last executing test programs: 2m8.539597285s ago: executing program 32 (id=1094): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1m49.411229011s ago: executing program 33 (id=1169): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x8}, {}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x830}, 0x4000) 1m35.570954602s ago: executing program 5 (id=1218): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) 1m35.086111794s ago: executing program 5 (id=1220): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r1, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) 1m34.470325732s ago: executing program 5 (id=1222): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) pwrite64(r0, 0x0, 0x0, 0x2f70000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000380), 0x2000) 1m34.10014499s ago: executing program 5 (id=1224): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b8000000"], 0xb8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 1m33.331465761s ago: executing program 5 (id=1229): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 1m31.56244806s ago: executing program 5 (id=1232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.033196901s ago: executing program 34 (id=1232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.238276041s ago: executing program 3 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001004)="01", 0x1, 0x1004) fsync(r0) 1m24.949839072s ago: executing program 3 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m24.385242699s ago: executing program 3 (id=1258): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r0, &(0x7f0000000000)='3', 0x4e) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x40, 0x7, 0x50000}]}) 1m23.884342664s ago: executing program 3 (id=1260): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r1, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b8000000"], 0xb8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 1m23.102795167s ago: executing program 3 (id=1266): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f00000a1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fsopen(0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000db8000/0x1000)=nil) ftruncate(r0, 0x1000) 1m22.584305386s ago: executing program 3 (id=1270): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000500)=0x10) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 1m22.091907329s ago: executing program 35 (id=1270): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000500)=0x10) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 1m16.214779256s ago: executing program 2 (id=1284): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002d80)={0x14}, 0x14) 1m16.050369161s ago: executing program 2 (id=1286): getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) epoll_create1(0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) write$P9_RREADDIR(r1, &(0x7f0000000280)={0xb, 0x29, 0x2, {0x10}}, 0xb) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1m15.96128122s ago: executing program 2 (id=1287): openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20141, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x6, {0x0, 0x3022d6e144aa3ce8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80700, 0x0) 1m15.746688744s ago: executing program 2 (id=1288): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b8000000"], 0xb8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 1m15.232244672s ago: executing program 2 (id=1289): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000380), 0x2000) 1m14.710487301s ago: executing program 2 (id=1290): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf6bb6000) openat$kvm(0xffffffffffffff9c, 0x0, 0x40802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write(r2, 0x0, 0x0) 1m14.365882683s ago: executing program 36 (id=1290): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf6bb6000) openat$kvm(0xffffffffffffff9c, 0x0, 0x40802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write(r2, 0x0, 0x0) 1m1.955285476s ago: executing program 7 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) 1m1.7463911s ago: executing program 7 (id=1314): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m1.220040699s ago: executing program 7 (id=1316): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/mem\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x4000, 0x3, 0x11, r0, 0xa0000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x8, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 59.790994658s ago: executing program 7 (id=1323): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r1, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b8000000"], 0xb8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 59.189442343s ago: executing program 7 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) write$P9_RMKNOD(r0, &(0x7f0000000180)={0x14, 0x13, 0x1, {0x8, 0x3, 0x8}}, 0x14) 58.493703999s ago: executing program 7 (id=1328): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 58.01062766s ago: executing program 37 (id=1328): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 43.64978596s ago: executing program 8 (id=1429): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x3f4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f000014c000/0x7000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000135000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 43.17219141s ago: executing program 8 (id=1433): epoll_create1(0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb) close(0xffffffffffffffff) close(0x3) bind$netlink(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x6ca, 0x2, 0xfffffffe}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x28}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 42.822417503s ago: executing program 8 (id=1435): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000380), 0x2000) 42.570988226s ago: executing program 8 (id=1438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="8b0f022609779d6e8334720b3d07da168226cf349a794cdca19efa85ea0e88d380ab78c3bf97e686efd0587607e114c78e75896b26cbd719b51998d870688d3d613cd22459761a3f300cd2e3022b20e32f8c8a950d2e57ddb2", 0x59}], 0x1}}], 0x4, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffd4c, 0x10008095, 0x0, 0x0) 41.552484008s ago: executing program 8 (id=1448): r0 = memfd_create(&(0x7f0000000140)='w\xca\xe7\xee\xae\xb4\x16\a&Um\xb9\x96`\xef\xedd\xeai\xb2\xc6\x06\xc9\xb8*>\xf4w\x1e\x92H/\x10d\xaet\xa4\xfcF$\xdf9\xa1\x8e\xb0;\xea\xa9\x00\x00\x00\x00\x00\x00\x00\t?K\xa0\xdc\xe5\xc1\xab\xe7\x8a\xc1\x8bZN/,\x06*\xc6\xd2\x12\xa9\aF\xa5\xe6\x99\xeb\xe6\xd4\xd8E\x81\xa4\xb8\n\xa8\xa70\xaf\x98\xfc\xcb\x9e\x05[\x04\x8cb\xb5\xd5\xa7\xcaO\x82\xf1X2X\xad\x02j\xf2\x87\x95\xb0\xb2B\xa6Bg\xed\xf1\x1aC\x05\xe4\xbd\xe3\x8d\xc4\xaa\xe4\xcc/TE7\xbf\x17\x06*\xc6\xe5\xfb\xd3\xee\xdc\xa7\x99c\x02pm\xd5\xf1/\xb8^_\xfb\x11\xf1g\xce\xe1\x88\xa4n\xf4\xef#y\xda\x19\xc6\xbd]\xf4:\xe6\x88\xf6\x86\xa6f\xeb,4\xbfiz\x9fgJ\x92{\xb1\xfe\xb8\x93\xc2\x91]\xce\xa7QT=\xfb\x0ec\x8929\xcb\xf7\xa2\x18\xa6 \xbd\xb6', 0x4) writev(r0, &(0x7f0000000740)=[{0x0}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x2000, 0x800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 41.301532261s ago: executing program 8 (id=1450): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d302c726f6469722c696f636861727365743d6370313235352c696f636861727365743d69736f383835392d372c73686f72746e616d060000007765722c756e695f786c6174653d312c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d686f72746e616d653d6c6f7765722c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6572726f72733d72656d6f756e742d726f2c74696d655f6f66667365743d3078666666666666666666666666666262362c0000000000000000"], 0x1, 0x368, &(0x7f0000000740)="$eJzs3U1oI1UcAPB/OmnSXdH2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA/b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4pNkZpJsknbbxSrF3w/avL73/u9rhmQ6JC/PL0b7wnRcvHr1SszMVKK6+OhiXKvEXGRR2o1xtQl5AMDJcC2l+CPlDhlSOeYhAQDHrPf6/2JENGIuz3njq4PqJ6/+AHDiFf//nzqozsx+Ba8ey5AAgGM2dv//vhuKa72favlndehdAQDASfXkM88+trQS8USjMROx9tZmc7MZDw/Kly7Gy9GJ1TgTs3E9Ir9Q6P6qREq3pXPnV5bPNBqNnfh5LpoRMVUENvMrhaWsF1+PhZiNuSK+uNpIKWXnPl1ZXmj0RMTuTq//WKtsNqfjdNH/D6djdXDhUTbSe4g4v7J8tlE00Fwr43ci9gb3Lbrjn4/Z+O6FfjMple9gXFm+tFAOehC/2azHhf4q7HsHBAAAAAAAAAAAAAAAAAAAAAAAbsl8o2+uv39O6j7mO+XMz08o7+2Pk8cX+wPt5fsDpXqKlH5//cHm21m+TU+xP1DEyP48mzYSBAAAAAAAAAAAAAAAAAAAgL6NrVq0Op3V9Y2t7fZwYmd9Y2sqIro5r3zz8ZenYrzOTRLVvIt6RL+LRtHtdruVsrJyyiLGw7Nu52XOh5/1Rzxcp96fxcRh1Pcv6nRuv/en9wY592Rly38N6mQxeYLZ0DAeGWl57Y58SEdZqH7ibJmY6a3bWJ3LKaWhnDeHwy89N95gVCKqRz9w2+2p2L9O6ia+vvLSXeXqt75IufsfmH3q8rsf/Npudbo9R+8I1tY3rqd2q1JWPtqydJe6zKlEnqgMnwnVg8L3bsxpZd//9vTd73x7uN7TcM5r3fN5pE6WT+eT0fBanugOc6To1CB8uphEZ3V6wsl/s8QtHNM73//8o5R+/OXQXQxMjT1tVP6ZZx8AAAAAAAAAAAAAAAAAAGDY0GfFC8WHfacPinro8eMfGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ewbf/z+U2NuNkZzDJP7cmRBVX13fiKj919MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7u8AAAD//6kNV7I=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0xfd, 0x2, 0x5, 0xff, 0xf6, 0x7f, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0xd, 0x7a, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x89}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5, 0xf1}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0x0, 0x0, 0x4, 0x20}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.731749566s ago: executing program 4 (id=1472): r0 = userfaultfd(0x80001) read(r0, &(0x7f00000002c0)=""/148, 0x94) setns(0xc9, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, &(0x7f0000000280)) 36.534103617s ago: executing program 4 (id=1473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x3f) 36.238446458s ago: executing program 4 (id=1475): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000380), 0x2000) 36.09071158s ago: executing program 4 (id=1477): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b8000000"], 0xb8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 35.401183664s ago: executing program 4 (id=1479): r0 = memfd_create(&(0x7f0000000140)='w\xca\xe7\xee\xae\xb4\x16\a&Um\xb9\x96`\xef\xedd\xeai\xb2\xc6\x06\xc9\xb8*>\xf4w\x1e\x92H/\x10d\xaet\xa4\xfcF$\xdf9\xa1\x8e\xb0;\xea\xa9\x00\x00\x00\x00\x00\x00\x00\t?K\xa0\xdc\xe5\xc1\xab\xe7\x8a\xc1\x8bZN/,\x06*\xc6\xd2\x12\xa9\aF\xa5\xe6\x99\xeb\xe6\xd4\xd8E\x81\xa4\xb8\n\xa8\xa70\xaf\x98\xfc\xcb\x9e\x05[\x04\x8cb\xb5\xd5\xa7\xcaO\x82\xf1X2X\xad\x02j\xf2\x87\x95\xb0\xb2B\xa6Bg\xed\xf1\x1aC\x05\xe4\xbd\xe3\x8d\xc4\xaa\xe4\xcc/TE7\xbf\x17\x06*\xc6\xe5\xfb\xd3\xee\xdc\xa7\x99c\x02pm\xd5\xf1/\xb8^_\xfb\x11\xf1g\xce\xe1\x88\xa4n\xf4\xef#y\xda\x19\xc6\xbd]\xf4:\xe6\x88\xf6\x86\xa6f\xeb,4\xbfiz\x9fgJ\x92{\xb1\xfe\xb8\x93\xc2\x91]\xce\xa7QT=\xfb\x0ec\x8929\xcb\xf7\xa2\x18\xa6 \xbd\xb6', 0x4) writev(r0, &(0x7f0000000740)=[{0x0}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x2000, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 34.94156821s ago: executing program 4 (id=1481): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)="e3e4d600dce2a0fb1f4d186ab55f07e6759af7b88d50ae272f0320d54d3405dad9fd87cee6208d7b69180a50d9328a3fd0732541d1ee472c1bc38307821997602e638fc98d30cd8a29ffec5f425f1df5f30e4b9d3a52b7ebfb6cadf7f2059d0ff530b0811217ca343cede5cd7bf7b6daf8c044e5919574c73346f1acec32cd06ce30f5d0ed17a23563f935b975488ab4302c7db9eabf3b75e0c8561925", 0x9d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfaa}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="cba55829b221005036a82d3a8473bfa54b28dae401762d387c000513c0f0c100bd05f39c9b6893cf3a6f3040a1b7c68d2ad554800840c6d1de3920d900042a8573b3b811fd0894c564f8a800617ce8993e5c79c814510e5fc9522944d285eda1501708848eb9451f2db18c4c7aeb94fe9288846b4b34baa8a0716848343fc8278a7b47f0d9abd7eb52e1a2e37f89d3a2e5fd6fbee44ac9bd75883f2725a38ab02bb6d9cfebc6728708e3142099f3f4828533b40809688350609f0a7f8f01d03df85e0a5bcaa92cfdbbe411ce98bd9eb09d6fd39e514f3b4a95301fcef18b939533ae7caf2c7f5f3af4c74a846a84089167c8cc74ff242bcd4b1c5ef5c0b67b581801338bb65d5ab2c74c5506b2d04b797214c506e24a14dab8fceaa1b520f1726d4ecc79e6bb57abee2812a95cd4dcabc4f6a22293810d023303638d49c40ebdb611bbad8cd849d837720622b786b7f15335979ce8fee577666017f619cc3147a025d213bfccdf5e0ef1822c65a7d321a72bf0060c5d9f66ada81ba556cbc4c788d258f7918d06a9efcc8c2ccb3bc1e1bfeaaaaa80a23807b9dd0ba1cfdecb32bfdbf17d0a81851c746083acd51d96904d3bac0a806dd889513d1f0205676eeb395f2b744deefa18c428d250703bee020afe2c3b519b9644a0f0480b045133e73b519fff1b0b39fa860a10e8250ab1920f2956b52e76bb9fee089e619d2f221bc6e779aadecffb437e0726cfa66e4758d05e958ac833ad0d257b04ee3db8260977b134fa47aaf696272434ce3f4a0f5a54a084da5f8cdaa959b449dce802dd7635bf9594dcd451a24f69d0ee36e46bfd5fd60f7fac20028a0d2ba3d19205da8297ac5e49bee84e1c1f939b9c69d9727d6f7b0ad38aec055c5f1304431d26a891279bc78c6e9f2cdad5dee8bc5d1d58ee9cdd526138575ee4e20fa68d30f6c0359577fca8b314689d0062dd6d1db7770a8f38a306cf18e14e6e9da55632c2bfe7a756bf3bc4c68d063bde899aed9a660074bdca77a907969a892d7006903963787e52ef06e62887e82642d3c794d8f319e5aa10834ae5c8af82c532368cafbadd48e9f8427ba0fec4820228385492b1a74e7bef8212611f5be38886b5d077ab3fb6dbba6033f53168f1374a9cacdc69c4784b4f864983f58bc646f2255ad2e04308d150b05abec7ce71a439b360f093443e023495b907a19dbfae5e90a4b23d83ff9262c5dc06d3c9d7633156a2de7f4d975db34094d2c30618093550bc5b4bdfcc3cf4f08ee198f48471bd6117f9d16d87cabd5b0e7ca160dd396b32816bda0f00578bdf3982309557e8315d13e7e7146a2d14e4a6988bcefd1858f7394fff172f614c63d2af77f040f1ca0afe05e46712985ccb98642c3aae5684e066b261eed2cdb55b04afb0856716593c42511b236329fc6fa91f3041c531e3a2a5600ab2f4d7281a05cf013d0f0672075322400818f5f479b0532a5001a2042e9fc27deb077aef3c700c79e483b6d9f7f1be79b63ee3160cfbc939d1583a424feddfc3a416174a6b92837d7b95d72f182f0b64f06c5f867f27165db5d60f05d7e2820c5a2cb7ac1264b44a20a4e67d05ffec0a0de2951d2bf88913f945dc516f0ec9e7f6fecc58faeb8a69ea2a4cd8749bccb5a0805017537d688af2a9cd4ea563f46f072c1d5f992f601ff1c9ad28a217ec693ae50fd737ff3c0d3dc1fabac462ee6a7fc0c976d3cdf4b4ab6298b4c1d0accc6f933935d750d80cd6044434e731a6970c02d925cb6ac43e01189713e1fdbea0fecc252eedb3639492950da389320287b19a5fd1af8411bc31a3a39f015a1d6a9aeb98ddf832e71d70dbb45ca4c9130ae85fd730b83f3d5a662e8b3cf2c905c3f1a8d1f2994306a70312f4bd69315537f8092de9fd3483b260142c02d627e1f8a94e269b94505b320041c70dbcc8eae9add965a2021f25dbdfb8ff475969942a5bd51b39bf73840f2ea82b9c4d7cab2cc1e99cf5512029f205308f78fe4b778d5f414e52a17de01530311d7132477b0fbe71d10171124437fc96e281ae96f739ae0961b318a1d1fdde9f273ecd55547069cc48d5b43dd305e4a0f3505da3e23c02dd73090aa690facdb497e9711d1b8b98ab872ac4b9e8cd9048c1a64be003141fd6c03534470c241b3b84ca944dd8cea15657046870e4f8eb7bc76bb7711a16f1deaf43784810e0ba49fc9ad9515a3599fc38fbb0a7aad75d61a5bf5aaaae7a1c80bba3c81c6b7808bcb36ba2a42bf495be5d2df749f48b0e196b31ffbb4d789a22059c921c65c47892f8cfa8363294ed807741a06452984207b3ce61de08f301a2cdde52564a76dd81bd2ee71ce77f31d6c458aacced6993e481238e0cf6626ba5ffa8f11a5afb4b3f73df66dd0f1ba4778cb9e524fb5bab076035a13eac6b7c1df850298870fa0d0b9bba6331a2516565b67318cdebf1a2c51c2d3eb9606252feea73ce3d51cc4ac1f2625e268bd83ace356ef4950f7a251a8c0c843dd2bb0ce9c2dba72c44da765e96670a40500a413d3559649467fdeec96327e181b612b4b12d8e03a47d21bae6358ccea6dc9ad7ba5582106cfdbb4252febe6a851dc9c8d231104b88b381dca2968cf00142ba7cf6a6860d8d5b6d91a0d0946861452ac0baed4be15ade86211cbdf5640142fe13f9f3b520a4d996681b31fa2ac5a1cd80855d6f748781c274f663589874e8f052d8d2861d90b0b0a468beaff7ecdfd92803c85e9cb073f07b88a1eb54e343ef6b988ffddd75cdba107742490648d6b96aca12210a4057fc9c72141cfd8c275945e1c0fa704f6350b20c53f524f85cfd26819f75e79ddd1a99cd616aaae9e6224beff43b93f83056fdda39f0aed6b4eb1a8921d6ecd4aa3fab428bbf53004d902dddea34eeeb64407159e045fd0179fe14a2f04efa3691459d1608307c36f220defc86e1ccd7aa62c2ad36932fb0e2de774bc46029a067ca6fda3c6fdb8610b67450fdf6c9345644c99d49e16df31561913d2bdace1ab277a8156a65e14030e68017be55bbc553c902e88775667f1834dcc23d6cfd308493df64b60a4b84fa3ac9b8810d161e5fdf2419b6be0246ee05710d7c9ba38908b96d57d3615423e175988531bfa8903c810ae7b9a0a6a15cde117035221a4239454c0847ea8038dcc339e10cb3855cd99903504175fb067f28fb13bf1251bac540d26f3a3a120b788ed4ebd94a42d50670fe1bf1ef76a04b51c74b97e655edf47b9670b9a0cebdf25862a74206fbe73055470c782dfdff6cc9ae262e14bc5ee5714b0d1444779f52de64cb16091be627330bb94346eadc98451fc86f551f1da3f523b41095b9ba891dadacbab8f5381b8de4fce7c0adae421ca0372ba4220d0fcca360045321befe569ec796906e3518a0400c3c4ce79853e497aea6c2f939e60db03774561c4319f0ef31454ed8faecc7e6de22218f694dc20dfbc8cc96ca9f3b82baa5a6c044016bfb17948a28fef699593eec3cc3994ea13085d0121986175e9ec8dc1da1e8a06fd8052656c6f3d9a2617d0271b021065c499750803a071f4d9067a8dae9e4f6d101ce9adda2016b6aa9901f3226f1e5a0919c4975fab5c682f99f0646d3ba90b7ea5649755c23a804f2d8bac0e8a5765d2375c84d4652e4ccc85b2876b92559b2ab6e219e6320ae987e9e02383cd49d785f0341fda6f800c1016c24ed30d1fee4341303034d4f73a1cf5da5be6c6ea5a4a6ce83a68da078c6d070bb3ac1fb3f6ffa8b6b1a90864d802683a602549abc13f98f1591c6007bb5b6493cb982d9b932e01e90729aa49ba9bbe6cba406ff21913bb3926eef40c55ba2224dfda79f20c2120af19201ec0f69d9cc9b139ad5a692a827f163a4db769fafc4a3ce7df380ceb9efda8cd76d501946253e429cba1c7c32157123874b87b90617874ef6ab5cd015caa5679f9ae743664626ab20d8ea67df7e6a3d66abbad8c17cf1735608677d25c25cf2063737d069b23face82f98a1281f7863b79568f40c3ac33bf9c468b03e2f284da91fece81d09d0247c394e55c56b81725928608007b8d81544b4627163384e83d2ad69ffddf25c9b8e7c22c530ccfa59f141cb091289fd747c5ec7084be9d47e8ebdf6bfd2489eb83a2ec4ed96299f277875f8998d3ac71ea1a77920df0f983178ee34876ffa8f26951b1ed8fb5073b08f3e99bf5ecb7c845f8f1cce3df56c87a70acda95789e3faaceabcc0f93eaf149f10b9b2cadd1fbdd1992c44593fb75f99bc7bb6abeb108a67d0d7177d5fb2d4c5be7a0051bb7c5b85b6aa0cae78644a1e73136e97283817b7436d6acbde973c313ed66afd0cede6f02244e57e7408933c5d441416aeb9b40da4a99702f6d576781d95d59946d0e195889f70a74e763f579138c9720fab735dff21b2488fb06355c86d7c4fc5e3ba09720a4f2460482474c592091127ebff062954f40eadae4838982f639ee43830551f330d1c7941567d9945bee2cc49e519f3bbeb7d13361bd1728abe1bfbbf57de94e1705cb7c80247270d7638907304f23f1fd924200c3e2a79b035f393e7bff7930053ecff54c00002df681c0389e8f30433c29cc09cf92720d19d1a12c4a5f5eb5ab74b64583f9bed90df3671df74588eac26d36ed17d6015713200e8a593642002b8350dd14c78616835e71c60825aa747e5bf40e6538ae3cfb591e426e0b7d7068075bd70982841a8af36992088bc96b4ed0c6fd7ac6eb3fdf4d8ba7c36a88d736286dd83ade3c836dcfbd8896d9bb204d1861872fd8ade4a3ee1fa5da11eb9cf367cedf64ffd3c0cd3c376710493f3daeace8e9eafcf2e9d5486029a42076da77ab76a9fb48070699915de90205feec05b2d95dcf9ece68e52f8a50742aa82a3fa1ba661e03bbe5aa7c8ec203b912ce9a7dbdd29212aa8a7152f10a5b7b854b1831272a4dfeb94788d28502f763b1a59301fe7584502cb0cf1f21a780547ba0d7fab713f2ab71de0a3e6b8cbfed4bad9f0e0ea8cd1b594861e1afd8f811bd2af8b356ca0496c949ce12c8f0e3aae83f8fd09a9be608a1121c60063a1bf12767685db2bc88e5e588d263e74dfd3ca7397ffbf24d20fa8e2f3738d5657f121e9db0d2cc4cf7168ea69a8e0e945e4077fa5f0c138b1486c5dc9889877330e2345beb349ea6291709d4de1671a1115e58c249a14142a288ed4a60ae0b05c6127d7d9585ed621da0d1443b4023fb7a8e6b105a9708ce018d2164503e0e6bf26a8fe5f67aaa3d4338a24af0062a3196441cb34ec89cb09b6a9a83aaa6daca629ae9c7c0d0724029de6bcb2b83c1b10ace10d48c030c0bbdc781bf71771608084956f2876aa613dd6df4889efbd3b0091f903a68b92e28c119d42dcfb9fa510aa93b52b35a7a8ecd4f8c20abeae8e0181c13babd4ac42aacac31cc99075144f06ceaed7e5fc"], &(0x7f0000001f80)=""/198, 0x26, 0xc6, 0xa, 0x20000000}, 0x28) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x1e0, 0x148, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x24008015}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000040)=[{}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x7031}, {r2, 0x240}], 0x4, &(0x7f0000000500)={0x0, 0x3938700}, &(0x7f0000000580)={[0x1]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25.666410047s ago: executing program 38 (id=1450): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d302c726f6469722c696f636861727365743d6370313235352c696f636861727365743d69736f383835392d372c73686f72746e616d060000007765722c756e695f786c6174653d312c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d686f72746e616d653d6c6f7765722c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6572726f72733d72656d6f756e742d726f2c74696d655f6f66667365743d3078666666666666666666666666666262362c0000000000000000"], 0x1, 0x368, &(0x7f0000000740)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0xfd, 0x2, 0x5, 0xff, 0xf6, 0x7f, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0xd, 0x7a, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x89}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5, 0xf1}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0x0, 0x0, 0x4, 0x20}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.313673295s ago: executing program 39 (id=1481): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)="e3e4d600dce2a0fb1f4d186ab55f07e6759af7b88d50ae272f0320d54d3405dad9fd87cee6208d7b69180a50d9328a3fd0732541d1ee472c1bc38307821997602e638fc98d30cd8a29ffec5f425f1df5f30e4b9d3a52b7ebfb6cadf7f2059d0ff530b0811217ca343cede5cd7bf7b6daf8c044e5919574c73346f1acec32cd06ce30f5d0ed17a23563f935b975488ab4302c7db9eabf3b75e0c8561925", 0x9d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfaa}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000001f80)=""/198, 0x26, 0xc6, 0xa, 0x20000000}, 0x28) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x1e0, 0x148, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x24008015}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000040)=[{}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x7031}, {r2, 0x240}], 0x4, &(0x7f0000000500)={0x0, 0x3938700}, &(0x7f0000000580)={[0x1]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.391322915s ago: executing program 1 (id=1491): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x9, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 13.732649441s ago: executing program 1 (id=1491): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x9, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 11.605783875s ago: executing program 9 (id=1329): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) 10.110873278s ago: executing program 9 (id=1329): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) 9.253566476s ago: executing program 1 (id=1491): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x9, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 7.672752187s ago: executing program 9 (id=1329): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) 7.050051357s ago: executing program 6 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0xc008006) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.03892413s ago: executing program 0 (id=1504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000025c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002580)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 6.411291031s ago: executing program 1 (id=1491): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x9, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 5.734658842s ago: executing program 6 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) write$tun(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) setuid(0xee01) 5.734553972s ago: executing program 0 (id=1504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000025c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002580)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 5.117311881s ago: executing program 9 (id=1329): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) 4.477076285s ago: executing program 6 (id=1514): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000002780)=""/103) 4.476938314s ago: executing program 0 (id=1504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000025c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002580)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 3.800000646s ago: executing program 1 (id=1491): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x9, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 3.235087814s ago: executing program 6 (id=1515): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 3.234936434s ago: executing program 0 (id=1504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000025c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002580)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 2.563407705s ago: executing program 9 (id=1329): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) 1.847118484s ago: executing program 6 (id=1516): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c9, 0xa3d4, 0xf, 0xe, "3d52e3ff00"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 1.846982074s ago: executing program 0 (id=1504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000025c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002580)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 1.229825453s ago: executing program 1 (id=1491): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x9, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 631.915798ms ago: executing program 6 (id=1517): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000000000000000000000000000000000000000000045ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x0, 0x200000000000460e, 0x3) 618.133161ms ago: executing program 0 (id=1504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000025c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002580)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=1329): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='sha1', 0x4) kernel console output (not intermixed with test programs): errno=0 [ 226.929873][ T5775] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 226.986318][ T5775] FAT-fs (loop1): Filesystem has been set read-only [ 226.999832][ T5775] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 227.679021][ T2939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.750307][ T9367] loop0: detected capacity change from 0 to 32768 [ 227.787481][ T9367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1088 (9367) [ 227.841892][ T9367] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.856128][ T2939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.868442][ T9367] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 227.888637][ T9367] BTRFS info (device loop0): using free space tree [ 227.990638][ T9370] loop2: detected capacity change from 0 to 40427 [ 228.008955][ T2939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.036495][ T9370] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 228.046471][ T9370] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 228.056213][ T9370] F2FS-fs (loop2): invalid crc value [ 228.066350][ T9370] F2FS-fs (loop2): invalid crc value [ 228.073897][ T9370] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 228.142463][ T9367] BTRFS info (device loop0): enabling ssd optimizations [ 228.150419][ T9367] BTRFS info (device loop0): auto enabling async discard [ 228.224432][ T2939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.339337][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.879219][ T9403] loop2: detected capacity change from 0 to 256 [ 228.886932][ T9403] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.002925][ T9403] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.230283][ T28] audit: type=1804 audit(1790528845.623:207): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1098" name="/newroot/279/file0/file0" dev="loop2" ino=1048645 res=1 errno=0 [ 229.260509][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.271579][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.281192][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.319264][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.331918][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.339841][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.687884][ C0] net_ratelimit: 42 callbacks suppressed [ 230.312337][ T9430] loop2: detected capacity change from 0 to 512 [ 231.185052][ T9432] loop0: detected capacity change from 0 to 32768 [ 231.213787][ T9432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1104 (9432) [ 231.285458][ T9432] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.328124][ T9432] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 231.350394][ T9432] BTRFS info (device loop0): using free space tree [ 231.449342][ T5782] Bluetooth: hci3: command tx timeout [ 231.506808][ T9432] BTRFS info (device loop0): enabling ssd optimizations [ 231.538973][ T9432] BTRFS info (device loop0): auto enabling async discard [ 231.702588][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 231.743476][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.815996][ T9474] loop3: detected capacity change from 0 to 256 [ 231.846726][ T9474] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 231.947947][ T9474] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.662203][ T2939] hsr_slave_0: left promiscuous mode [ 232.681838][ T2939] hsr_slave_1: left promiscuous mode [ 232.703557][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.711335][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.729484][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.736892][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.775374][ T2939] bridge_slave_1: left allmulticast mode [ 232.795576][ T2939] bridge_slave_1: left promiscuous mode [ 232.803802][ T9491] loop2: detected capacity change from 0 to 128 [ 232.813641][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.855962][ T2939] bridge_slave_0: left allmulticast mode [ 232.868420][ T2939] bridge_slave_0: left promiscuous mode [ 232.872610][ T9491] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 232.874244][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.080542][ T42] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 233.102007][ T2939] veth1_macvtap: left promiscuous mode [ 233.128536][ T2939] veth0_macvtap: left promiscuous mode [ 233.134205][ T2939] veth1_vlan: left promiscuous mode [ 233.170432][ T2939] veth0_vlan: left promiscuous mode [ 233.528157][ T5782] Bluetooth: hci3: command tx timeout [ 234.203646][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 234.273864][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 234.425088][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.550218][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.676867][ T9507] loop3: detected capacity change from 0 to 128 [ 235.290520][ C0] net_ratelimit: 46 callbacks suppressed [ 235.302759][ T9514] overlayfs: failed to resolve './file1': -2 [ 235.559009][ T2939] bond0 (unregistering): Released all slaves [ 235.608018][ T5782] Bluetooth: hci3: command tx timeout [ 236.021673][ T9528] loop2: detected capacity change from 0 to 256 [ 236.060229][ T9528] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.135017][ T9528] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.239397][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.264643][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.273568][ T9409] bridge_slave_0: entered allmulticast mode [ 236.341873][ T9409] bridge_slave_0: entered promiscuous mode [ 236.391710][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.409806][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.434140][ T9409] bridge_slave_1: entered allmulticast mode [ 236.447309][ T9521] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 236.491637][ T9409] bridge_slave_1: entered promiscuous mode [ 236.710016][ T9536] overlayfs: failed to resolve './file1': -2 [ 236.781969][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.835277][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.915529][ T9540] loop2: detected capacity change from 0 to 164 [ 237.104603][ T9542] netlink: 'syz.0.1130': attribute type 9 has an invalid length. [ 237.169856][ T9537] bridge0: port 3(syz_tun) entered blocking state [ 237.201796][ T9537] bridge0: port 3(syz_tun) entered disabled state [ 237.222060][ T9537] syz_tun: entered allmulticast mode [ 237.250122][ T9537] syz_tun: entered promiscuous mode [ 237.270765][ T9537] bridge0: port 3(syz_tun) entered blocking state [ 237.277860][ T9537] bridge0: port 3(syz_tun) entered forwarding state [ 237.326634][ T9409] team0: Port device team_slave_0 added [ 237.353188][ T9547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.480680][ T9547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.671469][ T9556] loop0: detected capacity change from 0 to 256 [ 237.689926][ T9409] team0: Port device team_slave_1 added [ 237.697814][ T5782] Bluetooth: hci3: command tx timeout [ 237.720756][ T9556] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.788644][ T9556] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.982853][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.005195][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.063787][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.138637][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.151507][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.218636][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.483163][ T9409] hsr_slave_0: entered promiscuous mode [ 238.509098][ T9409] hsr_slave_1: entered promiscuous mode [ 238.523826][ T9409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.540937][ T9409] Cannot create hsr debugfs directory [ 238.896375][ T9579] loop2: detected capacity change from 0 to 256 [ 238.949478][ T9579] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.088954][ T9579] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.179503][ T9585] overlayfs: failed to resolve './file1': -2 [ 239.541008][ T9409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.803547][ T9409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.881625][ T9602] loop0: detected capacity change from 0 to 128 [ 239.914122][ T9409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.006381][ T9409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.083064][ T9602] syz.0.1143: attempt to access beyond end of device [ 240.083064][ T9602] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 240.174095][ T9605] syz.0.1143: attempt to access beyond end of device [ 240.174095][ T9605] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 240.444025][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.541847][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.568693][ T12] net_ratelimit: 41 callbacks suppressed [ 240.594799][ T9616] loop0: detected capacity change from 0 to 164 [ 240.614552][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.621791][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.672029][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.679240][ T2864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.822182][ T9618] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 240.921706][ T9618] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 240.962633][ T9618] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 241.012075][ T9618] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 241.051903][ T9618] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 241.079443][ T9618] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 241.121857][ T9618] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 241.155075][ T9618] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 241.593338][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.599872][ T9641] overlayfs: failed to resolve './file0': -2 [ 242.156837][ T9634] loop2: detected capacity change from 0 to 32768 [ 242.189238][ T9634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1148 (9634) [ 242.242306][ T9634] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.265567][ T9634] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 242.284842][ T9634] BTRFS info (device loop2): using free space tree [ 242.439774][ T9644] loop0: detected capacity change from 0 to 40427 [ 242.458259][ T9644] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 242.482905][ T9409] veth0_vlan: entered promiscuous mode [ 242.497018][ T9409] veth1_vlan: entered promiscuous mode [ 242.515987][ T9644] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 242.542259][ T9409] veth0_macvtap: entered promiscuous mode [ 242.553570][ T9409] veth1_macvtap: entered promiscuous mode [ 242.585271][ T9644] F2FS-fs (loop0): invalid crc value [ 242.599399][ T9644] F2FS-fs (loop0): invalid crc value [ 242.611497][ T9634] BTRFS info (device loop2): enabling ssd optimizations [ 242.617884][ T9644] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 242.662711][ T9634] BTRFS info (device loop2): auto enabling async discard [ 242.682740][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.738609][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.777767][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.818103][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.869570][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.919605][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.951882][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.991597][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.037762][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.047632][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.103367][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.130573][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.179309][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.206225][ T9409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.246376][ T9409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.287387][ T9409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.336051][ T9409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.997998][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.005836][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.156176][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.203310][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.995362][ T9737] loop0: detected capacity change from 0 to 256 [ 245.028875][ T9737] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.100917][ T9737] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.262382][ T28] audit: type=1804 audit(1790528861.663:208): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1165" name="/newroot/321/file0/file0" dev="loop0" ino=1048658 res=1 errno=0 [ 245.506187][ T9718] loop2: detected capacity change from 0 to 32768 [ 245.537139][ T9718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1161 (9718) [ 245.567411][ T5776] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 245.585732][ T5776] FAT-fs (loop0): Filesystem has been set read-only [ 245.605839][ T5776] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 245.623751][ T9718] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.676371][ T9718] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 245.729634][ T9718] BTRFS info (device loop2): using free space tree [ 245.767783][ C1] net_ratelimit: 65 callbacks suppressed [ 245.960077][ T9718] BTRFS info (device loop2): enabling ssd optimizations [ 245.967056][ T9718] BTRFS info (device loop2): auto enabling async discard [ 246.149252][ T5776] bridge0: port 3(syz_tun) entered disabled state [ 246.158058][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.240187][ T5776] syz_tun (unregistering): left allmulticast mode [ 246.256899][ T5776] syz_tun (unregistering): left promiscuous mode [ 246.268946][ T5776] bridge0: port 3(syz_tun) entered disabled state [ 246.609130][ T9776] FAULT_INJECTION: forcing a failure. [ 246.609130][ T9776] name failslab, interval 1, probability 0, space 0, times 0 [ 246.668037][ T9776] CPU: 0 PID: 9776 Comm: syz.2.1168 Not tainted syzkaller #0 [ 246.675488][ T9776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.685638][ T9776] Call Trace: [ 246.688913][ T9776] [ 246.691839][ T9776] dump_stack_lvl+0x18c/0x250 [ 246.696528][ T9776] ? show_regs_print_info+0x20/0x20 [ 246.701731][ T9776] ? load_image+0x420/0x420 [ 246.706248][ T9776] ? __might_sleep+0xe0/0xe0 [ 246.710841][ T9776] ? __lock_acquire+0x7d80/0x7d80 [ 246.715958][ T9776] should_fail_ex+0x394/0x4c0 [ 246.720647][ T9776] should_failslab+0x9/0x20 [ 246.725193][ T9776] slab_pre_alloc_hook+0x59/0x300 [ 246.730232][ T9776] kmem_cache_alloc+0x5a/0x2c0 [ 246.735006][ T9776] ? ptlock_alloc+0x20/0x70 [ 246.739602][ T9776] ptlock_alloc+0x20/0x70 [ 246.744022][ T9776] pte_alloc_one+0xcc/0x540 [ 246.748531][ T9776] ? pfn_modify_allowed+0x560/0x560 [ 246.753734][ T9776] ? __might_sleep+0xe0/0xe0 [ 246.758328][ T9776] ? __lock_acquire+0x7d80/0x7d80 [ 246.763353][ T9776] ? __rwlock_init+0x150/0x150 [ 246.768123][ T9776] __pte_alloc+0x22/0x2a0 [ 246.772462][ T9776] move_page_tables+0x1639/0x1970 [ 246.777496][ T9776] ? move_page_tables+0x1b7/0x1970 [ 246.782638][ T9776] ? map_deny_write_exec+0xf0/0xf0 [ 246.787792][ T9776] move_vma+0x6d0/0x16a0 [ 246.792052][ T9776] ? mtree_load+0x7a4/0x840 [ 246.796567][ T9776] ? vma_expandable+0xf0/0xf0 [ 246.801252][ T9776] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 246.806844][ T9776] ? bpf_lsm_mmap_addr+0x9/0x10 [ 246.811799][ T9776] ? security_mmap_addr+0x72/0x90 [ 246.816849][ T9776] ? get_unmapped_area+0x2f9/0x360 [ 246.821977][ T9776] mremap_to+0x51f/0x5d0 [ 246.826249][ T9776] __se_sys_mremap+0x6a8/0x11a0 [ 246.831125][ T9776] ? __x64_sys_mremap+0xc0/0xc0 [ 246.835987][ T9776] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 246.842014][ T9776] ? lock_chain_count+0x20/0x20 [ 246.846899][ T9776] ? lockdep_hardirqs_on+0x98/0x150 [ 246.852109][ T9776] ? __x64_sys_mremap+0x20/0xc0 [ 246.856971][ T9776] do_syscall_64+0x55/0xb0 [ 246.861402][ T9776] ? clear_bhb_loop+0x40/0x90 [ 246.866092][ T9776] ? clear_bhb_loop+0x40/0x90 [ 246.871037][ T9776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.876936][ T9776] RIP: 0033:0x7ff62959e159 [ 246.881353][ T9776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.900966][ T9776] RSP: 002b:00007ff62a3a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 246.909382][ T9776] RAX: ffffffffffffffda RBX: 00007ff629825fa0 RCX: 00007ff62959e159 [ 246.917350][ T9776] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 246.925325][ T9776] RBP: 00007ff62963506b R08: 0000200000ffd000 R09: 0000000000000000 [ 246.933307][ T9776] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 246.941282][ T9776] R13: 00007ff629826038 R14: 00007ff629825fa0 R15: 00007ffc0577b928 [ 246.949272][ T9776] [ 247.275208][ T9776] loop2: detected capacity change from 0 to 164 [ 247.306782][ T9776] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 248.026927][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.041702][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.052489][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.068214][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.077511][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.086634][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.282011][ T9795] loop2: detected capacity change from 0 to 256 [ 248.332601][ T9795] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.393439][ T9798] loop3: detected capacity change from 0 to 256 [ 248.431761][ T9798] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.447952][ T9795] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.613400][ T28] audit: type=1804 audit(1790528865.013:209): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1174" name="/newroot/299/file0/file0" dev="loop2" ino=1048663 res=1 errno=0 [ 248.641101][ T9798] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.333434][ T9791] chnl_net:caif_netlink_parms(): no params data found [ 249.997325][ T9791] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.041664][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.070690][ T9791] bridge_slave_0: entered allmulticast mode [ 250.091814][ T9791] bridge_slave_0: entered promiscuous mode [ 250.127065][ T9791] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.160381][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.175025][ T9809] loop3: detected capacity change from 0 to 32768 [ 250.177781][ T5782] Bluetooth: hci0: command tx timeout [ 250.189898][ T9791] bridge_slave_1: entered allmulticast mode [ 250.199378][ T9791] bridge_slave_1: entered promiscuous mode [ 250.223653][ T9809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1176 (9809) [ 250.404902][ T9809] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.461723][ T9791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.519627][ T9809] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 250.531626][ T9791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.571953][ T9809] BTRFS info (device loop3): using free space tree [ 250.732165][ T28] audit: type=1326 audit(1790528867.133:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e79e159 code=0x7ffc0000 [ 250.833780][ T28] audit: type=1326 audit(1790528867.163:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e79e159 code=0x7ffc0000 [ 250.878180][ T9791] team0: Port device team_slave_0 added [ 250.889991][ T9791] team0: Port device team_slave_1 added [ 250.946861][ T28] audit: type=1326 audit(1790528867.173:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e79e159 code=0x7ffc0000 [ 251.034608][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.047830][ C0] net_ratelimit: 65 callbacks suppressed [ 251.087887][ T28] audit: type=1326 audit(1790528867.173:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9a8e79e159 code=0x7ffc0000 [ 251.111886][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.165619][ T28] audit: type=1326 audit(1790528867.203:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e79e159 code=0x7ffc0000 [ 251.197808][ T9791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.213858][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.226174][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.255807][ T28] audit: type=1326 audit(1790528867.323:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e79e159 code=0x7ffc0000 [ 251.281922][ T9809] BTRFS info (device loop3): enabling ssd optimizations [ 251.304308][ T9809] BTRFS info (device loop3): auto enabling async discard [ 251.326278][ T28] audit: type=1326 audit(1790528867.323:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a8e79dec2 code=0x7ffc0000 [ 251.351088][ T9791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.459955][ T28] audit: type=1326 audit(1790528867.323:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9a8e79df57 code=0x7ffc0000 [ 251.508496][ T28] audit: type=1326 audit(1790528867.323:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9a8e75ae51 code=0x7ffc0000 [ 251.543822][ T28] audit: type=1326 audit(1790528867.323:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9838 comm="syz.4.1179" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9a8e79ef49 code=0x7ffc0000 [ 251.773156][ T5773] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.860258][ T9791] hsr_slave_0: entered promiscuous mode [ 251.888476][ T9791] hsr_slave_1: entered promiscuous mode [ 251.929340][ T9791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.936940][ T9791] Cannot create hsr debugfs directory [ 252.242475][ T9862] loop4: detected capacity change from 0 to 256 [ 252.260301][ T5787] Bluetooth: hci0: command tx timeout [ 252.295803][ T9862] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 252.373759][ T9862] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.184894][ T9791] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.258035][ T9971] loop3: detected capacity change from 0 to 256 [ 253.270957][ T9971] FAT-fs (loop3): Unrecognized mount option "shortnam" or missing value [ 253.524166][ T9791] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.616991][ T9791] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.657691][ T9791] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.687058][ T9975] FAULT_INJECTION: forcing a failure. [ 253.687058][ T9975] name failslab, interval 1, probability 0, space 0, times 0 [ 253.725973][ T9975] CPU: 0 PID: 9975 Comm: syz.4.1186 Not tainted syzkaller #0 [ 253.733377][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.743766][ T9975] Call Trace: [ 253.747070][ T9975] [ 253.750021][ T9975] dump_stack_lvl+0x18c/0x250 [ 253.754715][ T9975] ? show_regs_print_info+0x20/0x20 [ 253.759921][ T9975] ? load_image+0x420/0x420 [ 253.759946][ T9975] ? __might_sleep+0xe0/0xe0 [ 253.759978][ T9975] ? __lock_acquire+0x7d80/0x7d80 [ 253.769061][ T9975] should_fail_ex+0x394/0x4c0 [ 253.778725][ T9975] should_failslab+0x9/0x20 [ 253.778752][ T9975] slab_pre_alloc_hook+0x59/0x300 [ 253.778784][ T9975] kmem_cache_alloc+0x5a/0x2c0 [ 253.778810][ T9975] ? ptlock_alloc+0x20/0x70 [ 253.778833][ T9975] ptlock_alloc+0x20/0x70 [ 253.778854][ T9975] pte_alloc_one+0xcc/0x540 [ 253.778878][ T9975] ? pfn_modify_allowed+0x560/0x560 [ 253.778904][ T9975] ? __might_sleep+0xe0/0xe0 [ 253.778930][ T9975] ? __lock_acquire+0x7d80/0x7d80 [ 253.778953][ T9975] ? __rwlock_init+0x150/0x150 [ 253.778998][ T9975] __pte_alloc+0x22/0x2a0 [ 253.779030][ T9975] move_page_tables+0x1639/0x1970 [ 253.779064][ T9975] ? move_page_tables+0x1b7/0x1970 [ 253.779091][ T9975] ? map_deny_write_exec+0xf0/0xf0 [ 253.779134][ T9975] move_vma+0x6d0/0x16a0 [ 253.779158][ T9975] ? mtree_load+0x7a4/0x840 [ 253.779186][ T9975] ? vma_expandable+0xf0/0xf0 [ 253.779204][ T9975] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 253.779238][ T9975] ? bpf_lsm_mmap_addr+0x9/0x10 [ 253.779259][ T9975] ? security_mmap_addr+0x72/0x90 [ 253.779287][ T9975] ? get_unmapped_area+0x2f9/0x360 [ 253.779318][ T9975] mremap_to+0x51f/0x5d0 [ 253.779348][ T9975] __se_sys_mremap+0x6a8/0x11a0 [ 253.779388][ T9975] ? __x64_sys_mremap+0xc0/0xc0 [ 253.779421][ T9975] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 253.779449][ T9975] ? lock_chain_count+0x20/0x20 [ 253.779478][ T9975] ? lockdep_hardirqs_on+0x98/0x150 [ 253.779497][ T9975] ? __x64_sys_mremap+0x20/0xc0 [ 253.779516][ T9975] do_syscall_64+0x55/0xb0 [ 253.779538][ T9975] ? clear_bhb_loop+0x40/0x90 [ 253.779564][ T9975] ? clear_bhb_loop+0x40/0x90 [ 253.928286][ T9975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.934188][ T9975] RIP: 0033:0x7f9a8e79e159 [ 253.938605][ T9975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.958227][ T9975] RSP: 002b:00007f9a8f73e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 253.966650][ T9975] RAX: ffffffffffffffda RBX: 00007f9a8ea25fa0 RCX: 00007f9a8e79e159 [ 253.974644][ T9975] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 253.982627][ T9975] RBP: 00007f9a8e83506b R08: 0000200000ffd000 R09: 0000000000000000 [ 253.990601][ T9975] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 253.998570][ T9975] R13: 00007f9a8ea26038 R14: 00007f9a8ea25fa0 R15: 00007ffed0d07c68 [ 254.006563][ T9975] [ 254.176093][ T9791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.252530][ T9975] loop4: detected capacity change from 0 to 164 [ 254.276294][ T9791] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.327871][ T5787] Bluetooth: hci0: command tx timeout [ 254.374823][ T9975] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 254.420277][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.427445][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.475468][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.482643][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.591302][ T9791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.975027][ T9996] loop3: detected capacity change from 0 to 164 [ 254.998393][ T9996] rock: directory entry would overflow storage [ 255.018123][ T9996] rock: sig=0x4543, size=28, remaining=18 [ 255.331263][ T9791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.704109][ T9989] loop4: detected capacity change from 0 to 32768 [ 255.751116][ T9989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1190 (9989) [ 255.823882][ T9989] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.867907][ T9989] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 255.876614][ T9989] BTRFS info (device loop4): using free space tree [ 255.916142][T10013] loop3: detected capacity change from 0 to 256 [ 255.934721][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.942057][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981161][T10013] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.160002][ T9989] BTRFS info (device loop4): enabling ssd optimizations [ 256.177154][ T9989] BTRFS info (device loop4): auto enabling async discard [ 256.195939][T10013] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.251419][ T9791] veth0_vlan: entered promiscuous mode [ 256.324906][ T9791] veth1_vlan: entered promiscuous mode [ 256.403361][ T9409] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.407885][ C0] net_ratelimit: 39 callbacks suppressed [ 256.427108][ T5787] Bluetooth: hci0: command tx timeout [ 256.429204][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 256.429216][ T28] audit: type=1804 audit(1790528872.823:288): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1193" name="/newroot/340/file0/file0" dev="loop3" ino=1048666 res=1 errno=0 [ 256.540650][ T9791] veth0_macvtap: entered promiscuous mode [ 256.591752][ T9791] veth1_macvtap: entered promiscuous mode [ 256.625993][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.639780][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.650078][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.693555][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.747799][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.790070][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.841441][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.957848][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.008606][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.042238][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.083815][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.112088][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.157919][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.197934][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.243299][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.293224][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.364034][ T9791] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.397079][ T9791] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.447947][ T9791] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.472792][ T9791] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.634138][T10043] sctp: [Deprecated]: syz.2.1197 (pid 10043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.634138][T10043] Use struct sctp_sack_info instead [ 257.821105][T10045] loop3: detected capacity change from 0 to 256 [ 257.876028][T10045] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.013459][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.065566][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.119917][T10045] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.172951][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.218134][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.415522][T10078] loop3: detected capacity change from 0 to 256 [ 259.574939][T10078] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.040986][T10184] loop4: detected capacity change from 0 to 256 [ 260.059163][T10184] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.125359][ T28] audit: type=1800 audit(1790528876.523:289): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1207" name="file1" dev="loop3" ino=1048671 res=0 errno=0 [ 260.168141][T10184] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.209142][ T28] audit: type=1800 audit(1790528876.523:290): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1207" name="file1" dev="loop3" ino=1048671 res=0 errno=0 [ 260.300988][ T28] audit: type=1804 audit(1790528876.663:291): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1211" name="/newroot/13/file0/file0" dev="loop4" ino=1048672 res=1 errno=0 [ 261.602711][T10230] loop5: detected capacity change from 0 to 256 [ 261.651579][T10230] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.687782][ C1] net_ratelimit: 89 callbacks suppressed [ 261.696349][T10225] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 261.767405][T10230] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.604894][T10246] loop5: detected capacity change from 0 to 256 [ 262.640727][T10246] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.692917][T10246] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.821889][ T28] audit: type=1804 audit(1790528879.223:292): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1224" name="/newroot/9/file0/file0" dev="loop5" ino=1048674 res=1 errno=0 [ 263.159363][ T9791] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 263.167044][ T9791] FAT-fs (loop5): Filesystem has been set read-only [ 263.195500][ T9791] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 263.606185][T10261] loop4: detected capacity change from 0 to 8192 [ 263.750407][T10261] loop4: p1 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 263.938943][T10261] loop4: p4 size 851974 extends beyond EOD, truncated [ 264.113537][T10269] loop2: detected capacity change from 0 to 256 [ 264.175357][T10269] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.315545][T10269] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.453318][ T2939] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.823018][ T2939] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.110423][ T2939] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.490853][ T2939] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.768189][T10290] loop2: detected capacity change from 0 to 128 [ 265.870339][T10290] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 266.293126][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 266.767608][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.782312][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.792431][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.816302][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.827340][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 266.836120][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.967828][ C1] net_ratelimit: 53 callbacks suppressed [ 267.751074][T10417] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 268.585564][T10431] loop4: detected capacity change from 0 to 256 [ 268.593583][T10431] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.648016][T10431] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.771124][ T5767] udevd[5767]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 268.784408][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 268.784574][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 268.797535][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 268.812274][ T7923] udevd[7923]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 268.847990][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 268.977959][ T5782] Bluetooth: hci0: command tx timeout [ 269.137274][T10439] udevd[10439]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 269.160120][T10438] udevd[10438]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 269.224075][T10447] udevd[10447]: inotify_add_watch(7, /dev/loop4p12, 10) failed: No such file or directory [ 269.253136][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 269.362473][T10301] chnl_net:caif_netlink_parms(): no params data found [ 271.047855][ T5782] Bluetooth: hci0: command tx timeout [ 271.358399][T10488] loop4: detected capacity change from 0 to 164 [ 271.536303][T10493] FAULT_INJECTION: forcing a failure. [ 271.536303][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 271.566730][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.601195][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.610157][T10493] CPU: 1 PID: 10493 Comm: syz.2.1254 Not tainted syzkaller #0 [ 271.617652][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.627711][T10493] Call Trace: [ 271.630993][T10493] [ 271.633931][T10493] dump_stack_lvl+0x18c/0x250 [ 271.638620][T10493] ? show_regs_print_info+0x20/0x20 [ 271.643823][T10493] ? load_image+0x420/0x420 [ 271.648331][T10493] ? __might_sleep+0xe0/0xe0 [ 271.652932][T10493] ? __lock_acquire+0x7d80/0x7d80 [ 271.657961][T10493] should_fail_ex+0x394/0x4c0 [ 271.662645][T10493] should_failslab+0x9/0x20 [ 271.667176][T10493] slab_pre_alloc_hook+0x59/0x300 [ 271.672208][T10493] ? slab_post_alloc_hook+0x86/0x4d0 [ 271.677582][T10493] kmem_cache_alloc_bulk+0x52/0x5a0 [ 271.682803][T10493] ? rcu_is_watching+0x15/0xb0 [ 271.687571][T10493] ? kmem_cache_alloc+0x1a6/0x2c0 [ 271.692590][T10493] ? mas_alloc_nodes+0x2f8/0x8c0 [ 271.697536][T10493] mas_alloc_nodes+0x471/0x8c0 [ 271.702319][T10493] mas_preallocate+0xa1f/0x1170 [ 271.707175][T10493] ? lockdep_softirqs_off+0x440/0x440 [ 271.712550][T10493] ? mas_destroy+0x20a0/0x20a0 [ 271.717325][T10493] ? vma_iter_config+0xe6/0x270 [ 271.722179][T10493] __split_vma+0x2dd/0xc20 [ 271.726601][T10493] ? mmap_write_unlock+0x160/0x160 [ 271.731728][T10493] do_vmi_align_munmap+0x3a3/0x16a0 [ 271.736938][T10493] ? do_vmi_munmap+0x2d0/0x2d0 [ 271.741710][T10493] ? mtree_range_walk+0x68c/0x7b0 [ 271.746751][T10493] ? mas_find_setup+0x47f/0x590 [ 271.751637][T10493] do_vmi_munmap+0x252/0x2d0 [ 271.756235][T10493] do_munmap+0xe6/0x140 [ 271.760390][T10493] ? do_vmi_align_munmap+0x16a0/0x16a0 [ 271.765848][T10493] ? mtree_load+0x7a4/0x840 [ 271.770357][T10493] ? mtree_load+0x109/0x840 [ 271.774861][T10493] ? mas_alloc_nodes+0x8c0/0x8c0 [ 271.779826][T10493] ? down_write_killable+0x181/0x230 [ 271.785110][T10493] mremap_to+0x310/0x5d0 [ 271.789354][T10493] __se_sys_mremap+0x6a8/0x11a0 [ 271.794217][T10493] ? __x64_sys_mremap+0xc0/0xc0 [ 271.799063][T10493] ? bpf_link_show_fdinfo+0x560/0x560 [ 271.804439][T10493] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 271.810423][T10493] ? lock_chain_count+0x20/0x20 [ 271.815296][T10493] ? lockdep_hardirqs_on+0x98/0x150 [ 271.820498][T10493] ? __x64_sys_mremap+0x20/0xc0 [ 271.825348][T10493] do_syscall_64+0x55/0xb0 [ 271.829766][T10493] ? clear_bhb_loop+0x40/0x90 [ 271.834438][T10493] ? clear_bhb_loop+0x40/0x90 [ 271.839117][T10493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.845018][T10493] RIP: 0033:0x7ff62959e159 [ 271.849438][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.869042][T10493] RSP: 002b:00007ff62a3a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 271.877484][T10493] RAX: ffffffffffffffda RBX: 00007ff629825fa0 RCX: 00007ff62959e159 [ 271.885471][T10493] RDX: 0000000000400000 RSI: 0000000000800000 RDI: 0000200000800000 [ 271.893451][T10493] RBP: 00007ff62963506b R08: 0000200000000000 R09: 0000000000000000 [ 271.901419][T10493] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 271.909391][T10493] R13: 00007ff629826038 R14: 00007ff629825fa0 R15: 00007ffc0577b928 [ 271.917390][T10493] [ 271.946012][T10301] bridge_slave_0: entered allmulticast mode [ 271.970480][T10301] bridge_slave_0: entered promiscuous mode [ 271.986483][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.986976][ C0] net_ratelimit: 49 callbacks suppressed [ 272.008546][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.016463][T10301] bridge_slave_1: entered allmulticast mode [ 272.030612][T10301] bridge_slave_1: entered promiscuous mode [ 272.238738][T10504] FAULT_INJECTION: forcing a failure. [ 272.238738][T10504] name failslab, interval 1, probability 0, space 0, times 0 [ 272.309758][T10504] CPU: 1 PID: 10504 Comm: syz.3.1258 Not tainted syzkaller #0 [ 272.317259][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.327310][T10504] Call Trace: [ 272.327320][T10504] [ 272.327328][T10504] dump_stack_lvl+0x18c/0x250 [ 272.327361][T10504] ? show_regs_print_info+0x20/0x20 [ 272.327387][T10504] ? load_image+0x420/0x420 [ 272.327411][T10504] ? __might_sleep+0xe0/0xe0 [ 272.327436][T10504] ? __lock_acquire+0x7d80/0x7d80 [ 272.327463][T10504] should_fail_ex+0x394/0x4c0 [ 272.327502][T10504] should_failslab+0x9/0x20 [ 272.327530][T10504] slab_pre_alloc_hook+0x59/0x300 [ 272.327565][T10504] kmem_cache_alloc_lru+0x4d/0x2b0 [ 272.327592][T10504] ? __d_alloc+0x31/0x710 [ 272.327611][T10504] ? get_random_u64+0x4db/0x8f0 [ 272.327642][T10504] __d_alloc+0x31/0x710 [ 272.327665][T10504] d_alloc_pseudo+0x1d/0x70 [ 272.327685][T10504] alloc_file_pseudo+0xe4/0x210 [ 272.327708][T10504] ? fput+0x1a0/0x1a0 [ 272.327739][T10504] anon_inode_getfile+0xc5/0x1a0 [ 272.327771][T10504] init_listener+0x10f/0x1d0 [ 272.327801][T10504] do_seccomp+0x93a/0xdc0 [ 272.327836][T10504] ? prctl_set_seccomp+0x60/0x60 [ 272.327862][T10504] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 272.327898][T10504] ? lockdep_hardirqs_on+0x98/0x150 [ 272.327922][T10504] do_syscall_64+0x55/0xb0 [ 272.327946][T10504] ? clear_bhb_loop+0x40/0x90 [ 272.327972][T10504] ? clear_bhb_loop+0x40/0x90 [ 272.328000][T10504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.328026][T10504] RIP: 0033:0x7fec9179e159 [ 272.328044][T10504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.328063][T10504] RSP: 002b:00007fec8f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 272.328086][T10504] RAX: ffffffffffffffda RBX: 00007fec91a25fa0 RCX: 00007fec9179e159 [ 272.328102][T10504] RDX: 0000200000000240 RSI: 000000000000000c RDI: 0000000000000001 [ 272.328116][T10504] RBP: 00007fec9183506b R08: 0000000000000000 R09: 0000000000000000 [ 272.328131][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.328144][T10504] R13: 00007fec91a26038 R14: 00007fec91a25fa0 R15: 00007ffd450a8b78 [ 272.328174][T10504] [ 272.890301][T10512] loop3: detected capacity change from 0 to 256 [ 272.931258][T10515] fuse: Bad value for 'fd' [ 272.950276][T10512] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.962172][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.064873][T10512] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.120075][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.151545][ T5782] Bluetooth: hci0: command tx timeout [ 273.409819][ T5773] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 273.420882][ T5773] FAT-fs (loop3): Filesystem has been set read-only [ 273.451048][ T5773] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 273.815292][T10531] loop2: detected capacity change from 0 to 512 [ 273.852736][T10533] loop4: detected capacity change from 0 to 128 [ 273.874579][T10301] team0: Port device team_slave_0 added [ 274.189595][T10301] team0: Port device team_slave_1 added [ 274.370379][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.390818][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.431336][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.658140][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.665120][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.702605][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.928457][ T2939] hsr_slave_0: left promiscuous mode [ 274.977933][ T2939] hsr_slave_1: left promiscuous mode [ 275.026611][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.047294][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.066171][T10556] loop4: detected capacity change from 0 to 256 [ 275.090530][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.101061][T10556] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.114596][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.147498][T10556] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.165102][ T2939] bridge_slave_1: left allmulticast mode [ 275.195954][ T2939] bridge_slave_1: left promiscuous mode [ 275.218425][ T5782] Bluetooth: hci0: command tx timeout [ 275.230865][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.275160][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.293698][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.304953][ T2939] bridge_slave_0: left allmulticast mode [ 275.311742][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.321976][ T2939] bridge_slave_0: left promiscuous mode [ 275.328522][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.336525][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.346736][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.356437][T10562] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 275.365141][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.500289][ T2939] veth1_macvtap: left promiscuous mode [ 275.529679][ T2939] veth0_macvtap: left promiscuous mode [ 275.553222][ T2939] veth1_vlan: left promiscuous mode [ 275.573193][ T2939] veth0_vlan: left promiscuous mode [ 276.539810][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 276.612075][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 276.675838][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.750422][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.050939][ C0] net_ratelimit: 47 callbacks suppressed [ 277.252203][ T2939] bond0 (unregistering): Released all slaves [ 277.448149][ T5787] Bluetooth: hci2: command tx timeout [ 277.583864][T10301] hsr_slave_0: entered promiscuous mode [ 277.597471][T10301] hsr_slave_1: entered promiscuous mode [ 277.604102][T10301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.617771][T10301] Cannot create hsr debugfs directory [ 278.625915][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.781275][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.855242][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.871942][T10561] chnl_net:caif_netlink_parms(): no params data found [ 278.989269][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.226177][T10597] loop2: detected capacity change from 0 to 128 [ 279.346777][T10301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.363685][T10301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.379719][T10600] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 279.508761][T10301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.529201][ T5787] Bluetooth: hci2: command tx timeout [ 279.599312][T10301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.041429][T10561] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.051733][T10561] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.059662][T10561] bridge_slave_0: entered allmulticast mode [ 280.073557][T10561] bridge_slave_0: entered promiscuous mode [ 280.094962][T10561] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.105188][T10561] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.117961][T10561] bridge_slave_1: entered allmulticast mode [ 280.126003][T10561] bridge_slave_1: entered promiscuous mode [ 280.248513][T10620] fuse: Bad value for 'fd' [ 280.451548][T10561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.508235][T10561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.805471][T10561] team0: Port device team_slave_0 added [ 280.852198][T10628] loop2: detected capacity change from 0 to 256 [ 280.879581][T10628] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.911848][T10561] team0: Port device team_slave_1 added [ 280.935780][T10628] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.008218][ T28] audit: type=1804 audit(1790528897.403:293): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1288" name="/newroot/339/file0/file0" dev="loop2" ino=1048690 res=1 errno=0 [ 281.290670][ T5774] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 281.316858][ T5774] FAT-fs (loop2): Filesystem has been set read-only [ 281.332192][ T5774] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 281.418670][T10561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.435886][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.487809][T10561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.618552][ T5787] Bluetooth: hci2: command tx timeout [ 281.639347][T10561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.648092][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.674424][T10561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.894817][T10561] hsr_slave_0: entered promiscuous mode [ 281.918475][T10561] hsr_slave_1: entered promiscuous mode [ 281.925178][T10561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.934261][T10561] Cannot create hsr debugfs directory [ 282.567946][ C1] net_ratelimit: 38 callbacks suppressed [ 282.869505][T10301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.982606][ T12] hsr_slave_0: left promiscuous mode [ 283.011513][ T12] hsr_slave_1: left promiscuous mode [ 283.021922][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.056465][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.066223][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.083512][ T12] bridge_slave_1: left promiscuous mode [ 283.089998][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.100108][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.119575][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.128253][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.136928][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.138714][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.237635][ T12] bridge_slave_0: left allmulticast mode [ 283.266220][ T12] bridge_slave_0: left promiscuous mode [ 283.287426][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.370344][ T12] veth1_macvtap: left promiscuous mode [ 283.375930][ T12] veth0_macvtap: left promiscuous mode [ 283.385002][ T12] veth1_vlan: left promiscuous mode [ 283.407932][ T12] veth0_vlan: left promiscuous mode [ 283.687998][ T5787] Bluetooth: hci2: command tx timeout [ 283.920283][ T12] bond1 (unregistering): Released all slaves [ 284.927922][ T28] audit: type=1800 audit(1790528901.323:294): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1293" name="(" dev="sda1" ino=2052 res=0 errno=0 [ 285.208782][ T5787] Bluetooth: hci1: command tx timeout [ 285.279964][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.348199][ T12] team0 (unregistering): Port device team_slave_0 removed [ 285.412231][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.476937][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.053135][ T12] bond0 (unregistering): Released all slaves [ 286.511025][T10301] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.576843][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.584035][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.641222][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.648416][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.142899][T10561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.254813][T10561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.294317][ T5787] Bluetooth: hci1: command tx timeout [ 287.335614][T10561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.361709][T10561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.847796][ C1] net_ratelimit: 41 callbacks suppressed [ 287.958593][T10692] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 288.108853][T10653] chnl_net:caif_netlink_parms(): no params data found [ 288.524212][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.695547][T10561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.883960][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.926517][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.934701][T10653] bridge_slave_0: entered allmulticast mode [ 288.979941][T10653] bridge_slave_0: entered promiscuous mode [ 289.014960][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.040052][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.047364][T10653] bridge_slave_1: entered allmulticast mode [ 289.071290][T10653] bridge_slave_1: entered promiscuous mode [ 289.171057][T10561] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.192507][T10723] loop4: detected capacity change from 0 to 256 [ 289.209363][T10723] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.261104][T10723] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.281162][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.369805][ T5787] Bluetooth: hci1: command tx timeout [ 289.417239][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.443583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.450824][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.646756][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.653932][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.681290][T10731] loop4: detected capacity change from 0 to 256 [ 289.694598][T10731] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.721169][T10731] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.794227][T10653] team0: Port device team_slave_0 added [ 289.816105][T10653] team0: Port device team_slave_1 added [ 289.989741][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.007054][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.033540][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.111908][T10561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.132902][T10561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.150429][T10735] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 290.181847][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.203498][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.231817][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.465540][T10301] veth0_vlan: entered promiscuous mode [ 290.603419][T10653] hsr_slave_0: entered promiscuous mode [ 290.619512][T10653] hsr_slave_1: entered promiscuous mode [ 290.697462][T10301] veth1_vlan: entered promiscuous mode [ 290.955670][T10561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.104540][T10301] veth0_macvtap: entered promiscuous mode [ 291.143370][T10301] veth1_macvtap: entered promiscuous mode [ 291.446825][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.458264][ T5787] Bluetooth: hci1: command tx timeout [ 291.465688][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.481018][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.491687][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.501678][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.514257][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.532400][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.568281][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.588534][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.608348][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.627972][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.641204][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.652371][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.664304][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.744890][T10301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.762837][T10301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.786700][T10301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.795551][T10301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.055887][T10653] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 292.104624][T10561] veth0_vlan: entered promiscuous mode [ 292.120277][T10653] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 292.147059][T10653] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 292.180191][T10653] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 292.245850][T10561] veth1_vlan: entered promiscuous mode [ 292.354744][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.354759][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.550237][T10561] veth0_macvtap: entered promiscuous mode [ 292.611946][T10561] veth1_macvtap: entered promiscuous mode [ 292.639810][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.647639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.750564][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.772729][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.797896][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.825896][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.835935][T10779] loop4: detected capacity change from 0 to 2048 [ 292.838529][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.854201][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.870970][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.884801][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.914851][T10561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.927560][T10779] loop4: p1 < > p4 [ 292.947407][T10779] loop4: p4 size 8388608 extends beyond EOD, truncated [ 292.968913][ T12] net_ratelimit: 55 callbacks suppressed [ 293.051888][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.093986][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.104766][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.131658][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.144496][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.171870][T10786] loop4: detected capacity change from 0 to 256 [ 293.183503][T10448] udevd[10448]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 293.196879][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 293.207426][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.219118][T10786] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.221247][T10561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.250361][T10786] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.260968][T10561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.280848][T10561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.380891][T10561] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.410657][T10561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.420782][T10561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.429730][T10561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.633421][T10790] loop4: detected capacity change from 0 to 256 [ 293.716497][T10790] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.773162][T10653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.789102][T10790] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.921513][T10653] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.984122][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.016040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.020920][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.023221][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.071126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.078441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.377171][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.413665][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.867333][T10819] loop7: detected capacity change from 0 to 256 [ 294.911904][T10819] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.995113][T10819] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.105162][T10825] loop6: detected capacity change from 0 to 256 [ 295.164595][T10825] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.209024][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.246450][T10825] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.329964][ T28] audit: type=1804 audit(1790528911.733:295): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1315" name="/newroot/4/file0/file0" dev="loop6" ino=1048706 res=1 errno=0 [ 295.565694][T10834] overlayfs: failed to resolve './bus': -2 [ 295.585425][T10834] overlayfs: failed to resolve './bus': -2 [ 296.471127][T10653] veth0_vlan: entered promiscuous mode [ 296.516375][T10653] veth1_vlan: entered promiscuous mode [ 296.652395][T10653] veth0_macvtap: entered promiscuous mode [ 296.693953][T10653] veth1_macvtap: entered promiscuous mode [ 296.810372][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.867464][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.902231][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.928157][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.977766][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.016810][T10863] loop7: detected capacity change from 0 to 256 [ 297.034065][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.053193][T10863] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.094106][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.123456][T10863] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.134279][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.165460][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.247971][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.291093][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.319948][T10561] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 297.327535][T10561] FAT-fs (loop7): Filesystem has been set read-only [ 297.354413][T10561] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 297.389233][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.416301][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.434337][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.446106][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.466313][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.485103][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.495618][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.527054][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.551904][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.568033][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.586508][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.621921][T10653] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.649161][T10653] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.673322][T10653] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.682790][T10653] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.781571][T10873] loop6: detected capacity change from 0 to 256 [ 297.796471][T10873] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.821772][T10873] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.881858][ T28] audit: type=1804 audit(1790528914.283:296): pid=10873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1326" name="/newroot/6/file0/file0" dev="loop6" ino=1048712 res=1 errno=0 [ 297.981241][T10653] net_ratelimit: 103 callbacks suppressed [ 298.233758][ T42] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.427815][ T42] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.498778][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.506633][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.694065][ T42] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.868578][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.876495][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.010523][ T42] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.464556][T10902] fuse: Bad value for 'fd' [ 299.730364][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.745188][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.768927][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.801579][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.812122][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.829143][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.187490][T10917] FAULT_INJECTION: forcing a failure. [ 300.187490][T10917] name failslab, interval 1, probability 0, space 0, times 0 [ 300.200788][T10917] CPU: 1 PID: 10917 Comm: syz.8.1339 Not tainted syzkaller #0 [ 300.208265][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.208279][T10917] Call Trace: [ 300.208287][T10917] [ 300.208295][T10917] dump_stack_lvl+0x18c/0x250 [ 300.208327][T10917] ? show_regs_print_info+0x20/0x20 [ 300.208350][T10917] ? load_image+0x420/0x420 [ 300.208375][T10917] ? __might_sleep+0xe0/0xe0 [ 300.238991][T10917] ? __lock_acquire+0x7d80/0x7d80 [ 300.248589][T10917] ? do_futex+0x2ff/0x3e0 [ 300.248617][T10917] should_fail_ex+0x394/0x4c0 [ 300.248645][T10917] should_failslab+0x9/0x20 [ 300.248670][T10917] slab_pre_alloc_hook+0x59/0x300 [ 300.248700][T10917] kmem_cache_alloc+0x5a/0x2c0 [ 300.248726][T10917] ? prepare_creds+0x30/0x5d0 [ 300.248760][T10917] prepare_creds+0x30/0x5d0 [ 300.248787][T10917] __sys_setuid+0x96/0x580 [ 300.248808][T10917] ? lockdep_hardirqs_on+0x98/0x150 [ 300.248832][T10917] do_syscall_64+0x55/0xb0 [ 300.248855][T10917] ? clear_bhb_loop+0x40/0x90 [ 300.299869][T10917] ? clear_bhb_loop+0x40/0x90 [ 300.304565][T10917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.310463][T10917] RIP: 0033:0x7fbcafb9e159 [ 300.314874][T10917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.334659][T10917] RSP: 002b:00007fbcb0a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 300.343075][T10917] RAX: ffffffffffffffda RBX: 00007fbcafe25fa0 RCX: 00007fbcafb9e159 [ 300.351057][T10917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 300.359024][T10917] RBP: 00007fbcafc3506b R08: 0000000000000000 R09: 0000000000000000 [ 300.366991][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.374959][T10917] R13: 00007fbcafe26038 R14: 00007fbcafe25fa0 R15: 00007ffdccc89cc8 [ 300.382950][T10917] [ 300.716494][T10925] loop8: detected capacity change from 0 to 256 [ 300.743696][T10925] FAT-fs (loop8): Unrecognized mount option "shortnam" or missing value [ 300.848374][T10928] fuse: Bad value for 'fd' [ 301.378078][T10940] fuse: Bad value for 'fd' [ 301.414018][T10942] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1349'. [ 301.927974][ T5787] Bluetooth: hci2: command tx timeout [ 302.315659][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 302.391139][T10444] udevd[10444]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 302.429457][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 302.550529][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 302.671684][T10979] fuse: Bad value for 'fd' [ 302.756192][ T42] hsr_slave_0: left promiscuous mode [ 302.801158][ T42] hsr_slave_1: left promiscuous mode [ 302.833301][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.863084][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.893577][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 302.909213][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.940629][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.968137][ T42] bridge_slave_1: left allmulticast mode [ 302.973804][ T42] bridge_slave_1: left promiscuous mode [ 302.974010][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.047821][ C1] net_ratelimit: 82 callbacks suppressed [ 303.059971][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 303.074615][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 303.091618][ T42] bridge_slave_0: left allmulticast mode [ 303.107981][ T42] bridge_slave_0: left promiscuous mode [ 303.114755][T10995] fuse: Bad value for 'group_id' [ 303.117969][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.238339][ T42] veth1_macvtap: left promiscuous mode [ 303.245985][ T42] veth0_macvtap: left promiscuous mode [ 303.251990][ T42] veth1_vlan: left promiscuous mode [ 303.257412][ T42] veth0_vlan: left promiscuous mode [ 303.464691][T11003] fuse: Bad value for 'fd' [ 303.984991][T11016] fuse: Bad value for 'group_id' [ 304.019319][ T5787] Bluetooth: hci2: command tx timeout [ 304.313173][T11022] loop8: detected capacity change from 0 to 256 [ 304.329104][T11022] FAT-fs (loop8): Unrecognized mount option "shortnam" or missing value [ 304.342546][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 304.393049][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 304.421115][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 304.482891][T11024] fuse: Bad value for 'fd' [ 304.685192][T11028] overlayfs: missing 'lowerdir' [ 304.835643][ T42] team0 (unregistering): Port device team_slave_1 removed [ 304.944490][ T42] team0 (unregistering): Port device team_slave_0 removed [ 305.121329][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.204869][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.671979][T11041] loop8: detected capacity change from 0 to 256 [ 305.686163][T11041] FAT-fs (loop8): Unrecognized mount option "shortnam" or missing value [ 305.993352][T11043] fuse: Bad value for 'fd' [ 306.088218][ T5787] Bluetooth: hci2: command tx timeout [ 306.219741][T11048] overlayfs: missing 'lowerdir' [ 306.265497][ T42] bond0 (unregistering): Released all slaves [ 306.467202][T10905] chnl_net:caif_netlink_parms(): no params data found [ 306.801023][T11068] loop8: detected capacity change from 0 to 256 [ 306.842859][T11068] FAT-fs (loop8): Unrecognized mount option "shortnam" or missing value [ 306.938521][T11071] fuse: Bad value for 'fd' [ 307.284905][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.323223][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.333451][T10905] bridge_slave_0: entered allmulticast mode [ 307.372508][T10905] bridge_slave_0: entered promiscuous mode [ 307.394316][T11080] overlayfs: missing 'lowerdir' [ 307.417691][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.455374][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.479608][T10905] bridge_slave_1: entered allmulticast mode [ 307.535735][T10905] bridge_slave_1: entered promiscuous mode [ 307.618760][T11090] FAULT_INJECTION: forcing a failure. [ 307.618760][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 307.631466][T11090] CPU: 1 PID: 11090 Comm: syz.6.1397 Not tainted syzkaller #0 [ 307.638954][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.649031][T11090] Call Trace: [ 307.652335][T11090] [ 307.655290][T11090] dump_stack_lvl+0x18c/0x250 [ 307.660011][T11090] ? show_regs_print_info+0x20/0x20 [ 307.665226][T11090] ? load_image+0x420/0x420 [ 307.669735][T11090] ? __might_sleep+0xe0/0xe0 [ 307.669761][T11090] ? __lock_acquire+0x7d80/0x7d80 [ 307.669786][T11090] should_fail_ex+0x394/0x4c0 [ 307.669818][T11090] should_failslab+0x9/0x20 [ 307.669845][T11090] slab_pre_alloc_hook+0x59/0x300 [ 307.679438][T11090] ? __lock_acquire+0x7d80/0x7d80 [ 307.679465][T11090] ? security_prepare_creds+0x4b/0x130 [ 307.679492][T11090] ? security_prepare_creds+0x4b/0x130 [ 307.679518][T11090] __kmem_cache_alloc_node+0x53/0x250 [ 307.688671][T11090] ? security_prepare_creds+0x4b/0x130 [ 307.688701][T11090] __kmalloc+0xa7/0x240 [ 307.688729][T11090] security_prepare_creds+0x4b/0x130 [ 307.688760][T11090] prepare_creds+0x427/0x5d0 [ 307.688787][T11090] __sys_setuid+0x96/0x580 [ 307.688809][T11090] ? lockdep_hardirqs_on+0x98/0x150 [ 307.688834][T11090] do_syscall_64+0x55/0xb0 [ 307.688857][T11090] ? clear_bhb_loop+0x40/0x90 [ 307.698876][T11090] ? clear_bhb_loop+0x40/0x90 [ 307.698907][T11090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.698936][T11090] RIP: 0033:0x7febb679e159 [ 307.709827][T11090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.709845][T11090] RSP: 002b:00007febb7608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 307.709866][T11090] RAX: ffffffffffffffda RBX: 00007febb6a25fa0 RCX: 00007febb679e159 [ 307.709881][T11090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 307.709893][T11090] RBP: 00007febb683506b R08: 0000000000000000 R09: 0000000000000000 [ 307.709905][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.709917][T11090] R13: 00007febb6a26038 R14: 00007febb6a25fa0 R15: 00007ffd34a6ebf8 [ 307.709946][T11090] [ 307.945391][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.001313][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.033242][T11100] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 308.088000][ C0] net_ratelimit: 58 callbacks suppressed [ 308.167853][ T5787] Bluetooth: hci2: command tx timeout [ 308.241725][T11105] fuse: Invalid rootmode [ 308.276586][T10905] team0: Port device team_slave_0 added [ 308.322661][T10905] team0: Port device team_slave_1 added [ 308.436329][T11110] loop4: detected capacity change from 0 to 256 [ 308.468315][T11110] FAT-fs (loop4): Unrecognized mount option "shortnam" or missing value [ 308.476949][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 308.551541][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 308.605303][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 308.632376][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.655941][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.737212][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.797340][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.825946][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.885644][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.887629][ T28] audit: type=1326 audit(1790528925.283:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 308.969242][T11117] overlayfs: missing 'lowerdir' [ 308.988020][ T28] audit: type=1326 audit(1790528925.283:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.072993][ T28] audit: type=1326 audit(1790528925.323:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.156438][ T28] audit: type=1326 audit(1790528925.323:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.191478][T11124] FAULT_INJECTION: forcing a failure. [ 309.191478][T11124] name failslab, interval 1, probability 0, space 0, times 0 [ 309.204145][T11124] CPU: 1 PID: 11124 Comm: syz.8.1406 Not tainted syzkaller #0 [ 309.211624][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.221680][T11124] Call Trace: [ 309.221692][T11124] [ 309.221701][T11124] dump_stack_lvl+0x18c/0x250 [ 309.232601][T11124] ? show_regs_print_info+0x20/0x20 [ 309.237819][T11124] ? load_image+0x420/0x420 [ 309.237850][T11124] ? __might_sleep+0xe0/0xe0 [ 309.237875][T11124] ? __lock_acquire+0x7d80/0x7d80 [ 309.237902][T11124] should_fail_ex+0x394/0x4c0 [ 309.237935][T11124] should_failslab+0x9/0x20 [ 309.244456][ T28] audit: type=1326 audit(1790528925.323:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.247005][T11124] slab_pre_alloc_hook+0x59/0x300 [ 309.256706][T11124] ? _raw_spin_lock_irq+0xbb/0xf0 [ 309.285211][T11124] kmem_cache_alloc+0x5a/0x2c0 [ 309.285246][T11124] ? alloc_uid+0x151/0x550 [ 309.285276][T11124] alloc_uid+0x151/0x550 [ 309.285306][T11124] __sys_setuid+0x1ca/0x580 [ 309.285333][T11124] do_syscall_64+0x55/0xb0 [ 309.285357][T11124] ? clear_bhb_loop+0x40/0x90 [ 309.285383][T11124] ? clear_bhb_loop+0x40/0x90 [ 309.285411][T11124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.285437][T11124] RIP: 0033:0x7fbcafb9e159 [ 309.285457][T11124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.285475][T11124] RSP: 002b:00007fbcb0a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 309.285498][T11124] RAX: ffffffffffffffda RBX: 00007fbcafe25fa0 RCX: 00007fbcafb9e159 [ 309.285511][T11124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 309.285523][T11124] RBP: 00007fbcafc3506b R08: 0000000000000000 R09: 0000000000000000 [ 309.285536][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.285548][T11124] R13: 00007fbcafe26038 R14: 00007fbcafe25fa0 R15: 00007ffdccc89cc8 [ 309.285577][T11124] [ 309.297082][ T28] audit: type=1326 audit(1790528925.323:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.410112][ T28] audit: type=1326 audit(1790528925.323:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.482402][ T28] audit: type=1326 audit(1790528925.323:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.516237][ T28] audit: type=1326 audit(1790528925.323:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.584379][ T28] audit: type=1326 audit(1790528925.323:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.8.1403" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb9e159 code=0x7ffc0000 [ 309.842271][T10905] hsr_slave_0: entered promiscuous mode [ 309.880583][T10905] hsr_slave_1: entered promiscuous mode [ 309.907578][T10905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.934433][T10905] Cannot create hsr debugfs directory [ 309.940750][T11138] loop6: detected capacity change from 0 to 256 [ 309.956158][T11138] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 309.978441][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 310.041538][T11138] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.304699][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 310.351801][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 310.889317][T11155] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 310.947241][T11160] FAULT_INJECTION: forcing a failure. [ 310.947241][T11160] name failslab, interval 1, probability 0, space 0, times 0 [ 310.960695][T11160] CPU: 1 PID: 11160 Comm: syz.4.1417 Not tainted syzkaller #0 [ 310.968192][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.978247][T11160] Call Trace: [ 310.978262][T11160] [ 310.978271][T11160] dump_stack_lvl+0x18c/0x250 [ 310.978304][T11160] ? show_regs_print_info+0x20/0x20 [ 310.978329][T11160] ? load_image+0x420/0x420 [ 310.978353][T11160] ? __might_sleep+0xe0/0xe0 [ 310.978386][T11160] ? __lock_acquire+0x7d80/0x7d80 [ 310.978414][T11160] should_fail_ex+0x394/0x4c0 [ 310.978447][T11160] should_failslab+0x9/0x20 [ 310.978475][T11160] slab_pre_alloc_hook+0x59/0x300 [ 310.978503][T11160] ? _raw_spin_lock_irq+0xbb/0xf0 [ 310.978529][T11160] kmem_cache_alloc+0x5a/0x2c0 [ 310.978557][T11160] ? alloc_uid+0x151/0x550 [ 310.978585][T11160] alloc_uid+0x151/0x550 [ 310.978615][T11160] __sys_setuid+0x1ca/0x580 [ 310.989763][T11160] do_syscall_64+0x55/0xb0 [ 310.989791][T11160] ? clear_bhb_loop+0x40/0x90 [ 310.989818][T11160] ? clear_bhb_loop+0x40/0x90 [ 310.999493][T11160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.999525][T11160] RIP: 0033:0x7f9a8e79e159 [ 310.999544][T11160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.999561][T11160] RSP: 002b:00007f9a8f73e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 310.999581][T11160] RAX: ffffffffffffffda RBX: 00007f9a8ea25fa0 RCX: 00007f9a8e79e159 [ 310.999596][T11160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 310.999608][T11160] RBP: 00007f9a8e83506b R08: 0000000000000000 R09: 0000000000000000 [ 310.999621][T11160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.999634][T11160] R13: 00007f9a8ea26038 R14: 00007f9a8ea25fa0 R15: 00007ffed0d07c68 [ 310.999664][T11160] [ 311.266452][T11168] loop4: detected capacity change from 0 to 16 [ 311.305369][T10905] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 311.324314][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 311.340110][T11168] erofs: (device loop4): mounted with root inode @ nid 36. [ 311.394480][T11168] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 311.445502][T11171] loop6: detected capacity change from 0 to 256 [ 311.454280][T11168] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 311.470802][T11171] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.480472][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 311.503896][T10905] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 311.518596][T11171] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.550057][T10905] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 311.631169][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 311.668707][T10905] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 311.679572][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 312.237164][T10905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.312814][T10905] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.358998][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.366194][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.451988][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.459263][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.207876][ C1] net_ratelimit: 47 callbacks suppressed [ 313.383179][T11213] loop4: detected capacity change from 0 to 256 [ 313.421414][T11213] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.460576][T11213] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.485454][T10905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.540624][T11218] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 313.790104][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 313.824601][T11229] overlayfs: missing 'lowerdir' [ 313.834268][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 313.939140][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 314.043349][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 314.100395][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 314.383423][T11251] program syz.6.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.556678][T10905] veth0_vlan: entered promiscuous mode [ 314.596052][T11257] loop6: detected capacity change from 0 to 256 [ 314.627664][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 314.645765][T11257] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.660130][T10905] veth1_vlan: entered promiscuous mode [ 314.670696][T11257] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.714826][T11259] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 314.758137][T11259] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 314.794308][T10905] veth0_macvtap: entered promiscuous mode [ 314.830237][T10905] veth1_macvtap: entered promiscuous mode [ 314.871836][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.891049][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.912231][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.942559][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.987882][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.027769][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.044573][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.064109][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.076347][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.091253][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.105126][T10905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.121696][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 315.136135][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 315.181056][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.239756][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.261673][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.270638][T11271] x86/PAT: syz.8.1448:11271 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 315.282400][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.307567][T11277] FAULT_INJECTION: forcing a failure. [ 315.307567][T11277] name fail_futex, interval 1, probability 0, space 0, times 0 [ 315.328268][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.345963][T11277] CPU: 1 PID: 11277 Comm: syz.4.1449 Not tainted syzkaller #0 [ 315.353494][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.360450][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.363560][T11277] Call Trace: [ 315.363572][T11277] [ 315.379728][T11277] dump_stack_lvl+0x18c/0x250 [ 315.384453][T11277] ? show_regs_print_info+0x20/0x20 [ 315.389697][T11277] ? load_image+0x420/0x420 [ 315.394236][T11277] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 315.400252][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.400251][T11277] ? preempt_schedule+0xc0/0xd0 [ 315.415563][T11277] ? preempt_schedule_common+0x82/0xc0 [ 315.421089][T11277] should_fail_ex+0x394/0x4c0 [ 315.425821][T11277] get_futex_key+0x136/0x1030 [ 315.430554][T11277] ? futex_setup_timer+0xc0/0xc0 [ 315.431176][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.435508][T11277] futex_wake+0x127/0x4f0 [ 315.449736][T11277] ? __might_fault+0xaa/0x120 [ 315.454446][T11277] ? futex_wake_mark+0x150/0x150 [ 315.459421][T11277] ? get_nodes+0x30c/0x3c0 [ 315.463873][T11277] ? cap_capable+0x1a1/0x230 [ 315.467217][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.468481][T11277] do_futex+0x35d/0x3e0 [ 315.468505][T11277] ? capable+0x81/0xe0 [ 315.468531][T11277] ? __ia32_sys_get_robust_list+0x110/0x110 [ 315.468561][T11277] __se_sys_futex+0x3a9/0x440 [ 315.488050][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.493063][T11277] ? __x64_sys_futex+0xf0/0xf0 [ 315.493098][T11277] ? __x64_sys_futex+0x21/0xf0 [ 315.512308][T11277] do_syscall_64+0x55/0xb0 [ 315.521462][T11277] ? clear_bhb_loop+0x40/0x90 [ 315.521488][T11277] ? clear_bhb_loop+0x40/0x90 [ 315.521513][T11277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.521539][T11277] RIP: 0033:0x7f9a8e79e159 [ 315.521557][T11277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.521576][T11277] RSP: 002b:00007f9a8f73e0e8 EFLAGS: 00000246 [ 315.560883][T11277] ORIG_RAX: 00000000000000ca [ 315.560895][T11277] RAX: ffffffffffffffda RBX: 00007f9a8ea25fa8 RCX: 00007f9a8e79e159 [ 315.560910][T11277] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9a8ea25fac [ 315.560923][T11277] RBP: 00007f9a8ea25fa0 R08: 0000000000745b40 R09: 0000000000000000 [ 315.560934][T11277] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 315.560948][T11277] R13: 00007f9a8ea26038 R14: 00007ffed0d07b80 R15: 00007ffed0d07c68 [ 315.560975][T11277] [ 315.616518][T10905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.646391][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 315.681687][T10905] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.722855][T10905] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.763536][T10905] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.787790][T10905] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.871129][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 316.234582][T11293] loop6: detected capacity change from 0 to 256 [ 316.252067][T11293] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.276732][T11293] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.606122][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 316.606137][ T28] audit: type=1326 audit(1790528933.003:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 316.660459][ T28] audit: type=1326 audit(1790528933.003:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 316.703576][ T28] audit: type=1326 audit(1790528933.043:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 316.794527][ T28] audit: type=1326 audit(1790528933.043:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 316.865727][ T28] audit: type=1326 audit(1790528933.043:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 316.922831][ T28] audit: type=1326 audit(1790528933.043:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 316.999948][T11311] FAULT_INJECTION: forcing a failure. [ 316.999948][T11311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.034759][ T28] audit: type=1326 audit(1790528933.043:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 317.082169][T11311] CPU: 1 PID: 11311 Comm: syz.6.1458 Not tainted syzkaller #0 [ 317.089703][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.099789][T11311] Call Trace: [ 317.103105][T11311] [ 317.106081][T11311] dump_stack_lvl+0x18c/0x250 [ 317.110805][T11311] ? show_regs_print_info+0x20/0x20 [ 317.116037][T11311] ? load_image+0x420/0x420 [ 317.120583][T11311] ? __might_fault+0xaa/0x120 [ 317.125294][T11311] ? __lock_acquire+0x7d80/0x7d80 [ 317.130354][T11311] should_fail_ex+0x394/0x4c0 [ 317.135068][T11311] _copy_from_user+0x2f/0xe0 [ 317.139670][T11311] get_nodes+0x2b0/0x3c0 [ 317.143918][T11311] ? file_end_write+0x159/0x250 [ 317.148794][T11311] ? vma_replace_policy+0x4a0/0x4a0 [ 317.153994][T11311] ? vfs_write+0x5de/0x9a0 [ 317.158420][T11311] ? do_futex+0x2ff/0x3e0 [ 317.162869][T11311] __se_sys_mbind+0x197/0x7c0 [ 317.167554][T11311] ? __ia32_sys_get_robust_list+0x110/0x110 [ 317.173465][T11311] ? __x64_sys_mbind+0xf0/0xf0 [ 317.178257][T11311] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 317.184255][T11311] ? lock_chain_count+0x20/0x20 [ 317.189173][T11311] ? __x64_sys_mbind+0x21/0xf0 [ 317.193943][T11311] do_syscall_64+0x55/0xb0 [ 317.198366][T11311] ? clear_bhb_loop+0x40/0x90 [ 317.203056][T11311] ? clear_bhb_loop+0x40/0x90 [ 317.207746][T11311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.213653][T11311] RIP: 0033:0x7febb679e159 [ 317.218075][T11311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.237688][T11311] RSP: 002b:00007febb7608028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 317.246114][T11311] RAX: ffffffffffffffda RBX: 00007febb6a25fa0 RCX: 00007febb679e159 [ 317.254089][T11311] RDX: 0000000000000002 RSI: 0000000000003000 RDI: 0000200000ffc000 [ 317.262068][T11311] RBP: 00007febb683506b R08: 0000000000000002 R09: 0000000000000006 [ 317.270041][T11311] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 317.278024][T11311] R13: 00007febb6a26038 R14: 00007febb6a25fa0 R15: 00007ffd34a6ebf8 [ 317.286017][T11311] [ 317.309343][ T28] audit: type=1326 audit(1790528933.053:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 317.381009][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.387359][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.404118][ T28] audit: type=1326 audit(1790528933.053:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 317.444839][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.478658][ T28] audit: type=1326 audit(1790528933.053:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.6.1456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febb679e159 code=0x7ffc0000 [ 317.911884][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.183671][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.288482][T11330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 318.337951][T11330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 318.408045][ C1] net_ratelimit: 90 callbacks suppressed [ 318.451582][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.583663][T11340] loop4: detected capacity change from 0 to 128 [ 318.687168][T11343] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 318.799609][T10448] udevd[10448]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 318.861800][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 318.959338][T11347] FAULT_INJECTION: forcing a failure. [ 318.959338][T11347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.007829][T11347] CPU: 0 PID: 11347 Comm: syz.4.1468 Not tainted syzkaller #0 [ 319.015358][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.025416][T11347] Call Trace: [ 319.025427][T11347] [ 319.025436][T11347] dump_stack_lvl+0x18c/0x250 [ 319.025469][T11347] ? show_regs_print_info+0x20/0x20 [ 319.025497][T11347] ? load_image+0x420/0x420 [ 319.041898][T11347] ? __might_fault+0xaa/0x120 [ 319.051069][T11347] ? __lock_acquire+0x7d80/0x7d80 [ 319.051099][T11347] should_fail_ex+0x394/0x4c0 [ 319.051129][T11347] _copy_from_user+0x2f/0xe0 [ 319.051154][T11347] get_nodes+0x2b0/0x3c0 [ 319.060920][T11347] ? file_end_write+0x159/0x250 [ 319.060951][T11347] ? vma_replace_policy+0x4a0/0x4a0 [ 319.060971][T11347] ? vfs_write+0x5de/0x9a0 [ 319.069773][T11347] ? do_futex+0x2ff/0x3e0 [ 319.069796][T11347] __se_sys_mbind+0x197/0x7c0 [ 319.069814][T11347] ? __ia32_sys_get_robust_list+0x110/0x110 [ 319.069838][T11347] ? __x64_sys_mbind+0xf0/0xf0 [ 319.069861][T11347] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 319.079928][T11347] ? lock_chain_count+0x20/0x20 [ 319.079958][T11347] ? __x64_sys_mbind+0x21/0xf0 [ 319.088703][T11347] do_syscall_64+0x55/0xb0 [ 319.088731][T11347] ? clear_bhb_loop+0x40/0x90 [ 319.099274][T11347] ? clear_bhb_loop+0x40/0x90 [ 319.099311][T11347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.099337][T11347] RIP: 0033:0x7f9a8e79e159 [ 319.099357][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.110143][T11347] RSP: 002b:00007f9a8f73e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 319.110168][T11347] RAX: ffffffffffffffda RBX: 00007f9a8ea25fa0 RCX: 00007f9a8e79e159 [ 319.110183][T11347] RDX: 0000000000000002 RSI: 0000000000003000 RDI: 0000200000ffc000 [ 319.110197][T11347] RBP: 00007f9a8e83506b R08: 0000000000000002 R09: 0000000000000006 [ 319.119776][T11347] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 319.119791][T11347] R13: 00007f9a8ea26038 R14: 00007f9a8ea25fa0 R15: 00007ffed0d07c68 [ 319.119820][T11347] [ 319.742315][T11357] fuse: Unknown parameter 'group_i00000000000000000000' [ 320.310686][T11369] overlayfs: missing 'lowerdir' [ 320.566230][T11379] loop4: detected capacity change from 0 to 256 [ 320.588835][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 320.609001][T11379] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.665157][T11379] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.154993][ T12] hsr_slave_0: left promiscuous mode [ 321.171880][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 321.200806][ T12] hsr_slave_1: left promiscuous mode [ 321.230018][T10442] udevd[10442]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 321.278197][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.301719][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.349649][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.378009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.404123][ T12] bridge_slave_1: left allmulticast mode [ 321.418862][ T12] bridge_slave_1: left promiscuous mode [ 321.424788][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.464373][ T12] bridge_slave_0: left allmulticast mode [ 321.476001][T11392] fuse: Unknown parameter 'group_i00000000000000000000' [ 321.484044][ T12] bridge_slave_0: left promiscuous mode [ 321.504023][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.651382][T11393] x86/PAT: syz.4.1479:11393 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 321.732046][ T12] veth1_macvtap: left promiscuous mode [ 321.737645][ T12] veth0_macvtap: left promiscuous mode [ 321.758467][ T12] veth1_vlan: left promiscuous mode [ 321.788268][ T12] veth0_vlan: left promiscuous mode [ 323.259192][T11404] hugetlbfs: syz.6.1485 (11404): Using mlock ulimits for SHM_HUGETLB is obsolete [ 323.618015][ C1] net_ratelimit: 64 callbacks suppressed [ 324.969301][ T12] team0 (unregistering): Port device team_slave_1 removed [ 325.228725][ T12] team0 (unregistering): Port device team_slave_0 removed [ 325.434072][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.664821][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.370811][ T12] bond0 (unregistering): Released all slaves [ 328.749617][T11429] loop6: detected capacity change from 0 to 256 [ 328.764670][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 328.789315][T11429] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.807832][ C1] net_ratelimit: 54 callbacks suppressed [ 328.839697][T11429] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.098981][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 329.150177][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 330.874416][T11458] fuse: Unknown parameter 'group_i00000000000000000000' [ 331.113866][T11465] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 331.167958][T11465] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 332.094931][ T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.291646][ T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.500454][ T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.685219][ T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.115730][T11498] loop6: detected capacity change from 0 to 256 [ 333.162087][T11498] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.165608][T11410] udevd[11410]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 333.231742][T11498] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.567025][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 333.603198][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 334.007870][ C1] net_ratelimit: 53 callbacks suppressed [ 334.915417][T11509] fuse: Unknown parameter 'group_id00000000000000000000' [ 335.116793][ T42] hsr_slave_0: left promiscuous mode [ 335.143832][ T42] hsr_slave_1: left promiscuous mode [ 335.152500][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.168742][T11511] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 335.177515][T11511] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 335.188237][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.224584][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.262823][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.284386][ T42] bridge_slave_1: left allmulticast mode [ 335.307787][ T42] bridge_slave_1: left promiscuous mode [ 335.313671][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.389059][ T42] bridge_slave_0: left allmulticast mode [ 335.394744][ T42] bridge_slave_0: left promiscuous mode [ 335.430047][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.625677][ T42] veth1_macvtap: left promiscuous mode [ 335.631363][ T42] veth0_macvtap: left promiscuous mode [ 335.637014][ T42] veth1_vlan: left promiscuous mode [ 335.667690][ T42] veth0_vlan: left promiscuous mode [ 338.071893][T11532] loop6: detected capacity change from 0 to 256 [ 338.101484][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 338.112474][T11532] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.174179][T11532] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.503420][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 338.544878][T11415] udevd[11415]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 338.588806][ T42] team0 (unregistering): Port device team_slave_1 removed [ 338.714096][ T42] team0 (unregistering): Port device team_slave_0 removed [ 338.831417][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.026460][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.127916][ T79] net_ratelimit: 47 callbacks suppressed [ 340.216125][T11545] fuse: Unknown parameter 'group_id00000000000000000000' [ 340.537084][ T42] bond0 (unregistering): Released all slaves [ 341.376056][T11551] overlayfs: missing 'lowerdir' [ 341.584058][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.740366][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.864794][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.005205][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.582468][T11573] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 344.079132][ T42] hsr_slave_0: left promiscuous mode [ 344.107413][ T42] hsr_slave_1: left promiscuous mode [ 344.139603][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.155589][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.174286][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.188571][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.215452][ T42] bridge_slave_1: left allmulticast mode [ 344.227836][ T42] bridge_slave_1: left promiscuous mode [ 344.238097][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.247861][ C0] net_ratelimit: 48 callbacks suppressed [ 344.268256][ T42] bridge_slave_0: left allmulticast mode [ 344.273993][ T42] bridge_slave_0: left promiscuous mode [ 344.287974][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.369992][ T42] veth1_macvtap: left promiscuous mode [ 344.375593][ T42] veth0_macvtap: left promiscuous mode [ 344.387928][ T42] veth1_vlan: left promiscuous mode [ 344.403481][ T42] veth0_vlan: left promiscuous mode [ 346.419925][ T42] team0 (unregistering): Port device team_slave_1 removed [ 346.556492][ T42] team0 (unregistering): Port device team_slave_0 removed [ 346.712629][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.871041][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.140409][ T42] bond0 (unregistering): Released all slaves [ 349.368150][ T149] net_ratelimit: 30 callbacks suppressed [ 353.375439][T11747] loop6: detected capacity change from 0 to 256 [ 353.389567][T11747] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.410889][T11650] udevd[11650]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 353.435870][T11747] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.638944][T11651] udevd[11651]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 353.676279][T11650] udevd[11650]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 354.408881][ T2907] net_ratelimit: 25 callbacks suppressed [ 355.984849][T11833] fuse: Unknown parameter 'group_id00000000000000000000' SYZFAIL: open(/dev/rfkill) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=9 req=1329 state=3 status=67 (errno 32: Broken pipe) [ 357.286181][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.442464][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.556380][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.644190][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.844754][ T12] hsr_slave_0: left promiscuous mode [ 358.866624][ T12] hsr_slave_1: left promiscuous mode [ 358.876763][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.886367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.900727][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.911279][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.920782][ T12] bridge_slave_1: left allmulticast mode [ 358.926450][ T12] bridge_slave_1: left promiscuous mode [ 358.942720][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.953609][ T12] bridge_slave_0: left allmulticast mode [ 358.959688][ T12] bridge_slave_0: left promiscuous mode [ 358.966473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.001711][ T12] veth1_macvtap: left promiscuous mode [ 359.007291][ T12] veth0_macvtap: left promiscuous mode [ 359.013980][ T12] veth1_vlan: left promiscuous mode [ 359.019599][ T12] veth0_vlan: left promiscuous mode [ 359.613317][ T2907] net_ratelimit: 28 callbacks suppressed [ 359.860441][ T12] team0 (unregistering): Port device team_slave_1 removed [ 359.926620][ T12] team0 (unregistering): Port device team_slave_0 removed [ 359.985242][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.050575][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.533438][ T12] bond0 (unregistering): Released all slaves [ 364.727943][ T2948] net_ratelimit: 11 callbacks suppressed