'. [ 624.484811][T11627] FAULT_INJECTION: forcing a failure. [ 624.484811][T11627] name failslab, interval 1, probability 0, space 0, times 0 [ 624.589860][T11629] FAULT_INJECTION: forcing a failure. [ 624.589860][T11629] name failslab, interval 1, probability 0, space 0, times 0 [ 624.602085][T11627] CPU: 1 PID: 11627 Comm: syz.3.1313 Not tainted syzkaller #0 [ 624.610029][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.620331][T11627] Call Trace: [ 624.623672][T11627] [ 624.626652][T11627] dump_stack_lvl+0x18c/0x250 [ 624.631401][T11627] ? show_regs_print_info+0x20/0x20 [ 624.636816][T11627] ? load_image+0x420/0x420 [ 624.641559][T11627] ? __might_sleep+0xe0/0xe0 [ 624.646474][T11627] ? __lock_acquire+0x7d80/0x7d80 [ 624.651660][T11627] should_fail_ex+0x394/0x4c0 [ 624.656474][T11627] should_failslab+0x9/0x20 [ 624.661008][T11627] slab_pre_alloc_hook+0x59/0x300 [ 624.666155][T11627] ? __might_fault+0xaa/0x120 [ 624.671042][T11627] ? kvmalloc_node+0x70/0x180 [ 624.675946][T11627] ? kvmalloc_node+0x70/0x180 [ 624.680848][T11627] __kmem_cache_alloc_node+0x53/0x250 [ 624.686267][T11627] ? kvmalloc_node+0x70/0x180 [ 624.691236][T11627] __kmalloc_node+0xa6/0x240 [ 624.695873][T11627] kvmalloc_node+0x70/0x180 [ 624.700545][T11627] __se_sys_add_key+0x27f/0x410 [ 624.705985][T11627] ? __x64_sys_add_key+0xc0/0xc0 [ 624.711338][T11627] ? lockdep_hardirqs_on+0x98/0x150 [ 624.717131][T11627] ? __x64_sys_add_key+0x20/0xc0 [ 624.722144][T11627] do_syscall_64+0x55/0xb0 [ 624.726619][T11627] ? clear_bhb_loop+0x40/0x90 [ 624.731358][T11627] ? clear_bhb_loop+0x40/0x90 [ 624.736164][T11627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.742384][T11627] RIP: 0033:0x7fa909d9e159 [ 624.746853][T11627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.767285][T11627] RSP: 002b:00007fa90ab84028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 624.776001][T11627] RAX: ffffffffffffffda RBX: 00007fa90a025fa0 RCX: 00007fa909d9e159 [ 624.784192][T11627] RDX: 0000200000001000 RSI: 0000200000000480 RDI: 0000200000000080 [ 624.792300][T11627] RBP: 00007fa909e3506b R08: 0000000000000000 R09: 0000000000000000 [ 624.800666][T11627] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 624.809016][T11627] R13: 00007fa90a026038 R14: 00007fa90a025fa0 R15: 00007fff2e9d0e48 [ 624.817293][T11627] [ 624.842067][T11629] CPU: 0 PID: 11629 Comm: syz.5.1314 Not tainted syzkaller #0 [ 624.849669][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.860561][T11629] Call Trace: [ 624.863899][T11629] [ 624.866922][T11629] dump_stack_lvl+0x18c/0x250 [ 624.871675][T11629] ? show_regs_print_info+0x20/0x20 [ 624.877031][T11629] ? load_image+0x420/0x420 [ 624.881781][T11629] ? __might_sleep+0xe0/0xe0 [ 624.886887][T11629] ? __lock_acquire+0x7d80/0x7d80 [ 624.892168][T11629] should_fail_ex+0x394/0x4c0 [ 624.897266][T11629] should_failslab+0x9/0x20 [ 624.901845][T11629] slab_pre_alloc_hook+0x59/0x300 [ 624.907214][T11629] ? vfs_write+0x5de/0x9a0 [ 624.909745][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.911904][T11629] kmem_cache_alloc+0x5a/0x2c0 [ 624.918708][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.923130][T11629] ? getname_flags+0xbb/0x500 [ 624.934534][T11629] getname_flags+0xbb/0x500 [ 624.939104][T11629] do_sys_openat2+0xda/0x1d0 [ 624.943781][T11629] ? do_sys_open+0xe0/0xe0 [ 624.948368][T11629] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 624.954413][T11629] ? lock_chain_count+0x20/0x20 [ 624.959379][T11629] __x64_sys_openat+0x139/0x160 [ 624.964351][T11629] do_syscall_64+0x55/0xb0 [ 624.968895][T11629] ? clear_bhb_loop+0x40/0x90 [ 624.973641][T11629] ? clear_bhb_loop+0x40/0x90 [ 624.978382][T11629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.984402][T11629] RIP: 0033:0x7fc190d9e159 [ 624.989023][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.008948][T11629] RSP: 002b:00007fc191b82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 625.017487][T11629] RAX: ffffffffffffffda RBX: 00007fc191025fa0 RCX: 00007fc190d9e159 [ 625.025668][T11629] RDX: 00000000000026e1 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 625.033842][T11629] RBP: 00007fc190e3506b R08: 0000000000000000 R09: 0000000000000000 [ 625.041938][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.050028][T11629] R13: 00007fc191026038 R14: 00007fc191025fa0 R15: 00007ffed0aab298 [ 625.058058][T11629] [ 625.800321][ T7336] udevd[7336]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 625.824980][ T7334] udevd[7334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 626.502682][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.510854][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.944328][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.987916][T11633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.084458][T11633] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.094444][T11633] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.109089][T11633] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.118633][T11633] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.368074][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 629.415466][T11662] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.425905][T11662] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.435414][T11662] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.444265][T11662] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.457156][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 629.468661][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 631.081656][ T27] audit: type=1800 audit(1789633706.248:14): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1335" name="syzkaller0" dev="sda1" ino=2066 res=0 errno=0 [ 632.397803][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 633.504277][T11780] tipc: Enabling of bearer rejected, failed to enable media [ 634.986236][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 636.684890][ T1192] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 636.836133][T11818] syzkaller0: entered promiscuous mode [ 636.874934][T11818] syzkaller0: entered allmulticast mode [ 636.920151][T11827] tipc: Enabling of bearer rejected, failed to enable media [ 636.988786][ T1192] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 637.050789][ T1192] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.141203][ T1192] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.165163][ T1192] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 637.228304][ T1192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.339469][ T1192] usb 3-1: config 0 descriptor?? [ 637.658518][ T1192] usbhid 3-1:0.0: can't add hid device: -71 [ 637.716948][ T1192] usbhid: probe of 3-1:0.0 failed with error -71 [ 637.792709][ T1192] usb 3-1: USB disconnect, device number 6 [ 638.273227][T11850] loop3: detected capacity change from 0 to 512 [ 638.319911][T11850] EXT4-fs (loop3): invalid inodes per group: 462880 [ 638.319911][T11850] [ 640.196320][T11850] tmpfs: Unknown parameter 'subj_user' [ 640.866584][T11873] tipc: Enabling of bearer rejected, failed to enable media [ 641.188798][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'. [ 641.876697][T11877] hsr_slave_1 (unregistering): left promiscuous mode [ 643.396440][T11907] syzkaller0: entered promiscuous mode [ 643.437199][T11907] syzkaller0: entered allmulticast mode [ 643.483305][T11823] syz.2.1356 (11823) used greatest stack depth: 18744 bytes left [ 643.524845][T11907] tipc: Enabled bearer , priority 0 [ 643.600308][T11907] tipc: Resetting bearer [ 643.676918][T11905] tipc: Resetting bearer [ 645.729910][T11905] tipc: Disabling bearer [ 645.868922][T11926] tipc: Enabling of bearer rejected, failed to enable media [ 645.895299][T11933] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.903461][T11933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.911545][T11933] IPv6: NLM_F_CREATE should be set when creating new route [ 645.955054][T11936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.962530][T11936] IPv6: NLM_F_CREATE should be set when creating new route [ 646.033197][ T5836] tipc: Node number set to 856492275 [ 646.146581][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'. [ 646.244173][T11955] usb usb7: usbfs: process 11955 (syz.6.1383) did not claim interface 0 before use [ 646.598199][T11952] hsr_slave_1 (unregistering): left promiscuous mode [ 647.301934][T10002] Bluetooth: hci1: command 0x0406 tx timeout [ 648.444878][T11985] loop3: detected capacity change from 0 to 512 [ 648.497665][T11985] ext4: Unknown parameter 'defcontext' [ 648.931080][T11992] tipc: Enabled bearer , priority 0 [ 649.030638][T11991] tipc: Disabling bearer [ 649.988644][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 650.333701][T12029] tipc: Enabled bearer , priority 0 [ 650.429356][T12027] tipc: Disabling bearer [ 651.036155][T12047] tipc: Cannot configure node identity twice [ 651.345840][T12058] loop3: detected capacity change from 0 to 512 [ 651.369882][T12059] loop5: detected capacity change from 0 to 1024 [ 651.410326][T12058] EXT4-fs (loop3): 1 truncate cleaned up [ 651.458298][T12059] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 651.484228][T12058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.511490][T12059] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 651.596408][T12059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.837570][T10293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.857271][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.869173][T12069] syzkaller0: entered promiscuous mode [ 651.901281][T12069] syzkaller0: entered allmulticast mode [ 651.957507][T12069] tipc: Enabled bearer , priority 0 [ 652.015125][T12068] tipc: Resetting bearer [ 652.207012][T12068] tipc: Disabling bearer [ 652.454280][T12082] veth0: entered promiscuous mode [ 652.480065][T12080] veth0: left promiscuous mode [ 652.570836][T12087] xt_policy: neither incoming nor outgoing policy selected [ 652.964180][T12101] loop5: detected capacity change from 0 to 512 [ 653.031076][T12101] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1424: inode has both inline data and extents flags [ 653.065280][T12101] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1424: couldn't read orphan inode 15 (err -117) [ 653.208919][T12101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.404009][T12106] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1425'. [ 653.845712][T12116] loop3: detected capacity change from 0 to 512 [ 653.983657][T12116] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1427: corrupted inode contents [ 654.006128][T12116] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 654.017533][T12116] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1427: corrupted inode contents [ 654.032575][T12116] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.1427: mark_inode_dirty error [ 654.046955][T12116] EXT4-fs (loop3): 1 orphan inode deleted [ 654.059869][T12116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.660537][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.882868][T10293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.895549][T12136] syzkaller0: entered promiscuous mode [ 655.901101][T12136] syzkaller0: entered allmulticast mode [ 655.962781][T12138] tipc: Enabled bearer , priority 0 [ 656.083451][T12131] tipc: Resetting bearer [ 656.399295][T12155] syzkaller0: entered promiscuous mode [ 656.414221][T12155] syzkaller0: entered allmulticast mode [ 660.936602][T12151] tipc: Enabled bearer , priority 0 [ 660.956849][T12130] tipc: Resetting bearer [ 660.988374][T12130] tipc: Disabling bearer [ 661.061199][T12149] syzkaller0: entered promiscuous mode [ 661.067173][T12149] syzkaller0: entered allmulticast mode [ 661.109829][T12140] tipc: Resetting bearer [ 661.238300][T12140] tipc: Disabling bearer [ 662.185734][ T5818] tipc: Node number set to 12150632 [ 663.107823][T12218] loop5: detected capacity change from 0 to 512 [ 663.543864][T12218] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.1444: corrupted inode contents [ 663.561234][T12218] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 663.591800][T12218] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.1444: corrupted inode contents [ 663.619245][T12218] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.1444: mark_inode_dirty error [ 663.634287][T12218] EXT4-fs (loop5): 1 orphan inode deleted [ 663.648434][T12218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.105555][T12228] syzkaller0: entered promiscuous mode [ 664.182536][T12228] syzkaller0: entered allmulticast mode [ 664.330042][T12223] syzkaller0: entered promiscuous mode [ 664.370044][T12223] syzkaller0: entered allmulticast mode [ 664.409722][T12226] tipc: Enabled bearer , priority 0 [ 664.691360][T12230] tipc: Resetting bearer [ 664.895078][T12207] tipc: Resetting bearer [ 664.991471][T12207] tipc: Disabling bearer [ 665.381964][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.895486][T12255] loop5: detected capacity change from 0 to 512 [ 665.933292][T12255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.059872][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.219900][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 668.386818][T12281] loop6: detected capacity change from 0 to 512 [ 668.568151][T12281] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1460: corrupted inode contents [ 668.583555][T12281] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 668.599638][T12281] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1460: corrupted inode contents [ 668.651467][T12281] EXT4-fs error (device loop6): ext4_evict_inode:302: inode #15: comm syz.6.1460: mark_inode_dirty error [ 668.667169][T12281] EXT4-fs (loop6): 1 orphan inode deleted [ 668.680006][T12281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.050847][T12285] (null): rxe_set_mtu: Set mtu to 1024 [ 669.061314][T12289] syzkaller0: entered promiscuous mode [ 669.061341][T12289] syzkaller0: entered allmulticast mode [ 669.225205][ T1123] hsr_slave_0: left promiscuous mode [ 669.228292][ T1123] hsr_slave_1: left promiscuous mode [ 669.248978][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.249049][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.250019][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.250053][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.259707][ T1123] bridge_slave_1: left allmulticast mode [ 669.259735][ T1123] bridge_slave_1: left promiscuous mode [ 669.259938][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.343898][ T1123] bridge_slave_0: left allmulticast mode [ 669.343935][ T1123] bridge_slave_0: left promiscuous mode [ 669.344191][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.623848][ T1123] veth1_macvtap: left promiscuous mode [ 669.624005][ T1123] veth0_macvtap: left promiscuous mode [ 669.624255][ T1123] veth1_vlan: left promiscuous mode [ 669.624404][ T1123] veth0_vlan: left promiscuous mode [ 670.415458][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.272226][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 672.361040][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 672.431643][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.509235][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.219715][ T1123] bond0 (unregistering): Released all slaves [ 673.706123][T12337] loop5: detected capacity change from 0 to 512 [ 673.803018][T12337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.860549][T12337] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.991965][T12337] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1479: bg 0: block 400: padding at end of block bitmap is not set [ 674.184755][T12340] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 400: padding at end of block bitmap is not set [ 674.194803][T12285] infiniband syz0: set active [ 674.208585][T12337] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 674.254401][T12285] infiniband syz0: added bond0 [ 674.264316][T12337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1479: missing EA_INODE flag [ 674.292546][T12285] syz0: rxe_create_cq: returned err = -12 [ 674.345251][T12285] infiniband syz0: Couldn't create ib_mad CQ [ 674.374897][T12337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1479: error while reading EA inode 12 err=-117 [ 674.405255][T12285] infiniband syz0: Couldn't open port 1 [ 674.415725][T12337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1479: missing EA_INODE flag [ 674.445539][T12337] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1479: error while reading EA inode 12 err=-117 [ 674.609183][T12285] RDS/IB: syz0: added [ 674.639854][T12285] smc: adding ib device syz0 with port count 1 [ 674.661688][ T9999] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.672957][T12285] smc: ib device syz0 port 1 has pnetid [ 675.460152][T12367] syzkaller0: entered promiscuous mode [ 675.473127][T12367] syzkaller0: entered allmulticast mode [ 675.490433][T12369] syzkaller0: entered promiscuous mode [ 675.510633][T12369] syzkaller0: entered allmulticast mode [ 675.673880][T12369] tipc: Enabled bearer , priority 0 [ 675.705507][T12369] tipc: Resetting bearer [ 675.809931][T12368] tipc: Resetting bearer [ 675.924437][T12368] tipc: Disabling bearer [ 675.951691][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1485'. [ 676.011464][T12370] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.020568][T12370] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.029637][T12370] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.038637][T12370] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.964886][ T5818] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 679.187090][ T5818] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 679.198119][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.223876][ T5818] usb 4-1: config 0 has no interface number 0 [ 679.246015][ T5818] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 679.265087][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.304726][ T5818] usb 4-1: Product: syz [ 679.308982][ T5818] usb 4-1: Manufacturer: syz [ 679.313641][ T5818] usb 4-1: SerialNumber: syz [ 679.346722][ T5818] usb 4-1: config 0 descriptor?? [ 679.376391][ T5818] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 679.414250][ T5818] usb 4-1: No valid video chain found. [ 679.634289][T12427] xt_hashlimit: size too large, truncated to 1048576 [ 682.180436][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 682.262567][T12485] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.271782][T12485] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.281220][T12485] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.290469][T12485] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.502337][T12548] syzkaller0: entered promiscuous mode [ 685.519027][T12548] syzkaller0: entered allmulticast mode [ 686.161459][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.168636][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.639417][ T23] usb 4-1: USB disconnect, device number 12 [ 729.216598][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 747.629399][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.691201][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 773.233896][ T2977] hsr_slave_0: left promiscuous mode [ 773.725795][ T2977] hsr_slave_1: left promiscuous mode [ 773.927279][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.983971][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.195629][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.285370][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.453037][ T2977] bridge_slave_1: left allmulticast mode [ 774.556270][ T2977] bridge_slave_1: left promiscuous mode [ 774.563256][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.053600][ T2977] bridge_slave_0: left allmulticast mode [ 775.186160][ T2977] bridge_slave_0: left promiscuous mode [ 775.192968][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.424492][ T2977] dummy0: left promiscuous mode [ 776.713678][ T2977] veth1_macvtap: left promiscuous mode [ 776.779021][ T2977] veth0_macvtap: left promiscuous mode [ 776.856893][ T2977] veth1_vlan: left promiscuous mode [ 809.071499][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.079533][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.309846][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 813.908798][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 815.941255][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.677377][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.270861][ T2977] bond0 (unregistering): Released all slaves SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=4 req=1534 state=1 status=67 (errno 9: Bad file descriptor)