last executing test programs: 6m13.68763572s ago: executing program 0 (id=40): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x4001) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m12.457585889s ago: executing program 0 (id=43): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54, 0x0, 0x201}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 6m12.039325599s ago: executing program 0 (id=46): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(0x0, 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) read$FUSE(r0, 0x0, 0x0) 6m11.578083541s ago: executing program 0 (id=48): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5761, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r8, r7, 0x0, 0x20000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0x84) r10 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @empty, 0x1}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6m9.30240627s ago: executing program 0 (id=53): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x24048000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 6m7.809368181s ago: executing program 32 (id=54): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x4001) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m7.795462422s ago: executing program 0 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b"}}}}}, 0x0) 5m56.781932389s ago: executing program 3 (id=95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) shutdown(0xffffffffffffffff, 0x1) 5m56.589136999s ago: executing program 3 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000003c0)='rdma', 0x4) write(0xffffffffffffffff, &(0x7f0000000440)='127.0.0.1', 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='44', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000540)='ipv4', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/n\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/n\x00') 5m56.473380014s ago: executing program 3 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 5m55.757294469s ago: executing program 3 (id=99): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="010028bd7000fedbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x44}, 0x1, 0x0, 0x0, 0x4840}, 0x80) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 5m54.322216438s ago: executing program 3 (id=102): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x0, &(0x7f0000000240)={0x0, 0x871f}, &(0x7f0000000300)) 5m52.255278696s ago: executing program 33 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b"}}}}}, 0x0) 5m48.63492928s ago: executing program 3 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000"], 0x44}}, 0x0) 5m48.144629023s ago: executing program 34 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000"], 0x44}}, 0x0) 4m45.689427815s ago: executing program 5 (id=292): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000280)=""/156, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x105}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x85, 0x58}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x482a}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40824}, 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000200)={0x10, 0x0, "c7c66a1364dc04f739fbaf9cd2fdfdf9"}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r3, 0x1f, &(0x7f0000001c40)={0x28, 0x42, 0x0, r2, &(0x7f0000000c40)="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", 0x0, 0x8, 0x2, 0x0, {0x0, 0x0, r5, 0x3}}, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080) r6 = fcntl$dupfd(r0, 0x406, r0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = memfd_secret(0x80000) ioctl$FIOCLEX(r7, 0x5451) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, 0x0, 0x3e}, 0x28) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) 4m44.177160327s ago: executing program 5 (id=298): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x8, 0x274acb0c, 0x96f1fd6f4173cc3d, 0x401, 0x5, 0x83, 0x8, 0xc00, 0x0, 0xf1569e59e14f3bb0, 0x80}}, 0x50) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m42.299052528s ago: executing program 5 (id=304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbdd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) 4m40.869304036s ago: executing program 5 (id=307): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0xffffffff, 0x4, 0x15, 0x0, 0x2}) 4m39.091075391s ago: executing program 5 (id=315): r0 = semget$private(0x0, 0x7, 0x180) semop(r0, &(0x7f0000000100)=[{0x0, 0x80, 0x1000}], 0x1) 4m25.878640514s ago: executing program 5 (id=337): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(r0, 0xe, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 4m25.439198135s ago: executing program 35 (id=337): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(r0, 0xe, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 3m18.685534793s ago: executing program 1 (id=533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r1, 0x101, 0x70bd26, 0x25dfcbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040004}, 0x800c854) 3m18.53644311s ago: executing program 1 (id=534): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 3m17.819794934s ago: executing program 1 (id=537): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x7, 0xd53}) 3m17.676496031s ago: executing program 1 (id=538): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) 3m17.613271974s ago: executing program 1 (id=540): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10001, 0x80, 0x0, 0x0, 0x691, 0x2, 0x0, 0x807, 0x9, 0x0}) 3m17.403741474s ago: executing program 1 (id=542): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x10044c3, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@flush}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@errors_remount}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}]}, 0x53, 0x36b, &(0x7f0000000500)="$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") socket(0x2b, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xf) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x1) 3m2.255394789s ago: executing program 36 (id=542): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x10044c3, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@flush}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@errors_remount}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}]}, 0x53, 0x36b, &(0x7f0000000500)="$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") socket(0x2b, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xf) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x1) 2m16.991831108s ago: executing program 4 (id=759): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) 2m16.580531697s ago: executing program 4 (id=761): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m16.289840921s ago: executing program 4 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) 2m12.401237118s ago: executing program 4 (id=779): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="010028bd7000fedbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4840}, 0x80) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) pwrite64(r1, &(0x7f0000000100), 0x0, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) 2m9.01247915s ago: executing program 4 (id=787): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) unshare(0x60040000) 1m59.386619171s ago: executing program 4 (id=817): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000002040)=ANY=[@ANYBLOB="756e695f786c6174653d312c636865636b3d72656c617865642c73686f72746e616d653d77696e39352c757466383d302c757466383d312c6e6f6e756d7461696c3d302c726f6469722c7574661cae9cee383d302c636865636b3d6e6f726d616c2c73688072746e616d653d77696e39352c73686f72746e616d653dffffffff352c73686f72746e616d653d6d697865642c696f636861727365743d6d6163726f6d616e2c726f6469722c757466383d312c73686f72746e616d653d6d697865642c00"], 0x7, 0x2a6, &(0x7f0000000740)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4091, 0xffb) 1m58.208902387s ago: executing program 37 (id=817): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000002040)=ANY=[@ANYBLOB="756e695f786c6174653d312c636865636b3d72656c617865642c73686f72746e616d653d77696e39352c757466383d302c757466383d312c6e6f6e756d7461696c3d302c726f6469722c7574661cae9cee383d302c636865636b3d6e6f726d616c2c73688072746e616d653d77696e39352c73686f72746e616d653dffffffff352c73686f72746e616d653d6d697865642c696f636861727365743d6d6163726f6d616e2c726f6469722c757466383d312c73686f72746e616d653d6d697865642c00"], 0x7, 0x2a6, &(0x7f0000000740)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4091, 0xffb) 1m1.57555512s ago: executing program 7 (id=976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r2) write(r1, &(0x7f0000000100)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest', 0x3f) 1m0.092476561s ago: executing program 7 (id=980): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000040)=@in={0x2, 0x4e21, @multicast2}, 0x80) 59.967550947s ago: executing program 7 (id=982): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000021800ffff2c"], 0x20}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a000100"], 0x2c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) 58.409806202s ago: executing program 7 (id=985): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x6, 0x2) 58.03154949s ago: executing program 7 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x8045, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 57.172535821s ago: executing program 7 (id=991): pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x10080) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x41, 0x40000010, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800001, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000ffdbdf252100000009001f0070687930000000000a0001007770610900000000200001"], 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20044050) 41.725243111s ago: executing program 38 (id=991): pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x10080) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x41, 0x40000010, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800001, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$eJzs3c9vG1UeAPDv2EmaNNUmjVa72z1sI61WrbTbpEnbVYQ4tFdUReWHuMCB0KSlNG2jJghSkJpK5YKEuCCExIkD5b+Ail57ghMHLpxQpQhQuSFhZHsmiRM7P5zEU3U+H8n1zHuevO80+Xpmnt8bB1BYw9V/ShFHImIuiRhIllbquiKtHK6/7vGv712sPpKoVF78eSiStCx7fZI+96cb90bEt98kMVTe2O784q2rU7OzMzfT9dGFa3Oj84u3Tly5NnV55vLM9fH/j0+cOX1mYuxkW/t1e2PRb+fvvvn2wAeTr3zx2e/J2Jc/TCZxNp5LX7h2P/bKcAzX/k+SjVX9E3vdWE7K6d9JpVKpZGVJV74xsX3Z7687Iv4eA1GO1V/eQLz/fK7BAfuqktTfu4EiStrK/769DwTosOw8ILu2X38dXMrlrATohOVz9Q6AjfnfVe8bjN5a38DBx0ms7dZJIqK9nrlGhyLi4YPJu5ceTN6NfeqHA5pbuhMR/2iW/0kt/wejNwZr+V9qyP/qecGF9Lla/kKb7a/vKpb/0Dn1/O/dNP+jRf6/Vn2+Xc/h19tqvXftyht9Dfnf1+4uAQAAAAAAQGHdPxcR/1v5/L9n9fO30sr4n2gy/qc/Is7uQfvD69Y3fv5ferQHzQBNLJ+LeLbp+N9SNvp3sLxmCutgdCeXrszOnIyIv0TE8eg+UF0f26SNEx8Ofdqqbjgd/5c9qu0/TMcCpnE86jrQuM301MLULnYZSC3fifI/m47/TVaO/0mT43/1nWFum20M/efehVZ1W+c/sF8qn0cca3r8X71rRbL5/TlGa+cDo9lZwUb/evejr1q1327+u8UE7N7ynYiDm+f/YLL2fj3zO2/j1GJXpVVdu+f/PclLtbsK9aRl70wtLNwci+hJzperpQ3l4zuPGZ5GWT5k+VLN/+P/Xs3/cpP+v2bn/30RsbTuZye/NM4pzvztj/4fW8Xj/B/yU83/6R0d/3e+MH5v8OtW7W/v+H+6dqw/npbo/4O6T7I07eluKG+Sjl3NqjoeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BUoRcSiS0sjKcqk0MhLRHxF/jYOl2RvzC/+9dOOt69PVutr3/5eyb/odqK8n2ff/D65ZH1+3fioiDkfEx+W+2vrIxRuz03nvPAAAAAAAAAAAAAAAAAAAADwh+lvM/6/6qZx3dMC+68o7ACA3TfL/uzziADrP8R+KS/5Dccl/KC75D8Ul/6G4Ns//Vyc6FgjQcY7/UFzyHwAAAAAAniqHj97/PomIpWf6ao+qnrSuO9fIgP1WyjsAIDdu8QPFZegPFJdrfCDZor635UZbbbmZuYu72BgAAAAAAAAAAAAACufYEfP/oajM/4fiMv8fiiub/3805ziAznOND8QWM/mbzv/fcqs1XGgAAAAAAAAAAAAAwK7NL966OjU7O3PTwsttbJWNas49+PYWKpXK7Wr4T0o8e7+QpCPUO9JoNhS+83vas50dzOb6be8nb3yvONCh9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRnwEAAP//4Fgg0g==") r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000ffdbdf252100000009001f0070687930000000000a0001007770610900000000200001"], 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20044050) 17.53719837s ago: executing program 9 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRES8, @ANYRES16=r1, @ANYRES64], 0xe8}}, 0x8001) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f00000002c0)='Gt\xe80\x00(Y\xb3\xa4t\x9f\x92\xd9Qg\xf3dfv\xe1\x83\x9bs\x01\x17H9\x0e\xa3c;T\xf6\xa1\xa0\x8e\xaf5Lk\xcc6u\x1d\xae\tWb}\xd3\x1e9\xd21\xfc\xc0\xe1n\xdd\f7~\xe9\xb9\x9cb\x81\x12e1\x80\x05[\x86=\xd0[\xc9\x0f53q\xd9m\x7f\xa7\x05\xf0&\x0e\xd5\xeb\x13\x80\xfb\x8e') close(r5) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'syz_tun\x00', 0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) write(0xffffffffffffffff, &(0x7f0000001080)='\v', 0x1) socket$nl_route(0x10, 0x3, 0x0) 16.619466314s ago: executing program 9 (id=1114): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getregs(0xc, r1, 0x8, &(0x7f0000000180)=""/133) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x3e) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000300)=ANY=[], 0x32) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x412, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8, @ANYRESHEX]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x508, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 16.262480231s ago: executing program 8 (id=1115): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x1d}) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000180)={'vlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x6004}, @void, @x25={0x0, 0x6f, 0x1f, "357fa1dacc4d6fdc3f574256c1785fee0701fe1ea661f5b145c647e9de6ee72ccd3d2a48661827cd15f570fc15503bc0b7c0ec2aff47a6e520f986fe32468eab8833d8940fc13965ededf472ba80d9c19d18b04bae8534513fab1875d7f71cd8285c85d2bf7fef5c50cd2a5685a1047631ab6e4ba234c98e1cf908d619144e54c151794b81168cfe"}}, 0x8f) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 15.432322381s ago: executing program 9 (id=1116): setns(0xc9, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INTERRUPT(r1, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r1, &(0x7f0000000280)='1', 0x1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300000d000000000005000000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000100000000020c001480"], 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 14.686910446s ago: executing program 8 (id=1118): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 14.533244334s ago: executing program 9 (id=1119): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fstat(r0, 0x0) 13.56888315s ago: executing program 9 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 13.104140242s ago: executing program 8 (id=1122): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRES8, @ANYRES16=r1, @ANYRES64], 0xe8}}, 0x8001) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f00000002c0)='Gt\xe80\x00(Y\xb3\xa4t\x9f\x92\xd9Qg\xf3dfv\xe1\x83\x9bs\x01\x17H9\x0e\xa3c;T\xf6\xa1\xa0\x8e\xaf5Lk\xcc6u\x1d\xae\tWb}\xd3\x1e9\xd21\xfc\xc0\xe1n\xdd\f7~\xe9\xb9\x9cb\x81\x12e1\x80\x05[\x86=\xd0[\xc9\x0f53q\xd9m\x7f\xa7\x05\xf0&\x0e\xd5\xeb\x13\x80\xfb\x8e') close(r5) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'syz_tun\x00', 0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) write(0xffffffffffffffff, &(0x7f0000001080)='\v', 0x1) socket$nl_route(0x10, 0x3, 0x0) 11.095224908s ago: executing program 8 (id=1123): openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x39b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000440)={0x0, 0x0, {0xa, 0x0, 0x3001, 0x6, 0xc, 0x0, 0x1, 0x4}}) 10.952132735s ago: executing program 8 (id=1125): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 10.184397602s ago: executing program 9 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x1d}) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000180)={'vlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x6004}, @void, @x25={0x0, 0x6f, 0x1f, "357fa1dacc4d6fdc3f574256c1785fee0701fe1ea661f5b145c647e9de6ee72ccd3d2a48661827cd15f570fc15503bc0b7c0ec2aff47a6e520f986fe32468eab8833d8940fc13965ededf472ba80d9c19d18b04bae8534513fab1875d7f71cd8285c85d2bf7fef5c50cd2a5685a1047631ab6e4ba234c98e1cf908d619144e54c151794b81168cfe"}}, 0x8f) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 9.688326776s ago: executing program 39 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x1d}) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000180)={'vlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x6004}, @void, @x25={0x0, 0x6f, 0x1f, "357fa1dacc4d6fdc3f574256c1785fee0701fe1ea661f5b145c647e9de6ee72ccd3d2a48661827cd15f570fc15503bc0b7c0ec2aff47a6e520f986fe32468eab8833d8940fc13965ededf472ba80d9c19d18b04bae8534513fab1875d7f71cd8285c85d2bf7fef5c50cd2a5685a1047631ab6e4ba234c98e1cf908d619144e54c151794b81168cfe"}}, 0x8f) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 6.910142059s ago: executing program 2 (id=1135): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000014bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 6.657543451s ago: executing program 6 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c004) 6.434528462s ago: executing program 6 (id=1137): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) 5.318013915s ago: executing program 6 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRES8, @ANYRES16=r1, @ANYRES64], 0xe8}}, 0x8001) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f00000002c0)='Gt\xe80\x00(Y\xb3\xa4t\x9f\x92\xd9Qg\xf3dfv\xe1\x83\x9bs\x01\x17H9\x0e\xa3c;T\xf6\xa1\xa0\x8e\xaf5Lk\xcc6u\x1d\xae\tWb}\xd3\x1e9\xd21\xfc\xc0\xe1n\xdd\f7~\xe9\xb9\x9cb\x81\x12e1\x80\x05[\x86=\xd0[\xc9\x0f53q\xd9m\x7f\xa7\x05\xf0&\x0e\xd5\xeb\x13\x80\xfb\x8e') close(r5) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="54032b27", @ANYRES16=0x0, @ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x10}, 0x840) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'syz_tun\x00', 0x7}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r9, &(0x7f0000001080)='\v', 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af33da4}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0xfd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r7, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}]]}, 0x3c}}, 0x0) 4.460281316s ago: executing program 6 (id=1139): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) 4.184417749s ago: executing program 2 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000ebff001800000018000000080000000000000000000002100000000000000e41ad"], 0x0, 0x38}, 0x28) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x63}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x2, 0xffffffffffffff2c, 0x0, 0x5}) 3.204674696s ago: executing program 2 (id=1141): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, 0x3e, 0x107, 0xffffbffd, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 1.936196877s ago: executing program 2 (id=1142): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRES8, @ANYRES16=r1, @ANYRES64], 0xe8}}, 0x8001) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f00000002c0)='Gt\xe80\x00(Y\xb3\xa4t\x9f\x92\xd9Qg\xf3dfv\xe1\x83\x9bs\x01\x17H9\x0e\xa3c;T\xf6\xa1\xa0\x8e\xaf5Lk\xcc6u\x1d\xae\tWb}\xd3\x1e9\xd21\xfc\xc0\xe1n\xdd\f7~\xe9\xb9\x9cb\x81\x12e1\x80\x05[\x86=\xd0[\xc9\x0f53q\xd9m\x7f\xa7\x05\xf0&\x0e\xd5\xeb\x13\x80\xfb\x8e') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="54032b27", @ANYRES16=0x0, @ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x10}, 0x840) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'syz_tun\x00', 0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) write(0xffffffffffffffff, &(0x7f0000001080)='\v', 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.485662148s ago: executing program 6 (id=1143): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bind$bt_hci(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32], 0x1c}}, 0x840) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d00010073796e70726f7879000000001400"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.183967223s ago: executing program 2 (id=1144): bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x8045, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 722.093575ms ago: executing program 6 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 597.839171ms ago: executing program 8 (id=1146): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') openat$fb0(0xffffffffffffff9c, 0x0, 0x20741, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) fallocate(r1, 0x0, 0x3f, 0x8000c62) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r2, &(0x7f0000000000), 0x0) write$vga_arbiter(r2, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x182, 0x0) 0s ago: executing program 2 (id=1147): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x0) kernel console output (not intermixed with test programs): 000000,norecovery,abort,auto_da_alloc,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 247.143438][ T6438] tipc: Enabled bearer , priority 0 [ 247.321832][ T6448] tipc: Resetting bearer [ 247.371191][ C0] net_ratelimit: 68 callbacks suppressed [ 247.417492][ T6437] tipc: Resetting bearer [ 247.509576][ T6437] tipc: Disabling bearer [ 248.006381][ T6462] fuse: Bad value for 'group_id' [ 249.540985][ T6481] loop4: detected capacity change from 0 to 512 [ 249.561079][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.479'. [ 249.605058][ T6485] loop1: detected capacity change from 0 to 256 [ 249.611903][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.479'. [ 249.716080][ T6481] EXT4-fs (loop4): Ignoring removed bh option [ 249.739154][ T6481] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 249.797860][ T4202] Bluetooth: hci2: unexpected event for opcode 0x202d [ 249.810337][ T6481] EXT4-fs (loop4): 1 truncate cleaned up [ 249.874664][ T6498] loop6: detected capacity change from 0 to 256 [ 249.888895][ T6481] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 250.028956][ T6498] FAT-fs (loop6): Directory bread(block 64) failed [ 250.063963][ T6498] FAT-fs (loop6): Directory bread(block 65) failed [ 250.091014][ T6498] FAT-fs (loop6): Directory bread(block 66) failed [ 250.129241][ T6498] FAT-fs (loop6): Directory bread(block 67) failed [ 250.159660][ T6498] FAT-fs (loop6): Directory bread(block 68) failed [ 250.208806][ T6498] FAT-fs (loop6): Directory bread(block 69) failed [ 250.232950][ T6498] FAT-fs (loop6): Directory bread(block 70) failed [ 250.258815][ T6500] loop1: detected capacity change from 0 to 4096 [ 250.267312][ T6498] FAT-fs (loop6): Directory bread(block 71) failed [ 250.301479][ T6498] FAT-fs (loop6): Directory bread(block 72) failed [ 250.380486][ T6498] FAT-fs (loop6): Directory bread(block 73) failed [ 250.392099][ T6500] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 251.136953][ T6521] device syzkaller0 entered promiscuous mode [ 251.202885][ T6521] tipc: Started in network mode [ 251.276036][ T6521] tipc: Node identity 9224d422e6a7, cluster identity 4711 [ 251.333954][ T6521] tipc: Enabled bearer , priority 0 [ 251.453565][ T6521] tipc: Resetting bearer [ 251.524939][ T6519] tipc: Resetting bearer [ 251.613252][ T6519] tipc: Disabling bearer [ 252.582653][ C1] net_ratelimit: 60 callbacks suppressed [ 253.104100][ T6553] device syzkaller1 entered promiscuous mode [ 254.639157][ T26] audit: type=1326 audit(1789509174.728:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 254.854003][ T26] audit: type=1326 audit(1789509174.818:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 254.888708][ T26] audit: type=1326 audit(1789509174.848:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 255.680989][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.687372][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.720466][ T26] audit: type=1326 audit(1789509174.848:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 255.757912][ T26] audit: type=1326 audit(1789509174.858:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 255.891255][ T26] audit: type=1326 audit(1789509174.858:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 256.929592][ T6588] loop7: detected capacity change from 0 to 1024 [ 257.505575][ T26] audit: type=1326 audit(1789509174.858:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 257.694680][ C1] net_ratelimit: 52 callbacks suppressed [ 258.053722][ T6588] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 258.704161][ T26] audit: type=1326 audit(1789509174.858:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 258.746955][ T26] audit: type=1326 audit(1789509174.858:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 258.771014][ T26] audit: type=1326 audit(1789509174.888:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.7.499" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1c059dc159 code=0x7ffc0000 [ 259.053137][ T6597] tipc: Enabled bearer , priority 0 [ 259.145292][ T6598] tipc: Resetting bearer [ 259.810198][ T6596] tipc: Disabling bearer [ 260.435538][ T6629] loop1: detected capacity change from 0 to 256 [ 260.533240][ T6633] FAULT_INJECTION: forcing a failure. [ 260.533240][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 260.546073][ T6633] CPU: 1 PID: 6633 Comm: syz.6.510 Not tainted syzkaller #0 [ 260.553395][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.563496][ T6633] Call Trace: [ 260.566816][ T6633] [ 260.569768][ T6633] dump_stack_lvl+0x188/0x250 [ 260.574479][ T6633] ? show_regs_print_info+0x20/0x20 [ 260.579744][ T6633] ? load_image+0x410/0x410 [ 260.584281][ T6633] ? __might_sleep+0xf0/0xf0 [ 260.588905][ T6633] ? __lock_acquire+0x7b50/0x7b50 [ 260.593972][ T6633] should_fail+0x383/0x4b0 [ 260.598428][ T6633] should_failslab+0x5/0x20 [ 260.602957][ T6633] slab_pre_alloc_hook+0x51/0xc0 [ 260.607941][ T6633] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 260.613688][ T6633] ? io_wq_create+0x389/0xc00 [ 260.618408][ T6633] io_wq_create+0x389/0xc00 [ 260.622952][ T6633] ? __init_waitqueue_head+0xa4/0x140 [ 260.628364][ T6633] io_uring_alloc_task_context+0x298/0x5c0 [ 260.634208][ T6633] ? __io_uring_add_tctx_node+0x500/0x500 [ 260.639960][ T6633] ? io_wq_free_work+0x1b0/0x1b0 [ 260.644931][ T6633] ? tctx_task_work+0x5e0/0x5e0 [ 260.649819][ T6633] ? __lock_acquire+0x7b50/0x7b50 [ 260.654896][ T6633] ? __rwlock_init+0x140/0x140 [ 260.659702][ T6633] __io_uring_add_tctx_node+0x37b/0x500 [ 260.665300][ T6633] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 260.671253][ T6633] ? _raw_spin_unlock+0x24/0x40 [ 260.676140][ T6633] ? alloc_fd+0x59e/0x650 [ 260.680519][ T6633] io_uring_install_fd+0xc0/0xf0 [ 260.685534][ T6633] __se_sys_io_uring_setup+0x2303/0x2900 [ 260.691233][ T6633] ? __x64_sys_io_uring_setup+0x60/0x60 [ 260.696830][ T6633] ? lockdep_hardirqs_on+0x94/0x140 [ 260.702072][ T6633] do_syscall_64+0x4c/0xa0 [ 260.706519][ T6633] ? clear_bhb_loop+0x30/0x80 [ 260.711220][ T6633] ? clear_bhb_loop+0x30/0x80 [ 260.715935][ T6633] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.721860][ T6633] RIP: 0033:0x7ff190bef159 [ 260.726305][ T6633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.745960][ T6633] RSP: 002b:00007ff18ee47028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 260.754419][ T6633] RAX: ffffffffffffffda RBX: 00007ff190e76fa0 RCX: 00007ff190bef159 [ 260.762427][ T6633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 260.770421][ T6633] RBP: 00007ff190c8606b R08: 0000000000000000 R09: 0000000000000000 [ 260.770437][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.770451][ T6633] R13: 00007ff190e77038 R14: 00007ff190e76fa0 R15: 00007ffce6745a68 [ 260.770526][ T6633] [ 260.959258][ T6629] FAT-fs (loop1): Directory bread(block 64) failed [ 261.002676][ T6629] FAT-fs (loop1): Directory bread(block 65) failed [ 261.009695][ T6629] FAT-fs (loop1): Directory bread(block 66) failed [ 261.055256][ T6636] tipc: Enabled bearer , priority 10 [ 261.093961][ T6629] FAT-fs (loop1): Directory bread(block 67) failed [ 261.138869][ T6629] FAT-fs (loop1): Directory bread(block 68) failed [ 261.168908][ T6629] FAT-fs (loop1): Directory bread(block 69) failed [ 261.213644][ T6629] FAT-fs (loop1): Directory bread(block 70) failed [ 261.275991][ T6629] FAT-fs (loop1): Directory bread(block 71) failed [ 261.325248][ T6635] tipc: Disabling bearer [ 261.333503][ T6629] FAT-fs (loop1): Directory bread(block 72) failed [ 261.340090][ T6629] FAT-fs (loop1): Directory bread(block 73) failed [ 262.272480][ T6664] device syzkaller0 entered promiscuous mode [ 262.324326][ T6664] tipc: Enabled bearer , priority 0 [ 262.379400][ T6664] tipc: Resetting bearer [ 262.427819][ T6663] tipc: Resetting bearer [ 262.456847][ T6663] tipc: Disabling bearer [ 262.901168][ C1] net_ratelimit: 63 callbacks suppressed [ 263.222517][ T6687] loop4: detected capacity change from 0 to 256 [ 263.225691][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.525'. [ 263.572046][ T6687] FAT-fs (loop4): Directory bread(block 64) failed [ 263.597640][ T6687] FAT-fs (loop4): Directory bread(block 65) failed [ 263.669848][ T6687] FAT-fs (loop4): Directory bread(block 66) failed [ 263.925213][ T6687] FAT-fs (loop4): Directory bread(block 67) failed [ 263.962475][ T6687] FAT-fs (loop4): Directory bread(block 68) failed [ 264.224726][ T6687] FAT-fs (loop4): Directory bread(block 69) failed [ 264.431534][ T6687] FAT-fs (loop4): Directory bread(block 70) failed [ 264.499723][ T6687] FAT-fs (loop4): Directory bread(block 71) failed [ 264.541054][ T6687] FAT-fs (loop4): Directory bread(block 72) failed [ 264.601291][ T6687] FAT-fs (loop4): Directory bread(block 73) failed [ 265.080416][ T6717] device bridge1 entered promiscuous mode [ 266.251425][ T6745] usb usb7: usbfs: process 6745 (syz.1.540) did not claim interface 0 before use [ 266.434242][ T6751] loop1: detected capacity change from 0 to 256 [ 266.573534][ T6751] FAT-fs (loop1): Directory bread(block 64) failed [ 266.611471][ T6751] FAT-fs (loop1): Directory bread(block 65) failed [ 266.645469][ T6751] FAT-fs (loop1): Directory bread(block 66) failed [ 266.701352][ T6751] FAT-fs (loop1): Directory bread(block 67) failed [ 266.712168][ T6751] FAT-fs (loop1): Directory bread(block 68) failed [ 266.755849][ T6751] FAT-fs (loop1): Directory bread(block 69) failed [ 266.798587][ T6751] FAT-fs (loop1): Directory bread(block 70) failed [ 266.841222][ T6751] FAT-fs (loop1): Directory bread(block 71) failed [ 266.847890][ T6751] FAT-fs (loop1): Directory bread(block 72) failed [ 266.854480][ T6751] FAT-fs (loop1): Directory bread(block 73) failed [ 267.931181][ C1] net_ratelimit: 60 callbacks suppressed [ 269.497466][ T6792] syz.8.551 (6792): drop_caches: 2 [ 269.786537][ T6795] hub 8-0:1.0: USB hub found [ 269.792626][ T6795] hub 8-0:1.0: 1 port detected [ 269.814122][ T6795] netlink: 44 bytes leftover after parsing attributes in process `syz.4.552'. [ 272.971171][ C0] net_ratelimit: 54 callbacks suppressed [ 273.953259][ T6882] tipc: Enabled bearer , priority 0 [ 274.014135][ T6882] tipc: Resetting bearer [ 274.224129][ T6879] tipc: Disabling bearer [ 274.522384][ T6891] loop6: detected capacity change from 0 to 512 [ 275.055126][ T6891] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.016641][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.7.575'. [ 276.294436][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 276.341404][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 276.692088][ T6935] tipc: Enabled bearer , priority 0 [ 277.240279][ T6935] tipc: Resetting bearer [ 277.423269][ T6934] tipc: Disabling bearer [ 278.091173][ C0] net_ratelimit: 64 callbacks suppressed [ 278.243865][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 280.294509][ T6998] tipc: Enabled bearer , priority 0 [ 280.941253][ T7006] tipc: Disabling bearer [ 281.323072][ T7025] netlink: 36 bytes leftover after parsing attributes in process `syz.6.605'. [ 282.434728][ T7033] device geneve2 entered promiscuous mode [ 282.763768][ T7043] loop4: detected capacity change from 0 to 1024 [ 283.211215][ C0] net_ratelimit: 54 callbacks suppressed [ 283.222442][ T7056] tipc: Enabled bearer , priority 0 [ 283.321724][ T7056] tipc: Resetting bearer [ 283.359059][ T7043] loop4: detected capacity change from 0 to 512 [ 283.394948][ T7055] tipc: Disabling bearer [ 284.167006][ T7073] netlink: 96 bytes leftover after parsing attributes in process `syz.4.617'. [ 284.208887][ T7073] netlink: 32 bytes leftover after parsing attributes in process `syz.4.617'. [ 284.513573][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.620'. [ 285.440291][ T7081] Can't find ip_set type [ 285.663062][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 286.663408][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 287.010001][ T7129] loop4: detected capacity change from 0 to 256 [ 287.691259][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 288.235658][ C1] net_ratelimit: 55 callbacks suppressed [ 288.275620][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.291067][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.299542][ T7052] device bridge_slave_0 entered promiscuous mode [ 288.316288][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.385333][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.417460][ T7052] device bridge_slave_1 entered promiscuous mode [ 288.747739][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.848547][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.705422][ T7052] team0: Port device team_slave_0 added [ 289.726018][ T7052] team0: Port device team_slave_1 added [ 290.096846][ T4190] Bluetooth: hci3: command 0x040f tx timeout [ 290.342725][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.349719][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.540052][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.610825][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.653173][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.770898][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.363238][ T7184] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.564765][ T7052] device hsr_slave_0 entered promiscuous mode [ 291.613195][ T7052] device hsr_slave_1 entered promiscuous mode [ 291.649724][ T7052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.684140][ T7052] Cannot create hsr debugfs directory [ 291.723417][ T4310] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.779248][ T4310] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.361775][ T4310] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.653893][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 292.660136][ T4310] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.705054][ T7188] loop7: detected capacity change from 0 to 8192 [ 292.809060][ T7188] attempt to access beyond end of device [ 292.809060][ T7188] loop7: rw=0, want=57848, limit=8192 [ 292.861261][ T7188] Buffer I/O error on dev loop7, logical block 57847, async page read [ 292.899120][ T7188] attempt to access beyond end of device [ 292.899120][ T7188] loop7: rw=0, want=57848, limit=8192 [ 292.966297][ T4310] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.003894][ T7188] Buffer I/O error on dev loop7, logical block 57847, async page read [ 293.032086][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 293.032100][ T26] audit: type=1800 audit(1789509213.128:32): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.642" name="file2" dev="loop7" ino=1048640 res=0 errno=0 [ 293.072667][ T4310] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.291188][ C0] net_ratelimit: 50 callbacks suppressed [ 293.305195][ T4310] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.345546][ T4310] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.180886][ T7052] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 296.359510][ T7052] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 296.455124][ T7052] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 297.092283][ T7052] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 298.297460][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.359518][ C1] net_ratelimit: 50 callbacks suppressed [ 298.424306][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.444417][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.111807][ T7302] loop7: detected capacity change from 0 to 256 [ 299.679563][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.915231][ T7052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.925684][ T7052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.971299][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.983423][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.999222][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.006363][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.112438][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.145121][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.188335][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.195473][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.265017][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.292709][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.319059][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.385752][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.447356][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.457055][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.466989][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.475680][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.490410][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.499102][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.661036][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.737410][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.841700][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.119650][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.8.674'. [ 303.611184][ C0] net_ratelimit: 32 callbacks suppressed [ 303.730928][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.744792][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.839807][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.066532][ T7373] loop7: detected capacity change from 0 to 1024 [ 304.222587][ T7373] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 304.432658][ T26] audit: type=1804 audit(1789509224.528:33): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.685" name="/newroot/83/file1/file0/file1" dev="overlay" ino=15 res=1 errno=0 [ 304.622272][ T4310] device hsr_slave_0 left promiscuous mode [ 304.941577][ T4310] device hsr_slave_1 left promiscuous mode [ 304.992555][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.165032][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.307572][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.391009][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.480252][ T4310] device bridge_slave_1 left promiscuous mode [ 305.493061][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.547718][ T4310] device bridge_slave_0 left promiscuous mode [ 305.564903][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.661393][ T4310] device veth1_macvtap left promiscuous mode [ 305.668357][ T4310] device veth0_macvtap left promiscuous mode [ 305.738999][ T4310] device veth1_vlan left promiscuous mode [ 307.745419][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 307.791585][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 307.813016][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.914110][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.249571][ T4310] bond0 (unregistering): Released all slaves [ 308.432142][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.451833][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.581313][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.602187][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.628600][ T7052] device veth0_vlan entered promiscuous mode [ 308.654727][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.703067][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.731326][ C0] net_ratelimit: 63 callbacks suppressed [ 308.807121][ T7052] device veth1_vlan entered promiscuous mode [ 309.189531][ T7455] device syzkaller0 entered promiscuous mode [ 309.504275][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.522139][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.669762][ T7052] device veth0_macvtap entered promiscuous mode [ 310.708774][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.744569][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.807876][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.869675][ T7052] device veth1_macvtap entered promiscuous mode [ 311.006986][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.041717][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.091918][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.130373][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.168712][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.204255][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.243508][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.277268][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.325154][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.403869][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.441779][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.485764][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.524986][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.582304][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.623367][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.683185][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.704168][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.754627][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.765667][ T7496] FAULT_INJECTION: forcing a failure. [ 311.765667][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 311.810367][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.829586][ T7496] CPU: 0 PID: 7496 Comm: syz.4.711 Not tainted syzkaller #0 [ 311.836931][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.847016][ T7496] Call Trace: [ 311.850323][ T7496] [ 311.853303][ T7496] dump_stack_lvl+0x188/0x250 [ 311.858020][ T7496] ? show_regs_print_info+0x20/0x20 [ 311.863258][ T7496] ? load_image+0x410/0x410 [ 311.867797][ T7496] ? __might_sleep+0xf0/0xf0 [ 311.872423][ T7496] ? __lock_acquire+0x7b50/0x7b50 [ 311.877483][ T7496] ? lockdep_init_map_type+0x98/0x900 [ 311.882901][ T7496] should_fail+0x383/0x4b0 [ 311.887361][ T7496] should_failslab+0x5/0x20 [ 311.891909][ T7496] slab_pre_alloc_hook+0x51/0xc0 [ 311.896879][ T7496] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 311.902634][ T7496] ? sbitmap_queue_init_node+0x201/0xa60 [ 311.908304][ T7496] ? __init_waitqueue_head+0xa4/0x140 [ 311.913754][ T7496] sbitmap_queue_init_node+0x201/0xa60 [ 311.919265][ T7496] blk_mq_init_tags+0x1d1/0x370 [ 311.924162][ T7496] blk_mq_alloc_rq_map+0x7f/0x1a0 [ 311.929223][ T7496] __blk_mq_alloc_map_and_request+0x8e/0x320 [ 311.935240][ T7496] blk_mq_alloc_map_and_requests+0xd0/0x4d0 [ 311.941173][ T7496] blk_mq_alloc_tag_set+0x794/0xf30 [ 311.946406][ T7496] loop_add+0x257/0x890 [ 311.950588][ T7496] loop_control_ioctl+0x124/0x550 [ 311.955640][ T7496] ? xor_init+0x60/0x60 [ 311.959832][ T7496] ? bpf_lsm_file_ioctl+0x5/0x10 [ 311.964806][ T7496] ? security_file_ioctl+0x7c/0xa0 [ 311.969956][ T7496] ? xor_init+0x60/0x60 [ 311.974144][ T7496] __se_sys_ioctl+0xfa/0x170 [ 311.978772][ T7496] do_syscall_64+0x4c/0xa0 [ 311.983216][ T7496] ? clear_bhb_loop+0x30/0x80 [ 311.987928][ T7496] ? clear_bhb_loop+0x30/0x80 [ 311.992635][ T7496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.998566][ T7496] RIP: 0033:0x7f6124c81159 [ 312.003014][ T7496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.022648][ T7496] RSP: 002b:00007f6122ed9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.031093][ T7496] RAX: ffffffffffffffda RBX: 00007f6124f08fa0 RCX: 00007f6124c81159 [ 312.039112][ T7496] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 312.047116][ T7496] RBP: 00007f6124d1806b R08: 0000000000000000 R09: 0000000000000000 [ 312.055124][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.063129][ T7496] R13: 00007f6124f09038 R14: 00007f6124f08fa0 R15: 00007ffddf71ca48 [ 312.071147][ T7496] [ 312.103179][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.163035][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.199483][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.227009][ T7052] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.271700][ T7052] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.322032][ T7052] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.391614][ T7052] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.631308][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.649449][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.708522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.772304][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.801413][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.826986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.092781][ T7496] blk-mq: reduced tag depth (128 -> 64) [ 313.781156][ C1] net_ratelimit: 72 callbacks suppressed [ 315.017463][ T7533] device syzkaller1 entered promiscuous mode [ 315.868055][ T7552] using random self ethernet address [ 315.907786][ T7552] using random host ethernet address [ 316.026272][ T26] audit: type=1326 audit(1789509236.118:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 316.158348][ T26] audit: type=1326 audit(1789509236.148:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 316.192009][ T26] audit: type=1326 audit(1789509236.148:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 316.288195][ T26] audit: type=1326 audit(1789509236.168:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 316.898632][ T7552] usb0: HOST MAC 76:e3:ff:fb:16:ec [ 316.952406][ T7552] usb0: MAC 32:c5:ff:15:7a:45 [ 316.958904][ T26] audit: type=1326 audit(1789509236.178:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 317.060536][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.183381][ T7574] loop4: detected capacity change from 0 to 128 [ 317.201150][ T26] audit: type=1326 audit(1789509236.178:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 317.301355][ T4863] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 317.331222][ T26] audit: type=1326 audit(1789509236.178:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 317.376872][ T7574] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.441712][ T26] audit: type=1326 audit(1789509236.178:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bfef0159 code=0x7ffc0000 [ 317.466831][ T26] audit: type=1326 audit(1789509236.178:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2bfeb098e code=0x7ffc0000 [ 317.481502][ T7574] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.493599][ T26] audit: type=1326 audit(1789509236.178:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.9.726" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2bfeb098e code=0x7ffc0000 [ 317.631341][ T4863] usb 1-1: Dual-Role OTG device on HNP port [ 317.651254][ T4863] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 317.700580][ T4863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.949371][ T4863] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 76:e3:ff:fb:16:ec [ 318.022388][ T7591] loop9: detected capacity change from 0 to 8192 [ 318.118056][ T7591] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 318.126794][ T7591] FAT-fs (loop9): Filesystem has been set read-only [ 318.971150][ C0] net_ratelimit: 67 callbacks suppressed [ 319.537492][ T7616] netlink: 11 bytes leftover after parsing attributes in process `syz.9.737'. [ 319.566919][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.9.737'. [ 319.612603][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.9.737'. [ 319.931476][ T7628] tipc: Enabling of bearer rejected, failed to enable media [ 321.119539][ T7654] loop9: detected capacity change from 0 to 512 [ 321.160550][ T7654] EXT4-fs (loop9): Ignoring removed oldalloc option [ 321.183656][ T7654] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 321.219367][ T7654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e11c, mo2=0002] [ 321.236802][ T7654] EXT4-fs (loop9): orphan cleanup on readonly fs [ 321.254957][ T7654] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.743: attempt to clear invalid blocks 1024 len 1 [ 321.280159][ T7654] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.743: bg 0: block 361: padding at end of block bitmap is not set [ 321.302347][ T7654] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 321.317644][ T7654] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.743: invalid indirect mapped block 1811939328 (level 0) [ 321.339326][ T7654] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.743: invalid indirect mapped block 2185560079 (level 1) [ 321.534807][ T7654] EXT4-fs (loop9): 1 truncate cleaned up [ 321.591233][ T7654] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,noblock_validity,discard,oldalloc,nolazytime,errors=continue. Quota mode: none. [ 322.160862][ T7666] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.743: dx entry: limit 0 != root limit 125 [ 322.175773][ T7666] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.743: Corrupt directory, running e2fsck is recommended [ 322.539323][ T7682] loop7: detected capacity change from 0 to 512 [ 323.580893][ T7682] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 323.634299][ T7682] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.676993][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 324.069883][ T7714] loop6: detected capacity change from 0 to 1024 [ 324.561907][ C1] net_ratelimit: 51 callbacks suppressed [ 326.783682][ T7714] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 327.282563][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 327.354759][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 327.702066][ T7739] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 327.709302][ T7739] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 328.074269][ T7739] vhci_hcd vhci_hcd.0: Device attached [ 328.281361][ T4284] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 328.417211][ T7741] vhci_hcd: connection reset by peer [ 328.427084][ T4280] vhci_hcd: stop threads [ 328.441875][ T4280] vhci_hcd: release socket [ 328.478057][ T4280] vhci_hcd: disconnect device [ 329.611153][ C1] net_ratelimit: 44 callbacks suppressed [ 331.391136][ T7788] FAULT_INJECTION: forcing a failure. [ 331.391136][ T7788] name fail_futex, interval 1, probability 0, space 0, times 0 [ 331.404120][ T7788] CPU: 0 PID: 7788 Comm: syz.7.777 Not tainted syzkaller #0 [ 331.411535][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.421633][ T7788] Call Trace: [ 331.424947][ T7788] [ 331.427914][ T7788] dump_stack_lvl+0x188/0x250 [ 331.432642][ T7788] ? show_regs_print_info+0x20/0x20 [ 331.437878][ T7788] ? load_image+0x410/0x410 [ 331.442429][ T7788] ? __lock_acquire+0x7b50/0x7b50 [ 331.447505][ T7788] should_fail+0x383/0x4b0 [ 331.452007][ T7788] get_futex_key+0x1a1/0x12d0 [ 331.456732][ T7788] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 331.462759][ T7788] ? futex_wait_restart+0x250/0x250 [ 331.468027][ T7788] futex_wait_setup+0x4b/0x520 [ 331.472836][ T7788] ? __lock_acquire+0x7b50/0x7b50 [ 331.477919][ T7788] futex_wait+0x22f/0x680 [ 331.482304][ T7788] ? do_futex+0x12b0/0x12b0 [ 331.486962][ T7788] ? verify_lock_unused+0x140/0x140 [ 331.492223][ T7788] do_futex+0xdc2/0x12b0 [ 331.496514][ T7788] ? lockdep_softirqs_on+0x32a/0x5b0 [ 331.501861][ T7788] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 331.507902][ T7788] ? futex_exit_release+0x1c0/0x1c0 [ 331.513152][ T7788] ? __context_tracking_exit+0x4c/0x80 [ 331.518673][ T7788] __se_sys_futex+0x389/0x420 [ 331.523392][ T7788] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 331.529420][ T7788] ? __x64_sys_futex+0xf0/0xf0 [ 331.534237][ T7788] ? __x64_sys_futex+0x1d/0xf0 [ 331.539053][ T7788] do_syscall_64+0x4c/0xa0 [ 331.543513][ T7788] ? clear_bhb_loop+0x30/0x80 [ 331.548235][ T7788] ? clear_bhb_loop+0x30/0x80 [ 331.552959][ T7788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.558913][ T7788] RIP: 0033:0x7f1c059dc159 [ 331.563375][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.583019][ T7788] RSP: 002b:00007f1c03c130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.591482][ T7788] RAX: ffffffffffffffda RBX: 00007f1c05c64098 RCX: 00007f1c059dc159 [ 331.599496][ T7788] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1c05c64098 [ 331.607505][ T7788] RBP: 00007f1c05c64090 R08: 0000000000000000 R09: 0000000000000000 [ 331.615515][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.623525][ T7788] R13: 00007f1c05c64128 R14: 00007fffdce11e40 R15: 00007fffdce11f28 [ 331.631551][ T7788] [ 332.310599][ T7793] loop4: detected capacity change from 0 to 1024 [ 332.367528][ T7797] FAULT_INJECTION: forcing a failure. [ 332.367528][ T7797] name failslab, interval 1, probability 0, space 0, times 0 [ 332.442593][ T7793] EXT4-fs (loop4): Ignoring removed bh option [ 332.491207][ T7797] CPU: 0 PID: 7797 Comm: syz.7.781 Not tainted syzkaller #0 [ 332.498552][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.508639][ T7797] Call Trace: [ 332.511956][ T7797] [ 332.514917][ T7797] dump_stack_lvl+0x188/0x250 [ 332.519627][ T7797] ? show_regs_print_info+0x20/0x20 [ 332.524864][ T7797] ? load_image+0x410/0x410 [ 332.529406][ T7797] ? __lock_acquire+0x7b50/0x7b50 [ 332.534475][ T7797] should_fail+0x383/0x4b0 [ 332.538924][ T7797] should_failslab+0x5/0x20 [ 332.543457][ T7797] slab_pre_alloc_hook+0x51/0xc0 [ 332.548453][ T7797] ? sockfs_init_fs_context+0xa0/0xa0 [ 332.553860][ T7797] ? sock_alloc_inode+0x17/0xb0 [ 332.558739][ T7797] kmem_cache_alloc+0x3d/0x280 [ 332.563534][ T7797] ? sockfs_init_fs_context+0xa0/0xa0 [ 332.568941][ T7797] sock_alloc_inode+0x17/0xb0 [ 332.573653][ T7797] ? sockfs_init_fs_context+0xa0/0xa0 [ 332.579057][ T7797] new_inode_pseudo+0x5f/0x210 [ 332.583865][ T7797] __sock_create+0x128/0x910 [ 332.588499][ T7797] __sys_socketpair+0x1bd/0x540 [ 332.593393][ T7797] __x64_sys_socketpair+0x97/0xb0 [ 332.598445][ T7797] do_syscall_64+0x4c/0xa0 [ 332.602885][ T7797] ? clear_bhb_loop+0x30/0x80 [ 332.607590][ T7797] ? clear_bhb_loop+0x30/0x80 [ 332.612304][ T7797] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.618231][ T7797] RIP: 0033:0x7f1c059dc159 [ 332.622680][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.642313][ T7797] RSP: 002b:00007f1c03c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 332.650770][ T7797] RAX: ffffffffffffffda RBX: 00007f1c05c63fa0 RCX: 00007f1c059dc159 [ 332.658777][ T7797] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 332.666783][ T7797] RBP: 00007f1c05a7306b R08: 0000000000000000 R09: 0000000000000000 [ 332.674785][ T7797] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 332.682875][ T7797] R13: 00007f1c05c64038 R14: 00007f1c05c63fa0 R15: 00007fffdce11f28 [ 332.690890][ T7797] [ 332.906750][ T7793] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 333.531253][ T4284] vhci_hcd: vhci_device speed not set [ 334.731916][ C1] net_ratelimit: 55 callbacks suppressed [ 334.892945][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 334.993489][ T7825] FAULT_INJECTION: forcing a failure. [ 334.993489][ T7825] name failslab, interval 1, probability 0, space 0, times 0 [ 335.021604][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 335.029022][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 335.150029][ T7825] CPU: 1 PID: 7825 Comm: syz.7.788 Not tainted syzkaller #0 [ 335.157376][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.157410][ T7825] Call Trace: [ 335.157419][ T7825] [ 335.157429][ T7825] dump_stack_lvl+0x188/0x250 [ 335.157456][ T7825] ? show_regs_print_info+0x20/0x20 [ 335.172400][ T1111] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 335.174272][ T7825] ? load_image+0x410/0x410 [ 335.196247][ T7825] ? __might_sleep+0xf0/0xf0 [ 335.200876][ T7825] ? __lock_acquire+0x7b50/0x7b50 [ 335.205950][ T7825] should_fail+0x383/0x4b0 [ 335.210416][ T7825] should_failslab+0x5/0x20 [ 335.214959][ T7825] slab_pre_alloc_hook+0x51/0xc0 [ 335.219936][ T7825] __kmalloc+0x6b/0x340 [ 335.224123][ T7825] ? tomoyo_encode+0x28a/0x550 [ 335.228933][ T7825] tomoyo_encode+0x28a/0x550 [ 335.233601][ T7825] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 335.239337][ T7825] tomoyo_path_number_perm+0x251/0x6b0 [ 335.244823][ T7825] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 335.244856][ T7825] ? do_futex+0xdc2/0x12b0 [ 335.244933][ T7825] security_file_ioctl+0x6c/0xa0 [ 335.255115][ T7825] __se_sys_ioctl+0x48/0x170 [ 335.255153][ T7825] do_syscall_64+0x4c/0xa0 [ 335.269359][ T7825] ? clear_bhb_loop+0x30/0x80 [ 335.274126][ T7825] ? clear_bhb_loop+0x30/0x80 [ 335.278986][ T7825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.284925][ T7825] RIP: 0033:0x7f1c059dc159 [ 335.289375][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.309037][ T7825] RSP: 002b:00007f1c03c34028 EFLAGS: 00000246 [ 335.315138][ T7825] ORIG_RAX: 0000000000000010 [ 335.315168][ T7825] RAX: ffffffffffffffda RBX: 00007f1c05c63fa0 RCX: 00007f1c059dc159 [ 335.315203][ T7825] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000005 [ 335.315219][ T7825] RBP: 00007f1c05a7306b R08: 0000000000000000 R09: 0000000000000000 [ 335.343911][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.352115][ T7825] R13: 00007f1c05c64038 R14: 00007f1c05c63fa0 R15: 00007fffdce11f28 [ 335.360223][ T7825] [ 335.401201][ T7831] tipc: Enabling of bearer rejected, failed to enable media [ 335.434278][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 335.441204][ T1111] usb 9-1: device descriptor read/64, error -71 [ 335.483239][ T4188] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 335.572985][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 335.619949][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 335.682070][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 335.835702][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 335.846762][ T1111] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 335.871378][ T7825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.883295][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 336.320348][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 336.433269][ T4188] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 336.461374][ T1111] usb 9-1: device descriptor read/64, error -71 [ 336.767220][ T1111] usb usb9-port1: attempt power cycle [ 336.867533][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 336.970522][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 337.061511][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 337.131635][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 337.138404][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 337.261217][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 337.267992][ T4188] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 337.321174][ T1111] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 337.591197][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 337.597766][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 337.621554][ T1111] usb 9-1: device descriptor read/8, error -71 [ 337.659657][ T7871] Console: switching to colour VGA+ 80x25 [ 337.910587][ T7871] Console: switching to colour frame buffer device 128x48 [ 338.432070][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 338.654679][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 338.731322][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 338.911675][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 339.271336][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 339.292369][ T7889] tipc: Enabling of bearer rejected, failed to enable media [ 339.513786][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 339.635517][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 339.670954][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 339.762232][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 339.781424][ C1] net_ratelimit: 61 callbacks suppressed [ 339.812702][ T7897] device syzkaller0 entered promiscuous mode [ 339.888665][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 339.888687][ T26] audit: type=1804 audit(1789509259.978:52): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.804" name="/newroot/107/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=25828 res=1 errno=0 [ 339.929075][ T4188] EXT4-fs error: 49 callbacks suppressed [ 339.929091][ T4188] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 340.043822][ T4188] EXT4-fs: 49 callbacks suppressed [ 340.043841][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 340.096092][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 340.296898][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 340.326671][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 340.536740][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 340.551482][ T4188] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 340.693925][ T7914] fuse: Bad value for 'fd' [ 340.925897][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 340.961586][ T4188] EXT4-fs warning: 10 callbacks suppressed [ 340.963042][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 341.491673][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 341.589084][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 341.598934][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 341.744812][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 341.751729][ T4188] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 341.793760][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 341.800446][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 341.881546][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 341.956445][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.808'. [ 341.979457][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.010914][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 342.033750][ T4188] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /182/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 342.115728][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 342.134898][ T4188] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 342.236231][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 342.255996][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 342.332070][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 342.385289][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 342.452063][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 342.510539][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 342.574936][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 342.726094][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 342.787810][ T4188] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 343.560805][ T7954] tipc: Enabling of bearer rejected, failed to enable media [ 344.811161][ C0] net_ratelimit: 50 callbacks suppressed [ 344.873086][ T7986] fuse: Bad value for 'fd' [ 345.837329][ T7995] FAULT_INJECTION: forcing a failure. [ 345.837329][ T7995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 345.851793][ T7995] CPU: 0 PID: 7995 Comm: syz.8.822 Not tainted syzkaller #0 [ 345.859114][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.869186][ T7995] Call Trace: [ 345.872488][ T7995] [ 345.875453][ T7995] dump_stack_lvl+0x188/0x250 [ 345.880166][ T7995] ? show_regs_print_info+0x20/0x20 [ 345.885397][ T7995] ? load_image+0x410/0x410 [ 345.889946][ T7995] ? uncharge_page+0x490/0x490 [ 345.894744][ T7995] should_fail+0x383/0x4b0 [ 345.899191][ T7995] prepare_alloc_pages+0x1e3/0x5b0 [ 345.904339][ T7995] __alloc_pages+0x11b/0x480 [ 345.908960][ T7995] ? zone_statistics+0x170/0x170 [ 345.913934][ T7995] ? rcu_lock_acquire+0x30/0x30 [ 345.918825][ T7995] ? alloc_pages+0x452/0x560 [ 345.923444][ T7995] __get_free_pages+0x8/0x30 [ 345.928294][ T7995] __tlb_remove_page_size+0x1f2/0x3f0 [ 345.933704][ T7995] unmap_page_range+0xfcf/0x2410 [ 345.938702][ T7995] unmap_vmas+0x131/0x250 [ 345.938730][ T7995] ? unmap_page_range+0x2410/0x2410 [ 345.938749][ T7995] ? __mutex_lock_common+0x435/0x2400 [ 345.948814][ T7995] ? exit_mm_release+0x16/0x30 [ 345.958958][ T7995] exit_mmap+0x3b9/0x640 [ 345.963221][ T7995] ? vm_brk+0x20/0x20 [ 345.963256][ T7995] ? uprobe_clear_state+0x2f6/0x460 [ 345.963283][ T7995] __mmput+0x115/0x390 [ 345.963306][ T7995] exit_mm+0x632/0x7b0 [ 345.963326][ T7995] ? perf_pmu_migrate_context+0xb70/0xb70 [ 345.963355][ T7995] ? do_exit+0x2110/0x2110 [ 345.963373][ T7995] ? __ia32_sys_timer_delete+0x40/0x40 [ 345.963396][ T7995] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 345.972582][ T7995] ? tty_audit_exit+0x149/0x1f0 [ 345.972611][ T7995] do_exit+0x5b8/0x2110 [ 345.980752][ T7995] ? put_task_struct+0x80/0x80 [ 346.015562][ T7995] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.021587][ T7995] ? _raw_spin_lock_irq+0xb7/0xf0 [ 346.026649][ T7995] do_group_exit+0x12c/0x2f0 [ 346.031264][ T7995] ? lockdep_hardirqs_on+0x94/0x140 [ 346.036492][ T7995] get_signal+0x7eb/0x12e0 [ 346.040959][ T7995] arch_do_signal_or_restart+0xe6/0x12a0 [ 346.046670][ T7995] ? futex_exit_release+0x1c0/0x1c0 [ 346.051896][ T7995] ? get_sigframe_size+0x10/0x10 [ 346.051925][ T7995] ? __context_tracking_exit+0x4c/0x80 [ 346.062337][ T7995] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.062371][ T7995] ? exit_to_user_mode_loop+0x3b/0x130 [ 346.062394][ T7995] exit_to_user_mode_loop+0x9e/0x130 [ 346.062415][ T7995] exit_to_user_mode_prepare+0xee/0x180 [ 346.073884][ T7995] syscall_exit_to_user_mode+0x16/0x40 [ 346.073913][ T7995] do_syscall_64+0x58/0xa0 [ 346.084737][ T7995] ? clear_bhb_loop+0x30/0x80 [ 346.084761][ T7995] ? clear_bhb_loop+0x30/0x80 [ 346.094631][ T7995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.104025][ T7995] RIP: 0033:0x7f9c20185159 [ 346.104046][ T7995] Code: Unable to access opcode bytes at RIP 0x7f9c2018512f. [ 346.114372][ T7995] RSP: 002b:00007f9c1e3dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.114396][ T7995] RAX: fffffffffffffe00 RBX: 00007f9c2040cfa8 RCX: 00007f9c20185159 [ 346.114412][ T7995] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c2040cfa8 [ 346.114426][ T7995] RBP: 00007f9c2040cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 346.114438][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.114450][ T7995] R13: 00007f9c2040d038 R14: 00007ffd587a34d0 R15: 00007ffd587a35b8 [ 346.130278][ T7995] [ 347.568037][ T8010] loop6: detected capacity change from 0 to 512 [ 347.594947][ T8018] tipc: Enabling of bearer rejected, failed to enable media [ 347.769140][ T8010] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 347.830272][ T8010] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.990000][ T8010] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 348.092041][ T8010] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 348.175810][ T8010] EXT4-fs (loop6): This should not happen!! Data will be lost [ 348.175810][ T8010] [ 348.227214][ T8010] EXT4-fs (loop6): Total free blocks count 0 [ 348.227269][ T8010] EXT4-fs (loop6): Free/Dirty block details [ 348.227337][ T8010] EXT4-fs (loop6): free_blocks=65280 [ 348.267955][ T8010] EXT4-fs (loop6): dirty_blocks=32 [ 348.319758][ T8010] EXT4-fs (loop6): Block reservation details [ 348.342140][ T8010] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 348.456812][ T8041] loop7: detected capacity change from 0 to 512 [ 348.558241][ T8041] EXT4-fs (loop7): inline encryption not supported [ 348.598089][ T8041] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 348.687591][ T4388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.899842][ T4388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.410548][ T8041] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 349.602347][ T4388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.251514][ T4280] net_ratelimit: 71 callbacks suppressed [ 350.594904][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 351.912246][ T4388] tipc: Left network mode [ 351.930487][ T8092] loop6: detected capacity change from 0 to 128 [ 351.996828][ T8092] EXT4-fs (loop6): Test dummy encryption mode enabled [ 352.058479][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 352.069126][ T8092] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 352.103309][ T8092] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.251495][ T8102] tipc: Enabling of bearer rejected, failed to enable media [ 352.651269][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 352.712671][ T8115] overlayfs: missing 'lowerdir' [ 352.769996][ T8115] capability: warning: `syz.6.842' uses deprecated v2 capabilities in a way that may be insecure [ 352.807216][ T8117] Console: switching to colour VGA+ 80x25 [ 352.879351][ T8117] Console: switching to colour frame buffer device 128x48 [ 352.926762][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 353.167700][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.183989][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.234832][ T8034] device bridge_slave_0 entered promiscuous mode [ 353.299787][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.309741][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.322781][ T8034] device bridge_slave_1 entered promiscuous mode [ 354.121890][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.234831][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.444586][ T4388] device hsr_slave_0 left promiscuous mode [ 354.462826][ T4388] device hsr_slave_1 left promiscuous mode [ 354.523959][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.547487][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.578195][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.599017][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.647664][ T4388] device bridge_slave_1 left promiscuous mode [ 354.693966][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.730192][ T4388] device bridge_slave_0 left promiscuous mode [ 354.731671][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 354.744600][ T8152] loop9: detected capacity change from 0 to 128 [ 354.757027][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.839395][ T8152] EXT4-fs (loop9): Test dummy encryption mode enabled [ 354.886419][ T4388] device veth1_macvtap left promiscuous mode [ 354.893997][ T4388] device veth0_macvtap left promiscuous mode [ 354.906984][ T8152] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 354.913212][ T4388] device veth1_vlan left promiscuous mode [ 354.958539][ T4388] device veth0_vlan left promiscuous mode [ 354.989857][ T8152] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.377052][ T4388] bond2 (unregistering): Released all slaves [ 355.473398][ T4388] bond1 (unregistering): Released all slaves [ 355.541200][ T4331] net_ratelimit: 72 callbacks suppressed [ 356.496457][ T8166] Console: switching to colour VGA+ 80x25 [ 356.563582][ T8166] Console: switching to colour frame buffer device 128x48 [ 357.125739][ T4863] Bluetooth: hci2: command 0x0419 tx timeout [ 357.214246][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 357.648031][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 358.079849][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.177025][ T8184] FAULT_INJECTION: forcing a failure. [ 358.177025][ T8184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.192044][ T8184] CPU: 1 PID: 8184 Comm: syz.6.863 Not tainted syzkaller #0 [ 358.199374][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.209448][ T8184] Call Trace: [ 358.209500][ T8184] [ 358.209510][ T8184] dump_stack_lvl+0x188/0x250 [ 358.209540][ T8184] ? show_regs_print_info+0x20/0x20 [ 358.209566][ T8184] ? load_image+0x410/0x410 [ 358.209591][ T8184] ? __lock_acquire+0x7b50/0x7b50 [ 358.209617][ T8184] ? __vmalloc_node_range+0x2dd/0x8b0 [ 358.209640][ T8184] ? vzalloc+0x75/0x80 [ 358.226333][ T8184] should_fail+0x383/0x4b0 [ 358.249814][ T8184] prepare_alloc_pages+0x1e3/0x5b0 [ 358.254967][ T8184] __alloc_pages+0x11b/0x480 [ 358.254998][ T8184] ? zone_statistics+0x170/0x170 [ 358.255035][ T8184] ? alloc_pages+0x452/0x560 [ 358.255072][ T8184] __vmalloc_node_range+0x4b1/0x8b0 [ 358.255109][ T8184] ? vidtv_mux_init+0x200/0x1950 [ 358.255133][ T8184] vzalloc+0x75/0x80 [ 358.255157][ T8184] ? vidtv_mux_init+0x200/0x1950 [ 358.255180][ T8184] vidtv_mux_init+0x200/0x1950 [ 358.255203][ T8184] ? __mutex_lock_common+0x435/0x2400 [ 358.255235][ T8184] vidtv_start_feed+0x368/0x590 [ 358.255261][ T8184] ? vidtv_i2c_func+0x10/0x10 [ 358.255279][ T8184] ? vidtv_stop_feed+0x250/0x250 [ 358.255305][ T8184] ? _raw_spin_unlock_irq+0x1f/0x40 [ 358.294010][ T8184] ? lockdep_hardirqs_on+0x94/0x140 [ 358.324312][ T8184] dmx_ts_feed_start_filtering+0x11c/0x210 [ 358.330182][ T8184] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 358.336100][ T8184] dvb_dmxdev_filter_start+0x422/0x1060 [ 358.336137][ T8184] dvb_demux_do_ioctl+0x47e/0x530 [ 358.336163][ T8184] dvb_usercopy+0x191/0x2b0 [ 358.336185][ T8184] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 358.336207][ T8184] ? dvb_generic_ioctl+0xb0/0xb0 [ 358.336279][ T8184] ? dvb_demux_poll+0x210/0x210 [ 358.366679][ T8184] dvb_demux_ioctl+0x25/0x30 [ 358.371310][ T8184] __se_sys_ioctl+0xfa/0x170 [ 358.375933][ T8184] do_syscall_64+0x4c/0xa0 [ 358.380390][ T8184] ? clear_bhb_loop+0x30/0x80 [ 358.385191][ T8184] ? clear_bhb_loop+0x30/0x80 [ 358.389910][ T8184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.395841][ T8184] RIP: 0033:0x7ff190bef159 [ 358.400290][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.419946][ T8184] RSP: 002b:00007ff18ee47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.428404][ T8184] RAX: ffffffffffffffda RBX: 00007ff190e76fa0 RCX: 00007ff190bef159 [ 358.428425][ T8184] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003 [ 358.428441][ T8184] RBP: 00007ff190c8606b R08: 0000000000000000 R09: 0000000000000000 [ 358.428457][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.460402][ T8184] R13: 00007ff190e77038 R14: 00007ff190e76fa0 R15: 00007ffce6745a68 [ 358.468429][ T8184] [ 358.471506][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.521971][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.858407][ T4388] bond0 (unregistering): Released all slaves [ 359.677519][ T8034] team0: Port device team_slave_0 added [ 359.784731][ T8034] team0: Port device team_slave_1 added [ 360.091843][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 360.248639][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.284231][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.486858][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.667790][ C1] net_ratelimit: 51 callbacks suppressed [ 360.736685][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.770706][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.163721][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.560306][ T8234] loop9: detected capacity change from 0 to 512 [ 361.634144][ T8206] loop6: detected capacity change from 0 to 8192 [ 362.080348][ T8206] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 362.089144][ T8206] FAT-fs (loop6): Filesystem has been set read-only [ 362.220598][ T8234] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 362.242000][ T8034] device hsr_slave_0 entered promiscuous mode [ 362.331296][ T8234] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.351808][ T8034] device hsr_slave_1 entered promiscuous mode [ 362.435897][ T8234] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 362.458585][ T8234] EXT4-fs (loop9): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 362.471005][ T8234] EXT4-fs (loop9): This should not happen!! Data will be lost [ 362.471005][ T8234] [ 362.492574][ T8234] EXT4-fs (loop9): Total free blocks count 0 [ 362.498601][ T8234] EXT4-fs (loop9): Free/Dirty block details [ 362.581473][ T8234] EXT4-fs (loop9): free_blocks=65280 [ 362.597219][ T8234] EXT4-fs (loop9): dirty_blocks=32 [ 362.641668][ T8234] EXT4-fs (loop9): Block reservation details [ 362.679200][ T8234] EXT4-fs (loop9): i_reserved_data_blocks=32 [ 362.969717][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.7.881'. [ 362.978937][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.7.881'. [ 365.033932][ T8279] loop7: detected capacity change from 0 to 2048 [ 365.354618][ T8279] loop7: p1 < > p4 < > [ 365.359681][ T8279] loop7: partition table partially beyond EOD, truncated [ 365.575073][ T8279] loop7: p4 start 42180 is beyond EOD, truncated [ 365.731200][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 365.851143][ C1] net_ratelimit: 51 callbacks suppressed [ 366.184677][ T13] usb 7-1: no configurations [ 366.189353][ T13] usb 7-1: can't read configurations, error -22 [ 366.381404][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 367.116810][ T13] usb 7-1: no configurations [ 367.123224][ T13] usb 7-1: can't read configurations, error -22 [ 367.170865][ T13] usb usb7-port1: attempt power cycle [ 367.611357][ T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 367.751530][ T13] usb 7-1: no configurations [ 367.756290][ T13] usb 7-1: can't read configurations, error -22 [ 367.921327][ T13] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 368.011341][ T13] usb 7-1: device descriptor read/8, error -71 [ 368.131793][ T13] usb usb7-port1: unable to enumerate USB device [ 369.911863][ T8313] loop6: detected capacity change from 0 to 8192 [ 370.106834][ T8313] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 370.165425][ T8313] FAT-fs (loop6): Filesystem has been set read-only [ 370.901149][ T8320] net_ratelimit: 41 callbacks suppressed [ 370.901166][ T8320] syz_tun: mtu less than device minimum [ 371.297047][ T8341] loop6: detected capacity change from 0 to 1024 [ 372.212479][ T8341] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 372.269765][ T8341] EXT4-fs (loop6): barriers disabled [ 372.310541][ T8341] JBD2: no valid journal superblock found [ 372.389714][ T8341] EXT4-fs (loop6): error loading journal [ 372.744957][ T8348] device syzkaller0 entered promiscuous mode [ 373.049182][ T8353] fuse: Invalid rootmode [ 373.089053][ T8034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.174823][ T8361] device syzkaller0 entered promiscuous mode [ 373.192818][ T8366] loop9: detected capacity change from 0 to 512 [ 373.211912][ T8034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.280335][ T4388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.292285][ T8366] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #2: comm syz.9.908: missing EA_INODE flag [ 373.451598][ T8366] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.908: error while reading EA inode 2 err=-117 [ 373.476946][ T8034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.521772][ T8366] EXT4-fs (loop9): 1 orphan inode deleted [ 373.550526][ T8366] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 373.751661][ T8034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.872072][ T4388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.744316][ T4388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.024712][ T4388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.056641][ T8391] FAULT_INJECTION: forcing a failure. [ 376.056641][ T8391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 376.070524][ T8391] CPU: 1 PID: 8391 Comm: syz.6.913 Not tainted syzkaller #0 [ 376.077859][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.087959][ T8391] Call Trace: [ 376.091262][ T8391] [ 376.094216][ T8391] dump_stack_lvl+0x188/0x250 [ 376.098926][ T8391] ? show_regs_print_info+0x20/0x20 [ 376.104361][ T8391] ? load_image+0x410/0x410 [ 376.108901][ T8391] ? mark_lock+0x94/0x320 [ 376.113260][ T8391] should_fail+0x383/0x4b0 [ 376.117732][ T8391] prepare_alloc_pages+0x1e3/0x5b0 [ 376.122883][ T8391] __alloc_pages+0x11b/0x480 [ 376.127502][ T8391] ? zone_statistics+0x170/0x170 [ 376.132472][ T8391] ? rcu_lock_acquire+0x30/0x30 [ 376.137351][ T8391] ? alloc_pages+0x452/0x560 [ 376.141975][ T8391] __get_free_pages+0x8/0x30 [ 376.146589][ T8391] __tlb_remove_page_size+0x1f2/0x3f0 [ 376.151988][ T8391] unmap_page_range+0xfcf/0x2410 [ 376.156984][ T8391] unmap_vmas+0x131/0x250 [ 376.161336][ T8391] ? unmap_page_range+0x2410/0x2410 [ 376.166559][ T8391] ? __mutex_lock_common+0x435/0x2400 [ 376.171956][ T8391] ? exit_mm_release+0x16/0x30 [ 376.176758][ T8391] exit_mmap+0x3b9/0x640 [ 376.181029][ T8391] ? vm_brk+0x20/0x20 [ 376.185134][ T8391] ? uprobe_clear_state+0x2f6/0x460 [ 376.190361][ T8391] __mmput+0x115/0x390 [ 376.194455][ T8391] exit_mm+0x632/0x7b0 [ 376.198544][ T8391] ? perf_pmu_migrate_context+0xb70/0xb70 [ 376.204298][ T8391] ? do_exit+0x2110/0x2110 [ 376.208739][ T8391] ? __ia32_sys_timer_delete+0x40/0x40 [ 376.214220][ T8391] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 376.219707][ T8391] ? tty_audit_exit+0x149/0x1f0 [ 376.224586][ T8391] do_exit+0x5b8/0x2110 [ 376.224616][ T8391] ? put_task_struct+0x80/0x80 [ 376.224637][ T8391] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 376.224665][ T8391] ? _raw_spin_lock_irq+0xb7/0xf0 [ 376.224687][ T8391] do_group_exit+0x12c/0x2f0 [ 376.234267][ T8391] ? lockdep_hardirqs_on+0x94/0x140 [ 376.234300][ T8391] get_signal+0x7eb/0x12e0 [ 376.245328][ T8391] arch_do_signal_or_restart+0xe6/0x12a0 [ 376.255140][ T8391] ? dst_negative_advice+0x220/0x220 [ 376.255174][ T8391] ? futex_exit_release+0x1c0/0x1c0 [ 376.265243][ T8391] ? get_sigframe_size+0x10/0x10 [ 376.265272][ T8391] ? __context_tracking_exit+0x4c/0x80 [ 376.275765][ T8391] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 376.286183][ T8391] ? exit_to_user_mode_loop+0x3b/0x130 [ 376.286211][ T8391] exit_to_user_mode_loop+0x9e/0x130 [ 376.297655][ T8391] exit_to_user_mode_prepare+0xee/0x180 [ 376.308507][ T8391] syscall_exit_to_user_mode+0x16/0x40 [ 376.313986][ T8391] do_syscall_64+0x58/0xa0 [ 376.314011][ T8391] ? clear_bhb_loop+0x30/0x80 [ 376.323111][ T8391] ? clear_bhb_loop+0x30/0x80 [ 376.323139][ T8391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.333714][ T8391] RIP: 0033:0x7ff190bef159 [ 376.333734][ T8391] Code: Unable to access opcode bytes at RIP 0x7ff190bef12f. [ 376.333746][ T8391] RSP: 002b:00007ff18ee470e8 EFLAGS: 00000246 [ 376.345516][ T8391] ORIG_RAX: 00000000000000ca [ 376.345527][ T8391] RAX: fffffffffffffe00 RBX: 00007ff190e76fa8 RCX: 00007ff190bef159 [ 376.345545][ T8391] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff190e76fa8 [ 376.372244][ T8391] RBP: 00007ff190e76fa0 R08: 0000000000000000 R09: 0000000000000000 [ 376.380238][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.388230][ T8391] R13: 00007ff190e77038 R14: 00007ffce6745980 R15: 00007ffce6745a68 [ 376.396244][ T8391] [ 376.741125][ C1] net_ratelimit: 39 callbacks suppressed [ 376.802554][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.908825][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.937959][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.996085][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.087143][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.104230][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.154519][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.161651][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.226312][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.235223][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.243778][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.250853][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.333953][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.411275][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.420384][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.540460][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.777747][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.799601][ T8409] Console: switching to colour VGA+ 80x25 [ 377.808804][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.809957][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.813258][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.940819][ T8409] Console: switching to colour frame buffer device 128x48 [ 378.272495][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.299851][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.327689][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.494429][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.576375][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.107720][ T8034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.203064][ T8423] netlink: 'syz.6.921': attribute type 2 has an invalid length. [ 380.524994][ T4388] tipc: Left network mode [ 380.929197][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.939847][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.599550][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.740391][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.758892][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.945712][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.965920][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.016321][ T8034] device veth0_vlan entered promiscuous mode [ 382.035115][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.068764][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.213283][ T8034] device veth1_vlan entered promiscuous mode [ 382.342284][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.368656][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.440792][ T8034] device veth0_macvtap entered promiscuous mode [ 382.494092][ T8034] device veth1_macvtap entered promiscuous mode [ 382.712044][ C0] net_ratelimit: 43 callbacks suppressed [ 382.732160][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.771023][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.832642][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.902737][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.961765][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.037892][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.146665][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.233269][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.343468][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.407021][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.439284][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.510155][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.563970][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.630573][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.673167][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.725467][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.736154][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.803526][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.850934][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.914408][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.959618][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.978676][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.991052][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.024318][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.163127][ T8034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.175453][ T8034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.213938][ T8034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.251119][ T8034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.690170][ T8484] Console: switching to colour VGA+ 80x25 [ 384.760898][ T8484] Console: switching to colour frame buffer device 128x48 [ 384.808535][ T8488] loop7: detected capacity change from 0 to 1024 [ 384.923065][ T8488] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 385.060936][ T4388] device hsr_slave_0 left promiscuous mode [ 385.105170][ T4388] device hsr_slave_1 left promiscuous mode [ 385.158607][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.181232][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.192470][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.200058][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.021000][ T4388] device bridge_slave_1 left promiscuous mode [ 386.031462][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.063844][ T4388] device bridge_slave_0 left promiscuous mode [ 386.070511][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.457368][ T4388] device veth1_macvtap left promiscuous mode [ 386.467646][ T4388] device veth0_macvtap left promiscuous mode [ 386.512749][ T4388] device veth1_vlan left promiscuous mode [ 386.562005][ T4388] device veth0_vlan left promiscuous mode [ 387.931232][ C0] net_ratelimit: 96 callbacks suppressed [ 389.271960][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 389.302840][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 389.415241][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.579698][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.876530][ T4388] bond0 (unregistering): Released all slaves [ 390.790602][ T420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.828565][ T420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.905494][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.919249][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.087505][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.099737][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.107918][ T8538] binder: 8537:8538 unknown command 0 [ 391.113396][ T8538] binder: 8537:8538 ioctl c0306201 200000000480 returned -22 [ 392.990656][ T8576] net_ratelimit: 44 callbacks suppressed [ 392.990672][ T8576] syz_tun: mtu less than device minimum [ 393.064815][ T8579] Console: switching to colour VGA+ 80x25 [ 393.351657][ T8580] Console: switching to colour frame buffer device 128x48 [ 393.563647][ T8593] loop9: detected capacity change from 0 to 128 [ 393.586918][ T8591] Console: switching to colour VGA+ 80x25 [ 393.659575][ T8591] Console: switching to colour frame buffer device 128x48 [ 393.664117][ T8593] EXT4-fs (loop9): Test dummy encryption mode enabled [ 393.711151][ T8593] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 393.727664][ T8593] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.871610][ T8605] loop6: detected capacity change from 0 to 1024 [ 394.951445][ T4298] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 395.206753][ T4298] usb 10-1: device descriptor read/64, error -71 [ 395.274956][ T8605] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 395.801686][ T4298] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 398.331270][ C1] net_ratelimit: 38 callbacks suppressed [ 399.318732][ T8642] hub 8-0:1.0: USB hub found [ 399.324842][ T8642] hub 8-0:1.0: 1 port detected [ 399.349649][ T8642] netlink: 44 bytes leftover after parsing attributes in process `syz.8.968'. [ 400.479925][ T8657] Console: switching to colour VGA+ 80x25 [ 400.709717][ T8657] Console: switching to colour frame buffer device 128x48 [ 401.485104][ T8669] loop9: detected capacity change from 0 to 1024 [ 401.500096][ T8668] Console: switching to colour VGA+ 80x25 [ 401.655544][ T8668] Console: switching to colour frame buffer device 128x48 [ 401.874971][ T8669] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 403.499873][ C0] net_ratelimit: 37 callbacks suppressed [ 403.883324][ T8695] hub 8-0:1.0: USB hub found [ 403.890919][ T8695] hub 8-0:1.0: 1 port detected [ 403.911893][ T8695] netlink: 44 bytes leftover after parsing attributes in process `syz.6.981'. [ 405.139477][ T8703] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 405.195440][ T8704] loop9: detected capacity change from 0 to 2048 [ 405.414145][ T6514] loop9: p1 < > p4 < > [ 405.419260][ T6514] loop9: partition table partially beyond EOD, truncated [ 405.467034][ T8710] Console: switching to colour VGA+ 80x25 [ 405.522707][ T8710] Console: switching to colour frame buffer device 128x48 [ 405.554026][ T6514] loop9: p4 start 42180 is beyond EOD, truncated [ 405.596422][ T8716] hub 8-0:1.0: USB hub found [ 405.601950][ T8716] hub 8-0:1.0: 1 port detected [ 405.610547][ T8716] netlink: 44 bytes leftover after parsing attributes in process `syz.6.995'. [ 405.640342][ T8704] loop9: p1 < > p4 < > [ 405.651216][ T8704] loop9: partition table partially beyond EOD, truncated [ 405.697524][ T8704] loop9: p4 start 42180 is beyond EOD, truncated [ 405.782611][ T8719] FAULT_INJECTION: forcing a failure. [ 405.782611][ T8719] name failslab, interval 1, probability 0, space 0, times 0 [ 405.871794][ T8719] CPU: 0 PID: 8719 Comm: syz.2.986 Not tainted syzkaller #0 [ 405.879144][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.889223][ T8719] Call Trace: [ 405.892534][ T8719] [ 405.895488][ T8719] dump_stack_lvl+0x188/0x250 [ 405.895520][ T8719] ? show_regs_print_info+0x20/0x20 [ 405.905419][ T8719] ? load_image+0x410/0x410 [ 405.909957][ T8719] ? __might_sleep+0xf0/0xf0 [ 405.914575][ T8719] ? __lock_acquire+0x7b50/0x7b50 [ 405.919646][ T8719] should_fail+0x383/0x4b0 [ 405.924101][ T8719] should_failslab+0x5/0x20 [ 405.928646][ T8719] slab_pre_alloc_hook+0x51/0xc0 [ 405.933618][ T8719] __kmalloc_node+0x6d/0x3a0 [ 405.938244][ T8719] ? blk_mq_alloc_tag_set+0x4d9/0xf30 [ 405.943655][ T8719] blk_mq_alloc_tag_set+0x4d9/0xf30 [ 405.948895][ T8719] loop_add+0x257/0x890 [ 405.953089][ T8719] loop_control_ioctl+0x124/0x550 [ 405.953122][ T8719] ? xor_init+0x60/0x60 [ 405.953149][ T8719] ? bpf_lsm_file_ioctl+0x5/0x10 [ 405.953171][ T8719] ? security_file_ioctl+0x7c/0xa0 [ 405.953195][ T8719] ? xor_init+0x60/0x60 [ 405.953219][ T8719] __se_sys_ioctl+0xfa/0x170 [ 405.953244][ T8719] do_syscall_64+0x4c/0xa0 [ 405.967369][ T8719] ? clear_bhb_loop+0x30/0x80 [ 405.990398][ T8719] ? clear_bhb_loop+0x30/0x80 [ 405.995119][ T8719] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.001043][ T8719] RIP: 0033:0x7fbbc2925159 [ 406.005486][ T8719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.005508][ T8719] RSP: 002b:00007fbbc0b7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.005535][ T8719] RAX: ffffffffffffffda RBX: 00007fbbc2bacfa0 RCX: 00007fbbc2925159 [ 406.005551][ T8719] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 406.005564][ T8719] RBP: 00007fbbc29bc06b R08: 0000000000000000 R09: 0000000000000000 [ 406.005578][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.034456][ T8719] R13: 00007fbbc2bad038 R14: 00007fbbc2bacfa0 R15: 00007ffcb67e8fc8 [ 406.034492][ T8719] [ 406.251202][ T4192] Bluetooth: hci3: command 0x0406 tx timeout [ 406.447327][ T6514] udevd[6514]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 406.539112][ T8737] bridge0: port 3(ip6gretap0) entered blocking state [ 406.621319][ T8737] bridge0: port 3(ip6gretap0) entered disabled state [ 406.677106][ T8737] device ip6gretap0 entered promiscuous mode [ 407.157646][ T8744] loop7: detected capacity change from 0 to 1024 [ 407.425549][ T8737] bridge0: port 3(ip6gretap0) entered blocking state [ 407.433179][ T8737] bridge0: port 3(ip6gretap0) entered forwarding state [ 407.553667][ T6514] udevd[6514]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 407.603599][ T8744] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 407.688594][ T8752] device-mapper: ioctl: Empty message received. [ 407.836947][ T6514] udevd[6514]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 408.052495][ T8761] binder_alloc: 8759: binder_alloc_buf, no vma [ 409.060881][ C1] net_ratelimit: 45 callbacks suppressed [ 410.657434][ T8778] Console: switching to colour VGA+ 80x25 [ 410.727822][ T8778] Console: switching to colour frame buffer device 128x48 [ 413.229200][ T8820] overlayfs: failed to resolve './bus': -2 [ 413.630883][ T8827] device syzkaller0 entered promiscuous mode [ 413.672060][ T8827] tipc: Started in network mode [ 413.677003][ T8827] tipc: Node identity 8e7b39191332, cluster identity 4711 [ 413.751301][ T8827] tipc: Enabled bearer , priority 0 [ 413.911682][ T8831] tipc: Resetting bearer [ 413.938502][ T8826] tipc: Resetting bearer [ 414.071984][ T8826] tipc: Disabling bearer [ 414.251105][ C1] net_ratelimit: 56 callbacks suppressed [ 414.838264][ T8856] loop6: detected capacity change from 0 to 512 [ 415.122272][ T8856] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 415.152288][ T8856] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.752353][ T8870] overlayfs: failed to resolve './bus': -2 [ 418.308260][ T8912] loop2: detected capacity change from 0 to 128 [ 420.011123][ C0] net_ratelimit: 64 callbacks suppressed [ 420.772269][ T8941] Console: switching to colour VGA+ 80x25 [ 420.843378][ T8941] Console: switching to colour frame buffer device 128x48 [ 420.923490][ T26] audit: type=1326 audit(1789509341.018:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.079740][ T8950] loop2: detected capacity change from 0 to 512 [ 421.121135][ T26] audit: type=1326 audit(1789509341.028:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.191013][ T8950] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 421.196352][ T26] audit: type=1326 audit(1789509341.068:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.261316][ T26] audit: type=1326 audit(1789509341.078:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.285374][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.293758][ T26] audit: type=1326 audit(1789509341.078:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.317783][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.319241][ T26] audit: type=1326 audit(1789509341.078:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.348773][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.359512][ T8950] EXT4-fs (loop2): 1 truncate cleaned up [ 421.382180][ T8950] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 421.431216][ T26] audit: type=1326 audit(1789509341.078:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.649111][ T26] audit: type=1326 audit(1789509341.078:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.677667][ T26] audit: type=1326 audit(1789509341.078:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.6.1040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff190bef159 code=0x7ffc0000 [ 421.701763][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.845447][ T8980] fuse: Unknown parameter 'user_i00000000000000000000' [ 424.683399][ T26] audit: type=1326 audit(1789509344.778:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8995 comm="syz.2.1051" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc2925159 code=0x0 [ 425.291106][ C0] net_ratelimit: 42 callbacks suppressed [ 425.309818][ T8987] chnl_net:caif_netlink_parms(): no params data found [ 426.702999][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 427.798046][ T9028] loop6: detected capacity change from 0 to 512 [ 428.731439][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 429.007230][ T26] audit: type=1800 audit(1789509349.098:63): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1060" name="qw_sign" dev="configfs" ino=47783 res=0 errno=0 [ 429.565779][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.636416][ T9041] loop2: detected capacity change from 0 to 128 [ 429.665273][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.861342][ T9031] fuse: Unknown parameter 'user_id00000000000000000000' [ 429.872447][ T9043] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 429.938945][ T9043] overlayfs: missing 'lowerdir' [ 430.311369][ T8987] device bridge_slave_0 entered promiscuous mode [ 430.424178][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.460721][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.499888][ T8987] device bridge_slave_1 entered promiscuous mode [ 430.712014][ T9028] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 430.731107][ C1] net_ratelimit: 31 callbacks suppressed [ 430.928102][ T9052] mmap: syz.8.1065 (9052) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 431.032984][ T4298] Bluetooth: hci4: command 0x040f tx timeout [ 431.049298][ T9028] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.546354][ T8987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.432021][ T8987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.679201][ T8987] team0: Port device team_slave_0 added [ 432.738456][ T8987] team0: Port device team_slave_1 added [ 432.750528][ T9084] FAULT_INJECTION: forcing a failure. [ 432.750528][ T9084] name failslab, interval 1, probability 0, space 0, times 0 [ 432.871817][ T9084] CPU: 0 PID: 9084 Comm: syz.9.1071 Not tainted syzkaller #0 [ 432.879267][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.889358][ T9084] Call Trace: [ 432.892670][ T9084] [ 432.895626][ T9084] dump_stack_lvl+0x188/0x250 [ 432.900346][ T9084] ? show_regs_print_info+0x20/0x20 [ 432.905591][ T9084] ? load_image+0x410/0x410 [ 432.910130][ T9084] ? __might_sleep+0xf0/0xf0 [ 432.914764][ T9084] ? __lock_acquire+0x7b50/0x7b50 [ 432.919827][ T9084] ? verify_lock_unused+0x140/0x140 [ 432.925063][ T9084] should_fail+0x383/0x4b0 [ 432.929520][ T9084] should_failslab+0x5/0x20 [ 432.934058][ T9084] slab_pre_alloc_hook+0x51/0xc0 [ 432.939031][ T9084] ? __kernfs_new_node+0xa8/0x6b0 [ 432.944098][ T9084] __kmalloc_track_caller+0x69/0x330 [ 432.949421][ T9084] ? __kernfs_new_node+0xa8/0x6b0 [ 432.954492][ T9084] kstrdup_const+0x51/0x90 [ 432.958946][ T9084] __kernfs_new_node+0xa8/0x6b0 [ 432.963833][ T9084] ? widen_string+0x3b/0x320 [ 432.968463][ T9084] ? kernfs_new_node+0x250/0x250 [ 432.973442][ T9084] ? snprintf+0xe5/0x140 [ 432.977727][ T9084] kernfs_new_node+0x148/0x250 [ 432.982532][ T9084] __kernfs_create_file+0x47/0x2e0 [ 432.987697][ T9084] cgroup_addrm_files+0xac3/0x1020 [ 432.992866][ T9084] ? rcu_lock_release+0x20/0x20 [ 432.997750][ T9084] ? vfs_mkdir+0x386/0x570 [ 433.002202][ T9084] ? __x64_sys_mkdirat+0x85/0x90 [ 433.007177][ T9084] ? do_syscall_64+0x4c/0xa0 [ 433.011800][ T9084] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 433.017911][ T9084] ? mark_lock+0x94/0x320 [ 433.022304][ T9084] ? __local_bh_enable_ip+0x136/0x1c0 [ 433.027708][ T9084] ? lockdep_hardirqs_on+0x94/0x140 [ 433.032950][ T9084] css_populate_dir+0x155/0x350 [ 433.037840][ T9084] cgroup_apply_control_enable+0x641/0xb00 [ 433.043700][ T9084] cgroup_mkdir+0xcbd/0xeb0 [ 433.048251][ T9084] ? css_task_iter_end+0x280/0x280 [ 433.053405][ T9084] ? do_raw_spin_unlock+0x11d/0x230 [ 433.058643][ T9084] ? kernfs_iop_permission+0x22d/0x310 [ 433.064136][ T9084] ? css_task_iter_end+0x280/0x280 [ 433.069291][ T9084] kernfs_iop_mkdir+0x23d/0x3d0 [ 433.074188][ T9084] vfs_mkdir+0x386/0x570 [ 433.078475][ T9084] do_mkdirat+0x1dd/0x5c0 [ 433.082841][ T9084] ? vfs_mkdir+0x570/0x570 [ 433.087311][ T9084] __x64_sys_mkdirat+0x85/0x90 [ 433.092128][ T9084] do_syscall_64+0x4c/0xa0 [ 433.096573][ T9084] ? clear_bhb_loop+0x30/0x80 [ 433.101279][ T9084] ? clear_bhb_loop+0x30/0x80 [ 433.105991][ T9084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 433.111916][ T9084] RIP: 0033:0x7fc2bfef0159 [ 433.116357][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.136000][ T9084] RSP: 002b:00007fc2be148028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 433.144453][ T9084] RAX: ffffffffffffffda RBX: 00007fc2c0177fa0 RCX: 00007fc2bfef0159 [ 433.152464][ T9084] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 433.160472][ T9084] RBP: 00007fc2bff8706b R08: 0000000000000000 R09: 0000000000000000 [ 433.168480][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.176482][ T9084] R13: 00007fc2c0178038 R14: 00007fc2c0177fa0 R15: 00007ffdbcc3c878 [ 433.184502][ T9084] [ 433.199150][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 433.431429][ T9084] cgroup: cgroup_addrm_files: failed to add throttle.read_iops_device, err=-12 [ 433.782082][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.880721][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.997371][ T8987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.044981][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.071433][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.186876][ T8987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.578875][ T9100] fuse: Unknown parameter 'user_id00000000000000000000' [ 435.204763][ T8987] device hsr_slave_0 entered promiscuous mode [ 435.321732][ T8987] device hsr_slave_1 entered promiscuous mode [ 435.347894][ T8987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.371509][ T8987] Cannot create hsr debugfs directory [ 435.771129][ C0] net_ratelimit: 44 callbacks suppressed [ 436.695735][ T9121] netlink: set zone limit has 8 unknown bytes [ 437.419690][ T4388] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.511377][ T4388] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.947502][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.203338][ T4388] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.479629][ T9174] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 440.534585][ T4388] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.811226][ C1] net_ratelimit: 40 callbacks suppressed [ 442.912804][ T4388] tipc: Left network mode [ 445.851170][ C0] net_ratelimit: 24 callbacks suppressed [ 447.238655][ T9273] FAULT_INJECTION: forcing a failure. [ 447.238655][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 447.920363][ T9273] CPU: 1 PID: 9273 Comm: syz.6.1113 Not tainted syzkaller #0 [ 447.927835][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.937943][ T9273] Call Trace: [ 447.941252][ T9273] [ 447.944244][ T9273] dump_stack_lvl+0x188/0x250 [ 447.948962][ T9273] ? show_regs_print_info+0x20/0x20 [ 447.954189][ T9273] ? load_image+0x410/0x410 [ 447.958738][ T9273] ? __might_sleep+0xf0/0xf0 [ 447.963359][ T9273] ? __lock_acquire+0x7b50/0x7b50 [ 447.968416][ T9273] ? verify_lock_unused+0x140/0x140 [ 447.973653][ T9273] should_fail+0x383/0x4b0 [ 447.978108][ T9273] should_failslab+0x5/0x20 [ 447.982639][ T9273] slab_pre_alloc_hook+0x51/0xc0 [ 447.987609][ T9273] ? __kernfs_new_node+0xa8/0x6b0 [ 447.992667][ T9273] __kmalloc_track_caller+0x69/0x330 [ 447.997979][ T9273] ? __kernfs_new_node+0xa8/0x6b0 [ 448.003045][ T9273] kstrdup_const+0x51/0x90 [ 448.007495][ T9273] __kernfs_new_node+0xa8/0x6b0 [ 448.012382][ T9273] ? widen_string+0x3b/0x320 [ 448.017015][ T9273] ? kernfs_new_node+0x250/0x250 [ 448.022002][ T9273] ? snprintf+0xe5/0x140 [ 448.026325][ T9273] kernfs_new_node+0x148/0x250 [ 448.031131][ T9273] __kernfs_create_file+0x47/0x2e0 [ 448.036286][ T9273] cgroup_addrm_files+0xac3/0x1020 [ 448.041447][ T9273] ? rcu_lock_release+0x20/0x20 [ 448.046333][ T9273] ? vfs_mkdir+0x386/0x570 [ 448.050777][ T9273] ? __x64_sys_mkdirat+0x85/0x90 [ 448.055742][ T9273] ? do_syscall_64+0x4c/0xa0 [ 448.060390][ T9273] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.066492][ T9273] ? mark_lock+0x94/0x320 [ 448.070878][ T9273] ? __local_bh_enable_ip+0x136/0x1c0 [ 448.076283][ T9273] ? lockdep_hardirqs_on+0x94/0x140 [ 448.081519][ T9273] css_populate_dir+0x155/0x350 [ 448.086407][ T9273] cgroup_apply_control_enable+0x641/0xb00 [ 448.092259][ T9273] cgroup_mkdir+0xcbd/0xeb0 [ 448.096816][ T9273] ? css_task_iter_end+0x280/0x280 [ 448.101973][ T9273] ? do_raw_spin_unlock+0x11d/0x230 [ 448.107214][ T9273] ? kernfs_iop_permission+0x22d/0x310 [ 448.112702][ T9273] ? css_task_iter_end+0x280/0x280 [ 448.117840][ T9273] kernfs_iop_mkdir+0x23d/0x3d0 [ 448.122733][ T9273] vfs_mkdir+0x386/0x570 [ 448.127029][ T9273] do_mkdirat+0x1dd/0x5c0 [ 448.131419][ T9273] ? vfs_mkdir+0x570/0x570 [ 448.135879][ T9273] __x64_sys_mkdirat+0x85/0x90 [ 448.140700][ T9273] do_syscall_64+0x4c/0xa0 [ 448.145150][ T9273] ? clear_bhb_loop+0x30/0x80 [ 448.149859][ T9273] ? clear_bhb_loop+0x30/0x80 [ 448.154573][ T9273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.160504][ T9273] RIP: 0033:0x7ff190bef159 [ 448.164950][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.184581][ T9273] RSP: 002b:00007ff18ee47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 448.193024][ T9273] RAX: ffffffffffffffda RBX: 00007ff190e76fa0 RCX: 00007ff190bef159 [ 448.201029][ T9273] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 448.209046][ T9273] RBP: 00007ff190c8606b R08: 0000000000000000 R09: 0000000000000000 [ 448.217051][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.225071][ T9273] R13: 00007ff190e77038 R14: 00007ff190e76fa0 R15: 00007ffce6745a68 [ 448.233167][ T9273] [ 448.373076][ T9273] cgroup: cgroup_addrm_files: failed to add throttle.read_iops_device, err=-12 [ 448.617602][ T9284] Console: switching to colour VGA+ 80x25 [ 448.687514][ T9284] Console: switching to colour frame buffer device 128x48 [ 449.337255][ T9291] loop9: detected capacity change from 0 to 1024 [ 449.490826][ T9291] EXT4-fs (loop9): Ignoring removed bh option [ 449.640673][ T9294] netlink: 'syz.8.1118': attribute type 1 has an invalid length. [ 449.691692][ T9291] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 449.714266][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.916826][ T9291] EXT4-fs error (device loop9): ext4_find_dest_de:2117: inode #12: block 7: comm syz.9.1119: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 449.965412][ T9291] EXT4-fs (loop9): Remounting filesystem read-only [ 450.192761][ T9294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.193546][ T7052] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /98/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 450.321700][ T9299] device gretap1 entered promiscuous mode [ 450.327905][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 450.341787][ T7052] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /98/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 450.381531][ T9299] bond1: (slave gretap1): making interface the new active one [ 450.411640][ T9299] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 450.412253][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 450.427107][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 450.448309][ T7052] EXT4-fs error (device loop9): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 450.521854][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 450.528510][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 450.543831][ T7052] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /98/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 450.566530][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 450.586029][ T7052] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /98/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 450.716446][ T4388] device hsr_slave_0 left promiscuous mode [ 450.755408][ T4388] device hsr_slave_1 left promiscuous mode [ 450.778836][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.811487][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.838730][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.864567][ C0] net_ratelimit: 32 callbacks suppressed [ 450.868569][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.893593][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 450.900372][ T7052] EXT4-fs error (device loop9): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 450.923777][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 450.930313][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.006710][ T7052] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /98/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 451.028719][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.109048][ T4388] device bridge_slave_1 left promiscuous mode [ 451.138788][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.165719][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 451.193670][ T7052] EXT4-fs error (device loop9): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /98/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 451.225734][ T4388] device bridge_slave_0 left promiscuous mode [ 451.235181][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.293972][ T4388] device veth1_macvtap left promiscuous mode [ 451.300034][ T4388] device veth0_macvtap left promiscuous mode [ 451.317824][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 451.344251][ T7052] EXT4-fs error (device loop9): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 451.373842][ T4388] device veth1_vlan left promiscuous mode [ 451.394982][ T4388] device veth0_vlan left promiscuous mode [ 451.430584][ T7052] EXT4-fs (loop9): Remounting filesystem read-only [ 451.440547][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.473350][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.489319][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.506067][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.537528][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.567935][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.608471][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 451.640242][ T7052] EXT4-fs warning (device loop9): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 452.119135][ T4388] team0 (unregistering): Port device team_slave_1 removed [ 452.148658][ T4388] team0 (unregistering): Port device team_slave_0 removed [ 452.179756][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.210967][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.404494][ T4388] bond0 (unregistering): Released all slaves [ 453.035785][ T8987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.121712][ T8987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.266189][ T8987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.304418][ T8987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.087073][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.103685][ T9330] Console: switching to colour VGA+ 80x25 [ 454.173584][ T9330] Console: switching to colour frame buffer device 128x48 [ 454.274614][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.301593][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.382040][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.019204][ T4229] Bluetooth: hci0: command 0x1003 tx timeout [ 455.056475][ T9338] Bluetooth: hci0: sending frame failed (-49) [ 455.131412][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.151648][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.206787][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.213968][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.299050][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 455.361914][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.533593][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.540753][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.630617][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 455.682235][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 455.915752][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 455.944646][ T4213] net_ratelimit: 38 callbacks suppressed [ 455.969584][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 455.990124][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 455.999299][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.027695][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.038208][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.491159][ T4229] Bluetooth: hci3: command 0x0409 tx timeout [ 456.836291][ T8987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.877939][ T8987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.924991][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 456.938579][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.966806][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.007237][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.062038][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.141295][ T4229] Bluetooth: hci0: command 0x1001 tx timeout [ 457.148514][ T9338] Bluetooth: hci0: sending frame failed (-49) [ 458.571269][ T4192] Bluetooth: hci3: command 0x041b tx timeout [ 458.700993][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.711738][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.882735][ T8987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.091503][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.101304][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 459.211437][ T4262] Bluetooth: hci0: command 0x1009 tx timeout [ 459.257403][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 459.288598][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 459.338355][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 459.376726][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 459.409166][ T9336] chnl_net:caif_netlink_parms(): no params data found [ 459.485955][ T8987] device veth0_vlan entered promiscuous mode [ 459.520886][ T8987] device veth1_vlan entered promiscuous mode [ 459.849541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 459.866546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.263897][ T8987] device veth0_macvtap entered promiscuous mode [ 460.354635][ T8987] device veth1_macvtap entered promiscuous mode [ 460.597034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.606154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.616258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.628674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.651458][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 460.703831][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.755589][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.803267][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.852252][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.862259][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.873536][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.885168][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.893821][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.909806][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.919906][ T9336] device bridge_slave_0 entered promiscuous mode [ 461.048043][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.056213][ C1] net_ratelimit: 36 callbacks suppressed [ 461.316641][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.504617][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.546332][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.619300][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.672318][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.682241][ T8987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.692710][ T8987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.704048][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.712893][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.719986][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.774324][ T9336] device bridge_slave_1 entered promiscuous mode [ 461.834028][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.847948][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.978119][ T8987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.988379][ T8987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.997834][ T8987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.006712][ T8987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.395118][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.453010][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.472839][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1143'. [ 462.731805][ T4192] Bluetooth: hci3: command 0x0419 tx timeout [ 462.820164][ T9336] team0: Port device team_slave_0 added [ 462.853500][ T9336] team0: Port device team_slave_1 added [ 462.944688][ T9429] device syzkaller0 entered promiscuous mode [ 463.060698][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.126906][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.197757][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.258468][ T9440] hub 8-0:1.0: USB hub found [ 463.263513][ T9440] hub 8-0:1.0: 1 port detected [ 463.282926][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.290001][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.418323][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.611992][ T9440] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1145'. [ 463.785873][ T9447] rxrpc: Assertion failed - 5(0x5) == 11(0xb) is false [ 463.829885][ T9447] ------------[ cut here ]------------ [ 463.883283][ T9447] kernel BUG at net/rxrpc/call_object.c:689! [ 463.899164][ T4388] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.909740][ T9447] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 463.915861][ T9447] CPU: 1 PID: 9447 Comm: syz.2.1147 Not tainted syzkaller #0 [ 463.923265][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.928585][ T4388] kobject: 'rx-0' (ffff888024615350): kobject_cleanup, parent ffff88802572e650 [ 463.933343][ T9447] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 463.933376][ T9447] Code: e8 36 3d 74 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 80 9c 34 8b 4c 89 f6 4c 89 f2 48 c7 c1 00 9d 34 8b e8 a1 ba b1 00 <0f> 0b e8 0a 3d 74 f8 48 c7 c7 60 9d 34 8b e8 8e ba b1 00 0f 0b 66 [ 463.967755][ T9447] RSP: 0018:ffffc9000311f7d8 EFLAGS: 00010246 [ 463.973866][ T9447] RAX: 0000000000000034 RBX: ffff888050ab4a80 RCX: cc668ef5cce5c100 [ 463.981873][ T9447] RDX: ffffc90010c11000 RSI: 00000000000044d6 RDI: 00000000000044d7 [ 463.985765][ T4388] kobject: 'rx-0' (ffff888024615350): auto cleanup kobject_del [ 463.989874][ T9447] RBP: ffff888050ab4a80 R08: ffffffff901f1277 R09: 1ffffffff203e24e [ 464.005412][ T9447] R10: dffffc0000000000 R11: fffffbfff203e24f R12: ffff888050ab51d8 [ 464.013452][ T9447] R13: 0000000000000012 R14: 0000000000000005 R15: dffffc0000000000 [ 464.021466][ T9447] FS: 00007fbbc0b7d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 464.030462][ T9447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.037079][ T9447] CR2: 0000200000092030 CR3: 000000007874b000 CR4: 00000000003506e0 [ 464.045187][ T9447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.051193][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88805eacc198 is addr:fe80::38f5:9aff:febf:5ae1 for cmd:2 at entry:ffff88802afd6980 [ 464.053188][ T9447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.076008][ T9447] Call Trace: [ 464.079315][ T9447] [ 464.079399][ T4388] kernfs rps_cpus: removing [ 464.082281][ T9447] rxrpc_service_prealloc_one+0xa1a/0xef0 [ 464.082314][ T9447] ? rxrpc_user_charge_accept+0xb4/0xe0 [ 464.086903][ T4388] kernfs rps_flow_cnt: removing [ 464.092548][ T9447] rxrpc_user_charge_accept+0xb4/0xe0 [ 464.092577][ T9447] rxrpc_do_sendmsg+0x7c3/0x10c0 [ 464.113291][ T9447] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 464.119321][ T9447] ? rcu_lock_release+0x20/0x20 [ 464.124227][ T9447] ? __local_bh_enable_ip+0x136/0x1c0 [ 464.129639][ T9447] ? _local_bh_enable+0xa0/0xa0 [ 464.134526][ T9447] ? rxrpc_sendmsg+0x36b/0x890 [ 464.139323][ T9447] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 464.143048][ T4388] kobject: 'rx-0' (ffff888024615350): auto cleanup 'remove' event [ 464.144775][ T9447] ? rxrpc_getsockopt+0x150/0x150 [ 464.157621][ T9447] ____sys_sendmsg+0x5be/0x8f0 [ 464.162423][ T9447] ? __sys_sendmsg_sock+0x30/0x30 [ 464.167632][ T9447] ? import_iovec+0x6f/0xa0 [ 464.172177][ T9447] ___sys_sendmsg+0x236/0x2e0 [ 464.176916][ T9447] ? __sys_sendmsg+0x290/0x290 [ 464.181737][ T9447] __se_sys_sendmsg+0x1b7/0x2a0 [ 464.186623][ T9447] ? __x64_sys_sendmsg+0x80/0x80 [ 464.191635][ T9447] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 464.197668][ T9447] ? lockdep_hardirqs_on+0x94/0x140 [ 464.202911][ T9447] do_syscall_64+0x4c/0xa0 [ 464.207359][ T9447] ? clear_bhb_loop+0x30/0x80 [ 464.212065][ T4388] kobject: 'rx-0' (ffff888024615350): kobject_uevent_env [ 464.212068][ T9447] ? clear_bhb_loop+0x30/0x80 [ 464.219156][ T4388] kobject: 'rx-0' (ffff888024615350): kobject_uevent_env: uevent_suppress caused the event to drop! [ 464.223806][ T9447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 464.240483][ T9447] RIP: 0033:0x7fbbc2925159 [ 464.244944][ T9447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.264579][ T9447] RSP: 002b:00007fbbc0b7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.273025][ T9447] RAX: ffffffffffffffda RBX: 00007fbbc2bacfa0 RCX: 00007fbbc2925159 [ 464.281029][ T9447] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 464.289034][ T9447] RBP: 00007fbbc29bc06b R08: 0000000000000000 R09: 0000000000000000 [ 464.297037][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.305051][ T9447] R13: 00007fbbc2bad038 R14: 00007fbbc2bacfa0 R15: 00007ffcb67e8fc8 [ 464.309729][ T4388] kernfs rx-0: removing [ 464.313059][ T9447] [ 464.313080][ T9447] Modules linked in: [ 464.335202][ C1] virtqueue callback for ffff88802355f000 (ffffffff85491a80) [ 464.342958][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88807800dc18 is addr:fe80::6246:6d59:1a2e:9671 for cmd:0 at entry:ffff888061c77080 [ 464.346309][ T4388] kobject: 'rx-0' (ffff888024615350): calling ktype release [ 464.360174][ C1] No more buffers in queue [ 464.365050][ C1] virtqueue callback for ffff88802355f000 (ffffffff85491a80) [ 464.376930][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 464.382811][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 464.388665][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 464.394525][ C1] No more buffers in queue [ 464.398988][ C1] tcp_in_window: START [ 464.401181][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888074f40c98 is addr:fe80::5425:17ff:fe97:62e9 for cmd:2 at entry:ffff888061b11b80 [ 464.403094][ C1] tcp_in_window: [ 464.417798][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.430607][ C1] tcp_in_window: sender end=1024598110 maxend=1026186846 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.445337][ C1] tcp_in_window: [ 464.445355][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.458178][ C1] tcp_in_window: sender end=1024598110 maxend=1026186846 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.472913][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 464.478248][ C1] tcp_in_window: res=1 sender end=1024598111 maxend=1026186846 maxwin=3144576 receiver end=3714278281 maxend=3717422857 maxwin=1588736 [ 464.488766][ T4388] kobject: 'rx-0': free name [ 464.492110][ C1] tcp_conntracks: [ 464.492121][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 464.492154][ C1] tcp_in_window: START [ 464.492163][ C1] tcp_in_window: [ 464.492170][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.492197][ C1] tcp_in_window: sender end=1024598111 maxend=1026186846 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.537520][ C1] tcp_in_window: [ 464.537538][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.537663][ T4388] kernfs limit: removing [ 464.541221][ C1] tcp_in_window: sender end=1024598111 maxend=1026186846 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.541252][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 464.541268][ C1] tcp_in_window: res=1 sender end=1024598111 maxend=1026186846 maxwin=3144576 receiver end=3714278281 maxend=3717422857 maxwin=1588736 [ 464.541295][ C1] tcp_conntracks: [ 464.541303][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 464.597842][ C1] tcp_in_window: START [ 464.601962][ C1] tcp_in_window: [ 464.601977][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.614788][ C1] tcp_in_window: sender end=1024598111 maxend=1026186846 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.629624][ C1] tcp_in_window: [ 464.629641][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.631927][ T4388] kernfs limit_max: removing [ 464.633444][ C1] tcp_in_window: sender end=1024598111 maxend=1026186846 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.661833][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 464.667161][ C1] tcp_in_window: res=1 sender end=1024598111 maxend=1026186846 maxwin=3144576 receiver end=3714278281 maxend=3717422857 maxwin=1588736 [ 464.681056][ C1] tcp_conntracks: [ 464.681074][ C1] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 464.690361][ C1] nf_conntrack: normal packet for ffff888078bc6300 [ 464.696905][ C1] tcp_in_window: START [ 464.700981][ C1] tcp_in_window: [ 464.700990][ C1] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278281 [ 464.710025][ C0] virtqueue callback for ffff88801ea33700 (ffffffff8444ab50) [ 464.713817][ C1] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186846 maxwin=3144576 scale=7 [ 464.721224][ C0] virtqueue interrupt with no work for ffff88801ea33600 [ 464.735960][ C1] tcp_in_window: [ 464.742840][ C0] virtqueue interrupt with no work for ffff88801ea33500 [ 464.753444][ C1] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278281 [ 464.762580][ C1] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186846 maxwin=3144576 scale=7 [ 464.777300][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 464.782602][ C1] tcp_in_window: res=1 sender end=3714278281 maxend=3717422857 maxwin=1588736 receiver end=1024598111 maxend=1026186847 maxwin=3144576 [ 464.796428][ C1] tcp_conntracks: [ 464.796437][ C1] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 464.800176][ C1] virtqueue callback for ffff88802355f000 (ffffffff85491a80) [ 464.813030][ C1] No more buffers in queue [ 464.817450][ C1] eth0: xmit ffff888021e11640 42:01:0a:80:00:01 [ 464.823735][ C1] Added buffer head 3 to ffff88802355f100 [ 464.829483][ C1] virtqueue callback for ffff88802355f100 (ffffffff85491b70) [ 464.837705][ T4863] Added buffer head 0 to ffff88801ea33700 [ 464.838417][ C1] Sent skb ffff888021e11640 [ 464.848049][ C1] No more buffers in queue [ 464.848957][ T1111] nf_conntrack: normal packet for ffff88805fdb3980 [ 464.853417][ C1] No more buffers in queue [ 464.863492][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 464.869346][ C1] No more buffers in queue [ 464.873837][ C1] tcp_in_window: START [ 464.877929][ C1] tcp_in_window: [ 464.877943][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.881870][ T4388] kernfs limit_min: removing [ 464.890846][ C1] tcp_in_window: sender end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.910197][ C1] tcp_in_window: [ 464.910213][ C1] seq=1024598110 ack=3714278281+(0) sack=3714278281+(0) win=24567 end=1024598111 [ 464.923042][ C1] tcp_in_window: sender end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 receiver end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 [ 464.937787][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 464.943131][ C1] tcp_in_window: res=1 sender end=1024598111 maxend=1026186847 maxwin=3144576 receiver end=3714278281 maxend=3717422857 maxwin=1588736 [ 464.943981][ T9447] ---[ end trace 831b062a58e88fa7 ]--- [ 464.956978][ C1] tcp_conntracks: [ 464.956988][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 464.967902][ T4192] nf_conntrack: normal packet for ffff88805fdb2300 [ 465.012005][ T4388] kernfs hold_time: removing [ 465.041173][ T4172] nf_conntrack: normal packet for ffff888078bc6300 [ 465.046131][ T4388] kernfs inflight: removing [ 465.047829][ T4172] tcp_in_window: START [ 465.056562][ T4172] tcp_in_window: [ 465.056575][ T4172] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278281 [ 465.069380][ T4172] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 [ 465.081545][ T4388] kernfs byte_queue_limits: removing [ 465.084159][ T4172] tcp_in_window: [ 465.089396][ T4172] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278281 [ 465.089409][ T4388] kobject: 'tx-0' (ffff888028c6f418): kobject_cleanup, parent ffff88802572e650 [ 465.093079][ T4172] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 [ 465.093109][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 465.093126][ T4172] tcp_in_window: res=1 sender end=3714278281 maxend=3717422857 maxwin=1588736 receiver end=1024598111 maxend=1026186847 maxwin=3144576 [ 465.093153][ T4172] tcp_conntracks: [ 465.093162][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 465.152060][ T9450] kcov: kcov_task_exit: t = ffff888022d65940, kcov->t = ffff888022d65940 [ 465.183563][ T4172] No more buffers in queue [ 465.188037][ T4172] eth0: xmit ffff88807d27b8c0 42:01:0a:80:00:01 [ 465.194340][ T4172] Added buffer head 3 to ffff88802355f100 [ 465.194372][ C1] virtqueue callback for ffff88802355f100 (ffffffff85491b70) [ 465.207721][ C1] Sent skb ffff88807d27b8c0 [ 465.212304][ C1] No more buffers in queue [ 465.253178][ T4172] nf_conntrack: normal packet for ffff888078bc6300 [ 465.259751][ T4172] tcp_in_window: START [ 465.263871][ T4172] tcp_in_window: [ 465.263883][ T4172] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278281 [ 465.276697][ T4172] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 [ 465.291428][ T4172] tcp_in_window: [ 465.291442][ T4172] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278281 [ 465.304286][ T4172] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 [ 465.319148][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 465.324496][ T4172] tcp_in_window: res=1 sender end=3714278281 maxend=3717422857 maxwin=1588736 receiver end=1024598111 maxend=1026186847 maxwin=3144576 [ 465.338353][ T4172] tcp_conntracks: [ 465.338367][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 465.378980][ T4388] kobject: 'tx-0' (ffff888028c6f418): auto cleanup kobject_del [ 465.400450][ T4388] kernfs tx_timeout: removing [ 465.416197][ T4388] kernfs traffic_class: removing [ 465.433219][ T4388] kernfs xps_cpus: removing [ 465.437783][ T4388] kernfs xps_rxqs: removing [ 465.451494][ T420] bond1: (slave gretap1): Send learning packet: mac 42:ec:4a:8b:c3:5c vlan 0 [ 465.460425][ T1111] nf_conntrack: normal packet for ffff888054b2d080 [ 465.469535][ T9438] kcov: kcov_task_exit: t = ffff888028fd0000, kcov->t = ffff888028fd0000 [ 465.479957][ T4388] kernfs tx_maxrate: removing [ 465.490256][ T4388] kobject: 'tx-0' (ffff888028c6f418): auto cleanup 'remove' event [ 465.498347][ T4388] kobject: 'tx-0' (ffff888028c6f418): kobject_uevent_env [ 465.508397][ T4388] kobject: 'tx-0' (ffff888028c6f418): kobject_uevent_env: uevent_suppress caused the event to drop! [ 465.511325][ T4172] No more buffers in queue [ 465.520067][ T9447] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 465.523669][ T4172] eth0: xmit ffff88807d53cc80 42:01:0a:80:00:01 [ 465.535765][ T4172] Added buffer head 3 to ffff88802355f100 [ 465.535792][ C1] virtqueue callback for ffff88802355f100 (ffffffff85491b70) [ 465.538649][ T4388] kernfs tx-0: removing [ 465.541759][ C1] Sent skb ffff88807d53cc80 [ 465.541789][ C1] No more buffers in queue [ 465.563799][ T9447] Code: e8 36 3d 74 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 80 9c 34 8b 4c 89 f6 4c 89 f2 48 c7 c1 00 9d 34 8b e8 a1 ba b1 00 <0f> 0b e8 0a 3d 74 f8 48 c7 c7 60 9d 34 8b e8 8e ba b1 00 0f 0b 66 [ 465.585187][ T4388] kobject: 'tx-0' (ffff888028c6f418): calling ktype release [ 465.594998][ T5917] send_to_group: group=ffff88807ecd3000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888074e2cf10 data_type=1 dir=0000000000000000 cookie=0 [ 465.611405][ T4171] tcp_in_window: START [ 465.615515][ T4171] tcp_in_window: [ 465.615528][ T4171] seq=2930331661 ack=2663759347+(0) sack=2663759347+(0) win=501 end=2930331729 [ 465.621826][ T9447] RSP: 0018:ffffc9000311f7d8 EFLAGS: 00010246 [ 465.628189][ T4171] tcp_in_window: sender end=2930331661 maxend=2930395789 maxwin=64768 scale=7 receiver end=2663759347 maxend=2663823475 maxwin=65408 scale=7 [ 465.643404][ T4388] kobject: 'tx-0': free name [ 465.648648][ T4171] tcp_in_window: [ 465.653205][ T4171] seq=2930331661 ack=2663759347+(0) sack=2663759347+(0) win=501 end=2930331729 [ 465.660254][ T4388] kernfs queues: removing [ 465.665843][ T4171] tcp_in_window: sender end=2930331661 maxend=2930395789 maxwin=64768 scale=7 receiver end=2663759347 maxend=2663823475 maxwin=65408 scale=7 [ 465.665873][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 465.665888][ T4171] tcp_in_window: res=1 sender end=2930331729 maxend=2930395789 maxwin=64768 receiver end=2663759347 maxend=2663823475 maxwin=65408 [ 465.671532][ T9447] RAX: 0000000000000034 RBX: ffff888050ab4a80 RCX: cc668ef5cce5c100 [ 465.684614][ T4171] tcp_conntracks: [ 465.684626][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 465.690458][ T4388] kobject: 'queues' (ffff88802572e650): kobject_cleanup, parent 0000000000000000 [ 465.703450][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 465.703470][ C1] kcov: kcov_start: t = ffff8880785d0000, size = 262144, area = ffffc900021fa000 [ 465.703528][ C1] kcov: kcov_move_area: ffffc90011012000 1048576 <= ffffc900021fa000 84 [ 465.708359][ T5917] inotify_handle_inode_event: group=ffff88807ecd3000 mark=ffff8880181bd190 mask=8 [ 465.711744][ C0] virtqueue callback for ffff88801ea33700 (ffffffff8444ab50) [ 465.721307][ T5917] fsnotify_insert_event: group=ffff88807ecd3000 event=ffff888075484b00 [ 465.730158][ C0] virtqueue interrupt with no work for ffff88801ea33600 [ 465.787453][ C0] virtqueue interrupt with no work for ffff88801ea33500 [ 465.792679][ T3557] get_one_event: group=ffff88807ecd3000 event=ffff888075484b00 [ 465.802042][ T3557] fsnotify_remove_first_event: group=ffff88807ecd3000 event=ffff888075484b00 [ 465.802073][ T1111] Added buffer head 0 to ffff88801ea33700 [ 465.821520][ T4388] kobject: 'queues' (ffff88802572e650): calling ktype release [ 465.821577][ T4172] nf_conntrack: normal packet for ffff888078bc6300 [ 465.829012][ T4388] kobject: 'queues' (ffff88802572e650): kset_release [ 465.845926][ T3557] inotify_read: group=ffff88807ecd3000 kevent=ffff888075484b00 [ 465.846353][ T4388] kobject: 'queues': free name [ 465.858571][ T4388] kernfs runtime_status: removing [ 465.866176][ T4388] kernfs control: removing [ 465.868744][ T3557] copy_event_to_user: group=ffff88807ecd3000 event=ffff888075484b00 [ 465.870698][ T4388] kernfs runtime_suspended_time: removing [ 465.881292][ T4172] tcp_in_window: START [ 465.888461][ T4172] tcp_in_window: [ 465.888475][ T4172] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278282 [ 465.890986][ T4388] kernfs runtime_active_time: removing [ 465.892175][ T4172] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 [ 465.907736][ T4388] kernfs autosuspend_delay_ms: removing [ 465.921440][ T4172] tcp_in_window: [ 465.921451][ T4172] seq=3714278281 ack=1024598111+(0) sack=1024598111+(0) win=12412 end=3714278282 [ 465.921477][ T4172] tcp_in_window: sender end=3714278281 maxend=3717422857 maxwin=1588736 scale=7 receiver end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 [ 465.921507][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 465.921524][ T4172] tcp_in_window: res=1 sender end=3714278282 maxend=3717422857 maxwin=1588736 receiver end=1024598111 maxend=1026186847 maxwin=3144576 [ 465.921551][ T4172] tcp_conntracks: [ 465.921559][ T4172] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 465.933622][ T4388] kernfs power: removing [ 465.970967][ T3557] inotify_read: group=ffff88807ecd3000 kevent=0000000000000000 [ 465.982527][ T9447] RDX: ffffc90010c11000 RSI: 00000000000044d6 RDI: 00000000000044d7 [ 466.003563][ T4388] kernfs device: removing [ 466.007953][ T4388] kernfs subsystem: removing [ 466.015015][ T1108] nf_conntrack: normal packet for ffff88805fdb2300 [ 466.020385][ T9447] RBP: ffff888050ab4a80 R08: ffffffff901f1277 R09: 1ffffffff203e24e SYZFAIL: failed to recv rpc [ 466.029775][ T9447] R10: dffffc0000000000 R11: fffffbfff203e24f R12: ffff888050ab51d8 [ 466.041969][ T4171] No more buffers in queue [ 466.046435][ T4171] eth0: xmit ffff8880668740e8 42:01:0a:80:00:01 [ 466.052743][ T4171] Added buffer head 0 to ffff88802335ff00 [ 466.052770][ C0] virtqueue callback for ffff88802335ff00 (ffffffff85491b70) [ 466.055741][ T4172] No more buffers in queue [ 466.058517][ C0] virtqueue callback for ffff88802335fe00 (ffffffff85491a80) [ 466.065990][ T4172] eth0: xmit ffff888061c42d68 42:01:0a:80:00:01 [ 466.070683][ C0] Sent skb ffff8880668740e8 [ 466.077711][ T4172] Added buffer head 3 to ffff88802355f100 [ 466.077779][ C1] virtqueue callback for ffff88802355f100 (ffffffff85491b70) [ 466.083983][ C0] No more buffers in queue [ 466.088495][ C1] virtqueue callback for ffff88802355f000 (ffffffff85491a80) [ 466.094766][ C0] No more buffers in queue [ 466.106033][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 466.113657][ C1] Sent skb ffff888061c42d68 [ 466.117900][ C0] No more buffers in queue [ 466.123715][ C1] No more buffers in queue [ 466.128267][ C0] nf_conntrack: normal packet for ffff888078bc6180 [ 466.134308][ C1] No more buffers in queue [ 466.137063][ C0] tcp_in_window: START [ 466.143670][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 466.148001][ C0] tcp_in_window: [ 466.152088][ C1] No more buffers in queue [ 466.157887][ C0] seq=2663759347 ack=2930331729+(0) sack=2930331729+(0) win=501 end=2663759347 [ 466.161607][ C1] tcp_in_window: START [ 466.165956][ C0] tcp_in_window: sender end=2663759347 maxend=2663823475 maxwin=65408 scale=7 receiver end=2930331729 maxend=2930395789 maxwin=64768 scale=7 [ 466.174912][ C1] tcp_in_window: [ 466.178980][ C0] tcp_in_window: [ 466.193309][ C1] seq=1024598111 ack=3714278282+(0) sack=3714278282+(0) win=24567 end=1024598111 [ 466.196940][ C0] seq=2663759347 ack=2930331729+(0) sack=2930331729+(0) win=501 end=2663759347 [ 466.200575][ C1] tcp_in_window: sender end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 receiver end=3714278282 maxend=3717422857 maxwin=1588736 scale=7 [ 466.209710][ C0] tcp_in_window: sender end=2663759347 maxend=2663823475 maxwin=65408 scale=7 receiver end=2930331729 maxend=2930395789 maxwin=64768 scale=7 [ 466.218656][ C1] tcp_in_window: [ 466.233346][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 466.247689][ C1] seq=1024598111 ack=3714278282+(0) sack=3714278282+(0) win=24567 end=1024598111 [ 466.251345][ C0] tcp_in_window: res=1 sender end=2663759347 maxend=2663823475 maxwin=65408 receiver end=2930331729 maxend=2930395857 maxwin=64768 [ 466.256628][ C1] tcp_in_window: sender end=1024598111 maxend=1026186847 maxwin=3144576 scale=7 receiver end=3714278282 maxend=3717422857 maxwin=1588736 scale=7 [ 466.265759][ C0] tcp_conntracks: [ 466.265770][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 466.279240][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 466.308370][ C1] tcp_in_window: res=1 sender end=1024598111 maxend=1026186847 maxwin=3144576 receiver end=3714278282 maxend=3717422858 maxwin=1588736 [ 466.322228][ C1] tcp_conntracks: [ 466.322242][ C1] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 466.323163][ T9436] kcov: kcov_task_exit: t = ffff8880255a5940, kcov->t = ffff8880255a5940 [ 466.331226][ T9447] R13: 0000000000000012 R14: 0000000000000005 R15: dffffc0000000000 [ 466.331563][ T4388] kernfs netdevsim3: removing [ 466.339909][ T9447] FS: 00007fbbc0b7d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 466.348685][ T4171] tcp_in_window: START [ 466.354100][ T9447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.361585][ T4171] tcp_in_window: [ 466.361597][ T4171] seq=2930331729 ack=2663759347+(0) sack=2663759347+(0) win=501 end=2930331821 [ 466.365797][ T9447] CR2: 00002000003e9030 CR3: 000000007874b000 CR4: 00000000003506e0 [ 466.372277][ T4171] tcp_in_window: sender end=2930331729 maxend=2930395857 maxwin=64768 scale=7 receiver end=2663759347 maxend=2663823475 maxwin=65408 scale=7 [ 466.378176][ T5884] kcov: kcov_task_exit: t = ffff888028978000, kcov->t = ffff888028978000 [ 466.384994][ T4171] tcp_in_window: [ 466.393025][ T7988] kcov: kcov_task_exit: t = ffff888050051dc0, kcov->t = ffff888050051dc0 [ 466.407253][ T4171] seq=2930331729 ack=2663759347+(0) sack=2663759347+(0) win=501 end=2930331821 [ 466.416366][ T9447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.419299][ T4171] tcp_in_window: sender end=2930331729 maxend=2930395857 maxwin=64768 scale=7 receiver end=2663759347 maxend=2663823475 maxwin=65408 scale=7 [ 466.441230][ T9447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.444707][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 466.472309][ T4171] tcp_in_window: res=1 sender end=2930331821 maxend=2930395857 maxwin=64768 receiver end=2663759347 maxend=2663823475 maxwin=65408 [ 466.485799][ T4171] tcp_conntracks: [ 466.485813][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 466.489558][ C0] virtqueue callback for ffff88802335fe00 (ffffffff85491a80) [ 466.501287][ T9447] Kernel panic - not syncing: Fatal exception [ 466.503795][ T4764] kcov: kcov_task_exit: t = ffff888029769dc0, kcov->t = ffff888029769dc0 [ 466.517655][ T9447] Kernel Offset: disabled [ 466.521992][ T9447] Rebooting in 86400 seconds..