last executing test programs: 2m26.554942634s ago: executing program 1 (id=129): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200060c0}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2m26.416591138s ago: executing program 1 (id=130): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000400)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000440)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x14000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000580)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200, 0x1) 2m26.221905588s ago: executing program 1 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000340)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000380)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f00000005c0)='./file0\x00') symlinkat(&(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 2m26.055203125s ago: executing program 1 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000b40)='\x00', 0x89901) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) 2m25.867306514s ago: executing program 1 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r1, @ANYBLOB="9a"], 0x20}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000200)={'wlan1\x00', @local}) 2m24.769672446s ago: executing program 1 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x81, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x5}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 2m24.566880307s ago: executing program 32 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x81, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x5}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 2m12.694671509s ago: executing program 2 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 2m12.566817072s ago: executing program 2 (id=218): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 2m11.519552498s ago: executing program 2 (id=225): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000007c0), 0x2) r2 = memfd_create(&(0x7f0000000800)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000940)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000009c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000a00)={0xe000001b}) 2m11.376345583s ago: executing program 2 (id=227): syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x10480, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000680)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) 2m11.049027077s ago: executing program 2 (id=228): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005a40), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000005a80)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000005ac0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000005b00), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000005b40)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642"], 0x97) 2m10.633421889s ago: executing program 2 (id=230): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d00)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m10.388064664s ago: executing program 33 (id=230): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000004d00)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m1.035609602s ago: executing program 5 (id=503): r0 = fsopen(&(0x7f0000000980)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) getdents64(r2, 0x0, 0x22) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000180)="$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") setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0xfffffe43) 1m0.679688188s ago: executing program 5 (id=506): syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") rt_sigtimedwait(&(0x7f00000005c0)={[0x1]}, &(0x7f0000000600), 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4008840) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 59.928569295s ago: executing program 6 (id=512): openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'veth0_to_bridge\x00', {}, 0xfffc}) 59.266964532s ago: executing program 5 (id=514): socket$inet6(0xa, 0x1, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x2) 58.969476743s ago: executing program 6 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) 58.942782485s ago: executing program 5 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x14) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/318, @ANYRES16=0x0], 0x1, 0x242, &(0x7f0000000480)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x252c000000000000) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300)='sysfs\x00', 0x989, 0x0) 58.538200566s ago: executing program 6 (id=522): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032", @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xb014853145f0758b, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) 58.196331521s ago: executing program 5 (id=523): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$loop(0x0, 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 57.966672265s ago: executing program 6 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dynamic_debug/control\x00', 0x2, 0x80) write(r2, &(0x7f0000000200)='+p', 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x80049370, 0x0) 57.82341097s ago: executing program 6 (id=525): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="0589", 0x2}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x4000) recvfrom$unix(r2, &(0x7f00000001c0)=""/227, 0xe3, 0x40010120, 0x0, 0x0) 57.637002149s ago: executing program 0 (id=527): socket$inet6(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) close(0x4) 57.561471166s ago: executing program 0 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000340)="000000005a000000030000000000000000000000000000000100000001") ioctl(r1, 0x40140921, &(0x7f0000000480)="0000000001") ioctl(r1, 0x400c0930, 0x0) 57.32958214s ago: executing program 0 (id=530): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xf0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000380)}) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x8001, 0x8000) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000004c0)) sched_getscheduler(0xffffffffffffffff) 57.250058128s ago: executing program 0 (id=531): mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004e00)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x1, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002a80)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file0\x00', 0x105001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000004bc0), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 57.116060502s ago: executing program 5 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x800001000089}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f00000005c0)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000019780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x18002000}, 0xc, &(0x7f0000019740)={&(0x7f00000195c0)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000019640)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) sendmsg$inet6(r3, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000006111000000000000731af9eb000000009500000c00000000"], 0x0, 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300), 0x10}, 0x94) gettid() timer_create(0x1, 0x0, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000019680)=ANY=[@ANYBLOB="040ef500040400cfbdac7fd54274381635edbfc0898fb7c2ab03ea738cd9a63bc5dfce44fd4abbe1d9153169986aa20ff6f13edaa3d17c07f45e1cdf34a276f4d6"], 0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioprio_set$pid(0x2, 0x0, 0x2000) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x8) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) 56.93556558s ago: executing program 34 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x800001000089}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f00000005c0)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000019780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x18002000}, 0xc, &(0x7f0000019740)={&(0x7f00000195c0)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000019640)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) sendmsg$inet6(r3, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000006111000000000000731af9eb000000009500000c00000000"], 0x0, 0x2, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000300), 0x10}, 0x94) gettid() timer_create(0x1, 0x0, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000019680)=ANY=[@ANYBLOB="040ef500040400cfbdac7fd54274381635edbfc0898fb7c2ab03ea738cd9a63bc5dfce44fd4abbe1d9153169986aa20ff6f13edaa3d17c07f45e1cdf34a276f4d6"], 0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioprio_set$pid(0x2, 0x0, 0x2000) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x8) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) 56.926366331s ago: executing program 0 (id=534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x1001}, 0xe) listen(r2, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x1001, 0x40}}]}}, 0x11) syz_emit_vhci(0x0, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) 56.680879786s ago: executing program 0 (id=535): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "27159e813c401d5c", "eabb5ef998307b4ea9907dbdbab969211cb64307e188dbe007ae47948e0351a3", "00007f1e", "8a48db25fba8a168"}, 0x38) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 56.339314931s ago: executing program 35 (id=535): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "27159e813c401d5c", "eabb5ef998307b4ea9907dbdbab969211cb64307e188dbe007ae47948e0351a3", "00007f1e", "8a48db25fba8a168"}, 0x38) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 52.105597303s ago: executing program 6 (id=542): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000600)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x161) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 51.748097439s ago: executing program 36 (id=542): socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000600)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x161) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 10.449926704s ago: executing program 3 (id=734): syz_open_procfs(0x0, &(0x7f0000000780)='net/anycast6\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$dupfd(r1, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000001100)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r2], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) 7.633695381s ago: executing program 3 (id=749): fsopen(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6.595371887s ago: executing program 3 (id=761): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000180)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000340)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000003c0)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 6.489681298s ago: executing program 8 (id=763): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x10000000, 0xfffffffffffffff9, 0x0, 0x0, 0x2004cb, 0x3, 0xfffffffffffffc, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x7, 0x4], 0x2, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.323138685s ago: executing program 9 (id=764): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0) eventfd(0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 5.501004039s ago: executing program 8 (id=765): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8090) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000300)=0x18) 5.500419769s ago: executing program 3 (id=766): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x101940, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x268840, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000ac0)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000b40), 0x56) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) sendmsg$kcm(r2, &(0x7f0000000bc0)={&(0x7f0000000c00)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.497378342s ago: executing program 9 (id=768): bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r3, 0xb8, &(0x7f0000000000)={0xc, 0x1, 0xd}) 4.496960062s ago: executing program 8 (id=769): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f00000006c0)=0xdc7d) accept4(r1, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x95}}, @delba={0x3, 0x2, {{0x0, 0x1}, 0x1f, {0xbd, 0x6, @device_b}}}}}]}, 0x48}}, 0x0) 4.275812884s ago: executing program 9 (id=771): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket(0x6, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000240)="4c00000011000f1400110002aa574100000f0002100000", 0x17) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000002c0)=0xfffffff9) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400890528bd7080faffffff0218ef00", @ANYRES32=r3, @ANYBLOB="08000100ac14141d0800040064000100080002007f00000108000400ffffffff08000a000400000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 4.225580219s ago: executing program 3 (id=772): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r0, &(0x7f0000000200)=""/209, 0xd1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.12223932s ago: executing program 7 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x38}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.73195801s ago: executing program 4 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0x9102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', 0x1}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000dc0), 0x56) sendmsg$kcm(r4, &(0x7f0000000e00)={&(0x7f0000000e40)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000003c0)="27030200591114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x4008001) 3.333234131s ago: executing program 7 (id=775): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$eJzs3d9rFNceAPDvbLLRGK9GELn3crkEfKhF3Jikthb6YB9LKxXadxuSNUg2rmQ3YlKh+lBf+lKkUEqF0j+g730q0n+gf4WlFaRIqAX7sGU2s7pJdvPL1azZzwdG58ycmXPOznxPzuzZZQPoWSPpP7mI/0TEl0nE4aZ9/ZHtHFnJt/zoxlS6JFGrffRHEkm2rZE/yf4fyhL/joifP484mVtfbmVxaXayVCrOZ+nR6tzV0cri0qnLc5MzxZnilfGJibNnJsbffuvNjrX19QuPv/nw3ntnvzi+/PUPD47cSeJcHMz2NbdjQ/s23HuzOTESI9lrko9zazKObafir4BktyvAjvRlcZ6PtA84HH1Z1AN732cRUdu+Jzs4Bug6yU7iH9gDGuOAxrP9lp+D94iH7648AK1vf7Ly3kjsrz8bHVhOVj0Zpc+7wx0oPy3jx9/v3kmX2M77EADP6eatiDjd39++/1vj79qWz316C3nWlqH/g5fnXjr++WkwYl38556Of6LF+GeoRezuxObxn3uwMgnVZKADBWfS8d87Lce/T4sc7stS/6qP+fLJpculYtq3HYqIE5Hfl6Y3ms85u3y/bafZPP5Ll7T8xlgwq8eD/jVzTtOT1cnnaXOzh7ci/rvJ+Ddpcf3T1+PCFss4Vrz7/3b7Nm//i1X7PuK1ltf/2YxWsvH85Gj9fhht3BXr/Xn72C/tyt/t9qfX/8DG7R9OmudrK9sv47v9T4rt9o0k2aTpNu//geTjes/U6AquT1ar82MRA8kH9fSq7ePPjm2kG/nT9p843jr+N7r/ByPiky22//bR222z1q//4d29/tPbuv4brzw+s3JQ867773/6bbvyt9b/vVFfO5Ft2Ur/17aCA6u37PiFAwAAAAAAgC6UG4g4GEmukM3pH4xcrlBY+XzH0TiQK5Ur1ZOXygtXpqP+XdnhyOcaM91DTZ+HGMuOb6THs8/HNtITEXEkIr7qG6ynC1Pl0vRuNx4AAAAAAAAAAAAAAAAAAAC6xFC0/v5/6re+3a4d8ML5yW/oXavif1+LDJ34pSegK/n7D71L/EPvEv/Qu8Q/9C7xD71L/EPv2ln8/+9QxysCvHT+/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBHXTh/Pl1qy49uTEXE/ri2uDBbvnZqupifLcwtTBWmyvNXCzPl8kypWJgqz212vlK5fHVsPBauj1aLlepoZXHp4lx54Ur14uW5yZnixWL+5TQLAAAAAAAAAAAAAAAAAAAAXimVxaXZyVKpON+dK/kOn/DXLmnXHlrp745qWJmvDEYHT7i6n/irVqvtVh8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8EAAD//3hONlo=") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7020000010000008500000086"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$mtd(&(0x7f0000000340), 0x46, 0x1) ioctl$MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000000380)=0x20000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000004c0)=""/208, 0xd0, 0x8d35) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001e00010302000000000000002d0000000400000000000000", 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) 3.274675176s ago: executing program 4 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) bind(r2, &(0x7f0000000340)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r2, 0x5) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000003c0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001980)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x100000}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r3 = socket$inet(0x2, 0x1, 0x6) connect(r3, &(0x7f0000001a00)=@in={0x2, 0x15, @loopback}, 0x10) accept(r2, 0x0, 0x0) write(r3, &(0x7f0000001a80)='PASV\r\n', 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 3.271263237s ago: executing program 9 (id=777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 3.086468286s ago: executing program 7 (id=778): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs_dir\x00', &(0x7f0000000280)='tracefs\x00', 0x200802, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2.905559464s ago: executing program 8 (id=779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$cec(0x0, 0x0, 0xa82) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="c744240000000100c744240201000000c7442406000000000f0114249a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x67}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="660f2cac4339660f3880ac0010670fc76efde3bbbad10466edf30fc770006766c7442400570600006766c7442402bb9571a66766c744240600000000670f0114243e660ffd116766c74424006deb00006766c7442402e80000006766c744240600000000670f011424f30fc7728b", 0x6e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.878305807s ago: executing program 7 (id=780): pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r1, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24044080) mq_unlink(0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x48026) syz_usb_connect(0x2, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) 2.812294794s ago: executing program 4 (id=781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x0, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x30045084}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f00000005c0)="f9f4b7d213f11a4e12", 0x9}], 0x1}, 0x20004014) 2.227444233s ago: executing program 4 (id=782): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.155121281s ago: executing program 9 (id=783): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') socket(0x24, 0x80801, 0x1) preadv(r1, &(0x7f00000005c0), 0x0, 0x8, 0xffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r5}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 2.021557634s ago: executing program 7 (id=784): socket(0x840000000002, 0x3, 0x100) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 1.557737192s ago: executing program 9 (id=785): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x10296fc4, 0x0, 0x3, 0x8, 0x3, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000003c0)) setreuid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) 1.346319253s ago: executing program 8 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000e00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e40)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000e80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000f80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000fc0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x9, 0x2, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x2, r3}, 0x38) 1.249519883s ago: executing program 4 (id=787): socket(0x10, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 121.382388ms ago: executing program 7 (id=788): mkdir(0x0, 0x1ff) fsmount(0xffffffffffffffff, 0x0, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 41.345787ms ago: executing program 8 (id=789): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x1, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./bus\x00', 0x4006, &(0x7f0000000780)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@discard}, {@nouid32}, {@data_journal}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@sysvgroups}, {@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x5074}}, {@auto_da_alloc_val}]}, 0x4, 0x46b, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000cc0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d00)='./bus\x00', &(0x7f0000000d40), 0x8, &(0x7f0000000d80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000dc0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file2\x00', 0x70002, 0x2d) 1.51974ms ago: executing program 3 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000300)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000340)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 0s ago: executing program 4 (id=791): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x27e, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x40000) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, 0x0) listen(r3, 0x5) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): SB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.232765][ T4730] loop2: detected capacity change from 0 to 7 [ 90.242716][ T4465] Dev loop2: unable to read RDB block 7 [ 90.250527][ T4465] loop2: unable to read partition table [ 90.257273][ T4465] loop2: partition table beyond EOD, truncated [ 90.268756][ T4730] Dev loop2: unable to read RDB block 7 [ 90.274679][ T4730] loop2: unable to read partition table [ 90.281472][ T4730] loop2: partition table beyond EOD, truncated [ 90.295515][ T4465] udevd[4465]: symlink '../../loop2' '/dev/disk/by-diskseq/95.tmp-b7:2' failed: Read-only file system [ 90.307511][ T4730] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.383700][ T4465] udevd[4465]: symlink '../../loop2' '/dev/disk/by-diskseq/95.tmp-b7:2' failed: Read-only file system [ 90.432692][ T4465] udevd[4465]: symlink '../../loop2' '/dev/disk/by-diskseq/95.tmp-b7:2' failed: Read-only file system [ 90.464714][ T4736] overlayfs: missing 'lowerdir' [ 90.948997][ T4738] loop0: detected capacity change from 0 to 32768 [ 90.996254][ T4738] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.132 (4738) [ 91.090268][ T4738] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 91.127624][ T4465] udevd[4465]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 91.141852][ T4738] BTRFS info (device loop0): using free space tree [ 91.152611][ T4738] BTRFS info (device loop0): has skinny extents [ 91.171419][ T4465] udevd[4465]: symlink '../../loop0' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:0' failed: Read-only file system [ 91.316636][ T23] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 91.393605][ T4738] BTRFS info (device loop0): enabling ssd optimizations [ 91.663106][ T4738] loop0: detected capacity change from 32768 to 0 [ 91.683045][ T4272] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.701596][ T4483] udevd[4483]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 91.776377][ T23] gud 3-1:1.0: [drm] *ERROR* fbdev: Failed to setup generic emulation (ret=-22) [ 91.776924][ T4774] loop3: detected capacity change from 0 to 512 [ 91.815916][ T23] usb 3-1: USB disconnect, device number 4 [ 91.846644][ T4465] udevd[4465]: symlink '../../loop3' '/dev/disk/by-diskseq/98.tmp-b7:3' failed: Read-only file system [ 91.855164][ T4774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 91.875766][ T4465] udevd[4465]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 91.889462][ T4774] System zones: 1-12 [ 91.926655][ T4774] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.139: missing EA_INODE flag [ 91.987046][ T4774] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.139: error while reading EA inode 12 err=-117 [ 92.004892][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.025734][ T4774] EXT4-fs (loop3): 1 orphan inode deleted [ 92.037125][ T4774] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 92.053143][ T4272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.079714][ T4272] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.102982][ T4272] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 92.122498][ T4272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.160347][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.306901][ T26] audit: type=1804 audit(1793514066.235:4): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.139" name="/newroot/32/file0/file0/file1" dev="overlay" ino=22 res=1 errno=0 [ 92.418100][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.462597][ T4465] udevd[4465]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 92.517162][ T4465] udevd[4465]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 92.596196][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.609655][ T26] audit: type=1800 audit(1793514066.535:5): pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.144" name="num" dev="configfs" ino=35474 res=0 errno=0 [ 92.651235][ T4786] binder: 4785:4786 ioctl c0306201 2000000003c0 returned -14 [ 92.774942][ T4792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.844347][ T4787] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.921630][ T4797] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.148'. [ 93.193241][ T4272] rtsx_usb: probe of 5-1:1.0 failed with error -71 [ 93.262040][ T4272] usb 5-1: USB disconnect, device number 4 [ 93.856490][ T4830] tipc: Started in network mode [ 93.861804][ T4830] tipc: Node identity 027bbe2d68a1, cluster identity 4711 [ 93.929429][ T4830] tipc: Enabled bearer , priority 0 [ 93.959848][ T4838] process 'syz.2.153' launched './file0' with NULL argv: empty string added [ 94.120596][ T4836] device syzkaller0 entered promiscuous mode [ 94.168407][ T4787] chnl_net:caif_netlink_parms(): no params data found [ 94.267381][ T4829] tipc: Resetting bearer [ 94.366402][ T4829] tipc: Disabling bearer [ 94.559987][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.574864][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.583852][ T4787] device bridge_slave_0 entered promiscuous mode [ 94.641827][ T26] audit: type=1800 audit(1793514068.565:6): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.153" name="/" dev="fuse" ino=4 res=0 errno=0 [ 94.694786][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.701913][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.743166][ T4787] device bridge_slave_1 entered promiscuous mode [ 94.829884][ T4787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.842492][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 94.968594][ T4787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.209457][ T4787] team0: Port device team_slave_0 added [ 95.245986][ T4787] team0: Port device team_slave_1 added [ 95.380632][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.417958][ T4876] loop3: detected capacity change from 0 to 2048 [ 95.426949][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.517664][ T4876] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 95.528784][ T4787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.542345][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-diskseq/101.tmp-b7:3' failed: Read-only file system [ 95.603688][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.610688][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.625584][ T4876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.657281][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 95.685260][ T4878] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.724364][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 95.769214][ T4787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.839540][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-diskseq/101.tmp-b7:3' failed: Read-only file system [ 95.892568][ T4862] loop2: detected capacity change from 0 to 32768 [ 95.908140][ T9] device hsr_slave_0 left promiscuous mode [ 95.920433][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 95.952596][ T9] device hsr_slave_1 left promiscuous mode [ 95.971657][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 96.023682][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.031414][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.071753][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.087397][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.100182][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-diskseq/101.tmp-b7:3' failed: Read-only file system [ 96.144287][ T9] device bridge_slave_1 left promiscuous mode [ 96.151551][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.164144][ T4465] udevd[4465]: symlink '../../loop2' '/dev/disk/by-diskseq/102.tmp-b7:2' failed: Read-only file system [ 96.199507][ T4448] udevd[4448]: symlink '../../loop3' '/dev/disk/by-diskseq/101.tmp-b7:3' failed: Read-only file system [ 96.225195][ T4885] netlink: 'syz.3.162': attribute type 11 has an invalid length. [ 96.228852][ T4465] udevd[4465]: symlink '../../loop2' '/dev/disk/by-uuid/f30b150f-ecac-472d-98b2-96cb299d2b2c.tmp-b7:2' failed: Read-only file system [ 96.252776][ T9] device bridge_slave_0 left promiscuous mode [ 96.282704][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.328873][ T9] device veth1_macvtap left promiscuous mode [ 96.335789][ T9] device veth0_macvtap left promiscuous mode [ 96.341910][ T9] device veth1_vlan left promiscuous mode [ 96.352232][ T9] device veth0_vlan left promiscuous mode [ 96.922603][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 97.021842][ T26] audit: type=1800 audit(1793514070.945:7): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="sda" dev="sda1" ino=2048 res=0 errno=0 [ 97.043814][ T9] team0 (unregistering): Port device team_slave_1 removed [ 97.061426][ T9] team0 (unregistering): Port device team_slave_0 removed [ 97.078447][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.105276][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.165025][ T4915] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.252765][ T9] bond0 (unregistering): Released all slaves [ 97.523182][ T4787] device hsr_slave_0 entered promiscuous mode [ 97.538549][ T4787] device hsr_slave_1 entered promiscuous mode [ 97.802334][ T4936] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 98.018712][ T4787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.040734][ T4787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.135778][ T4787] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.269009][ T4787] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.309308][ T4957] loop4: detected capacity change from 0 to 2048 [ 98.367026][ T4961] loop3: detected capacity change from 0 to 16 [ 98.480479][ T4961] erofs: (device loop3): mounted with root inode @ nid 36. [ 98.505016][ T4957] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,noload,norecovery,stripe=0x000000000004ffff,norecovery,i_version,max_batch_time=0x000000000000186b,,errors=continue. Quota mode: none. [ 98.719160][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.773575][ T4971] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.183: Invalid inode table block 5764567661383892222 in block_group 0 [ 98.798036][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.815053][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.835042][ T4787] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.875556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.891773][ T4971] EXT4-fs error (device loop4): empty_inline_dir:1864: inode #12: comm syz.4.183: error -117 getting inode 12 block [ 98.922536][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.945970][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.953128][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.992996][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 99.001801][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.123627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.158566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.177774][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.184933][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.273751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.287439][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.347001][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.383125][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.576553][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.603909][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.629494][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.673945][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.703709][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.746351][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.773932][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.807723][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.953677][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 100.082155][ T4975] loop3: detected capacity change from 0 to 32768 [ 100.172667][ T5004] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 100.300772][ T4975] XFS (loop3): Mounting V5 Filesystem [ 100.368519][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.423439][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.438638][ T4787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.562127][ T4975] XFS (loop3): Ending clean mount [ 100.629407][ T4975] XFS (loop3): Quotacheck needed: Please wait. [ 100.783709][ T4975] XFS (loop3): Quotacheck: Done. [ 101.073285][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 101.162188][ T4198] XFS (loop3): Unmounting Filesystem [ 101.282272][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.303547][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.375335][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.401043][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.434495][ T4787] device veth0_vlan entered promiscuous mode [ 101.469218][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.494699][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.527550][ T4787] device veth1_vlan entered promiscuous mode [ 101.597884][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.627334][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.641591][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.642308][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.647009][ T4787] device veth0_macvtap entered promiscuous mode [ 101.667243][ T4787] device veth1_macvtap entered promiscuous mode [ 101.747992][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.748066][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.748079][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.748095][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.748107][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.748122][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.749534][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.749964][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.750665][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.751283][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.751904][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.761546][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.761567][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.761579][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.761594][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.761606][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.761620][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.778770][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.779107][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.779779][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.793717][ T4787] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.793792][ T4787] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.793823][ T4787] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.793854][ T4787] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.054550][ T5074] netlink: 9 bytes leftover after parsing attributes in process `syz.0.203'. [ 102.065719][ T5074] device gretap0 entered promiscuous mode [ 102.219127][ T4532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.219152][ T4532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.219371][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.388277][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.388301][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.390114][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.555543][ T5083] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.798035][ T5092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3687100835 (7374201670 ns) > initial count (4634846402 ns). Using initial count to start timer. [ 102.814828][ T5092] kvm: pic: non byte read [ 102.815303][ T5092] kvm: pic: level sensitive irq not supported [ 102.815472][ T5092] kvm: pic: non byte read [ 102.815698][ T5092] kvm: pic: level sensitive irq not supported [ 102.815757][ T5092] kvm: pic: non byte read [ 102.816010][ T5092] kvm: pic: level sensitive irq not supported [ 102.816069][ T5092] kvm: pic: non byte read [ 102.816289][ T5092] kvm: pic: level sensitive irq not supported [ 102.816354][ T5092] kvm: pic: non byte read [ 102.816575][ T5092] kvm: pic: level sensitive irq not supported [ 102.816633][ T5092] kvm: pic: non byte read [ 102.816854][ T5092] kvm: pic: level sensitive irq not supported [ 102.816912][ T5092] kvm: pic: non byte read [ 102.843104][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.043233][ T5103] loop0: detected capacity change from 0 to 512 [ 103.076523][ T5103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.083125][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 103.101744][ T5103] EXT4-fs (loop0): 1 truncate cleaned up [ 103.101772][ T5103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.216320][ T21] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 103.216352][ T21] usb 6-1: config 0 has no interface number 0 [ 103.216388][ T21] usb 6-1: config 0 interface 12 has no altsetting 0 [ 103.407535][ T21] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 103.407568][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.407592][ T21] usb 6-1: Product: syz [ 103.407609][ T21] usb 6-1: Manufacturer: syz [ 103.407625][ T21] usb 6-1: SerialNumber: syz [ 103.410214][ T21] usb 6-1: config 0 descriptor?? [ 103.412679][ T5112] binder: 5111:5112 ioctl c0306201 200000000100 returned -14 [ 103.421475][ T5112] binder: BINDER_SET_CONTEXT_MGR already set [ 103.421579][ T5112] binder: 5111:5112 ioctl 4018620d 2000000001c0 returned -16 [ 103.422061][ T5112] binder: 5111:5112 ioctl c0306201 200000000200 returned -14 [ 103.780335][ T5123] x86/PAT: syz.3.214:5123 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 103.906946][ T5122] x86/PAT: syz.3.214:5122 freeing invalid memtype [mem 0xfe407000-0xfe407fff] [ 104.312512][ T5148] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 104.398765][ T26] audit: type=1326 audit(1793514078.325:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.218" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac75de559 code=0x7ffc0000 [ 104.473021][ T26] audit: type=1326 audit(1793514078.325:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.218" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac75de559 code=0x7ffc0000 [ 104.546288][ T26] audit: type=1326 audit(1793514078.325:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.218" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2ac75de559 code=0x7ffc0000 [ 104.612229][ T26] audit: type=1326 audit(1793514078.325:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.218" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac75de559 code=0x7ffc0000 [ 104.649697][ T26] audit: type=1326 audit(1793514078.325:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.2.218" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ac75de559 code=0x7ffc0000 [ 104.741089][ T5155] smpboot: CPU 1 is now offline [ 104.910599][ T5158] x86: Booting SMP configuration: [ 104.957186][ T5158] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 104.979381][ T0] kvm-clock: cpu 1, msr ff3c041, secondary cpu clock [ 104.995477][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 105.422829][ T5182] FAULT_INJECTION: forcing a failure. [ 105.422829][ T5182] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.454405][ T5182] CPU: 0 PID: 5182 Comm: syz.3.226 Not tainted syzkaller #0 [ 105.461750][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.471837][ T5182] Call Trace: [ 105.475147][ T5182] [ 105.478111][ T5182] dump_stack_lvl+0x188/0x250 [ 105.482860][ T5182] ? show_regs_print_info+0x20/0x20 [ 105.488453][ T5182] ? load_image+0x410/0x410 [ 105.493000][ T5182] ? __lock_acquire+0x7d40/0x7d40 [ 105.498071][ T5182] ? _raw_spin_unlock_irq+0x2a/0x40 [ 105.503339][ T5182] ? get_signal+0x121c/0x12e0 [ 105.508057][ T5182] should_fail+0x383/0x4b0 [ 105.512518][ T5182] _copy_to_user+0x2e/0x130 [ 105.517062][ T5182] copy_siginfo_to_user+0x20/0x80 [ 105.522128][ T5182] arch_do_signal_or_restart+0xcf9/0x12a0 [ 105.527898][ T5182] ? get_sigframe_size+0x10/0x10 [ 105.532877][ T5182] ? __sys_connect+0x278/0x450 [ 105.537701][ T5182] ? exit_to_user_mode_loop+0x3b/0x130 [ 105.543195][ T5182] exit_to_user_mode_loop+0x9e/0x130 [ 105.548513][ T5182] exit_to_user_mode_prepare+0xee/0x180 [ 105.554098][ T5182] syscall_exit_to_user_mode+0x16/0x40 [ 105.559590][ T5182] do_syscall_64+0x58/0xa0 [ 105.564049][ T5182] ? clear_bhb_loop+0x30/0x80 [ 105.568757][ T5182] ? clear_bhb_loop+0x30/0x80 [ 105.573468][ T5182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.579396][ T5182] RIP: 0033:0x7f0df9a0f557 [ 105.583849][ T5182] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 105.603495][ T5182] RSP: 002b:00007f0df7c66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 105.611978][ T5182] RAX: 000000000000002a RBX: 00007f0df9c95fa0 RCX: 00007f0df9a0f559 [ 105.619991][ T5182] RDX: 000000000000001c RSI: 0000200000000340 RDI: 0000000000000004 [ 105.627992][ T5182] RBP: 00007f0df9aa6b50 R08: 0000000000000000 R09: 0000000000000000 [ 105.635995][ T5182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.643994][ T5182] R13: 00007f0df9c96038 R14: 00007f0df9c95fa0 R15: 00007fff519369f8 [ 105.652040][ T5182] [ 105.655214][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.778776][ T21] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 105.793887][ T21] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 105.801235][ T21] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 105.846352][ T21] f81534: probe of 6-1:0.12 failed with error -71 [ 105.895248][ T21] usb 6-1: USB disconnect, device number 2 [ 106.147821][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.272104][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.392243][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.546374][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.608597][ T5220] binder: 5218:5220 ioctl c0306201 2000000003c0 returned -14 [ 106.685586][ T5220] binder: BINDER_SET_CONTEXT_MGR already set [ 106.736619][ T5220] binder: 5218:5220 ioctl 4018620d 200000000480 returned -16 [ 107.105517][ T5225] loop3: detected capacity change from 0 to 8192 [ 107.166675][ T5172] loop4: detected capacity change from 0 to 32768 [ 107.465645][ T5230] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.798462][ T4198] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 107.843059][ T4198] FAT-fs (loop3): Filesystem has been set read-only [ 107.991827][ T5244] loop0: detected capacity change from 0 to 512 [ 108.086395][ T5244] EXT4-fs (loop0): Test dummy encryption mode enabled [ 108.146930][ T5244] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.239: inode has both inline data and extents flags [ 108.270973][ T5244] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.239: couldn't read orphan inode 15 (err -117) [ 108.370666][ T5244] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 108.421060][ T5227] loop5: detected capacity change from 0 to 32768 [ 108.628570][ T5265] loop3: detected capacity change from 0 to 1024 [ 108.696830][ T5227] XFS (loop5): Mounting V5 Filesystem [ 108.998732][ T5244] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 109.060712][ T5227] XFS (loop5): Ending clean mount [ 109.074872][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 109.153077][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 109.195992][ T5227] syz.5.237 uses obsolete (PF_INET,SOCK_PACKET) [ 109.305685][ T9] device hsr_slave_0 left promiscuous mode [ 109.313387][ T4268] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.333052][ T9] device hsr_slave_1 left promiscuous mode [ 109.364267][ T5278] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 109.373173][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.380645][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.413957][ T5267] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 109.433877][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.441426][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.474962][ T5267] overlayfs: upper fs does not support tmpfile. [ 109.484072][ T9] device bridge_slave_1 left promiscuous mode [ 109.490351][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.524494][ T5267] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 109.532816][ T9] device bridge_slave_0 left promiscuous mode [ 109.567393][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.617086][ T9] device veth1_vlan left promiscuous mode [ 109.641966][ T9] device veth0_vlan left promiscuous mode [ 109.663471][ T5267] overlayfs: conflicting lowerdir path [ 109.704039][ T4268] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 109.737170][ T4268] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 109.910667][ T5300] loop4: detected capacity change from 0 to 256 [ 109.917750][ T4268] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.928644][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.973838][ T4268] usb 4-1: Product: syz [ 109.989471][ T4268] usb 4-1: Manufacturer: syz [ 110.005436][ T4268] usb 4-1: SerialNumber: syz [ 110.037301][ T5300] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 110.343193][ T5265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.243177][ T4778] Bluetooth: hci2: command 0x041b tx timeout [ 111.678306][ T9] team0 (unregistering): Port device team_slave_1 removed [ 111.752247][ T9] team0 (unregistering): Port device team_slave_0 removed [ 111.816208][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.907085][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.103373][ T4268] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 112.143441][ T4268] cdc_ncm 4-1:1.0: bind() failure [ 112.171635][ T4268] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 112.219292][ T4268] cdc_ncm 4-1:1.1: bind() failure [ 112.258395][ T4268] usb 4-1: USB disconnect, device number 4 [ 112.457392][ T9] bond0 (unregistering): Released all slaves [ 112.834186][ T4787] XFS (loop5): Unmounting Filesystem [ 112.964879][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.983660][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.992094][ T5230] device bridge_slave_0 entered promiscuous mode [ 113.022030][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.040876][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.084548][ T5230] device bridge_slave_1 entered promiscuous mode [ 113.313086][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 113.512634][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.590068][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.822007][ T5344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.843511][ C1] net_ratelimit: 63 callbacks suppressed [ 113.885742][ T5230] team0: Port device team_slave_0 added [ 113.971716][ T5230] team0: Port device team_slave_1 added [ 114.263524][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.302200][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.435035][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.511858][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.540234][ T5363] kvm: emulating exchange as write [ 114.541538][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.705471][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.244814][ T21] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 115.269816][ T21] Bluetooth: hci4: Injecting HCI hardware error event [ 115.302823][ T4201] Bluetooth: hci4: hardware error 0x00 [ 115.321593][ T5230] device hsr_slave_0 entered promiscuous mode [ 115.391446][ T5230] device hsr_slave_1 entered promiscuous mode [ 115.403161][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 115.434828][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.442457][ T5230] Cannot create hsr debugfs directory [ 116.884513][ T5440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.892727][ T5440] IPv6: NLM_F_CREATE should be set when creating new route [ 118.469026][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.476681][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.232940][ C0] net_ratelimit: 46 callbacks suppressed [ 119.370853][ T5462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.091468][ T5382] ODEBUG: Out of memory. ODEBUG disabled [ 120.303919][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.437779][ T5440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.578780][ T5440] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.589643][ T5440] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.599014][ T5440] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.608028][ T5440] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.702525][ T5230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.744119][ T5440] syz.3.274 (5440) used greatest stack depth: 19408 bytes left [ 121.860579][ T5230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.918601][ T5230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.971610][ T5496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 122.024492][ T5230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.081146][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.288'. [ 122.651772][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.727573][ T5506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.748829][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.821958][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.834538][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.048090][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.058497][ T26] audit: type=1326 audit(1793514096.985:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.3.294" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df9a0f559 code=0x0 [ 123.092183][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.144450][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.151559][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.218723][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.267369][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.302536][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.309661][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.332379][ T5531] kvm: pic: non byte write [ 123.382658][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.419177][ T5523] netlink: 'syz.5.293': attribute type 10 has an invalid length. [ 123.496376][ T5523] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.527717][ T5527] netlink: 'syz.5.293': attribute type 4 has an invalid length. [ 123.550619][ T5527] netlink: 152 bytes leftover after parsing attributes in process `syz.5.293'. [ 123.669529][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.686832][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.730517][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.774842][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.810519][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.842376][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.991963][ T5230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.060984][ T5230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.106946][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.120041][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.162592][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.193961][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.215451][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.271679][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.432917][ C1] net_ratelimit: 43 callbacks suppressed [ 124.679872][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d064000: rx timeout, send abort [ 124.691264][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d064000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.706323][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060712c00: rx timeout, send abort [ 124.746812][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.783314][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060712c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.846963][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.884887][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.562590][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.586989][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.674796][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.687996][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.717020][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.743836][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.773743][ T5230] device veth0_vlan entered promiscuous mode [ 125.821836][ T5230] device veth1_vlan entered promiscuous mode [ 125.907066][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.960508][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.993585][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.003946][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.026584][ T5230] device veth0_macvtap entered promiscuous mode [ 126.066556][ T5230] device veth1_macvtap entered promiscuous mode [ 126.155083][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.189283][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.219037][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.248834][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.271120][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.300073][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.309390][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.338804][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.348523][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.366793][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.378944][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.395440][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.410566][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.424715][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.444550][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.480069][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.526831][ T5230] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.553406][ T5230] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.562153][ T5230] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.584107][ T5230] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.762928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 126.782928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.792909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.802905][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.812905][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.822906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.832904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.842901][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.852898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 126.862899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 127.824231][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.841828][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.906426][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.046042][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.060995][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.182375][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.310403][ T5639] request_module fs- succeeded, but still no fs? [ 129.722971][ C1] net_ratelimit: 66 callbacks suppressed [ 130.742607][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.327'. [ 131.481723][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.488212][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.701551][ T5703] netlink: 'syz.5.327': attribute type 10 has an invalid length. [ 134.050611][ T5760] loop5: detected capacity change from 0 to 512 [ 134.158483][ T5767] loop0: detected capacity change from 0 to 512 [ 134.752963][ C1] net_ratelimit: 43 callbacks suppressed [ 134.930772][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 135.737965][ T5760] FAT-fs (loop5): Unrecognized mount option "ÿÿÿ01777777777777777777777" or missing value [ 135.931218][ T5767] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.336: missing EA_INODE flag [ 135.993836][ T5812] APIC base relocation is unsupported by KVM [ 136.001129][ T5812] Disabled LAPIC found during irq injection [ 136.023899][ T5767] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.336: error while reading EA inode 2 err=-117 [ 136.103117][ T5767] EXT4-fs (loop0): 1 orphan inode deleted [ 136.108923][ T5767] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 136.185954][ T5767] syz.0.336 (pid 5767) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 136.346438][ T5825] overlayfs: filesystem on './file0' not supported as upperdir [ 138.740178][ T5889] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.808669][ C0] net_ratelimit: 45 callbacks suppressed [ 141.360218][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 141.856779][ T5912] block device autoloading is deprecated and will be removed. [ 142.106289][ T5922] device gretap0 left promiscuous mode [ 142.752362][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.760021][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.789454][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.894586][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.821022][ C1] net_ratelimit: 50 callbacks suppressed [ 144.977913][ T5922] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.991709][ T5922] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.043128][ T5922] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.063804][ T5922] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.475358][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.514098][ T5939] xt_bpf: check failed: parse error [ 145.521526][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 145.610634][ T5945] loop6: detected capacity change from 0 to 128 [ 145.683650][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 145.706780][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 145.754008][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 145.775524][ T5945] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 145.826631][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 145.865822][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 145.942082][ T5312] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 145.956149][ T5947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.211298][ T5947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.031447][ T5983] block device autoloading is deprecated and will be removed. [ 148.311873][ T5994] overlayfs: failed to clone upperpath [ 148.414970][ T6001] binder: 6000:6001 ioctl c0306201 200000000080 returned -14 [ 148.564702][ T6005] md/raid:md4: device ram9 operational as raid disk 1 [ 148.588059][ T6005] md/raid:md4: device ram8 operational as raid disk 0 [ 148.732939][ T6005] md/raid:md4: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 148.742198][ T6005] md4: detected capacity change from 0 to 8192 [ 149.790999][ T6005] md4: detected capacity change from 8192 to 0 [ 149.815768][ T6005] md: md4 stopped. [ 150.221871][ C0] net_ratelimit: 30 callbacks suppressed [ 150.556230][ T6029] binder: 6027:6029 ioctl c0306201 2000000003c0 returned -14 [ 150.566595][ T6028] overlayfs: failed to clone upperpath [ 150.769784][ T6038] loop3: detected capacity change from 0 to 1024 [ 152.048174][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'. [ 152.089584][ T6060] block device autoloading is deprecated and will be removed. [ 152.116306][ T6060] md: invalid raid superblock magic on ram10 [ 152.138205][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 152.152981][ T6060] md: ram10 does not have a valid v0.0 superblock, not importing! [ 152.183253][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 152.192434][ T6060] md: md_import_device returned -22 [ 152.201760][ T6061] md: invalid raid superblock magic on ram11 [ 152.209212][ T6064] tipc: Cannot configure node identity twice [ 152.233293][ T6059] netlink: 108 bytes leftover after parsing attributes in process `syz.0.398'. [ 152.244478][ T6061] md: ram11 does not have a valid v0.0 superblock, not importing! [ 152.252369][ T6061] md: md_import_device returned -22 [ 152.274758][ T6064] tipc: Enabled bearer , priority 0 [ 152.290381][ T6065] device-mapper: table: 248:1: snapshot: COW device cannot be the same as origin device [ 152.336097][ T6065] device-mapper: ioctl: error adding target to table [ 152.580990][ T6038] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.705185][ T6038] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,jqfmt=vfsv0,dioread_nolock,,errors=continue. Quota mode: writeback. [ 152.821808][ T6081] loop0: detected capacity change from 0 to 512 [ 153.183839][ T6070] loop5: detected capacity change from 0 to 32768 [ 153.336384][ T4272] tipc: Node number set to 1792720429 [ 153.674771][ T6090] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.132282][ T6097] using random self ethernet address [ 154.138452][ T6097] using random host ethernet address [ 155.142869][ C0] sched: RT throttling activated [ 155.632959][ C0] net_ratelimit: 26 callbacks suppressed [ 156.348661][ T6135] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.416'. [ 156.530367][ T6140] loop6: detected capacity change from 0 to 512 [ 158.165953][ T6140] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.183608][ T6140] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.230003][ T6140] EXT4-fs (loop6): shut down requested (2) [ 158.619959][ T6178] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 158.766053][ T6181] device veth0_virt_wifi entered promiscuous mode [ 159.238711][ T4782] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 159.298050][ T6218] loop3: detected capacity change from 0 to 512 [ 159.503484][ T4782] usb 7-1: Using ep0 maxpacket: 16 [ 159.648398][ T4782] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 159.665567][ T4782] usb 7-1: config 1 has no interface number 0 [ 159.682158][ T4782] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 159.712967][ T4782] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 159.750258][ T4782] usb 7-1: config 1 interface 105 has no altsetting 0 [ 159.967470][ T4782] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 160.000764][ T4782] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 160.015048][ T4782] usb 7-1: Product: syz [ 160.019489][ T4782] usb 7-1: Manufacturer: syz [ 160.028311][ T4782] usb 7-1: SerialNumber: syz [ 160.056694][ T6205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.071420][ T6205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.325950][ T6252] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.528185][ T6218] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.541596][ T6218] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.429: casefold flag without casefold feature [ 160.559707][ T6205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.573196][ T6205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.591629][ T6218] EXT4-fs (loop3): Remounting filesystem read-only [ 160.638599][ T6218] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.429: couldn't read orphan inode 15 (err -117) [ 160.681854][ T6218] EXT4-fs (loop3): Remounting filesystem read-only [ 160.704458][ T6218] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,grpid,data_err=ignore,jqfmt=vfsold,acl,init_itable=0x0000000000000e4d,. Quota mode: none. [ 160.833956][ T4782] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 160.874802][ T4782] aqc111: probe of 7-1:1.105 failed with error -71 [ 160.944513][ T4782] usb 7-1: USB disconnect, device number 2 [ 161.308919][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.437'. [ 161.402899][ C1] net_ratelimit: 28 callbacks suppressed [ 163.832784][ T6319] loop5: detected capacity change from 0 to 8192 [ 163.901867][ T6319] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 163.931092][ T6319] REISERFS (device loop5): using ordered data mode [ 163.961681][ T6319] reiserfs: using flush barriers [ 163.998896][ T6319] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.075157][ T6319] REISERFS (device loop5): checking transaction log (loop5) [ 164.434443][ T6319] REISERFS (device loop5): Using tea hash to sort names [ 164.457106][ T6319] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 164.655834][ T6326] loop6: detected capacity change from 0 to 1024 [ 164.788324][ T6326] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.936001][ T6328] device syzkaller0 entered promiscuous mode [ 166.262367][ T6355] kvm: pic: single mode not supported [ 166.331316][ T6391] loop0: detected capacity change from 0 to 512 [ 166.546472][ C1] net_ratelimit: 33 callbacks suppressed [ 167.541319][ T6391] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 167.579190][ T6410] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 167.603065][ T6391] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.730132][ T6391] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 167.786847][ T6379] loop3: detected capacity change from 0 to 32768 [ 168.752947][ T6379] JBD2: Ignoring recovery information on journal [ 168.889543][ T6379] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 169.191761][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 169.248190][ T6437] team0: Port device bridge0 added [ 169.461781][ T6405] loop5: detected capacity change from 0 to 32768 [ 169.715654][ T6405] XFS (loop5): Mounting V5 Filesystem [ 169.808403][ T6457] FAULT_INJECTION: forcing a failure. [ 169.808403][ T6457] name failslab, interval 1, probability 0, space 0, times 1 [ 169.844640][ T6457] CPU: 0 PID: 6457 Comm: syz.3.478 Not tainted syzkaller #0 [ 169.851997][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 169.862093][ T6457] Call Trace: [ 169.865417][ T6457] [ 169.868389][ T6457] dump_stack_lvl+0x188/0x250 [ 169.873131][ T6457] ? show_regs_print_info+0x20/0x20 [ 169.878350][ T6457] ? load_image+0x410/0x410 [ 169.882900][ T6457] ? __might_sleep+0xf0/0xf0 [ 169.887528][ T6457] ? __lock_acquire+0x7d40/0x7d40 [ 169.892570][ T6457] should_fail+0x383/0x4b0 [ 169.897158][ T6457] should_failslab+0x5/0x20 [ 169.901676][ T6457] slab_pre_alloc_hook+0x51/0xc0 [ 169.906622][ T6457] kmem_cache_alloc_trace+0x47/0x290 [ 169.911916][ T6457] ? ucma_alloc_ctx+0x4e/0x2d0 [ 169.916689][ T6457] ? __might_fault+0xb3/0x110 [ 169.921394][ T6457] ucma_alloc_ctx+0x4e/0x2d0 [ 169.926003][ T6457] ucma_create_id+0x1dc/0x370 [ 169.930711][ T6457] ? __lock_acquire+0x7d40/0x7d40 [ 169.935766][ T6457] ? ucma_close+0x170/0x170 [ 169.940464][ T6457] ? __might_fault+0xb3/0x110 [ 169.945154][ T6457] ? _copy_from_user+0x111/0x170 [ 169.950103][ T6457] ucma_write+0x24e/0x2f0 [ 169.954447][ T6457] ? ucma_get_global_nl_info+0x70/0x70 [ 169.959912][ T6457] ? common_file_perm+0x171/0x1c0 [ 169.964943][ T6457] ? fsnotify_perm+0x5d/0x560 [ 169.969627][ T6457] ? security_file_permission+0x75/0xa0 [ 169.975184][ T6457] ? ucma_get_global_nl_info+0x70/0x70 [ 169.980650][ T6457] vfs_write+0x304/0xd70 [ 169.984931][ T6457] ? file_end_write+0x250/0x250 [ 169.989821][ T6457] ? __fget_files+0x402/0x470 [ 169.989855][ T6457] ? __fdget_pos+0x1e2/0x370 [ 169.989877][ T6457] ? ksys_write+0x70/0x260 [ 169.989902][ T6457] ksys_write+0x153/0x260 [ 169.989926][ T6457] ? __ia32_sys_read+0x80/0x80 [ 170.000000][ T6457] ? lockdep_hardirqs_on+0x94/0x140 [ 170.008755][ T6457] do_syscall_64+0x4c/0xa0 [ 170.018728][ T6457] ? clear_bhb_loop+0x30/0x80 [ 170.018756][ T6457] ? clear_bhb_loop+0x30/0x80 [ 170.018780][ T6457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.018804][ T6457] RIP: 0033:0x7f0df9a0f559 [ 170.018825][ T6457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.028752][ T6457] RSP: 002b:00007f0df7c66028 EFLAGS: 00000246 [ 170.039365][ T6457] ORIG_RAX: 0000000000000001 [ 170.063600][ T6457] RAX: ffffffffffffffda RBX: 00007f0df9c95fa0 RCX: 00007f0df9a0f559 [ 170.063625][ T6457] RDX: 0000000000000020 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 170.063641][ T6457] RBP: 00007f0df9aa6b50 R08: 0000000000000000 R09: 0000000000000000 [ 170.063657][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.074424][ T6457] R13: 00007f0df9c96038 R14: 00007f0df9c95fa0 R15: 00007fff519369f8 [ 170.074463][ T6457] [ 170.280060][ T6405] XFS (loop5): Ending clean mount [ 170.322496][ T6405] XFS (loop5): Quotacheck needed: Please wait. [ 170.477355][ T6405] XFS (loop5): Quotacheck: Done. [ 170.507641][ T6467] loop6: detected capacity change from 0 to 2048 [ 170.605953][ T6448] tipc: Resetting bearer [ 170.669015][ T6467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.708173][ T4787] XFS (loop5): Unmounting Filesystem [ 171.462202][ T6488] Zero length message leads to an empty skb [ 171.525173][ T6485] netlink: 'syz.6.490': attribute type 1 has an invalid length. [ 171.548739][ T6485] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.490'. [ 171.617445][ T6448] net_ratelimit: 25 callbacks suppressed [ 171.631544][ T6488] loop6: detected capacity change from 0 to 2048 [ 171.691436][ T6488] UDF-fs: bad mount option "rootdir=00000000G00000000013" or missing value [ 172.629636][ T5931] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 172.648571][ T5931] Bluetooth: hci2: Injecting HCI hardware error event [ 172.672470][ T4204] Bluetooth: hci2: hardware error 0x00 [ 173.998719][ T6448] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.011088][ T6448] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.029040][ T6448] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.048247][ T6448] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.278081][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.317816][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 174.343685][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 174.362004][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 174.381952][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 174.402127][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 174.412205][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 174.456058][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.475343][ T6459] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.694571][ T6503] trusted_key: encrypted_key: insufficient parameters specified [ 175.668284][ T6518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.957756][ T6528] loop5: detected capacity change from 0 to 2048 [ 176.185314][ T6540] loop5: detected capacity change from 0 to 2048 [ 176.246598][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 176.282657][ T6121] Alternate GPT is invalid, using primary GPT. [ 176.296580][ T6121] loop5: p2 p3 p7 [ 176.466016][ T6540] Alternate GPT is invalid, using primary GPT. [ 176.514839][ T6540] loop5: p2 p3 p7 [ 176.543144][ T6546] device wlan0 entered promiscuous mode [ 176.566712][ T6548] tipc: Failed to remove unknown binding: 66,0,0/0:1356735146/1356735148 [ 176.585343][ T6548] tipc: Failed to remove unknown binding: 66,0,0/0:1356735146/1356735147 [ 176.600205][ T6548] tipc: Failed to remove unknown binding: 66,0,0/0:1356735146/1356735148 [ 176.626220][ T6550] net_ratelimit: 24 callbacks suppressed [ 176.626236][ T6550] ip_tables: iptables: counters copy to user failed while replacing table [ 176.640647][ T6548] tipc: Failed to remove unknown binding: 66,0,0/0:1356735146/1356735147 [ 177.834710][ T6570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.912092][ T6574] device bond_slave_0 entered promiscuous mode [ 177.919420][ T6574] device bond_slave_1 entered promiscuous mode [ 177.964908][ T6577] loop5: detected capacity change from 0 to 512 [ 177.983112][ T6574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.026317][ T6574] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 178.070283][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.834199][ T6595] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 179.450993][ T5312] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.530557][ T5312] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.629702][ T5312] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.760395][ T5312] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.507460][ T6618] rxe_eth0 speed is unknown, defaulting to 1000 [ 181.107294][ T6630] rxe_eth0 speed is unknown, defaulting to 1000 [ 181.194143][ T5312] bond0: (slave wlan1): Releasing backup interface [ 181.550432][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 181.633015][ C1] net_ratelimit: 8 callbacks suppressed [ 182.232181][ T5312] device hsr_slave_0 left promiscuous mode [ 182.263230][ T5312] device hsr_slave_1 left promiscuous mode [ 182.289793][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.323823][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.334586][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.353852][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 182.364840][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.393836][ T5312] device bridge_slave_1 left promiscuous mode [ 182.401471][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.430350][ T6503] Set syz1 is full, maxelem 65536 reached [ 182.444451][ T5312] device bridge_slave_0 left promiscuous mode [ 182.450688][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.492355][ T5312] device veth1_macvtap left promiscuous mode [ 182.512588][ T5312] device veth0_macvtap left promiscuous mode [ 182.534960][ T5312] device veth1_vlan left promiscuous mode [ 182.540802][ T5312] device veth0_vlan left promiscuous mode [ 182.923552][ T4778] Bluetooth: hci4: command 0x0409 tx timeout [ 183.409510][ T5312] team0 (unregistering): Port device team_slave_1 removed [ 183.451256][ T5312] team0 (unregistering): Port device team_slave_0 removed [ 183.475024][ T5312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.529442][ T5312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.932310][ T5312] bond0 (unregistering): Released all slaves [ 184.192365][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.199919][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.244289][ T6618] device bridge_slave_0 entered promiscuous mode [ 184.259385][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.281910][ T6667] FAULT_INJECTION: forcing a failure. [ 184.281910][ T6667] name failslab, interval 1, probability 0, space 0, times 0 [ 184.310100][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.313425][ T6667] CPU: 0 PID: 6667 Comm: syz.3.541 Not tainted syzkaller #0 [ 184.324502][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.334597][ T6667] Call Trace: [ 184.334608][ T6667] [ 184.334619][ T6667] dump_stack_lvl+0x188/0x250 [ 184.340950][ T6667] ? show_regs_print_info+0x20/0x20 [ 184.350833][ T6667] ? load_image+0x410/0x410 [ 184.355387][ T6667] ? __might_sleep+0xf0/0xf0 [ 184.360018][ T6667] ? __lock_acquire+0x7d40/0x7d40 [ 184.365182][ T6667] should_fail+0x383/0x4b0 [ 184.369640][ T6667] should_failslab+0x5/0x20 [ 184.374174][ T6667] slab_pre_alloc_hook+0x51/0xc0 [ 184.379149][ T6667] ? prepare_creds+0x3c/0x610 [ 184.383873][ T6667] kmem_cache_alloc+0x3d/0x280 [ 184.388685][ T6667] prepare_creds+0x3c/0x610 [ 184.393248][ T6667] __sys_setresuid+0x626/0xc40 [ 184.398065][ T6667] do_syscall_64+0x4c/0xa0 [ 184.402525][ T6667] ? clear_bhb_loop+0x30/0x80 [ 184.407235][ T6667] ? clear_bhb_loop+0x30/0x80 [ 184.407264][ T6667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.417868][ T6667] RIP: 0033:0x7f0df9a0f559 [ 184.422321][ T6667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.441994][ T6667] RSP: 002b:00007f0df7c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 184.450465][ T6667] RAX: ffffffffffffffda RBX: 00007f0df9c95fa0 RCX: 00007f0df9a0f559 [ 184.458479][ T6667] RDX: ffffffffffffffff RSI: 000000000000ee01 RDI: 0000000000000000 [ 184.458499][ T6667] RBP: 00007f0df9aa6b50 R08: 0000000000000000 R09: 0000000000000000 [ 184.458516][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.482562][ T6667] R13: 00007f0df9c96038 R14: 00007f0df9c95fa0 R15: 00007fff519369f8 [ 184.490590][ T6667] [ 184.495452][ T5931] Bluetooth: hci1: command 0x041b tx timeout [ 184.515869][ T6618] device bridge_slave_1 entered promiscuous mode [ 184.655519][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.711917][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.919087][ T6630] chnl_net:caif_netlink_parms(): no params data found [ 184.961938][ T6618] team0: Port device team_slave_0 added [ 185.003093][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 185.030381][ T6618] team0: Port device team_slave_1 added [ 185.275023][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.282215][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.335467][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.349057][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.356278][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.382341][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.772436][ T6618] device hsr_slave_0 entered promiscuous mode [ 185.806476][ T6618] device hsr_slave_1 entered promiscuous mode [ 185.834937][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.842046][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.868655][ T6630] device bridge_slave_0 entered promiscuous mode [ 185.948873][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.958490][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.993747][ T6630] device bridge_slave_1 entered promiscuous mode [ 186.106041][ T6688] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.255785][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.346351][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.522343][ T6630] team0: Port device team_slave_0 added [ 186.524595][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 186.570010][ T6630] team0: Port device team_slave_1 added [ 186.729870][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.753766][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.829814][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.833448][ C0] net_ratelimit: 16 callbacks suppressed [ 186.915279][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.925252][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.013899][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.073021][ T4778] Bluetooth: hci4: command 0x040f tx timeout [ 187.488914][ T6630] device hsr_slave_0 entered promiscuous mode [ 187.521709][ T6630] device hsr_slave_1 entered promiscuous mode [ 187.598721][ T6630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.626582][ T6630] Cannot create hsr debugfs directory [ 187.642975][ T4778] Bluetooth: hci2: command 0x0409 tx timeout [ 187.820715][ T6706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.236183][ T6618] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 188.358226][ T6688] chnl_net:caif_netlink_parms(): no params data found [ 188.457372][ T6618] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 188.571895][ T6618] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 188.669015][ T6618] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 189.162084][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 189.185032][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 189.465991][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.558154][ T6618] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.714039][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 189.741656][ T6618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.843237][ T6618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.202399][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.237524][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.284785][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.326208][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.367836][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.374944][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.413458][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.429833][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.463300][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.470529][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.523464][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.534865][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.544668][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.557876][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.570905][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.582193][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.594072][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.604561][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.616339][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.627659][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.637908][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.647607][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.655325][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.666132][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.701896][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.720317][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.818449][ T6734] device batadv_slave_1 entered promiscuous mode [ 190.854588][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.883269][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.890372][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.903013][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 190.915749][ T6688] device bridge_slave_0 entered promiscuous mode [ 190.934926][ T6734] device batadv_slave_1 left promiscuous mode [ 190.982141][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.996869][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.023233][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.039840][ T13] usb 4-1: config 0 has no interfaces? [ 191.053211][ T6688] device bridge_slave_1 entered promiscuous mode [ 191.183632][ T13] usb 4-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 191.217024][ T13] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 191.233141][ T4782] Bluetooth: hci3: command 0x0406 tx timeout [ 191.244703][ T4782] Bluetooth: hci0: command 0x0406 tx timeout [ 191.248169][ T13] usb 4-1: Product: syz [ 191.305771][ T13] usb 4-1: SerialNumber: syz [ 191.329580][ T6688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.358498][ T13] usb 4-1: config 0 descriptor?? [ 191.392620][ T6630] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 191.465710][ T6688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.552915][ T6630] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 191.661640][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.670608][ T4272] usb 4-1: USB disconnect, device number 5 [ 191.681456][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.714961][ T6630] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 191.772367][ T6688] team0: Port device team_slave_0 added [ 191.803369][ T4778] Bluetooth: hci2: command 0x040f tx timeout [ 191.812230][ T6630] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 191.867957][ T6688] team0: Port device team_slave_1 added [ 191.901147][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.931714][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.985855][ T6618] device veth0_vlan entered promiscuous mode [ 192.032119][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.055804][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.090470][ T6618] device veth1_vlan entered promiscuous mode [ 192.178111][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.212529][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.248793][ T6688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.296411][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.313676][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.348031][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.364306][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.400481][ T6688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.474490][ T6618] device veth0_macvtap entered promiscuous mode [ 192.492477][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.503993][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.542386][ T6618] device veth1_macvtap entered promiscuous mode [ 192.560427][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.569346][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.578577][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.672382][ T6688] device hsr_slave_0 entered promiscuous mode [ 192.682542][ T6688] device hsr_slave_1 entered promiscuous mode [ 192.706195][ T6688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.728698][ T6688] Cannot create hsr debugfs directory [ 192.746425][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.763861][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.776810][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.792960][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.802981][ T4272] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 192.811815][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.863735][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.878404][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.896033][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.916357][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.936437][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.953112][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.984695][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.994757][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.005348][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.014440][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.023236][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.030378][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.056412][ T6618] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.066274][ T6618] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.079082][ T6618] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.088728][ T6618] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.126407][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.135245][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.145014][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.153885][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.160971][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.185206][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.213379][ T4272] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.248132][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.263276][ T4272] usb 4-1: not running at top speed; connect to a high speed hub [ 193.305256][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.324955][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.334231][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.343457][ T4272] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 193.374174][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.450723][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.469117][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.489085][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.503469][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.512293][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.523304][ T4272] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 193.537864][ T4272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.555095][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.564945][ T4272] usb 4-1: Product: syz [ 193.581993][ T4272] usb 4-1: Manufacturer: syz [ 193.600668][ T4272] usb 4-1: SerialNumber: syz [ 193.669274][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.683144][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.766617][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.883467][ T4304] Bluetooth: hci2: command 0x0419 tx timeout [ 193.895825][ T5312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.915009][ T5312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.930551][ T4272] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 193.949472][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.999831][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.011055][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.052213][ T6630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.103331][ T4272] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 194.153579][ T4272] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 194.198114][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204784][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.248333][ T6688] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 194.303476][ T6688] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 194.313225][ T4272] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 194.363125][ T6688] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 194.415048][ T6688] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 194.481967][ T4272] usb 4-1: USB disconnect, device number 6 [ 194.599416][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.640333][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.777190][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.805065][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.842219][ T6630] device veth0_vlan entered promiscuous mode [ 194.857215][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.882175][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.924039][ T6630] device veth1_vlan entered promiscuous mode [ 194.936280][ T6121] udevd[6121]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.094619][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.121768][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.169275][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.217358][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.268083][ T6630] device veth0_macvtap entered promiscuous mode [ 195.292742][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.347835][ T6630] device veth1_macvtap entered promiscuous mode [ 195.383311][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.397685][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.428830][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.463795][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.514080][ T6688] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.604019][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.633928][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.666412][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.679331][ T6811] Bluetooth: (null): Invalid header checksum [ 195.733056][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.753316][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.866645][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.875932][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.902567][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.909707][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.943367][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.983657][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.024321][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.049859][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.106677][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.161309][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.168456][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.240430][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.266954][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.642351][ T6822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.667859][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.702991][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.718110][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.729775][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.743980][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.762276][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.791211][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.839076][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.856913][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.866636][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.879967][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.890345][ T6630] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.902339][ T6630] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.911667][ T6630] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.921235][ T6630] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.999918][ T6688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.021837][ T6688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.073880][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.091020][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.126126][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.146194][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.164792][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.186404][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.220598][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.566'. [ 197.357786][ T6842] netlink: 176 bytes leftover after parsing attributes in process `syz.4.568'. [ 197.502649][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.516331][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.544511][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.624505][ T5312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.640040][ T5312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.643358][ C1] net_ratelimit: 75 callbacks suppressed [ 197.685288][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.700952][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.740292][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.790162][ T6688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.073969][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.095522][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.208775][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.229388][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.259017][ T6688] device veth0_vlan entered promiscuous mode [ 198.282768][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.317218][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.346210][ T6688] device veth1_vlan entered promiscuous mode [ 198.474885][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.512966][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.542396][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.561312][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.628665][ T6688] device veth0_macvtap entered promiscuous mode [ 198.678301][ T6688] device veth1_macvtap entered promiscuous mode [ 198.781605][ T6888] netlink: 224 bytes leftover after parsing attributes in process `syz.4.578'. [ 198.920787][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.931795][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.941773][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.006335][ T6891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.434675][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.446607][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.571955][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.648454][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.703454][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.721573][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.730064][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.743465][ T6894] binder_alloc: 6893: binder_alloc_buf, no vma [ 199.751056][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.772697][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.784309][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.797942][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.840249][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.871339][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.912055][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.953412][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.966964][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 199.977229][ T4204] CPU: 0 PID: 4204 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 199.984816][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 199.994903][ T4204] Workqueue: hci4 hci_rx_work [ 199.999652][ T4204] Call Trace: [ 200.002952][ T4204] [ 200.002963][ T4204] dump_stack_lvl+0x188/0x250 [ 200.003004][ T4204] ? show_regs_print_info+0x20/0x20 [ 200.003028][ T4204] ? load_image+0x410/0x410 [ 200.003062][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 200.026309][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 200.031035][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 200.036271][ T4204] kobject_add_internal+0x5ba/0xcd0 [ 200.041506][ T4204] kobject_add+0x160/0x230 [ 200.045953][ T4204] ? kobject_init+0x1c0/0x1c0 [ 200.045989][ T4204] ? __raw_spin_lock_init+0x41/0x100 [ 200.055986][ T4204] ? get_device_parent+0x121/0x3e0 [ 200.061133][ T4204] device_add+0x470/0x1050 [ 200.065605][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 200.065637][ T4204] hci_sync_conn_complete_evt+0x647/0x9d0 [ 200.076329][ T4204] ? __rwlock_init+0x140/0x140 [ 200.076360][ T4204] hci_event_packet+0x8cf/0x1310 [ 200.086101][ T4204] ? _raw_spin_unlock+0x40/0x40 [ 200.086128][ T4204] ? rcu_lock_release+0x20/0x20 [ 200.095873][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 200.101103][ T4204] hci_rx_work+0x255/0xa10 [ 200.101165][ T4204] process_one_work+0x867/0xff0 [ 200.110420][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 200.110448][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 200.121390][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 200.126442][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 200.126472][ T4204] ? wq_worker_running+0x97/0x170 [ 200.126501][ T4204] worker_thread+0xad7/0x12a0 [ 200.126538][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 200.137892][ T4204] kthread+0x42e/0x520 [ 200.148451][ T4204] ? rcu_lock_release+0x20/0x20 [ 200.148476][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 200.157419][ T4204] ret_from_fork+0x1f/0x30 [ 200.157497][ T4204] [ 200.171209][ T4204] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 200.184505][ T4204] Bluetooth: hci4: failed to register connection device [ 200.226226][ T6688] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.289272][ T6688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.340679][ T6688] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.395138][ T6688] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.442677][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.457913][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.665260][ T6908] overlayfs: failed to clone upperpath [ 200.751359][ T4532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.792911][ T4532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.802527][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.872066][ T6911] netlink: 'syz.8.585': attribute type 5 has an invalid length. [ 200.900485][ T4532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.923502][ T4532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.952008][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.266916][ T6929] device syzkaller0 entered promiscuous mode [ 201.383057][ T4269] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 201.642903][ T4269] usb 8-1: Using ep0 maxpacket: 8 [ 201.833257][ T4269] usb 8-1: unable to get BOS descriptor or descriptor too short [ 201.933248][ T4269] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 7 [ 202.001182][ T6951] loop9: detected capacity change from 0 to 128 [ 202.035847][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 202.147346][ T6953] binder: 6952:6953 ioctl c0306201 2000000003c0 returned -14 [ 202.186567][ T4269] usb 8-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 202.211804][ T4269] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.251418][ T4269] usb 8-1: Product: syz [ 202.268645][ T4269] usb 8-1: Manufacturer: syz [ 202.298169][ T6957] attempt to access beyond end of device [ 202.298169][ T6957] loop9: rw=2049, want=425, limit=128 [ 202.312166][ T4269] usb 8-1: SerialNumber: syz [ 202.675195][ C0] net_ratelimit: 66 callbacks suppressed [ 203.175800][ T6926] loop7: detected capacity change from 0 to 8192 [ 203.243520][ T6926] loop7: p1 < > p3 p4 < > [ 203.243545][ T6926] loop7: partition table partially beyond EOD, truncated [ 203.253232][ T6926] loop7: p1 start 393216 is beyond EOD, truncated [ 203.253264][ T6926] loop7: p3 start 50659072 is beyond EOD, truncated [ 203.263425][ T4269] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 203.338624][ T4269] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 203.409922][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.489776][ T4269] usb 8-1: USB disconnect, device number 2 [ 203.708142][ T6982] input: syz0 as /devices/virtual/input/input7 [ 204.333681][ T6979] loop3: detected capacity change from 0 to 131072 [ 204.350431][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 204.439904][ T6979] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 204.448655][ T6979] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 204.472127][ T6979] F2FS-fs (loop3): invalid crc value [ 204.527785][ T6979] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.548785][ T6121] udevd[6121]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 204.630267][ T6979] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 204.637566][ T6979] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 204.682504][ T26] audit: type=1804 audit(1793514178.605:14): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.605" name="/newroot/124/file1/bus" dev="loop3" ino=10 res=1 errno=0 [ 205.283048][ T7012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.325476][ T4272] kernel write not supported for file 22/net/vlan/vlan1 (pid: 4272 comm: kworker/0:5) [ 205.606807][ T7009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.844163][ T7014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.914249][ T7014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.945424][ T7014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.009018][ T7014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.061939][ T7014] bond1: (slave geneve2): making interface the new active one [ 206.139131][ T7014] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 206.169623][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 206.217041][ T7014] syz.4.614 (7014) used greatest stack depth: 19328 bytes left [ 206.231057][ T7021] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.615859][ T7020] syz.7.616 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 206.619925][ T7035] tipc: Enabling of bearer rejected, failed to enable media [ 206.689214][ T7020] CPU: 1 PID: 7020 Comm: syz.7.616 Not tainted syzkaller #0 [ 206.696577][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.706666][ T7020] Call Trace: [ 206.710068][ T7020] [ 206.713029][ T7020] dump_stack_lvl+0x188/0x250 [ 206.717750][ T7020] ? show_regs_print_info+0x20/0x20 [ 206.723006][ T7020] ? load_image+0x410/0x410 [ 206.727555][ T7020] ? local_lock_release+0x170/0x170 [ 206.732795][ T7020] ? __rwlock_init+0x140/0x140 [ 206.737609][ T7020] dump_header+0xd9/0x780 [ 206.741992][ T7020] oom_kill_process+0x20e/0x3d0 [ 206.746889][ T7020] out_of_memory+0xdb2/0x1190 [ 206.751635][ T7020] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 206.757491][ T7020] ? mutex_lock_io_nested+0x60/0x60 [ 206.762748][ T7020] ? unregister_oom_notifier+0x20/0x20 [ 206.768267][ T7020] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 206.773863][ T7020] ? mem_cgroup_oom_trylock+0x210/0x210 [ 206.779485][ T7020] ? do_raw_spin_unlock+0x11d/0x230 [ 206.784729][ T7020] try_charge_memcg+0x1075/0x15b0 [ 206.789811][ T7020] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 206.795661][ T7020] ? rcu_lock_acquire+0x30/0x30 [ 206.800600][ T7020] obj_cgroup_charge_pages+0x87/0x190 [ 206.806017][ T7020] ? __memcg_kmem_charge_page+0x380/0x380 [ 206.811784][ T7020] __memcg_kmem_charge_page+0x2fe/0x380 [ 206.817472][ T7020] __alloc_pages+0x222/0x480 [ 206.822108][ T7020] ? zone_statistics+0x170/0x170 [ 206.827103][ T7020] __vmalloc_node_range+0x4b1/0x8b0 [ 206.832360][ T7020] ? kvm_dev_ioctl+0x485/0x20a0 [ 206.837518][ T7020] __vmalloc_node+0x79/0x90 [ 206.842068][ T7020] ? kvm_dev_ioctl+0x485/0x20a0 [ 206.846963][ T7020] kvm_dev_ioctl+0x485/0x20a0 [ 206.851725][ T7020] ? hardware_enable_nolock+0x130/0x130 [ 206.857349][ T7020] ? bpf_lsm_file_ioctl+0x5/0x10 [ 206.862335][ T7020] ? security_file_ioctl+0x7c/0xa0 [ 206.867487][ T7020] ? hardware_enable_nolock+0x130/0x130 [ 206.873079][ T7020] __se_sys_ioctl+0xfa/0x170 [ 206.877710][ T7020] do_syscall_64+0x4c/0xa0 [ 206.882199][ T7020] ? clear_bhb_loop+0x30/0x80 [ 206.887044][ T7020] ? clear_bhb_loop+0x30/0x80 [ 206.891768][ T7020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.897702][ T7020] RIP: 0033:0x7f4adcc7d559 [ 206.902154][ T7020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.921909][ T7020] RSP: 002b:00007f4adaed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.930397][ T7020] RAX: ffffffffffffffda RBX: 00007f4adcf03fa0 RCX: 00007f4adcc7d559 [ 206.938674][ T7020] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 206.946685][ T7020] RBP: 00007f4adcd14b50 R08: 0000000000000000 R09: 0000000000000000 [ 206.954873][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.962888][ T7020] R13: 00007f4adcf04038 R14: 00007f4adcf03fa0 R15: 00007fff4b517b88 [ 206.970971][ T7020] [ 207.187829][ T7020] memory: usage 96kB, limit 96kB, failcnt 45 [ 207.213026][ T7020] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 207.241046][ T7020] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 207.324271][ T7020] Memory cgroup stats for /syz7/test: [ 207.326061][ T7020] anon 0 [ 207.326061][ T7020] file 0 [ 207.326061][ T7020] kernel_stack 0 [ 207.326061][ T7020] pagetables 0 [ 207.326061][ T7020] percpu 0 [ 207.326061][ T7020] sock 0 [ 207.326061][ T7020] shmem 0 [ 207.326061][ T7020] file_mapped 0 [ 207.326061][ T7020] file_dirty 0 [ 207.326061][ T7020] file_writeback 0 [ 207.326061][ T7020] swapcached 0 [ 207.326061][ T7020] anon_thp 0 [ 207.326061][ T7020] file_thp 0 [ 207.326061][ T7020] shmem_thp 0 [ 207.326061][ T7020] inactive_anon 0 [ 207.326061][ T7020] active_anon 0 [ 207.326061][ T7020] inactive_file 0 [ 207.326061][ T7020] active_file 0 [ 207.326061][ T7020] unevictable 0 [ 207.326061][ T7020] slab_reclaimable 0 [ 207.326061][ T7020] slab_unreclaimable 648 [ 207.326061][ T7020] slab 648 [ 207.326061][ T7020] workingset_refault_anon 0 [ 207.326061][ T7020] workingset_refault_file 0 [ 207.326061][ T7020] workingset_activate_anon 0 [ 207.326061][ T7020] workingset_activate_file 0 [ 207.440973][ T7020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.616,pid=7019,uid=0 [ 207.570917][ T7020] Memory cgroup out of memory: Killed process 7020 (syz.7.616) total-vm:200772kB, anon-rss:1444kB, file-rss:21648kB, shmem-rss:10176kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 208.042881][ C1] net_ratelimit: 46 callbacks suppressed [ 208.300669][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 208.321958][ T7075] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 208.356931][ T7074] bond0: option arp_validate: invalid value (808464432) [ 208.580831][ T7085] netlink: 'syz.4.626': attribute type 4 has an invalid length. [ 208.951494][ T7091] ip_tables: iptables: counters copy to user failed while replacing table [ 209.073951][ T7093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.942545][ T7117] FAULT_INJECTION: forcing a failure. [ 209.942545][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 209.981096][ T7117] CPU: 1 PID: 7117 Comm: syz.9.638 Not tainted syzkaller #0 [ 209.988454][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 209.998554][ T7117] Call Trace: [ 210.001869][ T7117] [ 210.004833][ T7117] dump_stack_lvl+0x188/0x250 [ 210.009582][ T7117] ? show_regs_print_info+0x20/0x20 [ 210.014843][ T7117] ? load_image+0x410/0x410 [ 210.019417][ T7117] ? __lock_acquire+0x7d40/0x7d40 [ 210.024496][ T7117] should_fail+0x383/0x4b0 [ 210.029095][ T7117] should_failslab+0x5/0x20 [ 210.033636][ T7117] slab_pre_alloc_hook+0x51/0xc0 [ 210.038698][ T7117] __kmalloc_node+0x6d/0x3a0 [ 210.043345][ T7117] ? kvmalloc_node+0x84/0x130 [ 210.048091][ T7117] kvmalloc_node+0x84/0x130 [ 210.052644][ T7117] fuse_dev_splice_read+0x96/0x5d0 [ 210.057816][ T7117] ? common_file_perm+0x171/0x1c0 [ 210.062882][ T7117] ? fsnotify_perm+0x3a7/0x560 [ 210.067690][ T7117] splice_file_to_pipe+0x1c6/0x330 [ 210.072933][ T7117] do_splice+0x108a/0x1620 [ 210.077407][ T7117] ? __fget_files+0x402/0x470 [ 210.082237][ T7117] ? wait_for_space+0x2d0/0x2d0 [ 210.087158][ T7117] ? __fdget+0x18b/0x210 [ 210.091447][ T7117] __se_sys_splice+0x34d/0x440 [ 210.091534][ T7117] ? __x64_sys_splice+0xf0/0xf0 [ 210.091564][ T7117] ? __x64_sys_splice+0x1d/0xf0 [ 210.091590][ T7117] do_syscall_64+0x4c/0xa0 [ 210.107101][ T7117] ? clear_bhb_loop+0x30/0x80 [ 210.116212][ T7117] ? clear_bhb_loop+0x30/0x80 [ 210.120928][ T7117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.126858][ T7117] RIP: 0033:0x7f57f9e19559 [ 210.131313][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.150975][ T7117] RSP: 002b:00007f57f8070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 210.159422][ T7117] RAX: ffffffffffffffda RBX: 00007f57fa09ffa0 RCX: 00007f57f9e19559 [ 210.167431][ T7117] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 210.175438][ T7117] RBP: 00007f57f9eb0b50 R08: 000000000000f55f R09: 0000000000000000 [ 210.183438][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.191444][ T7117] R13: 00007f57fa0a0038 R14: 00007f57fa09ffa0 R15: 00007ffce104e0b8 [ 210.199466][ T7117] [ 210.474852][ T7127] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 211.619031][ T7127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.643998][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 211.663703][ T7128] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 212.253795][ T7151] loop7: detected capacity change from 0 to 1024 [ 212.634640][ T7129] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 213.080042][ T7154] loop9: detected capacity change from 0 to 8192 [ 213.535276][ T7164] vivid-001: disconnect [ 213.644221][ T9] hfsplus: b-tree write err: -5, ino 25 [ 213.722912][ C1] net_ratelimit: 41 callbacks suppressed [ 213.740935][ T7157] vivid-001: reconnect [ 213.757161][ T9] hfsplus: b-tree write err: -5, ino 4 [ 213.787417][ T9] hfsplus: b-tree write err: -5, ino 2 [ 213.838421][ T9] hfsplus: b-tree write err: -5, ino 26 [ 213.900715][ T9] hfsplus: b-tree write err: -5, ino 27 [ 214.375204][ T7206] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 214.492966][ T5308] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 214.693590][ T7214] overlayfs: unrecognized mount option "contextÀÊŸ˜ˆ7¦tqB«`…ic)¥=ramfs%\b" or missing value [ 214.863228][ T5308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.892963][ T5308] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.942876][ T5308] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.987746][ T5308] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.997986][ T5308] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.009606][ T7229] loop3: detected capacity change from 0 to 164 [ 215.053909][ T5308] usb 10-1: config 0 descriptor?? [ 215.094187][ T7231] loop7: detected capacity change from 0 to 256 [ 215.168095][ T7231] exfat: Deprecated parameter 'utf8' [ 215.212965][ T7231] exfat: Unknown parameter 'keep_last_dots' [ 215.419968][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 215.587593][ T5308] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 215.677084][ T5308] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 215.730533][ T7246] device syzkaller0 entered promiscuous mode [ 216.090191][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.678'. [ 216.651911][ T7289] device syzkaller0 entered promiscuous mode [ 217.043429][ T7298] device syzkaller0 entered promiscuous mode [ 217.062940][ T1109] usb 10-1: reset high-speed USB device number 2 using dummy_hcd [ 217.733352][ T7304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.747761][ T1109] usb 10-1: device descriptor read/64, error -32 [ 218.623298][ T7319] loop7: detected capacity change from 0 to 128 [ 218.699011][ T7322] loop3: detected capacity change from 0 to 16 [ 218.754139][ T7319] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 218.833001][ C0] net_ratelimit: 46 callbacks suppressed [ 218.856424][ T7322] erofs: (device loop3): mounted with root inode @ nid 36. [ 218.941216][ T7322] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 218.994142][ T7322] attempt to access beyond end of device [ 218.994142][ T7322] loop3: rw=0, want=64, limit=16 [ 219.052769][ T1349] usb 10-1: USB disconnect, device number 2 [ 219.083877][ T7322] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 219.214313][ T7328] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 219.304027][ T7328] attempt to access beyond end of device [ 219.304027][ T7328] loop3: rw=0, want=64, limit=16 [ 219.389133][ T7328] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 219.426539][ T7330] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 219.459488][ T7330] attempt to access beyond end of device [ 219.459488][ T7330] loop3: rw=0, want=64, limit=16 [ 219.534360][ T7330] erofs: (device loop3): z_erofs_readpage: failed to read, err [-95] [ 220.358676][ T7351] overlayfs: failed to clone lowerpath [ 220.466229][ T7356] device syzkaller0 entered promiscuous mode [ 221.183280][ T7380] input: syz1 as /devices/virtual/input/input8 [ 221.250645][ T7380] FAULT_INJECTION: forcing a failure. [ 221.250645][ T7380] name failslab, interval 1, probability 0, space 0, times 0 [ 221.293169][ T7371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.350702][ T7380] CPU: 0 PID: 7380 Comm: syz.8.705 Not tainted syzkaller #0 [ 221.358050][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 221.358110][ T7380] Call Trace: [ 221.358122][ T7380] [ 221.358132][ T7380] dump_stack_lvl+0x188/0x250 [ 221.358167][ T7380] ? show_regs_print_info+0x20/0x20 [ 221.385865][ T7380] ? load_image+0x410/0x410 [ 221.390427][ T7380] ? __might_sleep+0xf0/0xf0 [ 221.395063][ T7380] ? __lock_acquire+0x7d40/0x7d40 [ 221.400142][ T7380] should_fail+0x383/0x4b0 [ 221.404609][ T7380] should_failslab+0x5/0x20 [ 221.409156][ T7380] slab_pre_alloc_hook+0x51/0xc0 [ 221.414141][ T7380] ? __kernfs_new_node+0xe3/0x6b0 [ 221.419208][ T7380] kmem_cache_alloc+0x3d/0x280 [ 221.424023][ T7380] __kernfs_new_node+0xe3/0x6b0 [ 221.428920][ T7380] ? kernfs_new_node+0x250/0x250 [ 221.433910][ T7380] ? rcu_lock_release+0x20/0x20 [ 221.438833][ T7380] kernfs_new_node+0x148/0x250 [ 221.443647][ T7380] __kernfs_create_file+0x47/0x2e0 [ 221.443677][ T7380] sysfs_add_file_mode_ns+0x2d2/0x390 [ 221.443711][ T7380] sysfs_create_file_ns+0x12a/0x1b0 [ 221.443739][ T7380] ? sysfs_add_file_mode_ns+0x390/0x390 [ 221.443767][ T7380] ? device_create_file+0xeb/0x1b0 [ 221.443796][ T7380] device_add+0x957/0x1050 [ 221.443827][ T7380] cdev_device_add+0x19d/0x340 [ 221.443859][ T7380] evdev_connect+0x350/0x3f0 [ 221.443887][ T7380] input_register_device+0xd26/0x10c0 [ 221.443917][ T7380] ? input_ff_create+0x264/0x2f0 [ 221.443955][ T7380] uinput_create_device+0x53e/0x680 [ 221.494478][ T7380] uinput_ioctl_handler+0x7a0/0x13d0 [ 221.494515][ T7380] ? uinput_release+0x50/0x50 [ 221.509747][ T7380] ? bpf_lsm_file_ioctl+0x5/0x10 [ 221.514730][ T7380] ? security_file_ioctl+0x7c/0xa0 [ 221.519886][ T7380] ? uinput_poll+0x120/0x120 [ 221.524525][ T7380] __se_sys_ioctl+0xfa/0x170 [ 221.529155][ T7380] do_syscall_64+0x4c/0xa0 [ 221.533631][ T7380] ? clear_bhb_loop+0x30/0x80 [ 221.533660][ T7380] ? clear_bhb_loop+0x30/0x80 [ 221.533686][ T7380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.533713][ T7380] RIP: 0033:0x7f2184d95559 [ 221.533736][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.533756][ T7380] RSP: 002b:00007f2182fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.533784][ T7380] RAX: ffffffffffffffda RBX: 00007f218501bfa0 RCX: 00007f2184d95559 [ 221.554160][ T7380] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 221.554181][ T7380] RBP: 00007f2184e2cb50 R08: 0000000000000000 R09: 0000000000000000 [ 221.554199][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.582260][ T7380] R13: 00007f218501c038 R14: 00007f218501bfa0 R15: 00007ffc20076978 [ 221.598447][ T7380] [ 221.733262][ T7380] input: failed to attach handler evdev to device input8, error: -12 [ 222.035547][ T7405] overlayfs: failed to clone upperpath [ 222.049696][ T7394] device syzkaller0 entered promiscuous mode [ 222.811519][ T7419] loop3: detected capacity change from 0 to 1024 [ 222.853119][ T7419] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 223.312063][ T7419] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 223.333241][ T1233] device hsr_slave_0 left promiscuous mode [ 223.343271][ T1233] device hsr_slave_1 left promiscuous mode [ 223.379852][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.420758][ T7438] loop9: detected capacity change from 0 to 128 [ 223.429242][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.446018][ T1233] device bridge_slave_1 left promiscuous mode [ 223.467205][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.514246][ T26] audit: type=1800 audit(1793514197.445:15): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.719" name="file2" dev="loop9" ino=1048708 res=0 errno=0 [ 223.544155][ T1233] device bridge_slave_0 left promiscuous mode [ 223.576284][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.618854][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.656141][ T7438] FAT-fs (loop9): Filesystem has been set read-only [ 223.683857][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.722959][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.757577][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.788334][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.840229][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.871658][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.911362][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.941665][ T7438] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 223.983732][ T7437] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 224.324641][ T7442] block device autoloading is deprecated and will be removed. [ 224.337917][ T7442] md: md4 stopped. [ 224.529837][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 224.613388][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 224.672384][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.774588][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.842865][ C1] net_ratelimit: 54 callbacks suppressed [ 224.989942][ T1233] bond0 (unregistering): Released all slaves [ 225.153343][ T7458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 226.517491][ T7488] loop9: detected capacity change from 0 to 128 [ 226.590402][ T7485] tipc: Resetting bearer [ 226.626341][ T7488] FAT-fs (loop9): Directory bread(block 1048) failed [ 226.637181][ T7488] FAT-fs (loop9): Directory bread(block 1049) failed [ 226.649520][ T7491] netlink: 44 bytes leftover after parsing attributes in process `syz.7.737'. [ 226.673466][ T5308] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 226.694502][ T7488] FAT-fs (loop9): Directory bread(block 1050) failed [ 226.709631][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.717149][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.731924][ T7499] loop8: detected capacity change from 0 to 512 [ 226.738706][ T7488] FAT-fs (loop9): Directory bread(block 1051) failed [ 226.749463][ T7488] FAT-fs (loop9): Directory bread(block 1052) failed [ 226.775379][ T7497] netlink: 44 bytes leftover after parsing attributes in process `syz.7.737'. [ 226.775566][ T7488] FAT-fs (loop9): Directory bread(block 1053) failed [ 226.883131][ T7488] FAT-fs (loop9): Directory bread(block 1054) failed [ 226.889896][ T7488] FAT-fs (loop9): Directory bread(block 1055) failed [ 226.937441][ T7499] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 227.003242][ T5308] usb 4-1: not running at top speed; connect to a high speed hub [ 227.065007][ T7499] FAT-fs (loop8): Filesystem has been set read-only [ 227.093228][ T5308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.603759][ T7512] FAT-fs (loop9): FAT read failed (blocknr 128) [ 227.736270][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.741'. [ 227.798200][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.741'. [ 227.873841][ T5308] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 227.883212][ T5308] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 227.891788][ T5308] usb 4-1: Product: syz [ 227.902939][ T5308] usb 4-1: Manufacturer: syz [ 227.968296][ T5308] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 228.193305][ T5308] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 228.224108][ T5308] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 228.244308][ T5308] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 228.282368][ T5308] usb 4-1: USB disconnect, device number 7 [ 228.468598][ T7540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.486804][ T7540] fuse: Bad value for 'fd' [ 229.313229][ T7551] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 229.341339][ T7559] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 229.365644][ T7559] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 229.808562][ T7579] loop8: detected capacity change from 0 to 512 [ 229.902386][ T7579] EXT4-fs (loop8): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 229.963082][ T7579] EXT4-fs (loop8): can't mount with both data=journal and dax [ 230.229641][ T7588] device veth0 entered promiscuous mode [ 230.304725][ T7586] device veth0 left promiscuous mode [ 230.432890][ C1] net_ratelimit: 43 callbacks suppressed [ 230.579786][ T7602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.597043][ T7602] fuse: Bad value for 'fd' [ 232.694147][ T7639] Bluetooth: hci0: unsupported parameter 5135 [ 232.713281][ T7639] Bluetooth: hci0: unsupported parameter 65 [ 232.719250][ T7639] Bluetooth: hci0: unsupported parameter 5135 [ 232.763407][ T7642] netlink: 'syz.7.773': attribute type 1 has an invalid length. [ 232.802917][ T7639] Bluetooth: hci0: unsupported parameter 65 [ 233.185816][ T7647] bond1: (slave gretap1): making interface the new active one [ 233.250334][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.769'. [ 233.272223][ T7647] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 233.329784][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.9.771'. [ 233.636717][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.777'. [ 233.948067][ T7674] bridge1: port 1(veth3) entered blocking state [ 233.980832][ T7674] bridge1: port 1(veth3) entered disabled state [ 234.063391][ T7674] device veth3 entered promiscuous mode [ 234.127456][ T7678] bridge1: port 2(veth0_to_bond) entered blocking state [ 234.183122][ T7678] bridge1: port 2(veth0_to_bond) entered disabled state [ 234.270129][ T7678] device veth0_to_bond entered promiscuous mode [ 234.354681][ T7678] bridge1: port 2(veth0_to_bond) entered blocking state [ 234.361794][ T7678] bridge1: port 2(veth0_to_bond) entered forwarding state [ 235.792907][ C0] net_ratelimit: 39 callbacks suppressed [ 236.838812][ T7734] loop8: detected capacity change from 0 to 512 [ 237.071738][ T7734] EXT4-fs (loop8): Ignoring removed nobh option [ 237.153468][ T7734] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 237.714603][ T7152] bond1: (slave geneve2): Send learning packet: mac fa:ca:6c:34:86:1d vlan 0 [ 237.714715][ T7152] nf_conntrack: new packet for ffff8880782e8000 [ 237.714896][ T7152] nf_conntrack: nf_ct_destroy(ffff8880782e8000) [ 237.714966][ T7152] nf_conntrack: nf_ct_destroy: returning ct=ffff8880782e8000 to slab [ 237.820379][ T7738] kcov: kcov_task_exit: t = ffff8880189e3b80, kcov->t = ffff8880189e3b80 [ 237.821332][ T7744] BUG: unable to handle page fault for address: fffff52004856200 [ 237.821344][ T7744] #PF: supervisor read access in kernel mode [ 237.821353][ T7744] #PF: error_code(0x0000) - not-present page [ 237.821366][ T7744] PGD 23ffee067 P4D 23ffee067 PUD 179d2067 PMD 0 [ 237.821392][ T7744] Oops: 0000 [#1] PREEMPT SMP KASAN [ 237.821406][ T7744] CPU: 0 PID: 7744 Comm: syz.3.790 Not tainted syzkaller #0 [ 237.821421][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.821431][ T7744] RIP: 0010:sys_imageblit+0x2016/0x25d0 [ 237.821455][ T7744] Code: b0 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 b7 00 00 00 45 8b 36 48 8b 44 24 18 48 c1 e8 03 <0f> b6 04 08 84 c0 0f 85 d1 00 00 00 48 8b 44 24 20 46 89 34 a8 44 [ 237.821472][ T7744] RSP: 0018:ffffc9000412f180 EFLAGS: 00010a06 [ 237.821486][ T7744] RAX: 1ffff92004856200 RBX: ffff8880212e8ca2 RCX: dffffc0000000000 [ 237.821562][ T7744] RDX: ffffc90010542000 RSI: 00000000000175af RDI: 00000000000175b0 [ 237.821574][ T7744] RBP: ffffc9000412f2e8 R08: ffff88807d485940 R09: 0000000000000003 [ 237.821585][ T7744] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000008 [ 237.821595][ T7744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000007 [ 237.821605][ T7744] FS: 00007f0df7c246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 237.821619][ T7744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.821631][ T7744] CR2: fffff52004856200 CR3: 0000000058be8000 CR4: 00000000003506f0 [ 237.821646][ T7744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 237.821655][ T7744] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 237.821666][ T7744] Call Trace: [ 237.821672][ T7744] [ 237.821683][ T7744] ? sys_copyarea+0x2530/0x2530 [ 237.821704][ T7744] ? __lock_acquire+0x7d40/0x7d40 [ 237.821725][ T7744] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 237.821743][ T7744] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 237.821761][ T7744] ccw_putcs+0xf26/0x11e0 [ 237.821791][ T7744] ? ccw_clear+0x250/0x250 [ 237.821810][ T7744] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 237.821832][ T7744] fbcon_putcs+0x2c8/0x450 [ 237.821849][ T7744] ? ccw_clear+0x250/0x250 [ 237.821866][ T7744] do_update_region+0x4e5/0x640 [ 237.821888][ T7744] ? hide_cursor+0x320/0x320 [ 237.821905][ T7744] ? fbcon_set_palette+0x54a/0x660 [ 237.821922][ T7744] redraw_screen+0xa2c/0x1000 [ 237.821938][ T7744] ? _raw_spin_unlock+0x40/0x40 [ 237.821956][ T7744] ? clear_buffer_attributes+0x320/0x320 [ 237.821975][ T7744] ? tty_do_resize+0xeb/0x160 [ 237.821993][ T7744] vc_do_resize+0x122c/0x17b0 [ 237.822009][ T7744] ? con_font_op+0xace/0xdc0 [ 237.822035][ T7744] ? vc_resize+0x50/0x50 [ 237.822054][ T7744] ? crc32_le_base+0x59e/0xd60 [ 237.822073][ T7744] fbcon_do_set_font+0xc6e/0x1cd0 [ 237.822097][ T7744] ? fbcon_blank+0xa70/0xa70 [ 237.822112][ T7744] con_font_op+0xace/0xdc0 [ 237.822131][ T7744] ? reset_palette+0xdc0/0xdc0 [ 237.822154][ T7744] ? __might_fault+0xb7/0x110 [ 237.822171][ T7744] ? __lock_acquire+0x7d40/0x7d40 [ 237.822192][ T7744] ? __might_fault+0xb3/0x110 [ 237.822209][ T7744] ? _copy_from_user+0x111/0x170 [ 237.822224][ T7744] vt_ioctl+0x1618/0x1ca0 [ 237.822241][ T7744] ? __vt_event_wait+0x260/0x260 [ 237.822262][ T7744] ? tty_jobctrl_ioctl+0x164/0xae0 [ 237.822281][ T7744] tty_ioctl+0x848/0xc30 [ 237.822297][ T7744] ? security_file_ioctl+0x7c/0xa0 [ 237.822315][ T7744] ? tty_get_icount+0xa0/0xa0 [ 237.822332][ T7744] __se_sys_ioctl+0xfa/0x170 [ 237.822348][ T7744] do_syscall_64+0x4c/0xa0 [ 237.822362][ T7744] ? clear_bhb_loop+0x30/0x80 [ 237.822380][ T7744] ? clear_bhb_loop+0x30/0x80 [ 237.822397][ T7744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.822413][ T7744] RIP: 0033:0x7f0df9a0f559 [ 237.822427][ T7744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.822440][ T7744] RSP: 002b:00007f0df7c24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.822456][ T7744] RAX: ffffffffffffffda RBX: 00007f0df9c96180 RCX: 00007f0df9a0f559 [ 237.822468][ T7744] RDX: 0000200000000300 RSI: 0000000000004b72 RDI: 0000000000000005 [ 237.822478][ T7744] RBP: 00007f0df9aa6b50 R08: 0000000000000000 R09: 0000000000000000 [ 237.822495][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.822505][ T7744] R13: 00007f0df9c96218 R14: 00007f0df9c96180 R15: 00007fff519369f8 [ 237.822522][ T7744] [ 237.822531][ T7744] Modules linked in: [ 237.822546][ T7744] CR2: fffff52004856200 [ 237.822561][ T7744] ---[ end trace 6f443c06cfad0935 ]--- [ 237.822572][ T7744] RIP: 0010:sys_imageblit+0x2016/0x25d0 [ 237.822590][ T7744] Code: b0 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 b7 00 00 00 45 8b 36 48 8b 44 24 18 48 c1 e8 03 <0f> b6 04 08 84 c0 0f 85 d1 00 00 00 48 8b 44 24 20 46 89 34 a8 44 [ 237.822603][ T7744] RSP: 0018:ffffc9000412f180 EFLAGS: 00010a06 [ 237.822616][ T7744] RAX: 1ffff92004856200 RBX: ffff8880212e8ca2 RCX: dffffc0000000000 [ 237.822628][ T7744] RDX: ffffc90010542000 RSI: 00000000000175af RDI: 00000000000175b0 [ 237.822639][ T7744] RBP: ffffc9000412f2e8 R08: ffff88807d485940 R09: 0000000000000003 [ 237.822651][ T7744] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000000008 [ 237.822660][ T7744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000007 [ 237.822670][ T7744] FS: 00007f0df7c246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 237.822684][ T7744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.822696][ T7744] CR2: fffff52004856200 CR3: 0000000058be8000 CR4: 00000000003506f0 [ 237.822709][ T7744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 237.822720][ T7744] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 237.822731][ T7744] Kernel panic - not syncing: Fatal exception [ 237.822886][ T7744] Kernel Offset: disabled [ 238.425075][ T7744] Rebooting in 86400 seconds..