last executing test programs: 22m20.728268074s ago: executing program 32 (id=53): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 22m17.206032401s ago: executing program 3 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 22m16.367671697s ago: executing program 3 (id=91): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x0, 0x2143840, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_access\x00', 0x0, 0x0) 22m16.274668435s ago: executing program 3 (id=92): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 22m15.427553963s ago: executing program 3 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) unshare(0x22020400) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 22m15.390109083s ago: executing program 3 (id=99): unshare(0x6020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x88) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xc, 0x12) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 22m14.699217493s ago: executing program 3 (id=104): unshare(0x22020600) r0 = fanotify_init(0x10, 0x80000) fanotify_mark(r0, 0x1, 0x800103a, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0xa) 22m14.400444388s ago: executing program 33 (id=104): unshare(0x22020600) r0 = fanotify_init(0x10, 0x80000) fanotify_mark(r0, 0x1, 0x800103a, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0xa) 5m51.253098712s ago: executing program 6 (id=4839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 5m50.238153502s ago: executing program 6 (id=4852): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x2, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m49.911827245s ago: executing program 6 (id=4854): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={r2, 0x8000}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) 5m49.640401179s ago: executing program 6 (id=4857): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) 5m49.14368747s ago: executing program 6 (id=4861): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lock '], 0x9) 5m48.401357268s ago: executing program 6 (id=4866): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000140)={0x0, 0x30, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34000804}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = syz_ublk_setup_io_uring(0x6bc5, &(0x7f0000000340)={0x0, 0xcbab, 0x8, 0x3, 0x51, 0x0, r2}, &(0x7f0000000440), 0x0, &(0x7f00000007c0)) syz_io_uring_setup(0x2dcb, &(0x7f0000000800)={0x0, 0x4ff4, 0x40, 0x3, 0x38a, 0x0, r3}, &(0x7f0000000880), 0x0, &(0x7f0000000900)) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000a00)={0x14, 0x0, 0x0}, 0x0) 5m47.650419385s ago: executing program 34 (id=4866): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000140)={0x0, 0x30, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34000804}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = syz_ublk_setup_io_uring(0x6bc5, &(0x7f0000000340)={0x0, 0xcbab, 0x8, 0x3, 0x51, 0x0, r2}, &(0x7f0000000440), 0x0, &(0x7f00000007c0)) syz_io_uring_setup(0x2dcb, &(0x7f0000000800)={0x0, 0x4ff4, 0x40, 0x3, 0x38a, 0x0, r3}, &(0x7f0000000880), 0x0, &(0x7f0000000900)) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000a00)={0x14, 0x0, 0x0}, 0x0) 4m13.249215117s ago: executing program 4 (id=5616): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x50}}], 0x1, 0x80) 4m13.062898983s ago: executing program 4 (id=5620): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 4m12.846983706s ago: executing program 4 (id=5624): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x820, 0xfffffe, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4m11.641971532s ago: executing program 4 (id=5637): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file1\x00', 0x1000040, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,timeo=1']) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, 0x0) 4m11.046320081s ago: executing program 4 (id=5643): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xb00, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000540)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c", 0x3c, 0x8010, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0xc2, 0x0, 0x0) 4m10.282962335s ago: executing program 4 (id=5651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x5, 0x8, 0xc0, 0x0, 0x9, 0x6, 0x6d, 0x6, 0x8b, 0x2, 0x9, 0xfb, 0x0, 0x0, 0x3, 0x2, 0x8, 0x9, 0x3, '\x00', 0x8, 0x4000000007}) 4m9.589683365s ago: executing program 35 (id=5651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x5, 0x8, 0xc0, 0x0, 0x9, 0x6, 0x6d, 0x6, 0x8b, 0x2, 0x9, 0xfb, 0x0, 0x0, 0x3, 0x2, 0x8, 0x9, 0x3, '\x00', 0x8, 0x4000000007}) 4m7.297725955s ago: executing program 5 (id=5677): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x5, 0xfd, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb3, 0xd, 0xf3}}}}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x55a, &(0x7f00000010c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x48000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f00000005c0)={0x0, 0x24, 0xd8, {0xd8, 0xb, "0166d74b52700000005c229aeab968c19753af658dc00516abe019df0f801092727e812c1da43751b1d1b9dc1e10a8882e03d11069faefe544502656ed577f346857159cc8b7eadfb1e9968715524115b6346f71a2a87e16d8671e90feec4e04bf6542418dd412070bb621ca0fc6fb3716b32be6eb886b11815ac2487bb11d117131bd5ff2c9470d725fb5199d370f30ac31f304a62291c6216a41c6f03cc1be6339b1420fbdc29185bd29e74af611804b544c2ffd19077fdb466e93839dd7b902013876893e8a97fc5f8e7c20b6845a85705551dbab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, 0x0, 0x0) r8 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r8) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x52f, r9) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025000010100800309040000fe020200000524060000052400d0000d240000000000000acd81000005"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r10}) 4m4.19000284s ago: executing program 5 (id=5700): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/199) read$FUSE(0xffffffffffffffff, &(0x7f0000003d80)={0x2020}, 0x2020) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000240)=[{0x6, 0xe2, 0x20, 0x7ffefffc}, {0x800, 0x5, 0x5, 0x10001}]}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000200)={[0x80000001]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0x2b) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0x500001e4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x8]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 4m3.390730898s ago: executing program 5 (id=5707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002280)=ANY=[@ANYBLOB="88030000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf252d00000008000300", @ANYRES32=r3], 0x388}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004880) 4m3.07822141s ago: executing program 5 (id=5712): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 4m2.82264017s ago: executing program 5 (id=5715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x1ec, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c0, 0x2, [@TCA_BPF_ACT={0x1bc, 0x1, [@m_skbmod={0x128, 0xc, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x8001, 0xffffffffffffffff, 0xffffffff, 0x3}, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3c95}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x621, 0x7, 0x20000000, 0x8, 0xff}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x3, 0x20000000, 0x7855, 0x3}, 0xc}}]}, {0x59, 0x6, "f51f67ec79be0129849dff1b1f031b2d21b8ebb3988d16442c08ce346629703a4d0408a9a97022eaeb206c4d44150b18fd509f94ab2d714544aadeccf5482b04fc62a260ae04286cac825ca03eac6e5972579e21cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x90, 0x5, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'security\x00', 0x7, 0x100}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x31, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m2.291781833s ago: executing program 5 (id=5720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x204) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) 4m1.715063641s ago: executing program 36 (id=5720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x204) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) 4m0.54295096s ago: executing program 1 (id=5728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m0.104030394s ago: executing program 1 (id=5731): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0x3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f00000004c0)={0x2020}, 0x2020) 3m59.857771963s ago: executing program 1 (id=5733): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000001340)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000001740)='!', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 3m59.598108208s ago: executing program 1 (id=5735): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 3m59.461766212s ago: executing program 1 (id=5737): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@float={0x7, 0x0, 0x0, 0x10, 0x10}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x4, 0x1, 0x1000000}]}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x44, 0x0, 0x1, 0x2}, 0x28) setgroups(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fsmount(r1, 0x0, 0x82) fchdir(r6) fchmodat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0) 3m58.689368702s ago: executing program 1 (id=5743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40701, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 3m57.923152724s ago: executing program 37 (id=5743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40701, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 16.430900263s ago: executing program 8 (id=7048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, 0x0, &(0x7f0000000dc0)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 16.120656115s ago: executing program 8 (id=7051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000924c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 9.156619441s ago: executing program 8 (id=7081): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 9.002316691s ago: executing program 8 (id=7083): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000001600001103000000000000000300000000000004000000000000000000000084000000000000002e"], 0x0, 0x45}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5e687a8a12003300020300ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff0601150b000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) memfd_secret(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f9, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000400180006801400"], 0xac}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) 4.164526947s ago: executing program 8 (id=7102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) 3.287122756s ago: executing program 0 (id=7115): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233446e66778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677888daabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x31, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001480), &(0x7f00000014c0)={'fscrypt:', @auto=[0x35, 0x36, 0x33, 0x32, 0x64, 0x37, 0x33, 0x34, 0x64, 0x32, 0x63, 0x59, 0x30, 0x38, 0x39, 0x5c]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff001122339e80d3ad6fd7571ade001122ccddeeff00112233445566778899aabbccddeeff00", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r0) 3.111716344s ago: executing program 8 (id=7119): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100000000206a050d0100000000000109022400010000c006090400000303000300"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), 0x0}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f0000000b40)=ANY=[], 0x7b, 0x120a, &(0x7f0000003680)="$eJzs3E2LW1UYB/BnxrEzTp0XtVZbEA+60c2lMws3uhlkCtKA0naEVhBunTsack1CbhiIiNWVWz+HCCK4E8SdbmbjNxDczcZlBfHKJPYlmikEtCnD77fJA+f8k3MSTuBc7rmHr33xYWuvyvbyfszPzcV8NyLdSpFiPm77NF5+9cefnrty7fqlrUZj+3JKF7eubrySUlp9/vt3Pv7qhR/6p9/+dvW7xThYf/fwt81fD84enDv88+oHzSo1q9Tu9FOebnQ6/fxGWaTdZtXKUnqrLPKqSM12VfTG2vfKTrc7SHl7d2W52yuqKuXtQWoVg9TvpH5vkPL382Y7ZVmWVpaD6S3cqXa+vFXXdURdPxqnoq7r+rFYjtPxeKzEaqzFejwRT8ZTcSaejrPxTCzEN798PThKAAAAAAAAAAAAAAAAAAAAAP+d6c7/Pxvnhr1mPWoAAAAAAAAAAAAAAAAAAAA4Wa5cu35pq9HYvpzSUkT5+f7O/s7oddS+tRfNKKOIC7EWf8Tw9P/IqL74RmP7Qhpaj8/Km3/nb+7vPDKe3xg+TmBifmOUT+P5xVi+N78Za3Fmcn5zYn4pXnrxnnwWa/Hze9GJMnbjKHs3/8lGSq+/2fhH/vywHwAAAJwEWbpj4v49y45rH+WnuD4wtr8+yp5fmOnUiYhq8FErL8uip3joi1P/50fcXovH9/m9ruvZfwkzKo5fKYsRcd/40n3eeS4iHo4J/quY8R8TD8TdH33WIwEAAAAAAAAAAGAaD+J2wlnPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ix04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//fTHPLg==") r5 = open(&(0x7f0000000040)='./file2\x00', 0x8800, 0x171) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x2800}], 0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="87a6c75cf035", 0x6}], 0x1, 0x5412, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xd, 0x80000000000008}) 3.04095483s ago: executing program 0 (id=7120): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, r2, 0xff, {0x0, 0x1, 0x4}, 0xff}, 0x18) bind$can_j1939(r3, 0x0, 0x0) sendmsg$can_j1939(r3, &(0x7f0000001840)={&(0x7f0000000380)={0x1d, 0x0, 0x0, {0x0, 0xe, 0x1}, 0xfd}, 0x18, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.350023999s ago: executing program 0 (id=7126): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000001600001103000000000000000300000000000004000000000000000000000084000000000000002e"], 0x0, 0x45}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5e687a8a12003300020300ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff0601150b000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) memfd_secret(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f9, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.859989876s ago: executing program 9 (id=7128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.829087346s ago: executing program 0 (id=7129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x30, 0xfffffffffffffcaf, 0x0, 0x0, 0xa0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8000}}}}}}, 0x0) 1.661955484s ago: executing program 9 (id=7132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca"], 0x4a) 1.576801241s ago: executing program 7 (id=7133): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 1.428072285s ago: executing program 2 (id=7134): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x80010000}, 0x50) 1.308107289s ago: executing program 7 (id=7135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000e0000004000000003"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a00), 0x0, 0xa, r0}, 0x38) 1.205613876s ago: executing program 0 (id=7136): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.176973529s ago: executing program 2 (id=7137): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 1.063809218s ago: executing program 7 (id=7138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 979.217766ms ago: executing program 9 (id=7139): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000001600001103000000000000000300000000000004000000000000000000000084000000000000002e"], 0x0, 0x45}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5e687a8a12003300020300ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff0601150b000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) memfd_secret(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f9, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x1}}) socket$inet6_tcp(0xa, 0x1, 0x0) 964.562181ms ago: executing program 0 (id=7140): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/180, 0xb4}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000c80)=""/4083, 0xff3}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000003040)=""/125, 0x7d}, {&(0x7f00000030c0)=""/180, 0xb4}, {&(0x7f0000002080)=""/239, 0xe1}, {&(0x7f0000003280)=""/62, 0x3e}, {&(0x7f00000032c0)=""/139, 0x8b}], 0x9}, 0x5fe9ab18}, {{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000002780)=[{&(0x7f00000022c0)=""/229, 0x6a}, {&(0x7f00000023c0)=""/155, 0x9b}, {&(0x7f0000002480)=""/91, 0x5b}, {&(0x7f0000002500)=""/132, 0x84}, {&(0x7f0000001fc0)=""/157, 0x91}, {&(0x7f0000002680)=""/195, 0xc3}], 0x6, &(0x7f0000000500)=""/152, 0x98}, 0x6}, {{&(0x7f00000005c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000000780)=""/133, 0x85}], 0x3, &(0x7f0000000880)=""/156, 0x9c}, 0xf}, {{&(0x7f00000009c0)=@pptp, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/227, 0xe3}, 0x7}, {{&(0x7f0000000b80)=@isdn, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000440)=""/97, 0x61}], 0x1, &(0x7f0000001d40)=""/192, 0xc0}, 0x3af}, {{&(0x7f0000001e00)=@x25={0x9, @remote}, 0x80, &(0x7f0000004580), 0x0, &(0x7f0000000280)=""/35, 0x23}, 0x6}], 0x6, 0x20, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800008}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) 826.076088ms ago: executing program 7 (id=7141): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'bond_slave_1\x00'}) 793.483554ms ago: executing program 2 (id=7142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x7, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 785.640137ms ago: executing program 9 (id=7143): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233446e66778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677888daabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x31, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001480), &(0x7f00000014c0)={'fscrypt:', @auto=[0x35, 0x36, 0x33, 0x32, 0x64, 0x37, 0x33, 0x34, 0x64, 0x32, 0x63, 0x59, 0x30, 0x38, 0x39, 0x5c]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff001122339e80d3ad6fd7571ade001122ccddeeff00112233445566778899aabbccddeeff00", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r0) 687.815944ms ago: executing program 7 (id=7144): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 527.799186ms ago: executing program 2 (id=7145): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) 497.375115ms ago: executing program 9 (id=7146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x30, 0xfffffffffffffcaf, 0x0, 0x0, 0xa0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8000}}}}}}, 0x0) 226.921462ms ago: executing program 2 (id=7147): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB="dcd5635f2e"], 0x48) 107.235795ms ago: executing program 9 (id=7148): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 79.202891ms ago: executing program 7 (id=7149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210"], 0x4a) 0s ago: executing program 2 (id=7150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202023baa00000800c9006c09e9cd"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): bond1 [ 1181.885277][T22675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1181.916131][T22675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1183.643805][T22728] loop7: detected capacity change from 0 to 128 [ 1184.383931][T22747] overlayfs: failed to resolve './file2': -2 [ 1184.576331][T22749] loop5: detected capacity change from 0 to 8192 [ 1184.605752][T22749] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1184.923267][T22762] loop4: detected capacity change from 0 to 512 [ 1185.351716][T15225] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1185.351741][T15225] FAT-fs (loop4): Filesystem has been set read-only [ 1185.351906][T15225] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1185.828887][T22782] overlayfs: failed to resolve './file2': -2 [ 1185.852167][T22773] loop7: detected capacity change from 0 to 32768 [ 1185.874603][T22773] loop7: p1 p3 < > [ 1186.422953][T22621] udevd[22621]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1186.437480][T21321] udevd[21321]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1187.106487][T22809] overlayfs: failed to resolve './file2': -2 [ 1187.117478][T21087] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1187.258721][T11717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1187.275214][T11717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1187.285903][T11717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1187.294979][T21087] usb 2-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 1187.304438][T11717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1187.314322][T11717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1187.328468][T21087] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 1187.328516][T21087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 102, changing to 4 [ 1187.328536][T21087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1023 [ 1187.420460][T21087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.420481][T21087] usb 2-1: Product: syz [ 1187.420499][T21087] usb 2-1: Manufacturer: syz [ 1187.420510][T21087] usb 2-1: SerialNumber: syz [ 1187.455599][T21087] usb 2-1: config 0 descriptor?? [ 1187.468994][T21087] hub 2-1:0.0: bad descriptor, ignoring hub [ 1187.469015][T21087] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1187.561384][T22816] loop5: detected capacity change from 0 to 256 [ 1187.797673][T21087] usb 2-1: USB disconnect, device number 83 [ 1187.881999][T22824] batadv_slave_1: entered promiscuous mode [ 1187.882260][T22822] batadv_slave_1: left promiscuous mode [ 1188.882197][ T33] audit: type=1326 audit(1790911391.830:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22855 comm="syz.2.5674" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f205e59e159 code=0x0 [ 1189.028872][T22861] overlayfs: missing 'lowerdir' [ 1189.341866][T22812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.342381][T22812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.342485][T22812] bridge_slave_0: entered allmulticast mode [ 1189.345490][T22812] bridge_slave_0: entered promiscuous mode [ 1189.380508][T22812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.381597][T22812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.382997][T22812] bridge_slave_1: entered allmulticast mode [ 1189.384673][T22812] bridge_slave_1: entered promiscuous mode [ 1189.417004][T21087] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1189.448627][ T5613] Bluetooth: hci4: command tx timeout [ 1189.507461][T22812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.514050][T22812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.567561][T21087] usb 6-1: New USB device found: idVendor=056a, idProduct=00b3, bcdDevice=0.00 [ 1189.568594][T21087] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1189.568626][T21087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 1189.568647][T21087] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1189.568677][T21087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.597956][T21087] usb 6-1: config 0 descriptor?? [ 1189.683245][T22812] team0: Port device team_slave_0 added [ 1189.704913][T22812] team0: Port device team_slave_1 added [ 1189.806019][T22812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.806034][T22812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.806061][T22812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.864143][T22812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.864158][T22812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.864179][T22812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.918353][T22865] loop5: detected capacity change from 0 to 512 [ 1189.981006][T22865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.981108][T22865] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.047916][ T33] audit: type=1326 audit(1790911393.000:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22879 comm="syz.2.5682" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f205e59e159 code=0x0 [ 1190.190729][T22812] hsr_slave_0: entered promiscuous mode [ 1190.192813][T22812] hsr_slave_1: entered promiscuous mode [ 1190.194020][T22812] debugfs: 'hsr0' already exists in 'hsr' [ 1190.194034][T22812] Cannot create hsr debugfs directory [ 1190.703967][T22883] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[16351] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[22883] [ 1190.706269][T22883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.706566][T22883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.095980][T22891] overlayfs: missing 'lowerdir' [ 1191.527993][ T5613] Bluetooth: hci4: command tx timeout [ 1191.624903][T22904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1191.804740][T22812] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1191.838654][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1191.839294][T22812] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1191.870469][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1191.875005][T22812] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1191.913105][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1191.916327][T22812] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1191.941840][T22812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1192.208223][T14840] usb 6-1: USB disconnect, device number 81 [ 1192.229889][T16351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.433610][T22812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.506268][T22812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.532090][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.532169][ T6507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.573876][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.573951][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.719934][T22934] fuse: Bad value for 'fd' [ 1193.184002][T22946] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.488948][T22956] netlink: 'syz.7.5711': attribute type 11 has an invalid length. [ 1193.606998][ T5613] Bluetooth: hci4: command tx timeout [ 1193.652852][T22959] fuse: Bad value for 'fd' [ 1194.004445][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5717'. [ 1194.634304][T20349] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.979157][T22977] FAULT_INJECTION: forcing a failure. [ 1194.979157][T22977] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1194.979184][T22977] CPU: 0 UID: 0 PID: 22977 Comm: syz.1.5723 Tainted: G L syzkaller #0 PREEMPT(full) [ 1194.979208][T22977] Tainted: [L]=SOFTLOCKUP [ 1194.979214][T22977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1194.979224][T22977] Call Trace: [ 1194.979231][T22977] [ 1194.979238][T22977] dump_stack_lvl+0xe8/0x150 [ 1194.979261][T22977] should_fail_ex+0x3eb/0x540 [ 1194.979282][T22977] get_futex_key+0x1b4/0x1580 [ 1194.979302][T22977] ? kfree+0x4d/0x650 [ 1194.979336][T22977] ? import_iovec+0x73/0xa0 [ 1194.979355][T22977] ? __pfx_get_futex_key+0x10/0x10 [ 1194.979370][T22977] ? ___sys_sendmsg+0x2b5/0x360 [ 1194.979384][T22977] ? __lock_acquire+0x747/0x2de0 [ 1194.979410][T22977] futex_wake+0x119/0x5f0 [ 1194.979433][T22977] ? __pfx_futex_wake+0x10/0x10 [ 1194.979462][T22977] do_futex+0x458/0x4e0 [ 1194.979482][T22977] ? __pfx_do_futex+0x10/0x10 [ 1194.979505][T22977] __se_sys_futex+0x3a8/0x450 [ 1194.979526][T22977] ? __pfx___se_sys_futex+0x10/0x10 [ 1194.979556][T22977] ? __x64_sys_futex+0x21/0xf0 [ 1194.979577][T22977] do_syscall_64+0x166/0x520 [ 1194.979593][T22977] ? trace_irq_disable+0x3b/0x140 [ 1194.979608][T22977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.979624][T22977] ? clear_bhb_loop+0x70/0xc0 [ 1194.979642][T22977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.979659][T22977] RIP: 0033:0x7f18b419e159 [ 1194.979674][T22977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.979690][T22977] RSP: 002b:00007f18b50390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1194.979707][T22977] RAX: ffffffffffffffda RBX: 00007f18b4425fa8 RCX: 00007f18b419e159 [ 1194.979720][T22977] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18b4425fac [ 1194.979730][T22977] RBP: 00007f18b4425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1194.979742][T22977] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000000 [ 1194.979752][T22977] R13: 00007f18b4426038 R14: 00007ffe63a2d8b0 R15: 00007ffe63a2d998 [ 1194.979777][T22977] [ 1195.401215][T20349] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.686743][ T5613] Bluetooth: hci4: command tx timeout [ 1195.750727][T22989] 9p: Bad value for 'wfdno' [ 1195.843639][T11717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1195.865386][T11717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1195.877941][T11717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1195.888765][T11717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1195.898418][T11717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1196.000493][T20349] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.321956][ T33] audit: type=1326 audit(1790911399.270:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22998 comm="syz.2.5730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f205e59e159 code=0x0 [ 1196.323137][T20349] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.415371][T22812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.035938][T23020] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5738'. [ 1197.567897][T20349] bridge_slave_1: left allmulticast mode [ 1197.567919][T20349] bridge_slave_1: left promiscuous mode [ 1197.568077][T20349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.604263][T20349] bridge_slave_0: left allmulticast mode [ 1197.604284][T20349] bridge_slave_0: left promiscuous mode [ 1197.604463][T20349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.009976][ T5613] Bluetooth: hci2: command tx timeout [ 1198.662127][T20349] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1198.662150][T20349] bridge1 (unregistering): left allmulticast mode [ 1198.770519][T20349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.797522][T20349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.800104][T23054] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1198.801283][T20349] bond0 (unregistering): Released all slaves [ 1198.854980][T20349] bond1 (unregistering): Released all slaves [ 1198.913059][T20349] bond2 (unregistering): Released all slaves [ 1198.973730][T20349] bond3 (unregistering): Released all slaves [ 1199.096197][T11717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1199.114180][T11717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1199.115067][T11717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1199.138857][T11717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1199.139283][T11717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1199.482805][T23067] 9p: Bad value for 'wfdno' [ 1199.688822][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1199.862045][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1199.972320][T20349] hsr_slave_0: left promiscuous mode [ 1199.988220][T20349] hsr_slave_1: left promiscuous mode [ 1199.988894][T20349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.988910][T20349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.993414][T20349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.993431][T20349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.069427][T20349] veth1_macvtap: left promiscuous mode [ 1200.069460][T20349] veth0_macvtap: left promiscuous mode [ 1200.090011][ T5613] Bluetooth: hci2: command tx timeout [ 1200.601514][T23085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1200.721992][T20349] team0 (unregistering): Port device team_slave_1 removed [ 1200.743766][T20349] team0 (unregistering): Port device team_slave_0 removed [ 1200.963161][T22812] veth0_vlan: entered promiscuous mode [ 1200.982940][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5759'. [ 1201.031319][T22812] veth1_vlan: entered promiscuous mode [ 1201.287736][ T5613] Bluetooth: hci3: command tx timeout [ 1201.457197][T22812] veth0_macvtap: entered promiscuous mode [ 1201.484579][T22812] veth1_macvtap: entered promiscuous mode [ 1201.595470][T22812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.644231][T22812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.708631][ T6183] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.712956][ T9809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.713476][ T9809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.713512][ T9809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.169500][ T5613] Bluetooth: hci2: command tx timeout [ 1202.351156][T20349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.767150][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5765'. [ 1202.959582][T23128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1202.961699][T20349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.289100][T20349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.332387][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1203.335382][ T9771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.335396][ T9771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.336500][T22985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.336565][T22985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.336649][T22985] bridge_slave_0: entered allmulticast mode [ 1203.370496][ T5613] Bluetooth: hci3: command tx timeout [ 1203.394388][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1203.412044][T22985] bridge_slave_0: entered promiscuous mode [ 1203.538169][T22985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.538246][T22985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.538798][T22985] bridge_slave_1: entered allmulticast mode [ 1203.590125][T22985] bridge_slave_1: entered promiscuous mode [ 1203.866125][T20349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.969824][T22985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.046393][T22985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.114188][ T9809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.114206][ T9809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.213146][T22985] team0: Port device team_slave_0 added [ 1204.246878][ T5613] Bluetooth: hci2: command tx timeout [ 1204.255424][T22985] team0: Port device team_slave_1 added [ 1204.400679][T22985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.400693][T22985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.400713][T22985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.414983][T22985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.414996][T22985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.415017][T22985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.779910][T22985] hsr_slave_0: entered promiscuous mode [ 1204.781903][T22985] hsr_slave_1: entered promiscuous mode [ 1204.800105][T22985] debugfs: 'hsr0' already exists in 'hsr' [ 1204.800123][T22985] Cannot create hsr debugfs directory [ 1205.044082][T23157] netlink: 'syz.2.5773': attribute type 4 has an invalid length. [ 1205.449180][ T5613] Bluetooth: hci3: command tx timeout [ 1205.543853][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5653'. [ 1206.005281][T20349] bridge_slave_1: left allmulticast mode [ 1206.005309][T20349] bridge_slave_1: left promiscuous mode [ 1206.005486][T20349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.034279][T20349] bridge_slave_0: left allmulticast mode [ 1206.034300][T20349] bridge_slave_0: left promiscuous mode [ 1206.034470][T20349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.313579][T23185] loop8: detected capacity change from 0 to 256 [ 1206.543053][T20349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.545507][T20349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.571502][T20349] bond0 (unregistering): Released all slaves [ 1206.711484][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1206.954665][T23198] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5785'. [ 1207.148794][T23058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.151611][T23058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.151720][T23058] bridge_slave_0: entered allmulticast mode [ 1207.175271][T23058] bridge_slave_0: entered promiscuous mode [ 1207.251195][T23200] pimreg: entered allmulticast mode [ 1207.291649][T23058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.291726][T23058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.291867][T23058] bridge_slave_1: entered allmulticast mode [ 1207.324628][T23058] bridge_slave_1: entered promiscuous mode [ 1207.479352][T20349] hsr_slave_0: left promiscuous mode [ 1207.497494][T20349] hsr_slave_1: left promiscuous mode [ 1207.498148][T20349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.498164][T20349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.508882][T20349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.508899][T20349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.531918][ T5613] Bluetooth: hci3: command tx timeout [ 1207.607760][T20349] veth1_macvtap: left promiscuous mode [ 1207.607790][T20349] veth0_macvtap: left promiscuous mode [ 1207.607862][T20349] veth1_vlan: left promiscuous mode [ 1207.607909][T20349] veth0_vlan: left promiscuous mode [ 1208.540613][T20349] team0 (unregistering): Port device team_slave_1 removed [ 1208.585487][T23237] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5795'. [ 1208.585938][T20349] team0 (unregistering): Port device team_slave_0 removed [ 1208.903301][T23058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.940811][T23058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.107480][ T5271] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1209.115636][T23058] team0: Port device team_slave_0 added [ 1209.414357][T23058] team0: Port device team_slave_1 added [ 1209.775766][T23058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.775781][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.775802][T23058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.830772][T23058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.830785][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.830805][T23058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.968622][T22985] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1209.975183][T22985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1210.044868][T22985] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1210.069241][T22985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1210.070114][T22985] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1210.092415][T22985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1210.125833][T23058] hsr_slave_0: entered promiscuous mode [ 1210.137483][T23058] hsr_slave_1: entered promiscuous mode [ 1210.140763][T23058] debugfs: 'hsr0' already exists in 'hsr' [ 1210.140780][T23058] Cannot create hsr debugfs directory [ 1210.146248][T22985] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1210.214420][T22985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1210.879466][T23285] input: syz0 as /devices/virtual/input/input80 [ 1211.170787][T22985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.284639][T22985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.314749][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.314826][ T9809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.363775][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.363849][ T9809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.469555][T23296] overlayfs: missing 'lowerdir' [ 1212.595608][ T5271] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1212.794670][T22985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1212.909863][T23332] loop8: detected capacity change from 0 to 1024 [ 1212.931107][T23332] EXT4-fs (loop8): stripe (30) is not aligned with cluster size (16), stripe is disabled [ 1212.962838][T23332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.031126][T23332] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1213.232715][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.510124][T23345] loop8: detected capacity change from 0 to 1024 [ 1213.510964][T23345] ext4: Bad value for 'max_dir_size_kb' [ 1213.566014][T23345] loop8: detected capacity change from 0 to 164 [ 1213.740330][T23345] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1214.336351][T23363] fuse: fd is not a fuse device [ 1214.461900][T23366] loop8: detected capacity change from 0 to 512 [ 1214.477914][T23366] EXT4-fs: Ignoring removed nobh option [ 1214.550039][T23366] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 1214.639302][T23366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.661155][T23372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.206814][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1215.700365][T23393] loop8: detected capacity change from 0 to 2048 [ 1215.753544][T23393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1216.194900][T23402] fuse: fd is not a fuse device [ 1216.399735][ T5271] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1216.436209][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5845'. [ 1216.664175][T23415] loop8: detected capacity change from 0 to 2048 [ 1216.691277][T23415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1216.953563][T23058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1216.981934][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1216.982587][T23058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1217.007622][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1217.033273][T22985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.033798][T23058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1217.065099][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1217.084227][T23058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1217.105039][T23058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1217.428925][ T9771] bridge_slave_1: left allmulticast mode [ 1217.428947][ T9771] bridge_slave_1: left promiscuous mode [ 1217.429193][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.434347][ T9771] bridge_slave_0: left allmulticast mode [ 1217.434365][ T9771] bridge_slave_0: left promiscuous mode [ 1217.434513][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.663797][ T9771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.665320][ T9771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.665917][ T9771] bond0 (unregistering): Released all slaves [ 1217.829434][ T9771] tipc: Left network mode [ 1218.029376][T23440] fuse: fd is not a fuse device [ 1218.240889][ T9771] hsr_slave_0: left promiscuous mode [ 1218.257906][ T9771] hsr_slave_1: left promiscuous mode [ 1218.258588][ T9771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.268440][ T9771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.362783][T23444] fuse: Bad value for 'user_id' [ 1218.362799][T23444] fuse: Bad value for 'user_id' [ 1218.592636][T23454] loop8: detected capacity change from 0 to 512 [ 1218.609235][T23454] EXT4-fs: Ignoring removed oldalloc option [ 1218.611100][T23454] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1218.673133][T23454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.996119][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.311707][ T9771] team0 (unregistering): Port device team_slave_1 removed [ 1219.349647][ T9771] team0 (unregistering): Port device team_slave_0 removed [ 1219.427641][T14840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1219.577280][T14840] usb 9-1: New USB device found: idVendor=0763, idProduct=1031, bcdDevice=0.40 [ 1219.578285][T14840] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1219.578316][T14840] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1219.580052][T14840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.580071][T14840] usb 9-1: Product: syz [ 1219.580082][T14840] usb 9-1: Manufacturer: syz [ 1219.580094][T14840] usb 9-1: SerialNumber: syz [ 1219.789298][T23464] netlink: 'syz.7.5858': attribute type 2 has an invalid length. [ 1219.789316][T23464] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1219.907960][T14840] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1220.122936][T14840] usb 9-1: USB disconnect, device number 2 [ 1220.149270][ T5271] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1220.300569][T23058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.352047][T21321] udevd[21321]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.391260][T23486] fuse: fd is not a fuse device [ 1220.548628][T23058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.621955][T20349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.622033][T20349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.706247][T20349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.706320][T20349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.730927][T22985] veth0_vlan: entered promiscuous mode [ 1220.956019][T22985] veth1_vlan: entered promiscuous mode [ 1220.973394][T23493] loop8: detected capacity change from 0 to 256 [ 1221.124498][T23493] exFAT-fs (loop8): failed to load upcase table (idx : 0x000124d2, chksum : 0x32bda17b, utbl_chksum : 0xe619d30d) [ 1221.297116][T22985] veth0_macvtap: entered promiscuous mode [ 1221.342196][T22985] veth1_macvtap: entered promiscuous mode [ 1221.461036][T22985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.599488][T22985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.851946][ T9771] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.852183][ T9771] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.013612][ T9771] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.080709][T20346] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.183063][T23523] loop8: detected capacity change from 0 to 512 [ 1222.209676][T23523] EXT4-fs: Ignoring removed mblk_io_submit option [ 1222.225975][T23523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1222.320211][T23523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.348775][T23523] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.522325][T20346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.522344][T20346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.566202][T23523] EXT4-fs error (device loop8): ext4_xattr_block_find:1885: inode #15: comm syz.8.5873: corrupted xattr block 33: invalid header [ 1222.722978][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.075904][ T6183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.075921][ T6183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.401309][T23550] loop8: detected capacity change from 0 to 2048 [ 1223.453543][T23550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.775544][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.013845][ T33] audit: type=1326 audit(1790911427.960:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23563 comm="syz.9.5721" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dc859e159 code=0x0 [ 1225.155448][ T5271] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1225.228622][T23573] 9p: Bad value for 'wfdno' [ 1225.504816][T23058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.556319][T23586] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1225.556353][T23586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1225.731039][T23058] veth0_vlan: entered promiscuous mode [ 1225.773162][T23058] veth1_vlan: entered promiscuous mode [ 1225.897652][T23058] veth0_macvtap: entered promiscuous mode [ 1225.941253][T23058] veth1_macvtap: entered promiscuous mode [ 1226.035935][T23058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.075127][T23058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.183034][T23598] loop9: detected capacity change from 0 to 512 [ 1226.217501][ T9771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.285056][T23601] loop8: detected capacity change from 0 to 256 [ 1226.336793][T20349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.336832][T20349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.336860][T20349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.557919][T23598] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1226.716437][T23603] ip_tables: iptables: counters copy to user failed while replacing table [ 1227.145672][T23610] loop8: detected capacity change from 0 to 8192 [ 1227.171891][T23610] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1227.443111][ T6507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.443129][ T6507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.714640][ T6183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.721834][ T6183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.922154][T23625] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1227.922192][T23625] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1229.455068][T23669] bridge0: port 3(syz_tun) entered blocking state [ 1229.455149][T23669] bridge0: port 3(syz_tun) entered disabled state [ 1229.455272][T23669] syz_tun: entered allmulticast mode [ 1229.489216][T23669] syz_tun: entered promiscuous mode [ 1229.489733][T23669] bridge0: port 3(syz_tun) entered blocking state [ 1229.489969][T23669] bridge0: port 3(syz_tun) entered forwarding state [ 1229.533590][T23669] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1229.930023][T23683] loop9: detected capacity change from 0 to 128 [ 1230.293400][T23687] loop9: detected capacity change from 0 to 8 [ 1230.293962][T23687] squashfs: Unknown parameter '00000000000000000007è á„ËÔ¸¥³Pc_ûøJ‘£Èè' [ 1230.641339][T23694] fuse: fd is not a fuse device [ 1230.965555][T23702] loop9: detected capacity change from 0 to 128 [ 1230.985620][T23702] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1231.141152][T23702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.358121][T23711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5930'. [ 1231.582135][T23716] netlink: 'syz.0.5932': attribute type 12 has an invalid length. [ 1231.582153][T23716] netlink: 'syz.0.5932': attribute type 29 has an invalid length. [ 1231.582163][T23716] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5932'. [ 1231.582194][T23716] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5932'. [ 1231.755054][T23717] loop9: detected capacity change from 0 to 1024 [ 1231.773657][T23717] EXT4-fs: Ignoring removed orlov option [ 1231.864657][T23717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.073111][T22985] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.837692][T23745] futex_wake_op: syz.0.5939 tries to shift op by 144; fix this program [ 1234.086223][T23751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5942'. [ 1234.086402][T23751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.287883][T23751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.695578][T23763] loop8: detected capacity change from 0 to 256 [ 1234.709823][T23763] exfat: Invalid uid '0x00000000ffffffff' [ 1237.030797][T23783] fuse: Invalid rootmode [ 1237.177712][T23790] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5955'. [ 1237.540706][T23802] program syz.0.5959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1238.124883][T23813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5962'. [ 1238.215717][T23825] veth0: entered promiscuous mode [ 1238.232568][T23825] bridge0: entered promiscuous mode [ 1238.526242][T23824] bridge0: left promiscuous mode [ 1238.584678][T23824] veth0: left promiscuous mode [ 1238.733617][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.733664][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.228575][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1239.378568][ T10] usb 10-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 1239.379981][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.379999][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1239.382315][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1239.382334][ T10] usb 10-1: SerialNumber: syz [ 1239.713338][ T10] usb 10-1: 0:2 : does not exist [ 1239.966545][ T10] usb 10-1: USB disconnect, device number 2 [ 1240.148236][ T5732] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1240.154021][T21321] udevd[21321]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.296786][ T5732] usb 9-1: Using ep0 maxpacket: 16 [ 1240.298707][ T5732] usb 9-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 1240.302704][ T5732] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.302723][ T5732] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1240.302774][ T5732] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1240.345471][ T5732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.345491][ T5732] usb 9-1: Product: syz [ 1240.345502][ T5732] usb 9-1: Manufacturer: syz [ 1240.345513][ T5732] usb 9-1: SerialNumber: syz [ 1240.671642][ T5732] usb 9-1: 6:0: failed to get current value for ch 0 (-71) [ 1241.024023][ T5732] usb 9-1: USB disconnect, device number 3 [ 1241.375402][T23901] udevd[23901]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.631858][T23912] fuse: Bad value for 'rootmode' [ 1241.876795][T23921] loop9: detected capacity change from 0 to 128 [ 1241.895214][T23921] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1241.919613][T23921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1242.166484][T23927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6004'. [ 1244.071166][T23946] fuse: Bad value for 'rootmode' [ 1246.087726][T23992] fuse: Unknown parameter 'use00000000000000000000' [ 1246.114614][T23996] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6022'. [ 1246.229790][T24000] loop9: detected capacity change from 0 to 1024 [ 1246.468257][T24007] loop8: detected capacity change from 0 to 8 [ 1247.517993][T24000] hfsplus: bad catalog file entry [ 1247.552266][T24007] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1247.552291][T24007] SQUASHFS error: Failed to read block 0x91: -5 [ 1247.552302][T24007] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1247.552312][T24007] SQUASHFS error: Unable to read inode 0x11f [ 1248.614056][T20350] hfsplus: bad catalog file entry [ 1248.747065][ T5732] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1248.855206][T24027] fuse: Unknown parameter 'use00000000000000000000' [ 1248.908976][ T5732] usb 9-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 1248.910107][ T5732] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.910125][ T5732] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.961927][ T5732] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.961950][ T5732] usb 9-1: Product: syz [ 1248.961962][ T5732] usb 9-1: Manufacturer: syz [ 1248.961973][ T5732] usb 9-1: SerialNumber: syz [ 1249.254791][T24022] loop8: detected capacity change from 0 to 128 [ 1249.284761][T24022] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1249.334248][T24022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1249.449650][ T5732] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1249.726265][ T5732] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1249.760685][ T5732] usb 9-1: USB disconnect, device number 4 [ 1249.862935][T21321] udevd[21321]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.348967][T24061] ip_tables: iptables: counters copy to user failed while replacing table [ 1250.410641][T24063] loop8: detected capacity change from 0 to 512 [ 1250.461307][T24063] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1250.483110][T24063] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1250.493718][T24063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1250.493793][T24063] System zones: 0-2, 18-18, 34-35 [ 1250.515335][T24063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.549171][T24065] loop9: detected capacity change from 0 to 1024 [ 1250.792587][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.071205][T24065] hfsplus: xattr search failed [ 1252.178774][T24077] loop8: detected capacity change from 0 to 764 [ 1254.070642][T24092] loop8: detected capacity change from 0 to 512 [ 1254.097752][T24092] EXT4-fs: Ignoring removed nobh option [ 1254.316222][T24092] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory [ 1254.316245][T24092] loop8: lost filesystem error report for type 5 error -12 [ 1254.317368][ C0] EXT4-fs (loop8): initial error at time 2000000024: ext4_process_orphan:346 [ 1254.317390][ C0] EXT4-fs (loop8): last error at time 2000000024: ext4_process_orphan:346 [ 1254.492303][T24092] EXT4-fs (loop8): 2 truncates cleaned up [ 1254.493496][T24092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.748455][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.943651][T24113] overlayfs: missing 'lowerdir' [ 1255.081753][T24117] fuse: Unknown parameter 'user_i00000000000000000000' [ 1255.869609][ T33] audit: type=1326 audit(2000000026.530:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24132 comm="syz.8.6076" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85b999e159 code=0x0 [ 1256.277560][T24145] FAULT_INJECTION: forcing a failure. [ 1256.277560][T24145] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.277607][T24145] CPU: 0 UID: 0 PID: 24145 Comm: syz.9.6079 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.277639][T24145] Tainted: [L]=SOFTLOCKUP [ 1256.277648][T24145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1256.277662][T24145] Call Trace: [ 1256.277669][T24145] [ 1256.277676][T24145] dump_stack_lvl+0xe8/0x150 [ 1256.277699][T24145] should_fail_ex+0x3eb/0x540 [ 1256.277733][T24145] should_failslab+0xa8/0x100 [ 1256.277749][T24145] ? skb_clone+0x212/0x3a0 [ 1256.277764][T24145] kmem_cache_alloc_noprof+0x9c/0x600 [ 1256.277783][T24145] ? skb_clone+0x212/0x3a0 [ 1256.277803][T24145] skb_clone+0x212/0x3a0 [ 1256.277821][T24145] __netlink_deliver_tap+0x355/0x6e0 [ 1256.277845][T24145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1256.277863][T24145] netlink_deliver_tap+0x19c/0x1b0 [ 1256.277881][T24145] netlink_unicast+0x781/0x940 [ 1256.277914][T24145] netlink_sendmsg+0x7c3/0xae0 [ 1256.277934][T24145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.277955][T24145] ? apparmor_socket_sendmsg+0x98/0x360 [ 1256.277975][T24145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.277989][T24145] sock_sendmsg_nosec+0x14e/0x190 [ 1256.278007][T24145] ____sys_sendmsg+0x54e/0x850 [ 1256.278027][T24145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.278051][T24145] ? import_iovec+0x73/0xa0 [ 1256.278072][T24145] ___sys_sendmsg+0x2a5/0x360 [ 1256.278086][T24145] ? __lock_acquire+0x747/0x2de0 [ 1256.278106][T24145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.278124][T24145] ? futex_wait+0x2a2/0x390 [ 1256.278162][T24145] ? __fget_files+0x3a2/0x420 [ 1256.278176][T24145] ? __fget_files+0x2a/0x420 [ 1256.278198][T24145] __x64_sys_sendmsg+0x1b1/0x290 [ 1256.278215][T24145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1256.278247][T24145] do_syscall_64+0x166/0x520 [ 1256.278262][T24145] ? trace_irq_disable+0x3b/0x140 [ 1256.278276][T24145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.278292][T24145] ? clear_bhb_loop+0x70/0xc0 [ 1256.278309][T24145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.278325][T24145] RIP: 0033:0x7f4dc859e159 [ 1256.278340][T24145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.278354][T24145] RSP: 002b:00007f4dc954b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.278371][T24145] RAX: ffffffffffffffda RBX: 00007f4dc8825fa0 RCX: 00007f4dc859e159 [ 1256.278383][T24145] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1256.278394][T24145] RBP: 00007f4dc863506b R08: 0000000000000000 R09: 0000000000000000 [ 1256.278404][T24145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.278414][T24145] R13: 00007f4dc8826038 R14: 00007f4dc8825fa0 R15: 00007ffe8d2b5778 [ 1256.278439][T24145] [ 1257.009550][T24155] overlayfs: missing 'lowerdir' [ 1257.168033][T24160] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[22812] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[24160] [ 1258.461999][T24190] overlayfs: missing 'lowerdir' [ 1258.501759][T24192] loop8: detected capacity change from 0 to 512 [ 1258.502476][T24192] EXT4-fs: quotafile must be on filesystem root [ 1258.970042][T24207] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6105'. [ 1259.127095][ T5801] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1259.279890][ T5801] usb 9-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 1259.292324][ T5801] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.314921][ T5801] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1259.314942][ T5801] usb 9-1: Product: syz [ 1259.314953][ T5801] usb 9-1: Manufacturer: syz [ 1259.368908][ T5801] hub 9-1:1.0: USB hub found [ 1259.607088][ T5801] hub 9-1:1.0: config failed, can't read hub descriptor (err -22) [ 1259.655782][ T5801] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input81 [ 1259.759193][ C0] usbtouchscreen 9-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1259.823124][ T5801] usb 9-1: Failed to suspend device, error -71 [ 1260.023891][ T5801] usb 9-1: USB disconnect, device number 5 [ 1261.488200][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6119'. [ 1261.507033][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6119'. [ 1261.507262][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6119'. [ 1261.507881][T24253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6119'. [ 1261.740622][T24258] FAULT_INJECTION: forcing a failure. [ 1261.740622][T24258] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.740651][T24258] CPU: 0 UID: 0 PID: 24258 Comm: syz.8.6121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.740675][T24258] Tainted: [L]=SOFTLOCKUP [ 1261.740681][T24258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1261.740692][T24258] Call Trace: [ 1261.740698][T24258] [ 1261.740706][T24258] dump_stack_lvl+0xe8/0x150 [ 1261.740728][T24258] should_fail_ex+0x3eb/0x540 [ 1261.740749][T24258] ? alloc_vmap_area+0x217/0x1410 [ 1261.740765][T24258] should_failslab+0xa8/0x100 [ 1261.740782][T24258] ? alloc_vmap_area+0x217/0x1410 [ 1261.740797][T24258] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1261.740816][T24258] ? alloc_vmap_area+0x217/0x1410 [ 1261.740838][T24258] alloc_vmap_area+0x217/0x1410 [ 1261.740871][T24258] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1261.740885][T24258] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1261.740903][T24258] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1261.740918][T24258] ? __get_vm_area_node+0x155/0x2f0 [ 1261.740940][T24258] __get_vm_area_node+0x200/0x2f0 [ 1261.740962][T24258] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1261.740980][T24258] ? n_tty_open+0x1d/0x150 [ 1261.740996][T24258] ? __lock_acquire+0x747/0x2de0 [ 1261.741016][T24258] ? lock_acquire+0x115/0x350 [ 1261.741047][T24258] ? do_raw_spin_lock+0x12b/0x2f0 [ 1261.741066][T24258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1261.741090][T24258] ? n_tty_open+0x1d/0x150 [ 1261.741106][T24258] vzalloc_noprof+0xb2/0xe0 [ 1261.741122][T24258] ? n_tty_open+0x1d/0x150 [ 1261.741138][T24258] n_tty_open+0x1d/0x150 [ 1261.741155][T24258] tty_ldisc_setup+0xcc/0x270 [ 1261.741187][T24258] tty_init_dev+0x279/0x4d0 [ 1261.741205][T24258] ptmx_open+0xeb/0x2e0 [ 1261.741223][T24258] chrdev_open+0x4d9/0x600 [ 1261.741241][T24258] ? __pfx_chrdev_open+0x10/0x10 [ 1261.741258][T24258] ? devcgroup_check_permission+0x31/0x8f0 [ 1261.741279][T24258] ? __pfx_chrdev_open+0x10/0x10 [ 1261.741294][T24258] do_dentry_open+0x80e/0x1360 [ 1261.741318][T24258] vfs_open_consume+0x4a/0x350 [ 1261.741332][T24258] ? path_openat+0x148a/0x1da0 [ 1261.741350][T24258] path_openat+0x14a6/0x1da0 [ 1261.741380][T24258] do_file_open+0x23e/0x4a0 [ 1261.741401][T24258] ? __pfx_do_file_open+0x10/0x10 [ 1261.741433][T24258] ? _raw_spin_unlock+0x28/0x50 [ 1261.741449][T24258] ? alloc_fd+0x6af/0x760 [ 1261.741478][T24258] do_sys_openat2+0x115/0x200 [ 1261.741494][T24258] ? __se_sys_futex+0x3a8/0x450 [ 1261.741510][T24258] ? __pfx_do_sys_openat2+0x10/0x10 [ 1261.741530][T24258] ? rcu_is_watching+0x16/0xb0 [ 1261.741550][T24258] __x64_sys_openat+0x138/0x170 [ 1261.741570][T24258] do_syscall_64+0x166/0x520 [ 1261.741585][T24258] ? trace_irq_disable+0x3b/0x140 [ 1261.741599][T24258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.741616][T24258] ? clear_bhb_loop+0x70/0xc0 [ 1261.741633][T24258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.741649][T24258] RIP: 0033:0x7f85b999e159 [ 1261.741664][T24258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.741678][T24258] RSP: 002b:00007f85b7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1261.741695][T24258] RAX: ffffffffffffffda RBX: 00007f85b9c25fa0 RCX: 00007f85b999e159 [ 1261.741707][T24258] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1261.741719][T24258] RBP: 00007f85b9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1261.741730][T24258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.741740][T24258] R13: 00007f85b9c26038 R14: 00007f85b9c25fa0 R15: 00007ffccfa74da8 [ 1261.741766][T24258] [ 1261.874982][T24258] syz.8.6121: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1261.875041][T24258] CPU: 0 UID: 0 PID: 24258 Comm: syz.8.6121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.875064][T24258] Tainted: [L]=SOFTLOCKUP [ 1261.875070][T24258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1261.875081][T24258] Call Trace: [ 1261.875088][T24258] [ 1261.875095][T24258] dump_stack_lvl+0xe8/0x150 [ 1261.875118][T24258] warn_alloc+0x24d/0x270 [ 1261.875136][T24258] ? lockdep_hardirqs_on+0x7b/0x110 [ 1261.875154][T24258] ? __pfx_warn_alloc+0x10/0x10 [ 1261.875169][T24258] ? kfree+0x1c5/0x650 [ 1261.875190][T24258] ? __get_vm_area_node+0x219/0x2f0 [ 1261.875214][T24258] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1261.875231][T24258] ? __lock_acquire+0x747/0x2de0 [ 1261.875252][T24258] ? lock_acquire+0x115/0x350 [ 1261.875283][T24258] ? do_raw_spin_lock+0x12b/0x2f0 [ 1261.875302][T24258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1261.875325][T24258] ? n_tty_open+0x1d/0x150 [ 1261.875348][T24258] vzalloc_noprof+0xb2/0xe0 [ 1261.875364][T24258] ? n_tty_open+0x1d/0x150 [ 1261.875381][T24258] n_tty_open+0x1d/0x150 [ 1261.875398][T24258] tty_ldisc_setup+0xcc/0x270 [ 1261.875417][T24258] tty_init_dev+0x279/0x4d0 [ 1261.875436][T24258] ptmx_open+0xeb/0x2e0 [ 1261.875455][T24258] chrdev_open+0x4d9/0x600 [ 1261.875480][T24258] ? __pfx_chrdev_open+0x10/0x10 [ 1261.875498][T24258] ? devcgroup_check_permission+0x31/0x8f0 [ 1261.875520][T24258] ? __pfx_chrdev_open+0x10/0x10 [ 1261.875535][T24258] do_dentry_open+0x80e/0x1360 [ 1261.875561][T24258] vfs_open_consume+0x4a/0x350 [ 1261.875575][T24258] ? path_openat+0x148a/0x1da0 [ 1261.875593][T24258] path_openat+0x14a6/0x1da0 [ 1261.875626][T24258] do_file_open+0x23e/0x4a0 [ 1261.875647][T24258] ? __pfx_do_file_open+0x10/0x10 [ 1261.875681][T24258] ? _raw_spin_unlock+0x28/0x50 [ 1261.875696][T24258] ? alloc_fd+0x6af/0x760 [ 1261.875720][T24258] do_sys_openat2+0x115/0x200 [ 1261.875736][T24258] ? __se_sys_futex+0x3a8/0x450 [ 1261.875753][T24258] ? __pfx_do_sys_openat2+0x10/0x10 [ 1261.875774][T24258] ? rcu_is_watching+0x16/0xb0 [ 1261.875794][T24258] __x64_sys_openat+0x138/0x170 [ 1261.875814][T24258] do_syscall_64+0x166/0x520 [ 1261.875829][T24258] ? trace_irq_disable+0x3b/0x140 [ 1261.875843][T24258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.875861][T24258] ? clear_bhb_loop+0x70/0xc0 [ 1261.875878][T24258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.875895][T24258] RIP: 0033:0x7f85b999e159 [ 1261.875911][T24258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.875926][T24258] RSP: 002b:00007f85b7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1261.875942][T24258] RAX: ffffffffffffffda RBX: 00007f85b9c25fa0 RCX: 00007f85b999e159 [ 1261.875955][T24258] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1261.875967][T24258] RBP: 00007f85b9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1261.875977][T24258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.875987][T24258] R13: 00007f85b9c26038 R14: 00007f85b9c25fa0 R15: 00007ffccfa74da8 [ 1261.876014][T24258] [ 1261.876041][T24258] Mem-Info: [ 1261.876050][T24258] active_anon:7948 inactive_anon:0 isolated_anon:0 [ 1261.876050][T24258] active_file:3488 inactive_file:61748 isolated_file:0 [ 1261.876050][T24258] unevictable:0 dirty:268 writeback:0 [ 1261.876050][T24258] slab_reclaimable:12318 slab_unreclaimable:102477 [ 1261.876050][T24258] mapped:32791 shmem:1072 pagetables:4046 [ 1261.876050][T24258] sec_pagetables:0 bounce:0 [ 1261.876050][T24258] kernel_misc_reclaimable:0 [ 1261.876050][T24258] free:1282818 free_pcp:9114 free_cma:0 [ 1261.876092][T24258] Node 0 active_anon:31792kB inactive_anon:0kB active_file:13952kB inactive_file:246788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131164kB dirty:1056kB writeback:0kB shmem:4288kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:12704kB pagetables:16028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1261.876137][T24258] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1261.876178][T24258] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.876224][T24258] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1261.876254][T24258] Node 0 DMA32 free:1175268kB boost:0kB min:34388kB low:42984kB high:51580kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31792kB inactive_anon:0kB active_file:13952kB inactive_file:246788kB unevictable:0kB writepending:1056kB zspages:0kB present:3129332kB managed:2546656kB mlocked:0kB bounce:0kB free_pcp:32360kB local_pcp:32360kB free_cma:0kB [ 1261.876302][T24258] lowmem_reserve[]: 0 0 0 0 0 [ 1261.876329][T24258] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.876372][T24258] lowmem_reserve[]: 0 0 0 0 0 [ 1262.023788][T24258] Node 1 Normal free:3940644kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:4096kB free_cma:0kB [ 1262.023841][T24258] lowmem_reserve[]: 0 0 0 0 0 [ 1262.023869][T24258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1262.023958][T24258] Node 0 DMA32: 3609*4kB (UME) 2962*8kB (UME) 2017*16kB (UME) 1687*32kB (UME) 1450*64kB (UM) 1195*128kB (UM) 775*256kB (UME) 379*512kB (UME) 171*1024kB (UM) 20*2048kB (UM) 48*4096kB (UM) = 1175268kB [ 1262.024081][T24258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1262.024156][T24258] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 2*32kB (UM) 3*64kB (UM) 7*128kB (UM) 2*256kB (M) 5*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 959*4096kB (UM) = 3940644kB [ 1262.067775][T24258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.067790][T24258] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1262.067803][T24258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.067816][T24258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1262.067829][T24258] 65742 total pagecache pages [ 1262.067837][T24258] 2 pages in swap cache [ 1262.067842][T24258] Free swap = 124988kB [ 1262.067848][T24258] Total swap = 124996kB [ 1262.067856][T24258] 2097051 pages RAM [ 1262.067863][T24258] 0 pages HighMem/MovableOnly [ 1262.067868][T24258] 428771 pages reserved [ 1262.067875][T24258] 0 pages cma reserved [ 1262.067885][T24258] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1263.006732][T24260] fuse: Bad value for 'fd' [ 1263.269516][T24272] loop9: detected capacity change from 0 to 512 [ 1263.271271][T24272] EXT4-fs: Ignoring removed oldalloc option [ 1263.291880][T24272] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1263.307347][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1263.311423][T24273] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1263.315793][T24273] xt_hashlimit: max too large, truncated to 1048576 [ 1263.315893][T24273] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 1263.392949][T24272] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.562590][ T33] audit: type=1804 audit(2000000034.220:3394): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.6127" name="/newroot/46/file0/bus" dev="loop9" ino=18 res=1 errno=0 [ 1264.296101][T22985] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.681598][T24303] 9p: Bad value for 'wfdno' [ 1264.885138][T24307] loop9: detected capacity change from 0 to 512 [ 1264.901405][T24307] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1264.981793][T24310] fuse: Bad value for 'fd' [ 1265.270858][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6139'. [ 1265.292977][T24315] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6139'. [ 1265.400809][T24320] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6141'. [ 1265.944674][T24342] fuse: Unknown parameter '0x0000000000000004' [ 1267.611215][T24348] Option ' äÇ©?oÈëƒÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÐÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/rD$¹ Ïk;REÁŠ¨ãÉ<' to dns_resolver key: bad/missing value [ 1267.811557][T24355] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1267.871004][T24359] loop8: detected capacity change from 0 to 1024 [ 1267.871789][T24359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1267.933277][T24359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1267.933353][T24359] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.122775][T24368] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6156'. [ 1268.173292][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1268.381577][T24374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.382052][T24374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.403053][T24374] bridge0: entered allmulticast mode [ 1268.421755][T24375] input: syz1 as /devices/virtual/input/input82 [ 1268.541340][T24374] bridge_slave_1: left allmulticast mode [ 1268.541387][T24374] bridge_slave_1: left promiscuous mode [ 1268.544100][T24374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.687971][T24374] bridge_slave_0: left allmulticast mode [ 1268.687994][T24374] bridge_slave_0: left promiscuous mode [ 1268.688150][T24374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.833184][T24386] fuse: Unknown parameter '0x0000000000000004' [ 1271.013727][T24418] loop9: detected capacity change from 0 to 256 [ 1271.064026][T24418] exFAT-fs (loop9): error, no upcase table entry. Please run fsck [ 1271.064043][T24418] exFAT-fs (loop9): Filesystem has been set read-only [ 1271.064290][T24418] exFAT-fs (loop9): failed to test first cluster bit of root dir(5) [ 1271.244611][T24425] fuse: Unknown parameter '0x0000000000000004' [ 1271.689037][T24437] fuse: Bad value for 'fd' [ 1272.370647][T24458] loop9: detected capacity change from 0 to 1024 [ 1272.418662][T24458] hfsplus: failed to load extents file [ 1272.445432][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6184'. [ 1272.445542][T24458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.599390][T24458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.055236][T24468] fuse: Unknown parameter '0x0000000000000004' [ 1273.327944][T24476] fuse: Bad value for 'fd' [ 1275.970515][T24515] fuse: Unknown parameter '0x0000000000000004' [ 1279.193212][T24522] fuse: Bad value for 'fd' [ 1279.894695][T24527] 9p: Bad value for 'rfdno' [ 1281.101181][T24552] fuse: Unknown parameter '0x0000000000000004' [ 1281.459233][T24558] loop8: detected capacity change from 0 to 2048 [ 1281.551053][T24558] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.053176][T24558] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.455733][ T9809] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.783900][T24583] 9p: Bad value for 'rfdno' [ 1283.198989][ T9809] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.307191][T24599] fuse: Unknown parameter 'fd0x0000000000000004' [ 1283.468840][T24603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6228'. [ 1283.503229][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1283.505633][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1283.515591][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1283.544920][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1283.545374][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1283.803983][T24612] loop8: detected capacity change from 0 to 128 [ 1283.820702][T24612] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1283.870779][T24612] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1283.895276][ T9809] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.934357][T24612] EXT4-fs error (device loop8): __ext4_find_entry:1628: inode #2: comm syz.8.6230: checksumming directory block 0 [ 1284.207399][T22812] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1284.493596][T24624] loop8: detected capacity change from 0 to 2048 [ 1284.512246][ T9809] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.545142][T24624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1284.897618][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1285.049729][ T10] usb 9-1: New USB device found: idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 1285.071333][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.071354][ T10] usb 9-1: Product: syz [ 1285.071366][ T10] usb 9-1: Manufacturer: syz [ 1285.071376][ T10] usb 9-1: SerialNumber: syz [ 1285.085809][ T10] usb 9-1: config 0 descriptor?? [ 1285.225237][T24645] fuse: Unknown parameter 'fd0x0000000000000004' [ 1285.309193][ T10] usb 9-1: USB disconnect, device number 6 [ 1285.686831][T11717] Bluetooth: hci2: command tx timeout [ 1286.626440][T24688] fuse: Unknown parameter 'fd0x0000000000000004' [ 1287.145015][ T9809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.169434][ T9809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.172725][ T9809] bond0 (unregistering): Released all slaves [ 1287.526444][T24706] loop8: detected capacity change from 0 to 1024 [ 1287.614071][T24706] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1287.767629][T11717] Bluetooth: hci2: command tx timeout [ 1287.773382][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1289.239567][ T33] audit: type=1804 audit(2000000059.890:3395): pid=24714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.6260" name="/newroot/113/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 1289.531069][T22812] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.755613][ T9809] hsr_slave_0: left promiscuous mode [ 1289.764492][ T9809] hsr_slave_1: left promiscuous mode [ 1289.765084][ T9809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.765099][ T9809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.822324][ T9809] veth1_macvtap: left promiscuous mode [ 1289.822355][ T9809] veth0_macvtap: left promiscuous mode [ 1289.822442][ T9809] veth1_vlan: left promiscuous mode [ 1289.822490][ T9809] veth0_vlan: left promiscuous mode [ 1289.853468][T11717] Bluetooth: hci2: command tx timeout [ 1291.972337][T11717] Bluetooth: hci2: command tx timeout [ 1294.030458][T24748] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[22812] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[24748] [ 1294.136053][T24751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6275'. [ 1294.190415][T24753] netlink: 'syz.0.6275': attribute type 16 has an invalid length. [ 1294.190433][T24753] netlink: 'syz.0.6275': attribute type 17 has an invalid length. [ 1294.482807][ T9809] team0 (unregistering): Port device team_slave_1 removed [ 1294.516255][ T9809] team0 (unregistering): Port device team_slave_0 removed [ 1294.699262][T24756] loop8: detected capacity change from 0 to 256 [ 1295.081267][T24753] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1296.303894][T24600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.304014][T24600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.304133][T24600] bridge_slave_0: entered allmulticast mode [ 1296.340129][T24600] bridge_slave_0: entered promiscuous mode [ 1296.355934][T24600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.356026][T24600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.356126][T24600] bridge_slave_1: entered allmulticast mode [ 1296.384551][T24600] bridge_slave_1: entered promiscuous mode [ 1299.942218][T24600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.984115][T24600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.170104][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.173782][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.213741][T24600] team0: Port device team_slave_0 added [ 1300.233194][T24600] team0: Port device team_slave_1 added [ 1300.389652][T24600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.389667][T24600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.389688][T24600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.450416][T24600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.450430][T24600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.450451][T24600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.959177][T24600] hsr_slave_0: entered promiscuous mode [ 1300.976357][T24600] hsr_slave_1: entered promiscuous mode [ 1300.989138][T24600] debugfs: 'hsr0' already exists in 'hsr' [ 1300.989156][T24600] Cannot create hsr debugfs directory [ 1301.415301][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1302.691124][T24871] overlayfs: failed to clone upperpath [ 1302.951107][T24879] fuse: fd is not a fuse device [ 1303.260732][T24884] loop8: detected capacity change from 0 to 8192 [ 1304.655015][T24916] fuse: Bad value for 'fd' [ 1304.848317][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1307.466930][T24600] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1307.517724][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1307.522945][T24600] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1307.567669][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1307.590517][T24600] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1307.628780][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1307.651599][T24600] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1307.678772][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1308.205090][T24600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.251940][T24973] overlayfs: failed to clone upperpath [ 1308.300712][T24600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.341404][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.341498][ T6633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.421205][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.421296][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.951850][T11717] Bluetooth: hci0: hardware error 0x01 [ 1309.393366][T25000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.393829][T25000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.571461][T25000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.997895][ T6507] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.997933][ T6507] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.997960][ T6507] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.997985][ T6507] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.479532][T25025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1310.746362][T25031] fuse: fd is not a fuse device [ 1311.049416][T11717] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1311.219036][T24600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.343135][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343151][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343160][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343167][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343176][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343183][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343191][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343198][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343206][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343214][T25047] tc action pedit offset must be on 32 bit boundaries [ 1311.343251][T25047] TC_ACT_REPEAT abuse ? [ 1312.348479][T25078] xt_hashlimit: size too large, truncated to 1048576 [ 1312.487192][T11717] Bluetooth: hci4: command 0x0406 tx timeout [ 1312.719018][T24600] veth0_vlan: entered promiscuous mode [ 1312.794744][T24600] veth1_vlan: entered promiscuous mode [ 1312.952866][T24600] veth0_macvtap: entered promiscuous mode [ 1313.004580][T24600] veth1_macvtap: entered promiscuous mode [ 1313.110038][T24600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.152306][T24600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.295537][ T6629] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.295928][ T6629] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.295957][ T6629] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.295983][ T6629] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.669095][T25101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6387'. [ 1313.673994][T25101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6387'. [ 1313.703796][ T6629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.703813][ T6629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.859207][T10538] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1313.960415][ T6507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.960433][ T6507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.008513][T10538] usb 9-1: Using ep0 maxpacket: 32 [ 1314.010651][T10538] usb 9-1: New USB device found: idVendor=056a, idProduct=010d, bcdDevice=0.00 [ 1314.015179][T10538] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.015213][T10538] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1314.015245][T10538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.096283][T10538] usb 9-1: config 0 descriptor?? [ 1314.119371][T10538] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1314.623379][T25121] loop8: detected capacity change from 0 to 8192 [ 1315.444900][T25138] jffs2: notice: (25138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1315.914038][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1315.960773][T11717] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1315.980900][T11717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1315.984019][T11717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1315.996067][T11717] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1316.025707][T11717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1316.644345][T10538] usb 9-1: USB disconnect, device number 7 [ 1318.044564][T25201] FAULT_INJECTION: forcing a failure. [ 1318.044564][T25201] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.044592][T25201] CPU: 0 UID: 0 PID: 25201 Comm: syz.0.6412 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.044615][T25201] Tainted: [L]=SOFTLOCKUP [ 1318.044621][T25201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1318.044631][T25201] Call Trace: [ 1318.044637][T25201] [ 1318.044644][T25201] dump_stack_lvl+0xe8/0x150 [ 1318.044667][T25201] should_fail_ex+0x3eb/0x540 [ 1318.044688][T25201] should_failslab+0xa8/0x100 [ 1318.044706][T25201] __kvmalloc_node_noprof+0x171/0x820 [ 1318.044721][T25201] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1318.044737][T25201] ? __kmalloc_cache_noprof+0x148/0x600 [ 1318.044751][T25201] ? percpu_ref_init+0xc5/0x350 [ 1318.044766][T25201] ? io_alloc_cache_init+0x42/0x140 [ 1318.044780][T25201] ? io_alloc_cache_init+0x42/0x140 [ 1318.044800][T25201] io_alloc_cache_init+0x42/0x140 [ 1318.044818][T25201] io_ring_ctx_alloc+0x508/0xb80 [ 1318.044841][T25201] io_uring_create+0x50/0x980 [ 1318.044859][T25201] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1318.044875][T25201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1318.044893][T25201] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1318.044920][T25201] ? rcu_is_watching+0x16/0xb0 [ 1318.044945][T25201] do_syscall_64+0x166/0x520 [ 1318.044959][T25201] ? trace_irq_disable+0x3b/0x140 [ 1318.044973][T25201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.044990][T25201] ? clear_bhb_loop+0x70/0xc0 [ 1318.045007][T25201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.045034][T25201] RIP: 0033:0x7fae5959e159 [ 1318.045048][T25201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.045061][T25201] RSP: 002b:00007fae5a46ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1318.045078][T25201] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007fae5959e159 [ 1318.045089][T25201] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 0000000000000020 [ 1318.045100][T25201] RBP: 00007fae5963506b R08: 0000000000000000 R09: 0000000000000000 [ 1318.045109][T25201] R10: 0000200000000040 R11: 0000000000000206 R12: 00002000000002c0 [ 1318.045120][T25201] R13: 0000200000000040 R14: 0000200000000000 R15: 00007ffcdc68cc78 [ 1318.045143][T25201] [ 1318.170399][ T5613] Bluetooth: hci5: command tx timeout [ 1318.173394][T14840] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 1318.408857][T14840] usb 9-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1318.412037][T14840] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1318.412057][T14840] usb 9-1: config 0 has no interface number 0 [ 1318.412112][T14840] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1318.412133][T14840] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1318.412163][T14840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.414127][T14840] usb 9-1: config 0 descriptor?? [ 1318.415639][T25198] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1318.529157][T14840] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1318.581512][ T6633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.748949][T11670] usb 9-1: USB disconnect, device number 8 [ 1318.921983][T25210] overlayfs: failed to clone upperpath [ 1319.340965][ T6633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.404158][T25215] fuse: Bad value for 'fd' [ 1319.660938][T25223] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1319.803746][ T6633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.247569][ T5613] Bluetooth: hci5: command tx timeout [ 1320.321651][ T6633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.302480][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.302508][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.302528][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.302547][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.302566][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.302585][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.302604][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.302623][ T10] hid-generic 0000:0000:0001.0024: unknown main item tag 0x0 [ 1322.331327][T11717] Bluetooth: hci5: command tx timeout [ 1322.592560][ T10] hid-generic 0000:0000:0001.0024: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1322.734362][T11717] Bluetooth: hci3: command 0x0406 tx timeout [ 1322.748862][T10538] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1322.897316][T10538] usb 9-1: Using ep0 maxpacket: 16 [ 1322.898024][T10538] usb 9-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1322.933288][T10538] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1322.933314][T10538] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1322.975222][T10538] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.975243][T10538] usb 9-1: Product: syz [ 1322.975254][T10538] usb 9-1: Manufacturer: syz [ 1322.975266][T10538] usb 9-1: SerialNumber: syz [ 1323.020035][T10538] usb 9-1: config 0 descriptor?? [ 1323.046318][T25266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.232628][T25278] fido_id[25278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1323.556569][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1323.822982][T10538] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input83 [ 1324.053566][T10538] imon:send_packet: packet tx failed (-71) [ 1324.066934][T10538] imon 9-1:0.0: panel buttons/knobs setup failed [ 1324.955101][ T5613] Bluetooth: hci5: command tx timeout [ 1325.127882][T10538] rc_core: IR keymap rc-imon-pad not found [ 1325.127898][T10538] Registered IR keymap rc-empty [ 1325.128010][T10538] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1325.128024][T10538] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1325.132217][T10538] imon:send_packet: packet tx failed (-71) [ 1325.154295][T10538] imon 9-1:0.0: remote input dev register failed [ 1325.154486][T10538] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1325.826950][T10538] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1325.856077][T10538] usb 9-1: USB disconnect, device number 9 [ 1325.867660][ T6633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.899960][ T6633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.918438][ T6633] bond0 (unregistering): Released all slaves [ 1325.958127][ T6633] bond1 (unregistering): Released all slaves [ 1326.029883][ T6633] bond2 (unregistering): Released all slaves [ 1326.263816][T25150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.263890][T25150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.264004][T25150] bridge_slave_0: entered allmulticast mode [ 1326.297288][T25150] bridge_slave_0: entered promiscuous mode [ 1326.323005][T25150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.323078][T25150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.323201][T25150] bridge_slave_1: entered allmulticast mode [ 1326.358442][T25150] bridge_slave_1: entered promiscuous mode [ 1326.497462][T25327] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1326.730079][T25150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.768713][T25150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.189931][T11670] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1327.340950][T11670] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1327.343328][T11670] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.343360][T11670] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1327.345879][T25150] team0: Port device team_slave_0 added [ 1327.401990][T25150] team0: Port device team_slave_1 added [ 1327.415209][T11670] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.415229][T11670] usb 9-1: Product: syz [ 1327.415240][T11670] usb 9-1: Manufacturer: syz [ 1327.415251][T11670] usb 9-1: SerialNumber: syz [ 1327.490256][T11670] cdc_mbim 9-1:1.0: skipping garbage [ 1327.625423][ T6633] hsr_slave_0: left promiscuous mode [ 1327.633646][ T6633] hsr_slave_1: left promiscuous mode [ 1327.634401][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.634417][ T6633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.659506][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.659525][ T6633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.711640][T25339] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1327.759012][ T6633] veth1_macvtap: left promiscuous mode [ 1327.759043][ T6633] veth0_macvtap: left promiscuous mode [ 1327.759137][ T6633] veth1_vlan: left promiscuous mode [ 1327.759204][ T6633] veth0_vlan: left promiscuous mode [ 1328.335721][T25339] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1328.353692][T11670] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 1328.372871][T11670] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1328.931387][T11670] wwan wwan0: port wwan0mbim0 attached [ 1329.354312][ T6633] team0 (unregistering): Port device team_slave_1 removed [ 1329.481993][ T6633] team0 (unregistering): Port device team_slave_0 removed [ 1329.994383][T25150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.994399][T25150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.994420][T25150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.084106][ T5271] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1330.105871][T25150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.105884][T25150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.105902][T25150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.158766][T11670] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 36:ec:d9:5b:a5:85 [ 1330.220746][T11670] usb 9-1: USB disconnect, device number 10 [ 1330.244307][T11670] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1330.458615][T11670] wwan wwan0: port wwan0mbim0 disconnected [ 1330.701434][T25150] hsr_slave_0: entered promiscuous mode [ 1330.702217][T25150] hsr_slave_1: entered promiscuous mode [ 1330.715003][T25150] debugfs: 'hsr0' already exists in 'hsr' [ 1330.715021][T25150] Cannot create hsr debugfs directory [ 1330.924766][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6463'. [ 1331.407056][T11670] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1331.525714][ T33] audit: type=1326 audit(2000000102.180:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.525756][ T33] audit: type=1326 audit(2000000102.180:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.526040][ T33] audit: type=1326 audit(2000000102.180:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.526071][ T33] audit: type=1326 audit(2000000102.180:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.526381][ T33] audit: type=1326 audit(2000000102.180:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.583290][T11670] usb 9-1: Using ep0 maxpacket: 32 [ 1331.611089][T11670] usb 9-1: New USB device found: idVendor=056a, idProduct=010d, bcdDevice=0.00 [ 1331.614900][T11670] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.614933][T11670] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1331.614963][T11670] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.616898][T11670] usb 9-1: config 0 descriptor?? [ 1331.622653][T11670] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1331.743575][ T33] audit: type=1326 audit(2000000102.180:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.743620][ T33] audit: type=1326 audit(2000000102.370:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.743654][ T33] audit: type=1326 audit(2000000102.370:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.745441][ T33] audit: type=1326 audit(2000000102.410:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1331.745678][ T33] audit: type=1326 audit(2000000102.410:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25405 comm="syz.0.6467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5959e159 code=0x7ffc0000 [ 1332.225006][T25410] loop8: detected capacity change from 0 to 8192 [ 1333.396488][T25437] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6475'. [ 1333.450271][T25416] ftl_cs: FTL header not found. [ 1333.730109][T11670] usb 9-1: USB disconnect, device number 11 [ 1334.316115][T25416] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 1334.580254][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6486'. [ 1336.383426][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6498'. [ 1336.720319][T25499] FAULT_INJECTION: forcing a failure. [ 1336.720319][T25499] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.720350][T25499] CPU: 0 UID: 0 PID: 25499 Comm: syz.0.6500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.720385][T25499] Tainted: [L]=SOFTLOCKUP [ 1336.720391][T25499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1336.720401][T25499] Call Trace: [ 1336.720406][T25499] [ 1336.720413][T25499] dump_stack_lvl+0xe8/0x150 [ 1336.720434][T25499] should_fail_ex+0x3eb/0x540 [ 1336.720453][T25499] should_failslab+0xa8/0x100 [ 1336.720469][T25499] ? security_file_alloc+0x34/0x310 [ 1336.720484][T25499] kmem_cache_alloc_noprof+0x9c/0x600 [ 1336.720499][T25499] ? rcu_is_watching+0x16/0xb0 [ 1336.720514][T25499] ? security_file_alloc+0x34/0x310 [ 1336.720533][T25499] security_file_alloc+0x34/0x310 [ 1336.720549][T25499] init_file+0x90/0x2b0 [ 1336.720564][T25499] alloc_empty_file+0x74/0x1d0 [ 1336.720580][T25499] alloc_file_pseudo+0x110/0x1e0 [ 1336.720596][T25499] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1336.720614][T25499] ? pidfs_register_pid_gfp+0x79/0x1c0 [ 1336.720632][T25499] sock_alloc_file+0xb8/0x2e0 [ 1336.720646][T25499] ? __sys_socketpair+0x249/0x5e0 [ 1336.720662][T25499] __sys_socketpair+0x262/0x5e0 [ 1336.720681][T25499] __x64_sys_socketpair+0x9b/0xb0 [ 1336.720697][T25499] do_syscall_64+0x166/0x520 [ 1336.720711][T25499] ? trace_irq_disable+0x3b/0x140 [ 1336.720724][T25499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.720739][T25499] ? clear_bhb_loop+0x70/0xc0 [ 1336.720755][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.720770][T25499] RIP: 0033:0x7fae5959e159 [ 1336.720783][T25499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.720796][T25499] RSP: 002b:00007fae5a470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1336.720812][T25499] RAX: ffffffffffffffda RBX: 00007fae59825fa0 RCX: 00007fae5959e159 [ 1336.720824][T25499] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1336.720833][T25499] RBP: 00007fae5963506b R08: 0000000000000000 R09: 0000000000000000 [ 1336.720842][T25499] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.720852][T25499] R13: 00007fae59826038 R14: 00007fae59825fa0 R15: 00007ffcdc68cc78 [ 1336.720875][T25499] [ 1336.999219][T25150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1337.036957][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1337.059416][T25150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1337.113445][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1337.133356][T25150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1337.183783][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1337.184425][T25150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1337.240631][T25150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1338.576803][T25517] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1338.694535][T25150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.793380][T25150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.860162][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.860239][ T6633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.894910][T20349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.894992][T20349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.379508][T25526] ip6tnl1: entered promiscuous mode [ 1341.593193][T25562] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1342.320635][T25150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.504746][T25150] veth0_vlan: entered promiscuous mode [ 1342.544206][T25150] veth1_vlan: entered promiscuous mode [ 1342.707839][T25150] veth0_macvtap: entered promiscuous mode [ 1342.744105][T25150] veth1_macvtap: entered promiscuous mode [ 1343.743863][T25150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.784620][T25150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.849101][ T6183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.860606][T20350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.860639][T20350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.860664][T20350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.305111][ T9809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.305128][ T9809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.465267][ T6183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.465284][ T6183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.892552][T25674] netlink: 87 bytes leftover after parsing attributes in process `syz.8.6552'. [ 1348.537888][T25695] netlink: 'syz.8.6557': attribute type 2 has an invalid length. [ 1348.537912][T25695] netlink: 'syz.8.6557': attribute type 1 has an invalid length. [ 1348.537922][T25695] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6557'. [ 1348.537933][T25695] netlink: 'syz.8.6557': attribute type 2 has an invalid length. [ 1348.537942][T25695] netlink: 'syz.8.6557': attribute type 1 has an invalid length. [ 1348.537952][T25695] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6557'. [ 1348.537961][T25695] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 1349.012445][T25710] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1350.054280][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6570'. [ 1350.264698][T25749] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1350.361668][T25758] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 1350.361687][T25758] device-mapper: ioctl: error adding target to table [ 1350.434999][T25754] netlink: 'syz.8.6576': attribute type 4 has an invalid length. [ 1351.588131][T25800] netlink: 'syz.8.6590': attribute type 3 has an invalid length. [ 1351.619513][T25797] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1352.432631][T25826] fuse: Bad value for 'fd' [ 1352.836074][T25838] xt_hashlimit: size too large, truncated to 1048576 [ 1353.530727][T25865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1353.826918][T25877] netlink: 'syz.7.6617': attribute type 14 has an invalid length. [ 1353.870957][T25879] fuse: Unknown parameter 'fd0x0000000000000003' [ 1354.029743][T25884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6620'. [ 1357.389879][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6637'. [ 1357.801764][T25938] loop8: detected capacity change from 0 to 512 [ 1357.830538][T25938] FAT-fs (loop8): data area starts beyond volume (3104 > 128) [ 1357.830558][T25938] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1358.098759][T25942] loop2: detected capacity change from 0 to 512 [ 1359.140702][T25969] FAULT_INJECTION: forcing a failure. [ 1359.140702][T25969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1359.140735][T25969] CPU: 0 UID: 0 PID: 25969 Comm: syz.8.6649 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.140758][T25969] Tainted: [L]=SOFTLOCKUP [ 1359.140764][T25969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1359.140775][T25969] Call Trace: [ 1359.140781][T25969] [ 1359.140788][T25969] dump_stack_lvl+0xe8/0x150 [ 1359.140811][T25969] should_fail_ex+0x3eb/0x540 [ 1359.140831][T25969] prepare_alloc_pages+0x21e/0x5f0 [ 1359.140852][T25969] __alloc_frozen_pages_noprof+0x17a/0x400 [ 1359.140872][T25969] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1359.140888][T25969] ? __alloc_frozen_pages_noprof+0x24a/0x400 [ 1359.140907][T25969] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1359.140932][T25969] __alloc_pages_noprof+0x10/0x100 [ 1359.140949][T25969] alloc_pages_bulk_noprof+0x668/0x890 [ 1359.140972][T25969] ? alloc_pages_noprof+0x140/0x2b0 [ 1359.141010][T25969] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1359.141032][T25969] alloc_vmap_area+0xd10/0x1410 [ 1359.141059][T25969] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1359.141074][T25969] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1359.141091][T25969] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1359.141107][T25969] ? __get_vm_area_node+0x155/0x2f0 [ 1359.141127][T25969] __get_vm_area_node+0x200/0x2f0 [ 1359.141149][T25969] get_vm_area+0x80/0xb0 [ 1359.141166][T25969] ? arena_map_alloc+0x250/0x7e0 [ 1359.141182][T25969] arena_map_alloc+0x250/0x7e0 [ 1359.141197][T25969] ? ns_capable+0x84/0xe0 [ 1359.141216][T25969] map_create+0xf3d/0x1b70 [ 1359.141239][T25969] ? __pfx_map_create+0x10/0x10 [ 1359.141259][T25969] ? __might_fault+0xaf/0x130 [ 1359.141275][T25969] ? bpf_lsm_bpf+0x9/0x20 [ 1359.141290][T25969] ? security_bpf+0x7e/0x2d0 [ 1359.141308][T25969] __sys_bpf+0xae6/0xe00 [ 1359.141329][T25969] ? __pfx___sys_bpf+0x10/0x10 [ 1359.141347][T25969] ? do_futex+0x3e7/0x4e0 [ 1359.141384][T25969] ? rcu_is_watching+0x16/0xb0 [ 1359.141404][T25969] __x64_sys_bpf+0xba/0xd0 [ 1359.141423][T25969] do_syscall_64+0x166/0x520 [ 1359.141438][T25969] ? trace_irq_disable+0x3b/0x140 [ 1359.141452][T25969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.141469][T25969] ? clear_bhb_loop+0x70/0xc0 [ 1359.141487][T25969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.141503][T25969] RIP: 0033:0x7f85b999e159 [ 1359.141519][T25969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.141533][T25969] RSP: 002b:00007f85b7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1359.141551][T25969] RAX: ffffffffffffffda RBX: 00007f85b9c25fa0 RCX: 00007f85b999e159 [ 1359.141564][T25969] RDX: 0000000000000048 RSI: 0000200000003940 RDI: 0000000000000000 [ 1359.141575][T25969] RBP: 00007f85b9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1359.141585][T25969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.141595][T25969] R13: 00007f85b9c26038 R14: 00007f85b9c25fa0 R15: 00007ffccfa74da8 [ 1359.141620][T25969] [ 1359.663408][T25972] netlink: 'syz.9.6650': attribute type 4 has an invalid length. [ 1360.023006][T25977] xt_hashlimit: size too large, truncated to 1048576 [ 1360.133378][T25985] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 1360.656149][T25996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1361.430893][T26017] ip_tables: iptables: counters copy to user failed while replacing table [ 1361.609506][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.609552][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.462501][ T33] kauditd_printk_skb: 198 callbacks suppressed [ 1362.462516][ T33] audit: type=1326 audit(2000000133.120:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.463534][ T33] audit: type=1326 audit(2000000133.120:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.506137][ T33] audit: type=1326 audit(2000000133.160:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.561402][ T33] audit: type=1326 audit(2000000133.220:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.596996][ T33] audit: type=1326 audit(2000000133.250:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.597033][ T33] audit: type=1326 audit(2000000133.260:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.597065][ T33] audit: type=1326 audit(2000000133.260:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.630613][ T33] audit: type=1326 audit(2000000133.290:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.630657][ T33] audit: type=1326 audit(2000000133.290:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1362.690559][ T33] audit: type=1326 audit(2000000133.350:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.9.6671" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd7b5b9e159 code=0x7ffc0000 [ 1365.065575][T26114] netlink: 'syz.8.6692': attribute type 1 has an invalid length. [ 1365.240494][T26118] bond1: (slave bridge1): making interface the new active one [ 1365.259570][T26118] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1366.771964][T26161] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6705'. [ 1366.771985][T26161] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6705'. [ 1366.771997][T26161] netlink: 'syz.7.6705': attribute type 5 has an invalid length. [ 1366.772007][T26161] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6705'. [ 1367.124817][T26173] netlink: 'syz.8.6708': attribute type 1 has an invalid length. [ 1367.333412][T26176] bond2: (slave bridge2): making interface the new active one [ 1367.333897][T26176] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1368.451121][T26207] loop8: detected capacity change from 0 to 512 [ 1369.409405][T26236] policy can only be matched on NF_INET_PRE_ROUTING [ 1369.409416][T26236] unable to load match [ 1371.031203][T26271] syzkaller0: entered promiscuous mode [ 1371.031221][T26271] syzkaller0: entered allmulticast mode [ 1380.783809][T26293] netlink: 'syz.2.6740': attribute type 1 has an invalid length. [ 1381.340612][T26346] ip_tables: iptables: counters copy to user failed while replacing table [ 1382.537294][ T2242] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1382.603104][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6755'. [ 1382.688045][ T2242] usb 9-1: Using ep0 maxpacket: 32 [ 1382.688608][ T2242] usb 9-1: New USB device found: idVendor=056a, idProduct=010d, bcdDevice=0.00 [ 1382.689539][ T2242] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.689571][ T2242] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1382.689602][ T2242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.749285][ T2242] usb 9-1: config 0 descriptor?? [ 1382.773311][ T2242] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1383.264162][T26374] loop8: detected capacity change from 0 to 8192 [ 1383.582565][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1383.582585][T26383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1383.582597][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1383.945052][T26390] fuse: fd is not a fuse device [ 1385.710063][ T2242] usb 9-1: USB disconnect, device number 12 [ 1386.049869][T26423] raw_sendmsg: syz.8.6775 forgot to set AF_INET. Fix it! [ 1386.431654][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6781'. [ 1388.816888][ T2242] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1388.969878][ T2242] usb 9-1: Using ep0 maxpacket: 32 [ 1388.971192][ T2242] usb 9-1: New USB device found: idVendor=056a, idProduct=010d, bcdDevice=0.00 [ 1388.975846][ T2242] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.975882][ T2242] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1388.975914][ T2242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.034070][ T2242] usb 9-1: config 0 descriptor?? [ 1389.084201][ T2242] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1389.363701][T26515] loop8: detected capacity change from 0 to 8192 [ 1389.845996][T26531] ip_tables: iptables: counters copy to user failed while replacing table [ 1390.138011][T26535] vlan2: entered promiscuous mode [ 1390.138028][T26535] bridge0: entered promiscuous mode [ 1390.138148][T26535] vlan2: entered allmulticast mode [ 1390.138158][T26535] bridge0: entered allmulticast mode [ 1391.600685][ T2242] usb 9-1: USB disconnect, device number 13 [ 1392.140001][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1392.816405][T26624] netlink: 'syz.9.6848': attribute type 1 has an invalid length. [ 1394.011320][T26655] fuse: Bad value for 'fd' [ 1394.255643][T26665] sit0: entered promiscuous mode [ 1394.270091][T26665] netlink: 'syz.2.6862': attribute type 1 has an invalid length. [ 1394.270108][T26665] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6862'. [ 1395.014145][T26684] fuse: Bad value for 'fd' [ 1400.015401][T26720] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6881'. [ 1400.282577][T26718] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6883'. [ 1400.285957][T26718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.443768][T26746] syzkaller1: entered promiscuous mode [ 1401.443788][T26746] syzkaller1: entered allmulticast mode [ 1401.992532][T26756] netlink: 'syz.7.6896': attribute type 4 has an invalid length. [ 1402.352554][T26768] overlayfs: failed to clone upperpath [ 1402.550123][T26771] loop2: detected capacity change from 0 to 164 [ 1402.550825][T26771] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 1404.011952][T26796] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1405.276708][ T2242] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1405.427083][ T2242] usb 3-1: Using ep0 maxpacket: 32 [ 1405.428984][ T2242] usb 3-1: New USB device found: idVendor=056a, idProduct=010d, bcdDevice=0.00 [ 1405.430443][ T2242] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.430474][ T2242] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1405.430500][ T2242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.495639][ T2242] usb 3-1: config 0 descriptor?? [ 1405.511882][ T2242] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1405.877760][T26823] loop2: detected capacity change from 0 to 8192 [ 1405.920069][ T10] usb 3-1: USB disconnect, device number 86 [ 1406.353506][T26844] netlink: 'syz.9.6926': attribute type 13 has an invalid length. [ 1407.104958][T26852] syzkaller1: entered promiscuous mode [ 1407.104978][T26852] syzkaller1: entered allmulticast mode [ 1407.575692][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6933'. [ 1407.604200][T26863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.748062][ T5801] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1408.845365][T26900] syzkaller1: entered promiscuous mode [ 1408.845383][T26900] syzkaller1: entered allmulticast mode [ 1408.898506][ T5801] usb 9-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1408.901001][ T5801] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1408.901036][ T5801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.902841][ T5801] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1408.902859][ T5801] usb 9-1: Manufacturer: syz [ 1408.980923][ T5801] usb 9-1: config 0 descriptor?? [ 1409.369007][ T5801] rc_core: IR keymap rc-hauppauge not found [ 1409.369024][ T5801] Registered IR keymap rc-empty [ 1409.370434][ T5801] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1409.376221][ T5801] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input85 [ 1409.519136][ T5801] usb 9-1: USB disconnect, device number 14 [ 1409.767257][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1409.978071][ T2242] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1410.129525][ T2242] usb 3-1: New USB device found: idVendor=056a, idProduct=00d0, bcdDevice=0.00 [ 1410.131827][ T2242] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1410.131856][ T2242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.134288][ T2242] usb 3-1: config 0 descriptor?? [ 1410.580466][T26923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.580913][T26923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.610473][T26939] netlink: 'syz.0.6958': attribute type 1 has an invalid length. [ 1410.632033][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x4 [ 1410.632111][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632130][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632149][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632246][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632266][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632286][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632305][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632324][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.632344][ T2242] wacom 0003:056A:00D0.0025: unknown main item tag 0x0 [ 1410.699730][ T2242] wacom 0003:056A:00D0.0025: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1410.747946][ T2242] wacom 0003:056A:00D0.0025: hidraw0: USB HID v0.81 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 1410.779173][ T2242] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0025/input/input86 [ 1410.848828][T26939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1410.965437][T26941] bond1: (slave geneve2): making interface the new active one [ 1411.003562][T26941] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1411.817503][T26973] netlink: 'syz.2.6968': attribute type 1 has an invalid length. [ 1411.869761][T26975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6968'. [ 1411.908086][T26975] bond1: entered allmulticast mode [ 1412.064420][T26977] netlink: 'syz.0.6969': attribute type 1 has an invalid length. [ 1412.105062][T26980] loop2: detected capacity change from 0 to 164 [ 1412.117342][T26980] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 1412.158480][T26977] bond2: entered promiscuous mode [ 1412.158923][T26977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1412.244327][T26981] bond2: (slave bridge1): making interface the new active one [ 1412.244347][T26981] bridge1: entered promiscuous mode [ 1412.261642][T26981] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1412.297301][T26977] ipvlan2: entered allmulticast mode [ 1412.297318][T26977] bond2: entered allmulticast mode [ 1412.297328][T26977] bridge1: entered allmulticast mode [ 1412.297677][T26977] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1412.297692][T26977] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1413.237942][ T2242] usb 3-1: USB disconnect, device number 87 [ 1413.319762][T26998] loop2: detected capacity change from 0 to 512 [ 1413.788527][T27012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1414.218929][T27027] loop8: detected capacity change from 0 to 512 [ 1414.706641][ T2242] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1414.861574][ T2242] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1414.861609][ T2242] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 1414.863526][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.865312][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.868298][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.879013][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.888203][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.895549][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.907255][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.920233][ T2242] usb 3-1: config 0 has no interfaces? [ 1414.940227][ T2242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.940246][ T2242] usb 3-1: Product: syz [ 1414.940258][ T2242] usb 3-1: Manufacturer: syz [ 1414.940268][ T2242] usb 3-1: SerialNumber: syz [ 1414.942250][ T2242] usb 3-1: config 0 descriptor?? [ 1415.154677][ T2242] usb 3-1: USB disconnect, device number 88 [ 1415.438240][T27046] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1415.703993][T27053] netlink: 'syz.8.7001': attribute type 1 has an invalid length. [ 1415.756236][T27056] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7001'. [ 1415.781394][T27056] bond3: entered allmulticast mode [ 1415.806813][ T2242] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1415.960618][ T2242] usb 3-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00 [ 1415.965745][ T2242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.965770][ T2242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.965797][ T2242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.255796][T27066] netlink: 'syz.9.7007': attribute type 7 has an invalid length. [ 1416.624065][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.624430][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.635688][ T2242] usbhid 3-1:1.0: can't add hid device: -71 [ 1416.635770][ T2242] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1416.667861][ T2242] usb 3-1: USB disconnect, device number 89 [ 1417.500521][T27089] netlink: 'syz.7.7018': attribute type 7 has an invalid length. [ 1418.334053][T27116] overlayfs: failed to clone upperpath [ 1419.164322][T27136] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 1419.164360][T27136] device-mapper: ioctl: error adding target to table [ 1419.384714][T27143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7040'. [ 1420.409124][ T2242] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1420.558263][ T2242] usb 3-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1420.559839][ T2242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1420.559863][ T2242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1420.600914][ T2242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.600935][ T2242] usb 3-1: Product: syz [ 1420.600946][ T2242] usb 3-1: Manufacturer: syz [ 1420.600957][ T2242] usb 3-1: SerialNumber: syz [ 1420.631110][ T2242] usb 3-1: config 0 descriptor?? [ 1420.648087][ T2242] hub 3-1:0.0: bad descriptor, ignoring hub [ 1420.648107][ T2242] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1420.682022][ T2242] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input89 [ 1421.008782][T27164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.009107][T27164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.017411][T27164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.017713][T27164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.094816][T27164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.095112][T27164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.130180][T27164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.132819][T27164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.183756][T27164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.184093][T27164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.544113][T27191] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7057'. [ 1423.059830][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.059875][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.745793][ T2242] usb 3-1: USB disconnect, device number 90 [ 1428.351038][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7091'. [ 1433.320880][T27345] fuse: fd is not a fuse device [ 1433.644624][ T5801] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1433.809914][ T5801] usb 9-1: Using ep0 maxpacket: 32 [ 1433.814085][ T5801] usb 9-1: New USB device found: idVendor=056a, idProduct=010d, bcdDevice=0.00 [ 1433.823513][ T5801] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.823549][ T5801] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1433.823579][ T5801] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.825593][ T5801] usb 9-1: config 0 descriptor?? [ 1433.900743][ T5801] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1434.409188][T27368] loop8: detected capacity change from 0 to 8192 [ 1434.704046][T27380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7129'. [ 1435.847991][T27421] netlink: 'syz.7.7144': attribute type 1 has an invalid length. [ 1435.940283][T27421] bond2: entered promiscuous mode [ 1435.943021][T27421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1435.982680][T27428] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7146'. [ 1436.019610][T27424] bond2: (slave bridge1): making interface the new active one [ 1436.019631][T27424] bridge1: entered promiscuous mode [ 1436.051395][T27424] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1436.110310][T27428] ipvlan2: entered allmulticast mode [ 1436.110435][T27428] syz_tun: entered allmulticast mode [ 1436.391052][T27434] [ 1436.395616][T27434] ============================= [ 1436.401257][T27434] WARNING: suspicious RCU usage [ 1436.406224][T27434] syzkaller #0 Tainted: G L [ 1436.413682][T27434] ----------------------------- [ 1436.419516][T27434] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1436.428128][T27434] [ 1436.428128][T27434] other info that might help us debug this: [ 1436.428128][T27434] [ 1436.438419][T27434] [ 1436.438419][T27434] rcu_scheduler_active = 2, debug_locks = 1 [ 1436.446825][T27434] locks held by syz.9.7148/27434: 1, last CPU#0: [ 1436.453309][T27434] #0: ffffffff8ed5a5d8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 1436.464381][T27434] [ 1436.464381][T27434] stack backtrace: [ 1436.470340][T27434] CPU: 0 UID: 0 PID: 27434 Comm: syz.9.7148 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.481377][T27434] Tainted: [L]=SOFTLOCKUP [ 1436.485701][T27434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1436.495757][T27434] Call Trace: [ 1436.499038][T27434] [ 1436.501969][T27434] dump_stack_lvl+0xe8/0x150 [ 1436.506581][T27434] lockdep_rcu_suspicious+0x140/0x1d0 [ 1436.511978][T27434] get_callchain_entry+0x2b7/0x3c0 [ 1436.517098][T27434] get_perf_callchain+0xd5/0x880 [ 1436.522046][T27434] ? __pfx_get_perf_callchain+0x10/0x10 [ 1436.527596][T27434] ? __lock_acquire+0x747/0x2de0 [ 1436.532534][T27434] __bpf_get_stack+0x375/0xae0 [ 1436.537307][T27434] ? __pfx___bpf_get_stack+0x10/0x10 [ 1436.542592][T27434] ? __lock_acquire+0x747/0x2de0 [ 1436.547547][T27434] ? lock_acquire+0x115/0x350 [ 1436.552251][T27434] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 1436.557885][T27434] bpf_get_stack_raw_tp+0x1a4/0x210 [ 1436.563088][T27434] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 1436.568545][T27434] bpf_prog_run_pin_on_cpu+0x14f/0x4c0 [ 1436.574010][T27434] bpf_prog_test_run_syscall+0x324/0x4c0 [ 1436.579645][T27434] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1436.585800][T27434] ? __fget_files+0x2a/0x420 [ 1436.590394][T27434] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1436.596561][T27434] bpf_prog_test_run+0x2c5/0x340 [ 1436.601508][T27434] __sys_bpf+0xb1e/0xe00 [ 1436.605759][T27434] ? __pfx___sys_bpf+0x10/0x10 [ 1436.610528][T27434] ? do_futex+0x3e7/0x4e0 [ 1436.614880][T27434] ? rcu_is_watching+0x16/0xb0 [ 1436.619653][T27434] __x64_sys_bpf+0xba/0xd0 [ 1436.624071][T27434] do_syscall_64+0x166/0x520 [ 1436.628663][T27434] ? trace_irq_disable+0x3b/0x140 [ 1436.633688][T27434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.639751][T27434] ? clear_bhb_loop+0x70/0xc0 [ 1436.644427][T27434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.650320][T27434] RIP: 0033:0x7fd7b5b9e159 [ 1436.654737][T27434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.674358][T27434] RSP: 002b:00007fd7b6aa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1436.682788][T27434] RAX: ffffffffffffffda RBX: 00007fd7b5e25fa0 RCX: 00007fd7b5b9e159 [ 1436.690778][T27434] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1436.698752][T27434] RBP: 00007fd7b5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1436.706721][T27434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.714704][T27434] R13: 00007fd7b5e26038 R14: 00007fd7b5e25fa0 R15: 00007ffd2c2df2e8 [ 1436.722694][T27434] [ 1437.045306][ T2242] usb 9-1: USB disconnect, device number 15