last executing test programs: 45.256390767s ago: executing program 3 (id=18): r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume', 0x161a82, 0x149) sendfile(r2, r2, 0x0, 0xb) 44.965981396s ago: executing program 3 (id=20): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x9, 0x2b2c, 0x3e, 0x9}, 'syz0\x00', 0x2d}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000002c0)={0x50, 0xaf48, 0x6, {0x0, 0x2}, {0x3, 0x2007}, @const={0x8c, {0x100, 0x4, 0x4, 0x5}}}) 44.850419768s ago: executing program 3 (id=21): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000080)="00008634", 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000280)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000380)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 44.73870037s ago: executing program 3 (id=23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000840)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./bus\x00', &(0x7f00000008c0), 0x2000008, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000940)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x0) open(&(0x7f0000001300)='./file1\x00', 0x4827e, 0x20) 44.274344038s ago: executing program 3 (id=29): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002580), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f00000025c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x3dde}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4a47, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x8, 0xb16, 0x20, 0x200000, 0x0, 0x2, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x7a, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x9148, 0x0, 0x2, 0x0, 0xd, 0xffffffff], [0xd, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x2, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x400008, 0xdd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x80, 0x3, 0x80000, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000002a40)={'syz1\x00', {0xfffd, 0x400d}, 0x4d, [0x400, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7f, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0xfffffe00, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x4000000, 0x0, 0x8, 0xffff, 0x0, 0xfffffffc, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc3c3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x9, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffff8, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2842, 0xfffffffe, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10e3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x43, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x80003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x7fb, 0x0, 0x6, 0x2, 0x0, 0x0, 0x8], [0x81, 0x0, 0x5d30, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0xf1, 0x0, 0x4, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 42.88871666s ago: executing program 1 (id=41): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 42.791196001s ago: executing program 1 (id=42): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 42.685332161s ago: executing program 1 (id=44): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000200)='7', 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000140)={0x600, 0x60000}) 42.534717717s ago: executing program 1 (id=46): syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x80420c, &(0x7f0000000880)=ANY=[], 0x7, 0x37b, &(0x7f00000008c0)="$eJzs3U9oI1UcwPFf/k2TLNvkIIqC9OEi6GVoo2cxyC4IAZfuRtwVhNl2oiFjUjKhGhHbnjwq3j0JHkpvFjwUtGchF296EaG3XgQFK6gj8y+Z/OufmDRs+/1Ayct77zfzXual/CbtZI7f+vz9WsXWK0ZL4mklMRGRE5G8xCUUCx7jXlkT+eyHbtu2vHjj95+evfegnPYr1J3i/ZcKSqnFpe8++DgTdDtYkE7+nePfCkedfFBlq6qt6o2WMtSjxi8t45FlqvWqXdOVumuZhm2qat02m377N0GQ1djYaCujvn4zu9HUxFZGva1qZlu1GqrVbCvjXaNaV7quq5tZwVnKu6urRnHC4LUpDwYz0mwWjYSIZIZayrtzGRAAAJirwfw/7qb0Z+X/Ed38/6Eslkq3V5XbuZf/7z132Lrx5v5ikP8faEedJztPH/97/71qL/9/+Wd/W335v3s60cv/G/75QaUv/zftEfn/l3KB/H84I7pmJs3/8zMYCyazpA1Vxfqeufl/Nnj/enbe3lv2CuT/AAAAAAAAAAAAAAAAAAAAAAA8Dk4cJ+c4Ti58DH96lxAEz3EljTv+CyKSdo++w/G/yu49eChp78I99xhbn26WN8v+Y9DhUEQsMf9xBrlrI7zySLny8r21FcRvbZYTXkuxIlU3XlYkJ3lvPUXiHefO66XbK8oXxHcvU8pG4wuSkyei8d96q9ONL/THB/vX5IVbkXhdcvLjmjTEknUvsrf/T1aUeu2N0kB8xusnIr9e+kEBAAAAAGDKdNU18vxd18e1+98yUqx4HxOZsiw5+Xv0+f3yyPPzZO6Z5LxnDwAAAADA9WC3P6oZEjebXsGyRhUyMrZpCoVkX01KRIb6JMSytIHw1GlbTkRmeN7xaOLfweT/zuur8FW9SFT4jxTuwLtNwR1VZLLxhPP3amLJ5/8Imv666Lxi2+ItgO1oU1zOEZ4cHPySW6FGdr41djs7wUS6NeHHRtqY11nuDm8nfspKSA3VOLHJFsBTX3z95/TeIK/sByvgw7M771imsyXnOSgDBXcXw02pmf/iAQAAAHDpekl/WPNqtDl6I5HozXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFM0k6/0GyiM3/vCZU4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLv/AgAA//99b+/k") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 42.425175518s ago: executing program 3 (id=47): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000400)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x800) 41.967251456s ago: executing program 32 (id=47): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000400)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x800) 41.951035167s ago: executing program 1 (id=50): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$phonet(r0, 0x0, 0x0, 0x40000142, &(0x7f0000000680)={0x23, 0x9, 0xce, 0xe5}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000004c0)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.835182229s ago: executing program 1 (id=52): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000022c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002340)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000002380)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000036e000/0x3000)=nil, 0x400000, 0x3, 0x2}) 41.319480402s ago: executing program 33 (id=52): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000022c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002340)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000002380)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000036e000/0x3000)=nil, 0x400000, 0x3, 0x2}) 22.544985157s ago: executing program 4 (id=147): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)='tmpfs\x00', 0x0, &(0x7f0000001280)='grpquota') r0 = creat(&(0x7f00000012c0)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) open(0x0, 0xc2b41, 0x110) 22.013610822s ago: executing program 4 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000fc0)={0x19980330}, &(0x7f0000001000)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 21.719408352s ago: executing program 4 (id=150): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) sendmmsg$inet6(r0, &(0x7f0000007040)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)="02", 0x1}], 0x1}}], 0x1, 0x24044801) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r2, 0x2}, 0x8) 20.677394789s ago: executing program 4 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000c00)='./file0/../file0\x00') pivot_root(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='./file0/../file0\x00') 20.47597973s ago: executing program 4 (id=162): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001ac0)={0x2, {0x2, 0x3c1, 0x0, 0x14a, 0xa}}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000001b00)={0xec4, 0x10000, 0xef89, 0x7fa, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0x100, 0x200008}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001b40)) 20.218895057s ago: executing program 5 (id=164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000001200)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000001240), 0x3, 0x101000) syz_usb_disconnect(r1) syz_usb_connect$uac2(0x0, 0xfffffe56, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x40, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0xc, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x26, 0xf7, 0xe9, {0x8, 0x25, 0x1, 0x1, 0x27, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x0, 0x1, {0x8, 0x25, 0x1, 0x83, 0xc, 0xc}}}}}}}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.139706515s ago: executing program 4 (id=165): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) unshare(0x20400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f00000000c0), 0x0}, 0x20) 19.79773569s ago: executing program 34 (id=165): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) unshare(0x20400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f00000000c0), 0x0}, 0x20) 16.839314455s ago: executing program 5 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./tracing\x00', &(0x7f0000000b00)='tracefs\x00', 0x1800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000c00)='.\x00', &(0x7f0000000c40), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15.865362355s ago: executing program 5 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 15.664423016s ago: executing program 5 (id=182): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x210000, &(0x7f0000000400)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000d40)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d80)='./bus\x00', &(0x7f0000000dc0), 0x2000008, &(0x7f0000000e00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000e40)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) 15.13844225s ago: executing program 5 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [], {}, {0x20, 0x5}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 13.989107158s ago: executing program 5 (id=190): syz_mount_image$reiserfs(&(0x7f00000004c0), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10f3, &(0x7f0000022bc0)="$eJzs2LGKE0EYB/D/bA7lqshcvx5oYSHHHfEBvEIhjYW1XfAFTCXkcXwcuco+pDdFwF7ZxJCoAQkbFI7fD5bd+TPzfTvlTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBzlnwtyUWT1G3WJClJ296NF0nabf7o86BJydv34+mrD6PX0820dFmT0q1aj+vNk1pHdVRv6ouL26d1+vHlLy1L2sxXs8n5m+VJt9L1Hpy0IgAAANwP33sb/ln0iEN4//4AAADA35z0MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgp7r9aJKUpG3vxosk7f/9LQAAAKCnkibvhofyzTXAzvN8GZaUh7vkW+nmXOfTgfUAAADAccreefxZzvN4L7/MWa6uNuOfryxvk8GD5Pq3OvPVbLJ+LmeT8i83AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAUwUAAP//j/nRaQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000022ac0)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f0000022b00)=[{&(0x7f0000022b40)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) truncate(&(0x7f0000022b80)='./file1\x00', 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0xd8) write$UHID_INPUT(r1, &(0x7f0000002480)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4aa9050000000000005c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb19b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713c68b349b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c328f6e21312ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3bbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f0e8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b353382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987a8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0x1006) 13.599736709s ago: executing program 35 (id=190): syz_mount_image$reiserfs(&(0x7f00000004c0), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10f3, &(0x7f0000022bc0)="$eJzs2LGKE0EYB/D/bA7lqshcvx5oYSHHHfEBvEIhjYW1XfAFTCXkcXwcuco+pDdFwF7ZxJCoAQkbFI7fD5bd+TPzfTvlTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBzlnwtyUWT1G3WJClJ296NF0nabf7o86BJydv34+mrD6PX0820dFmT0q1aj+vNk1pHdVRv6ouL26d1+vHlLy1L2sxXs8n5m+VJt9L1Hpy0IgAAANwP33sb/ln0iEN4//4AAADA35z0MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgp7r9aJKUpG3vxosk7f/9LQAAAKCnkibvhofyzTXAzvN8GZaUh7vkW+nmXOfTgfUAAADAccreefxZzvN4L7/MWa6uNuOfryxvk8GD5Pq3OvPVbLJ+LmeT8i83AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAUwUAAP//j/nRaQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000022ac0)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f0000022b00)=[{&(0x7f0000022b40)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) truncate(&(0x7f0000022b80)='./file1\x00', 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0xd8) write$UHID_INPUT(r1, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x1006) 3.245632266s ago: executing program 7 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000380)=0x2) 2.929083538s ago: executing program 7 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='3', 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000700)={0x0, 0x3, 0x8, r0, 0x0, &(0x7f0000000740)={0x9f0901, 0xf64, '\x00', @value64=0x5a9}}) 2.668659335s ago: executing program 7 (id=233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000f40)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x8001, 0x0, 0x3f, &(0x7f0000000100)="d5c9c2acbd76639d65c57ae1ce544671192220ea818136f224709454025c4a8cc88c43a2765dd0801067817a2cb4c56a546156c84fc80ccb7e322f58eb9687"}], 0x1}) 2.317464631s ago: executing program 6 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x16, 0x1400, 0x0, 0xfe, 0x1, 0x0, @private=0xa0100fd, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x1}}}, 0x2a) 2.098843294s ago: executing program 2 (id=241): socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x63a, 0x7721, 0x16, 0x0, 0x0) 1.94699723s ago: executing program 0 (id=243): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000700)={&(0x7f0000000740)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1}, 0x10040) 1.877657567s ago: executing program 6 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') 1.859250669s ago: executing program 2 (id=245): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002080)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 1.630561802s ago: executing program 2 (id=246): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="8ce2ad4d4f95e087a7846d3f81304bd1958570440101080a0c6614c63c282429", 0x20, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 1.625140013s ago: executing program 6 (id=247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./pipefs\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x14c98, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.482429547s ago: executing program 2 (id=248): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1.434036352s ago: executing program 6 (id=249): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 1.016511065s ago: executing program 2 (id=250): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x6000000a}) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000200)=ANY=[], 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000240)={0x4}) 932.974594ms ago: executing program 0 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 n', 0x35) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) 799.521838ms ago: executing program 6 (id=252): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 521.717136ms ago: executing program 0 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xe}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x9}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 428.427596ms ago: executing program 6 (id=254): setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x2, 0x1, 0x27, 0x0, 0x7}, 0x20) r0 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 311.200208ms ago: executing program 7 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x34, r2, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000) 303.960259ms ago: executing program 0 (id=256): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], 0x0) 219.452608ms ago: executing program 0 (id=257): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x595f, 0x400, 0x4, 0x51}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 111.895299ms ago: executing program 0 (id=258): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x604}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) 11.927399ms ago: executing program 7 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0x1000, 0xdddd1000, 0x4, 0xc, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x8, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x9, 0xab, 0x80, 0x5, 0x2, 0xdb}, {0x60000, 0x100000, 0xc, 0x7, 0xb1, 0xc, 0x21, 0x8, 0x80, 0xff, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0xfa, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x8, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) 0s ago: executing program 2 (id=260): r0 = getpid() r1 = io_uring_setup(0x1555, &(0x7f0000000240)={0x0, 0x6522, 0x2, 0x1, 0x19e}) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r1, 0x8000000) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000000c0)={0xb53c2080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 68.568670][ T5769] cgroup: Unknown subsys name 'net' [ 68.704380][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.064153][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.553548][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.562489][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.588351][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.596562][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.596984][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.610806][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.620093][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.620749][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.638365][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.643713][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.645669][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.654315][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.661007][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.668371][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.674961][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.682594][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.688892][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.696013][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.702081][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.711182][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.718606][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.724616][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.730805][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.737028][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.763973][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.783366][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.840165][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 71.842500][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 71.852622][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.861166][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.869277][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 71.871016][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.875280][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.890489][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.909231][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 71.914998][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 72.133324][ T5781] infiniband rxe0: set active [ 72.142384][ T173] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.158076][ T5781] infiniband rxe0: added rxe_eth0 [ 72.221136][ T5781] RDS/IB: rxe0: added [ 72.225717][ T5781] smc: adding ib device rxe0 with port count 1 [ 72.232870][ T5781] smc: ib device rxe0 port 1 has pnetid [ 72.254847][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.320650][ T173] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.453756][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 72.513162][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.525777][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 72.587090][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 72.732747][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.770626][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.781652][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.802935][ T5782] bridge_slave_0: entered allmulticast mode [ 72.819605][ T5782] bridge_slave_0: entered promiscuous mode [ 72.906932][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.928229][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.935498][ T5782] bridge_slave_1: entered allmulticast mode [ 72.962613][ T5782] bridge_slave_1: entered promiscuous mode [ 73.064706][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.071631][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.079194][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.086403][ T5783] bridge_slave_0: entered allmulticast mode [ 73.094103][ T5783] bridge_slave_0: entered promiscuous mode [ 73.128861][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.136099][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.143743][ T5783] bridge_slave_1: entered allmulticast mode [ 73.151244][ T5783] bridge_slave_1: entered promiscuous mode [ 73.161037][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.173761][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.215754][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.223107][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.230889][ T5784] bridge_slave_0: entered allmulticast mode [ 73.248326][ T5784] bridge_slave_0: entered promiscuous mode [ 73.290857][ T5782] team0: Port device team_slave_0 added [ 73.301163][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.308850][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.316166][ T5784] bridge_slave_1: entered allmulticast mode [ 73.325088][ T5784] bridge_slave_1: entered promiscuous mode [ 73.334053][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.347717][ T5782] team0: Port device team_slave_1 added [ 73.425011][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.455532][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.465883][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.495328][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.514325][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.546390][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.557295][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.587239][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.611319][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.644314][ T5783] team0: Port device team_slave_0 added [ 73.654692][ T5783] team0: Port device team_slave_1 added [ 73.756659][ T5784] team0: Port device team_slave_0 added [ 73.774239][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.782776][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.809647][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.821171][ T5786] Bluetooth: hci3: command tx timeout [ 73.823901][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.833771][ T5791] Bluetooth: hci1: command tx timeout [ 73.833794][ T5792] Bluetooth: hci2: command tx timeout [ 73.833978][ T5792] Bluetooth: hci0: command tx timeout [ 73.852270][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.878336][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.897144][ T5782] hsr_slave_0: entered promiscuous mode [ 73.903666][ T5782] hsr_slave_1: entered promiscuous mode [ 73.913175][ T5784] team0: Port device team_slave_1 added [ 73.964971][ T173] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.975436][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.982538][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.008668][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.021329][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.028409][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.054501][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.184823][ T5783] hsr_slave_0: entered promiscuous mode [ 74.196842][ T5783] hsr_slave_1: entered promiscuous mode [ 74.203682][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.216193][ T5783] Cannot create hsr debugfs directory [ 74.296114][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 74.337189][ T5784] hsr_slave_0: entered promiscuous mode [ 74.344550][ T5784] hsr_slave_1: entered promiscuous mode [ 74.354579][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.362444][ T5784] Cannot create hsr debugfs directory [ 74.646416][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.653708][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.661190][ T5781] bridge_slave_0: entered allmulticast mode [ 74.667887][ T5781] bridge_slave_0: entered promiscuous mode [ 74.676156][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.683361][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.690611][ T5781] bridge_slave_1: entered allmulticast mode [ 74.697473][ T5781] bridge_slave_1: entered promiscuous mode [ 74.742345][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.760486][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.773571][ T5447] infiniband rxe0: set active [ 74.785630][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.854546][ T5781] team0: Port device team_slave_0 added [ 74.870774][ T5781] team0: Port device team_slave_1 added [ 74.909713][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.916692][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.943710][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.956489][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.963623][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.989969][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.052653][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.069046][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.082336][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.162620][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.173879][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.184541][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.194401][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.204278][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.219268][ T5781] hsr_slave_0: entered promiscuous mode [ 75.225938][ T5781] hsr_slave_1: entered promiscuous mode [ 75.232493][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.240146][ T5781] Cannot create hsr debugfs directory [ 75.323658][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.350047][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.364741][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.389943][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.583007][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.607339][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.629511][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.644396][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.666289][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.690750][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.711943][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.741892][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.749305][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.770827][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.782864][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.812546][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.819688][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.843611][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.850754][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.872059][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.879280][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.898987][ T5792] Bluetooth: hci1: command tx timeout [ 75.899061][ T5791] Bluetooth: hci2: command tx timeout [ 75.904444][ T5792] Bluetooth: hci0: command tx timeout [ 75.910712][ T5794] Bluetooth: hci3: command tx timeout [ 75.925092][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.952589][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.959748][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.021903][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.029245][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.158709][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.211315][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.255309][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.263029][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.323519][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.330732][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.452141][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.575598][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.667828][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.690546][ T5783] veth0_vlan: entered promiscuous mode [ 76.719705][ T5783] veth1_vlan: entered promiscuous mode [ 76.770091][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.835466][ T5783] veth0_macvtap: entered promiscuous mode [ 76.872985][ T5783] veth1_macvtap: entered promiscuous mode [ 76.886064][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.903383][ T5782] veth0_vlan: entered promiscuous mode [ 76.924428][ T5782] veth1_vlan: entered promiscuous mode [ 76.940055][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.970268][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.995008][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.004750][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.014438][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023730][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.099177][ T5782] veth0_macvtap: entered promiscuous mode [ 77.116526][ T5784] veth0_vlan: entered promiscuous mode [ 77.125378][ T5781] veth0_vlan: entered promiscuous mode [ 77.135971][ T5781] veth1_vlan: entered promiscuous mode [ 77.182691][ T5782] veth1_macvtap: entered promiscuous mode [ 77.196660][ T5784] veth1_vlan: entered promiscuous mode [ 77.237632][ T5781] veth0_macvtap: entered promiscuous mode [ 77.277340][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.292213][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.304067][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.314433][ T5781] veth1_macvtap: entered promiscuous mode [ 77.327556][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.345492][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.346738][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.356844][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.379387][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.422572][ T5784] veth0_macvtap: entered promiscuous mode [ 77.434933][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.445069][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.454655][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.463689][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490325][ T5784] veth1_macvtap: entered promiscuous mode [ 77.511152][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.532503][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.541783][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.556010][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.566259][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.583037][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.594255][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.626490][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.641115][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.651337][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.662574][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.672882][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.683513][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.695294][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.726017][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.743737][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.758054][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.780515][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.792000][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.802414][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.813260][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.824842][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.849474][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.865736][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.880175][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.892943][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.906343][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.921767][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.934320][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.954512][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.967169][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.976087][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.985850][ T5794] Bluetooth: hci0: command tx timeout [ 77.985884][ T5792] Bluetooth: hci3: command tx timeout [ 77.991857][ T5794] Bluetooth: hci2: command tx timeout [ 77.997057][ T5792] Bluetooth: hci1: command tx timeout [ 78.002650][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.025745][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.034626][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.041579][ T5898] process 'syz.2.5' launched './file1' with NULL argv: empty string added [ 78.043853][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.062302][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.085219][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.113437][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.243767][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.276002][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.376597][ T4970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.395385][ T4970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.429021][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.436980][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.498821][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.530370][ T4970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.555443][ T4970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.699567][ T5911] syz.1.2[5911]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.735113][ T5913] Illegal XDP return value 4294967294 on prog (id 4) dev syz_tun, expect packet loss! [ 79.117593][ T5925] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.322469][ T5911] loop1: detected capacity change from 0 to 32768 [ 79.334371][ T5911] ======================================================= [ 79.334371][ T5911] WARNING: The mand mount option has been deprecated and [ 79.334371][ T5911] and is ignored by this kernel. Remove the mand [ 79.334371][ T5911] option from the mount to silence this warning. [ 79.334371][ T5911] ======================================================= [ 79.416624][ T5911] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 79.621482][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 79.830917][ T5942] input: syz0 as /devices/virtual/input/input5 [ 80.045254][ T5951] loop3: detected capacity change from 0 to 1024 [ 80.054027][ T5951] EXT4-fs: Ignoring removed bh option [ 80.060585][ T5792] Bluetooth: hci1: command tx timeout [ 80.068203][ T5792] Bluetooth: hci2: command tx timeout [ 80.068795][ T5794] Bluetooth: hci3: command tx timeout [ 80.073604][ T5792] Bluetooth: hci0: command tx timeout [ 80.091782][ T5951] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 80.129908][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.224853][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.277445][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 80.296364][ T5951] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #12: block 7: comm syz.3.23: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 80.298483][ T5957] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.25'. [ 80.349389][ T5951] EXT4-fs (loop3): Remounting filesystem read-only [ 80.361426][ T5959] overlayfs: failed to get metacopy (-5) [ 80.428743][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 80.442059][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.478012][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.489278][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.503148][ T5871] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.512750][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.527672][ T5871] usb 2-1: config 0 descriptor?? [ 80.723680][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 81.000010][ T5871] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input6 [ 81.042839][ T5871] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 81.298375][ T9] usb 2-1: USB disconnect, device number 2 [ 82.190112][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.382626][ T4970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.382707][ T6010] loop1: detected capacity change from 0 to 128 [ 82.556459][ T4970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.674330][ T4970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.766638][ T4970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.445226][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.456984][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.480743][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.508879][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.516837][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.525970][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.753849][ T6023] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.046410][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.081233][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.094237][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.114367][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.130667][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.144926][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.435236][ T6040] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.697070][ T6055] netlink: 'syz.2.62': attribute type 3 has an invalid length. [ 85.033382][ T4970] hsr_slave_0: left promiscuous mode [ 85.060065][ T4970] hsr_slave_1: left promiscuous mode [ 85.074515][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.080804][ T6070] FAULT_INJECTION: forcing a failure. [ 85.080804][ T6070] name failslab, interval 1, probability 0, space 0, times 0 [ 85.102880][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.118393][ T6070] CPU: 1 PID: 6070 Comm: syz.2.64 Not tainted syzkaller #0 [ 85.125664][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.135767][ T6070] Call Trace: [ 85.139062][ T6070] [ 85.141987][ T6070] dump_stack_lvl+0x18c/0x250 [ 85.146675][ T6070] ? show_regs_print_info+0x20/0x20 [ 85.151868][ T6070] ? load_image+0x420/0x420 [ 85.156380][ T6070] ? __might_sleep+0xe0/0xe0 [ 85.161005][ T6070] ? __lock_acquire+0x7eb0/0x7eb0 [ 85.166048][ T6070] ? trace_contention_end+0x39/0xe0 [ 85.171257][ T6070] should_fail_ex+0x394/0x4c0 [ 85.175957][ T6070] should_failslab+0x9/0x20 [ 85.180498][ T6070] slab_pre_alloc_hook+0x59/0x300 [ 85.185559][ T6070] ? mutex_lock_nested+0x20/0x20 [ 85.190543][ T6070] ? blkcg_css_alloc+0x6a/0xa60 [ 85.195445][ T6070] __kmem_cache_alloc_node+0x53/0x260 [ 85.200857][ T6070] ? blkcg_css_alloc+0x6a/0xa60 [ 85.205742][ T6070] kmalloc_trace+0x2a/0xe0 [ 85.210202][ T6070] blkcg_css_alloc+0x6a/0xa60 [ 85.215177][ T6070] cgroup_apply_control_enable+0x3cc/0xb00 [ 85.221193][ T6070] cgroup_mkdir+0xc83/0xe70 [ 85.225723][ T6070] ? css_task_iter_end+0x2c0/0x2c0 [ 85.230868][ T6070] ? kernfs_iop_permission+0x2c4/0x3b0 [ 85.236351][ T6070] ? css_task_iter_end+0x2c0/0x2c0 [ 85.241476][ T6070] kernfs_iop_mkdir+0x241/0x3e0 [ 85.246364][ T6070] vfs_mkdir+0x2a5/0x470 [ 85.250650][ T6070] do_mkdirat+0x1dc/0x450 [ 85.255104][ T6070] ? vfs_mkdir+0x470/0x470 [ 85.259615][ T6070] __x64_sys_mkdirat+0x89/0xa0 [ 85.264417][ T6070] do_syscall_64+0x55/0xb0 [ 85.268875][ T6070] ? clear_bhb_loop+0x40/0x90 [ 85.273596][ T6070] ? clear_bhb_loop+0x40/0x90 [ 85.278321][ T6070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.284273][ T6070] RIP: 0033:0x7f3d71b9fb19 [ 85.288770][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.308533][ T6070] RSP: 002b:00007f3d72b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 85.316987][ T6070] RAX: ffffffffffffffda RBX: 00007f3d71e25fa0 RCX: 00007f3d71b9fb19 [ 85.324994][ T6070] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 85.332998][ T6070] RBP: 00007f3d71c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 85.340998][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.348999][ T6070] R13: 00007f3d71e26038 R14: 00007f3d71e25fa0 R15: 00007ffc510d2338 [ 85.357039][ T6070] [ 85.376062][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.407047][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.420934][ T4970] bridge_slave_1: left allmulticast mode [ 85.426761][ T4970] bridge_slave_1: left promiscuous mode [ 85.439165][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.474417][ T4970] bridge_slave_0: left allmulticast mode [ 85.482437][ T4970] bridge_slave_0: left promiscuous mode [ 85.494632][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.541148][ T4970] veth1_macvtap: left promiscuous mode [ 85.547350][ T4970] veth0_macvtap: left promiscuous mode [ 85.559726][ T4970] veth1_vlan: left promiscuous mode [ 85.566544][ T4970] veth0_vlan: left promiscuous mode [ 85.581516][ T5786] Bluetooth: hci0: command tx timeout [ 86.222759][ T5786] Bluetooth: hci3: command tx timeout [ 86.376066][ T4970] team0 (unregistering): Port device team_slave_1 removed [ 86.423326][ T4970] team0 (unregistering): Port device team_slave_0 removed [ 86.466938][ T4970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.519712][ T4970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.885923][ T4970] bond0 (unregistering): Released all slaves [ 86.953016][ T23] cfg80211: failed to load regulatory.db [ 86.977337][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 87.044573][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.400445][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.407827][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.438148][ T6023] bridge_slave_0: entered allmulticast mode [ 87.446376][ T6023] bridge_slave_0: entered promiscuous mode [ 87.472067][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.496567][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.520476][ T6023] bridge_slave_1: entered allmulticast mode [ 87.536938][ T6023] bridge_slave_1: entered promiscuous mode [ 87.592446][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 87.637359][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.658405][ T5786] Bluetooth: hci0: command tx timeout [ 87.714389][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.789767][ T6023] team0: Port device team_slave_0 added [ 87.843410][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.862763][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.880075][ T6040] bridge_slave_0: entered allmulticast mode [ 87.892871][ T6040] bridge_slave_0: entered promiscuous mode [ 87.904155][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.911623][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.919004][ T6040] bridge_slave_1: entered allmulticast mode [ 87.925273][ T6114] x86/PAT: syz.0.71:6114 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 87.928932][ T6040] bridge_slave_1: entered promiscuous mode [ 87.954095][ T6023] team0: Port device team_slave_1 added [ 88.035272][ T6114] x86/PAT: syz.0.71:6114 freeing invalid memtype [mem 0xfe000000-0xfe407fff] [ 88.057602][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.079854][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.086899][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.121308][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.162494][ T4970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.194301][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.220562][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.238084][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.265199][ T6120] FAULT_INJECTION: forcing a failure. [ 88.265199][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 88.275493][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.282049][ T6120] CPU: 0 PID: 6120 Comm: syz.0.73 Not tainted syzkaller #0 [ 88.296220][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.298044][ T5786] Bluetooth: hci3: command tx timeout [ 88.306284][ T6120] Call Trace: [ 88.306297][ T6120] [ 88.306306][ T6120] dump_stack_lvl+0x18c/0x250 [ 88.306338][ T6120] ? show_regs_print_info+0x20/0x20 [ 88.327815][ T6120] ? load_image+0x420/0x420 [ 88.332355][ T6120] ? __lock_acquire+0x7eb0/0x7eb0 [ 88.337417][ T6120] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 88.343468][ T6120] should_fail_ex+0x394/0x4c0 [ 88.348175][ T6120] should_failslab+0x9/0x20 [ 88.352712][ T6120] slab_pre_alloc_hook+0x59/0x300 [ 88.357770][ T6120] ? string+0x257/0x290 [ 88.361958][ T6120] ? kasprintf+0xe3/0x140 [ 88.366322][ T6120] ? kasprintf+0xe3/0x140 [ 88.370686][ T6120] __kmem_cache_alloc_node+0x53/0x260 [ 88.376079][ T6120] ? kasprintf+0xe3/0x140 [ 88.380406][ T6120] __kmalloc_node_track_caller+0xa4/0x230 [ 88.386129][ T6120] kvasprintf+0xec/0x1a0 [ 88.390375][ T6120] ? bust_spinlocks+0xd0/0xd0 [ 88.395051][ T6120] ? lockdep_lock+0xf5/0x230 [ 88.399834][ T6120] ? lockdep_unlock+0x146/0x2e0 [ 88.404687][ T6120] kasprintf+0xe3/0x140 [ 88.408843][ T6120] ? kvasprintf_const+0x240/0x240 [ 88.413867][ T6120] ? __raw_spin_lock_init+0x45/0x100 [ 88.419153][ T6120] alloc_workqueue+0x57f/0x1380 [ 88.423998][ T6120] ? __asan_memcpy+0x40/0x70 [ 88.428600][ T6120] ? snprintf+0xe9/0x140 [ 88.432843][ T6120] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 88.438741][ T6120] ? apply_workqueue_attrs+0x180/0x180 [ 88.444195][ T6120] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 88.450094][ T6120] nci_register_device+0x22d/0xa00 [ 88.455199][ T6120] ? lockdep_softirqs_off+0x440/0x440 [ 88.460574][ T6120] ? nci_free_device+0x90/0x90 [ 88.465510][ T6120] ? __init_waitqueue_head+0xa8/0x140 [ 88.470965][ T6120] virtual_ncidev_open+0x12c/0x1a0 [ 88.476074][ T6120] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 88.481268][ T6120] misc_open+0x326/0x3a0 [ 88.485508][ T6120] chrdev_open+0x58c/0x600 [ 88.489922][ T6120] ? cd_forget+0x160/0x160 [ 88.494342][ T6120] ? fsnotify_perm+0x3ed/0x5e0 [ 88.499106][ T6120] do_dentry_open+0x880/0x14b0 [ 88.503870][ T6120] ? cd_forget+0x160/0x160 [ 88.508286][ T6120] path_openat+0x284f/0x3270 [ 88.512891][ T6120] ? do_sys_openat2+0xda/0x1d0 [ 88.517647][ T6120] ? __x64_sys_openat+0x139/0x160 [ 88.522789][ T6120] ? verify_lock_unused+0x140/0x140 [ 88.528001][ T6120] ? do_filp_open+0x430/0x430 [ 88.532703][ T6120] do_filp_open+0x1f2/0x430 [ 88.537230][ T6120] ? vfs_tmpfile+0x620/0x620 [ 88.541850][ T6120] ? _raw_spin_unlock+0x28/0x40 [ 88.546719][ T6120] ? alloc_fd+0x590/0x640 [ 88.551059][ T6120] do_sys_openat2+0x134/0x1d0 [ 88.555743][ T6120] ? do_sys_open+0xe0/0xe0 [ 88.560156][ T6120] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 88.566227][ T6120] ? lock_chain_count+0x20/0x20 [ 88.571095][ T6120] __x64_sys_openat+0x139/0x160 [ 88.575947][ T6120] do_syscall_64+0x55/0xb0 [ 88.580361][ T6120] ? clear_bhb_loop+0x40/0x90 [ 88.585034][ T6120] ? clear_bhb_loop+0x40/0x90 [ 88.589708][ T6120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.595604][ T6120] RIP: 0033:0x7f9ac5d9fb19 [ 88.600035][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.619638][ T6120] RSP: 002b:00007f9ac6d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.628045][ T6120] RAX: ffffffffffffffda RBX: 00007f9ac6025fa0 RCX: 00007f9ac5d9fb19 [ 88.636012][ T6120] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 88.643991][ T6120] RBP: 00007f9ac5e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 88.651970][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.660038][ T6120] R13: 00007f9ac6026038 R14: 00007f9ac6025fa0 R15: 00007fff31228f38 [ 88.668018][ T6120] [ 88.671045][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.697326][ T4970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.765593][ T6040] team0: Port device team_slave_0 added [ 88.899727][ T4970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.941142][ T6040] team0: Port device team_slave_1 added [ 88.966595][ T6023] hsr_slave_0: entered promiscuous mode [ 89.000445][ T6023] hsr_slave_1: entered promiscuous mode [ 89.027457][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.047998][ T6023] Cannot create hsr debugfs directory [ 89.150644][ T4970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.203064][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.217882][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.295318][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.405873][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.422608][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.487483][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.739237][ T5786] Bluetooth: hci0: command tx timeout [ 89.796221][ T6040] hsr_slave_0: entered promiscuous mode [ 89.805449][ T6130] loop0: detected capacity change from 0 to 40427 [ 89.814545][ T6040] hsr_slave_1: entered promiscuous mode [ 89.822003][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.830520][ T6040] Cannot create hsr debugfs directory [ 89.868216][ T6130] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 89.878027][ T6130] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.905489][ T6130] F2FS-fs (loop0): invalid crc value [ 90.001876][ T6130] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.174895][ T6130] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 90.186361][ T6130] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.340415][ T6130] syz.0.74: attempt to access beyond end of device [ 90.340415][ T6130] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.379000][ T5786] Bluetooth: hci3: command tx timeout [ 90.624097][ T6023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.656070][ T6023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.799076][ T5782] syz-executor: attempt to access beyond end of device [ 90.799076][ T5782] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 90.819520][ T6023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.826083][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.864184][ T6023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.553248][ T6040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.609813][ T6040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.645695][ T6040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.704689][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.752852][ T6040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.761884][ T173] kernel write not supported for file /57/setgroups (pid: 173 comm: kworker/0:2) [ 91.819041][ T5786] Bluetooth: hci0: command tx timeout [ 91.918837][ T4970] hsr_slave_0: left promiscuous mode [ 91.938360][ T4970] hsr_slave_1: left promiscuous mode [ 91.962495][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.979223][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.996669][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.005277][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.019513][ T4970] bridge_slave_1: left allmulticast mode [ 92.025258][ T4970] bridge_slave_1: left promiscuous mode [ 92.043441][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.075838][ T4970] bridge_slave_0: left allmulticast mode [ 92.092269][ T4970] bridge_slave_0: left promiscuous mode [ 92.114022][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.181394][ T4970] veth1_macvtap: left promiscuous mode [ 92.187060][ T4970] veth0_macvtap: left promiscuous mode [ 92.206023][ T4970] veth1_vlan: left promiscuous mode [ 92.212401][ T4970] veth0_vlan: left promiscuous mode [ 92.242927][ T6192] loop2: detected capacity change from 0 to 40427 [ 92.272917][ T6192] F2FS-fs (loop2): invalid crc value [ 92.294253][ T6192] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.382613][ T6192] F2FS-fs (loop2): Start checkpoint disabled! [ 92.430234][ T6192] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 92.458493][ T5786] Bluetooth: hci3: command tx timeout [ 92.526407][ T6192] syz.2.86: attempt to access beyond end of device [ 92.526407][ T6192] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.556136][ T28] audit: type=1800 audit(1793816560.042:2): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 92.579832][ T6192] syz.2.86: attempt to access beyond end of device [ 92.579832][ T6192] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 92.752283][ T60] kworker/u4:4: attempt to access beyond end of device [ 92.752283][ T60] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 92.777568][ T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.791907][ T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 93.272636][ T4970] team0 (unregistering): Port device team_slave_1 removed [ 93.308162][ T4970] team0 (unregistering): Port device team_slave_0 removed [ 93.350347][ T4970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.389899][ T4970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.683947][ T4970] bond0 (unregistering): Released all slaves [ 93.796709][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.850569][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.858565][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.888175][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.895303][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.061631][ T6023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.176808][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.246226][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.317216][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.324458][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.370546][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.377756][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.424699][ T6240] FAULT_INJECTION: forcing a failure. [ 94.424699][ T6240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.450191][ T6240] CPU: 1 PID: 6240 Comm: syz.0.95 Not tainted syzkaller #0 [ 94.457456][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.467536][ T6240] Call Trace: [ 94.470852][ T6240] [ 94.473811][ T6240] dump_stack_lvl+0x18c/0x250 [ 94.478531][ T6240] ? show_regs_print_info+0x20/0x20 [ 94.483770][ T6240] ? load_image+0x420/0x420 [ 94.488306][ T6240] ? __lock_acquire+0x7eb0/0x7eb0 [ 94.493375][ T6240] should_fail_ex+0x394/0x4c0 [ 94.498097][ T6240] prepare_alloc_pages+0x1e1/0x5b0 [ 94.503242][ T6240] __alloc_pages+0x134/0x460 [ 94.507858][ T6240] ? zone_statistics+0x170/0x170 [ 94.512836][ T6240] ? rcu_is_watching+0x15/0xb0 [ 94.517648][ T6240] alloc_page_interleave+0x24/0x1e0 [ 94.522883][ T6240] kimage_alloc_pages+0xc5/0x330 [ 94.527864][ T6240] ? rcu_is_watching+0x15/0xb0 [ 94.532682][ T6240] kimage_alloc_control_pages+0x483/0xb30 [ 94.538467][ T6240] ? kimage_alloc_pages+0x286/0x330 [ 94.543709][ T6240] ? kimage_free_pages+0x1d0/0x1d0 [ 94.548857][ T6240] ? kimage_alloc_control_pages+0xa5b/0xb30 [ 94.554797][ T6240] alloc_pgt_page+0xe/0x40 [ 94.559227][ T6240] ? arch_kexec_pre_free_pages+0x10/0x10 [ 94.564897][ T6240] ident_pud_init+0x29c/0x620 [ 94.569595][ T6240] ? kimage_free_pages+0x1d0/0x1d0 [ 94.574736][ T6240] kernel_ident_mapping_init+0x271/0x3d0 [ 94.580421][ T6240] machine_kexec_prepare+0x25a/0xa20 [ 94.585739][ T6240] ? arch_crash_save_vmcoreinfo+0xf0/0xf0 [ 94.591491][ T6240] ? arch_kexec_pre_free_pages+0x10/0x10 [ 94.597210][ T6240] ? kimage_free_pages+0x1d0/0x1d0 [ 94.602330][ T6240] do_kexec_load+0x483/0x6d0 [ 94.606926][ T6240] __se_sys_kexec_load+0x134/0x160 [ 94.612045][ T6240] do_syscall_64+0x55/0xb0 [ 94.616461][ T6240] ? clear_bhb_loop+0x40/0x90 [ 94.621168][ T6240] ? clear_bhb_loop+0x40/0x90 [ 94.625855][ T6240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.631755][ T6240] RIP: 0033:0x7f9ac5d9fb19 [ 94.636171][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.655802][ T6240] RSP: 002b:00007f9ac6d49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 94.664220][ T6240] RAX: ffffffffffffffda RBX: 00007f9ac6025fa0 RCX: 00007f9ac5d9fb19 [ 94.672189][ T6240] RDX: 0000200000004b00 RSI: 0000000000000001 RDI: 0000000000000000 [ 94.680161][ T6240] RBP: 00007f9ac5e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 94.688159][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.696214][ T6240] R13: 00007f9ac6026038 R14: 00007f9ac6025fa0 R15: 00007fff31228f38 [ 94.704197][ T6240] [ 94.884151][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.248351][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.296759][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.458655][ T5790] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.541720][ T6023] veth0_vlan: entered promiscuous mode [ 95.556737][ T6023] veth1_vlan: entered promiscuous mode [ 95.632677][ T6023] veth0_macvtap: entered promiscuous mode [ 95.645144][ T6023] veth1_macvtap: entered promiscuous mode [ 95.666345][ T5790] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 95.697089][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.710239][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.755715][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.788096][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.812133][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.842079][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.902584][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.921624][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.932294][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.952741][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.966914][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.014785][ T6023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.024169][ T6023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.034418][ T6023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043616][ T6023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.093360][ T6040] veth0_vlan: entered promiscuous mode [ 96.161578][ T6040] veth1_vlan: entered promiscuous mode [ 96.314886][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.330435][ T6040] veth0_macvtap: entered promiscuous mode [ 96.361446][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.395069][ T6040] veth1_macvtap: entered promiscuous mode [ 96.448749][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.456623][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.494735][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.506264][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.527325][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.538426][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.548926][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.559605][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.572688][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.596850][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.612381][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.631410][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.644019][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.654773][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.665324][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.676864][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.700299][ T6040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.718762][ T6040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.738096][ T6040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.746949][ T6040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.789211][ T5790] usb 3-1: non-Atmel transceiver xxxx1f7f [ 96.895085][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.921347][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.994422][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.000238][ T5790] usb 3-1: Firmware version (0.0) predates our first public release. [ 97.012974][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.028620][ T5790] usb 3-1: Please update to version 0.2 or newer [ 97.055830][ T5790] usb 3-1: atusb_probe: initialization failed, error = -19 [ 97.080779][ T5790] usb 3-1: USB disconnect, device number 2 [ 97.465486][ T6327] futex_wake_op: syz.5.107 tries to shift op by 144; fix this program [ 97.668828][ T6329] loop4: detected capacity change from 0 to 8192 [ 97.699411][ T6329] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.718618][ T6329] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 97.734705][ T6329] REISERFS (device loop4): using ordered data mode [ 97.742501][ T6329] reiserfs: using flush barriers [ 97.758650][ T6329] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.783517][ T6329] REISERFS (device loop4): checking transaction log (loop4) [ 97.944761][ T6329] REISERFS (device loop4): Using tea hash to sort names [ 97.958189][ T6329] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 98.797736][ T6368] vlan2: entered allmulticast mode [ 98.818440][ T6368] bridge0: port 3(vlan2) entered blocking state [ 98.835204][ T6368] bridge0: port 3(vlan2) entered disabled state [ 98.849745][ T6368] vlan2: entered promiscuous mode [ 98.866178][ T6368] bridge0: mtu less than device minimum [ 99.509831][ T6361] loop4: detected capacity change from 0 to 40427 [ 99.546454][ T6361] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.574766][ T6361] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.610529][ T6361] F2FS-fs (loop4): invalid crc value [ 99.659079][ T6361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.849402][ T6361] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.874665][ T6361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.136366][ T6415] loop5: detected capacity change from 0 to 164 [ 100.543649][ T6425] netlink: 68 bytes leftover after parsing attributes in process `syz.0.132'. [ 100.583400][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 100.648516][ T6430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.399609][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.416776][ T6459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.448531][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.472263][ T6459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.554589][ T6463] loop4: detected capacity change from 0 to 512 [ 101.583738][ T6463] EXT4-fs: Ignoring removed oldalloc option [ 101.705953][ T6463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.967733][ T6479] loop2: detected capacity change from 0 to 2048 [ 102.046112][ T6479] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 102.061809][ T6453] loop5: detected capacity change from 0 to 32768 [ 102.092455][ T6479] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 102.111308][ T6453] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.139 (6453) [ 102.142805][ T6479] UDF-fs: Scanning with blocksize 512 failed [ 102.182343][ T6479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.201331][ T6453] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.230534][ T6453] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 102.234617][ T6023] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.268214][ T6453] BTRFS info (device loop5): use zlib compression, level 3 [ 102.298001][ T6453] BTRFS info (device loop5): using free space tree [ 102.553719][ T6453] BTRFS info (device loop5): enabling ssd optimizations [ 102.580452][ T6453] BTRFS info (device loop5): auto enabling async discard [ 102.855961][ T6508] capability: warning: `syz.4.148' uses 32-bit capabilities (legacy support in use) [ 103.232403][ T6040] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.306213][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 103.351462][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 103.919575][ T6541] loop2: detected capacity change from 0 to 128 [ 103.968613][ T6539] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.296559][ T6553] warning: `syz.5.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.335952][ T6555] syzkaller1: entered allmulticast mode [ 104.663671][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.796638][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.846809][ T5790] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.912411][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.044873][ T5790] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 105.056996][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.078224][ T5790] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 105.104551][ T5790] usb 6-1: config 0 interface 0 has no altsetting 0 [ 105.116903][ T5790] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.120179][ T6578] loop0: detected capacity change from 0 to 2048 [ 105.136959][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.167199][ T5790] usb 6-1: Product: syz [ 105.189465][ T5790] usb 6-1: Manufacturer: syz [ 105.194087][ T5790] usb 6-1: SerialNumber: syz [ 105.202578][ T6578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.288415][ T5790] usb 6-1: config 0 descriptor?? [ 105.328375][ T5790] hub 6-1:0.0: bad descriptor, ignoring hub [ 105.357558][ T5790] hub: probe of 6-1:0.0 failed with error -5 [ 105.383429][ T6582] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 105.405106][ T5790] usb 6-1: selecting invalid altsetting 0 [ 105.417089][ T6582] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.460978][ T6582] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.460978][ T6582] [ 105.495488][ T6582] EXT4-fs (loop0): Total free blocks count 0 [ 105.562383][ T6582] EXT4-fs (loop0): Free/Dirty block details [ 105.604544][ T6582] EXT4-fs (loop0): free_blocks=66060288 [ 105.611647][ T6582] EXT4-fs (loop0): dirty_blocks=32 [ 105.627086][ T6582] EXT4-fs (loop0): Block reservation details [ 105.660338][ T6582] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 105.722233][ T5790] usb 6-1: USB disconnect, device number 2 [ 105.856600][ T3457] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 105.875355][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.891907][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.902505][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.911733][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.920274][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.932063][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.122118][ T6599] loop0: detected capacity change from 0 to 128 [ 106.205731][ T6589] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.418148][ T5790] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.624369][ T5790] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 106.636888][ T5790] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.651999][ T5790] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.666665][ T5790] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.677073][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.685814][ T5790] usb 6-1: Product: syz [ 106.690492][ T5790] usb 6-1: Manufacturer: syz [ 106.704869][ T5790] usb 6-1: SerialNumber: syz [ 106.729243][ T5790] usb 6-1: config 0 descriptor?? [ 106.750259][ T5790] hub 6-1:0.0: bad descriptor, ignoring hub [ 106.758900][ T5790] hub: probe of 6-1:0.0 failed with error -5 [ 106.796590][ T5790] usb 6-1: selecting invalid altsetting 0 [ 107.295533][ T6628] loop0: detected capacity change from 0 to 128 [ 107.328628][ T173] usb 6-1: USB disconnect, device number 3 [ 107.444010][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 107.736794][ T60] hsr_slave_0: left promiscuous mode [ 107.763030][ T60] hsr_slave_1: left promiscuous mode [ 107.780018][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.800340][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.829218][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.878302][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.904462][ T60] bridge_slave_1: left allmulticast mode [ 107.934406][ T60] bridge_slave_1: left promiscuous mode [ 107.943961][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.978309][ T5794] Bluetooth: hci0: command tx timeout [ 108.014019][ T60] bridge_slave_0: left allmulticast mode [ 108.028883][ T60] bridge_slave_0: left promiscuous mode [ 108.029222][ T28] audit: type=1804 audit(1793816575.512:3): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.178" name="/newroot/18/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1098 res=1 errno=0 [ 108.048168][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.127674][ T6626] futex_wake_op: syz.2.176 tries to shift op by 144; fix this program [ 108.136764][ T6626] futex_wake_op: syz.2.176 tries to shift op by 144; fix this program [ 108.145382][ T60] veth1_macvtap: left promiscuous mode [ 108.156386][ T60] veth0_macvtap: left promiscuous mode [ 108.163476][ T60] veth1_vlan: left promiscuous mode [ 108.172384][ T60] veth0_vlan: left promiscuous mode [ 108.601147][ T6648] loop2: detected capacity change from 0 to 32768 [ 108.645011][ T6648] JBD2: Ignoring recovery information on journal [ 108.696698][ T6648] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 108.743446][ T4956] (kworker/u4:10,4956,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 108.779064][ T4956] (kworker/u4:10,4956,0):ocfs2_read_locked_inode:568 ERROR: status = -12 [ 108.804123][ T4956] (kworker/u4:10,4956,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 108.897585][ T28] audit: type=1800 audit(1793816576.382:4): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 109.120222][ T6651] (syz.2.179,6651,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0 [ 109.132561][ T6657] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 109.152641][ T6651] (syz.2.179,6651,0):__ocfs2_delete_entry:1223 ERROR: status = -5 [ 109.153224][ T6658] loop5: detected capacity change from 0 to 1024 [ 109.170222][ T6651] (syz.2.179,6651,0):ocfs2_orphan_del:2393 ERROR: status = -5 [ 109.181993][ T6658] EXT4-fs: Ignoring removed bh option [ 109.208256][ T6651] (syz.2.179,6651,1):ocfs2_orphan_del:2408 ERROR: status = -5 [ 109.216160][ T6651] (syz.2.179,6651,1):ocfs2_del_inode_from_orphan:2741 ERROR: status = -5 [ 109.233461][ T6658] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 109.235202][ T6651] (syz.2.179,6651,1):ocfs2_dio_end_io_write:2418 ERROR: status = -5 [ 109.299303][ T6658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.384554][ T60] team0 (unregistering): Port device team_slave_1 removed [ 109.443760][ T60] team0 (unregistering): Port device team_slave_0 removed [ 109.529372][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.625135][ T6040] EXT4-fs error (device loop5): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /20/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 109.654196][ T6040] EXT4-fs (loop5): Remounting filesystem read-only [ 109.665748][ T6664] trusted_key: syz.0.183 sent an empty control message without MSG_MORE. [ 109.683646][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.714415][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 110.063348][ T5794] Bluetooth: hci0: command tx timeout [ 110.284027][ T60] bond0 (unregistering): Released all slaves [ 110.302901][ T5790] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.387721][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.395272][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.402727][ T6589] bridge_slave_0: entered allmulticast mode [ 110.410055][ T6589] bridge_slave_0: entered promiscuous mode [ 110.425450][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.432996][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.445242][ T6589] bridge_slave_1: entered allmulticast mode [ 110.454600][ T6589] bridge_slave_1: entered promiscuous mode [ 110.493718][ T5790] usb 1-1: config 1 interface 0 has no altsetting 0 [ 110.520289][ T5790] usb 1-1: string descriptor 0 read error: -22 [ 110.533660][ T5790] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 110.543402][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.642368][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.658800][ T6040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.660915][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.753620][ T6589] team0: Port device team_slave_0 added [ 110.796341][ T6589] team0: Port device team_slave_1 added [ 110.865141][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.876128][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.902808][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.916654][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.924657][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.956230][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.002488][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.029443][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.047189][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.077656][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.101452][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.114769][ T6589] hsr_slave_0: entered promiscuous mode [ 111.120662][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.134683][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.144513][ T6589] hsr_slave_1: entered promiscuous mode [ 111.151290][ T6589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.159107][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.166752][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.175206][ T6589] Cannot create hsr debugfs directory [ 111.181460][ T5790] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 111.341055][ T5790] steelseries 0003:1038:1410.0002: missing HID_OUTPUT_REPORT 0 [ 111.377261][ T5790] usb 1-1: USB disconnect, device number 2 [ 111.522338][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.649225][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.736638][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.770801][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.785799][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.794513][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.803510][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.829949][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.840052][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.922886][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.924884][ T6702] loop0: detected capacity change from 0 to 512 [ 111.984377][ T6702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.018285][ T6702] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.029133][ T6589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.047846][ T6589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.071490][ T6589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.099604][ T6697] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.121994][ T6589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.138163][ T5794] Bluetooth: hci0: command tx timeout [ 112.272634][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.635414][ T6715] FAULT_INJECTION: forcing a failure. [ 112.635414][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 112.660054][ T6715] CPU: 0 PID: 6715 Comm: syz.0.196 Not tainted syzkaller #0 [ 112.667423][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.677507][ T6715] Call Trace: [ 112.680815][ T6715] [ 112.683766][ T6715] dump_stack_lvl+0x18c/0x250 [ 112.688482][ T6715] ? show_regs_print_info+0x20/0x20 [ 112.693720][ T6715] ? load_image+0x420/0x420 [ 112.698261][ T6715] ? __might_sleep+0xe0/0xe0 [ 112.702885][ T6715] ? __lock_acquire+0x7eb0/0x7eb0 [ 112.707941][ T6715] should_fail_ex+0x394/0x4c0 [ 112.712654][ T6715] should_failslab+0x9/0x20 [ 112.717186][ T6715] slab_pre_alloc_hook+0x59/0x300 [ 112.722247][ T6715] ? ioc_cpd_alloc+0x73/0x110 [ 112.727008][ T6715] __kmem_cache_alloc_node+0x53/0x260 [ 112.732422][ T6715] ? ioc_cpd_alloc+0x73/0x110 [ 112.737148][ T6715] kmalloc_trace+0x2a/0xe0 [ 112.741581][ T6715] ioc_cpd_alloc+0x73/0x110 [ 112.746082][ T6715] blkcg_css_alloc+0x44f/0xa60 [ 112.750870][ T6715] cgroup_apply_control_enable+0x3cc/0xb00 [ 112.756734][ T6715] cgroup_mkdir+0xc83/0xe70 [ 112.761394][ T6715] ? css_task_iter_end+0x2c0/0x2c0 [ 112.766572][ T6715] ? kernfs_iop_permission+0x2c4/0x3b0 [ 112.772083][ T6715] ? css_task_iter_end+0x2c0/0x2c0 [ 112.777239][ T6715] kernfs_iop_mkdir+0x241/0x3e0 [ 112.782145][ T6715] vfs_mkdir+0x2a5/0x470 [ 112.786441][ T6715] do_mkdirat+0x1dc/0x450 [ 112.790834][ T6715] ? vfs_mkdir+0x470/0x470 [ 112.795283][ T6715] __x64_sys_mkdirat+0x89/0xa0 [ 112.800079][ T6715] do_syscall_64+0x55/0xb0 [ 112.804603][ T6715] ? clear_bhb_loop+0x40/0x90 [ 112.809288][ T6715] ? clear_bhb_loop+0x40/0x90 [ 112.813975][ T6715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.819901][ T6715] RIP: 0033:0x7f9ac5d9fb19 [ 112.824318][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.843956][ T6715] RSP: 002b:00007f9ac6d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 112.852375][ T6715] RAX: ffffffffffffffda RBX: 00007f9ac6025fa0 RCX: 00007f9ac5d9fb19 [ 112.860348][ T6715] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 112.868340][ T6715] RBP: 00007f9ac5e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.876480][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.884454][ T6715] R13: 00007f9ac6026038 R14: 00007f9ac6025fa0 R15: 00007fff31228f38 [ 112.892638][ T6715] [ 112.943754][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.063387][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.198730][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.205968][ T4970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.318327][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.325517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.511620][ T6736] loop0: detected capacity change from 0 to 16 [ 113.626846][ T6736] erofs: (device loop0): mounted with root inode @ nid 36. [ 113.657541][ T6697] chnl_net:caif_netlink_parms(): no params data found [ 113.724790][ T6724] loop2: detected capacity change from 0 to 32768 [ 113.727592][ T6736] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 113.734935][ T6724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.199 (6724) [ 113.763912][ T6736] syz.0.200: attempt to access beyond end of device [ 113.763912][ T6736] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 113.784240][ T6589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.800195][ T6724] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.820302][ T6724] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 113.843414][ T6736] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 113.843814][ T6724] BTRFS info (device loop2): enabling auto defrag [ 113.861302][ T6724] BTRFS info (device loop2): use no compression [ 113.867721][ T6724] BTRFS info (device loop2): force clearing of disk cache [ 113.877456][ T6724] BTRFS info (device loop2): max_inline at 4096 [ 113.888293][ T6736] syz.0.200: attempt to access beyond end of device [ 113.888293][ T6736] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 113.902048][ T5794] Bluetooth: hci3: command tx timeout [ 113.906602][ T6724] BTRFS info (device loop2): disabling free space tree [ 113.926625][ T6736] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.943855][ T28] audit: type=1800 audit(1793816591.427:5): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.200" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 114.101477][ T6736] syz.0.200 (6736) used greatest stack depth: 19728 bytes left [ 114.146789][ T6724] BTRFS info (device loop2): enabling ssd optimizations [ 114.180982][ T6724] BTRFS info (device loop2): auto enabling async discard [ 114.211389][ T6724] BTRFS info (device loop2): rebuilding free space tree [ 114.219142][ T5794] Bluetooth: hci0: command tx timeout [ 114.326033][ T6724] BTRFS info (device loop2): disabling free space tree [ 114.378756][ T6724] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.397572][ T6724] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.518316][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.525481][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.557728][ T6697] bridge_slave_0: entered allmulticast mode [ 114.584391][ T6697] bridge_slave_0: entered promiscuous mode [ 114.606413][ T5871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.624784][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.663186][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.675943][ T6697] bridge_slave_1: entered allmulticast mode [ 114.701500][ T6697] bridge_slave_1: entered promiscuous mode [ 114.750027][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.838111][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 114.864988][ T5871] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.887181][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.898450][ T5871] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 114.913367][ T5871] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.969841][ T6697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.995842][ T5871] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 115.011235][ T60] hsr_slave_0: left promiscuous mode [ 115.031463][ T60] hsr_slave_1: left promiscuous mode [ 115.032459][ T5783] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.050410][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.059091][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.065830][ T5871] usb 1-1: Product: syz [ 115.066695][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.071230][ T5871] usb 1-1: Manufacturer: syz [ 115.071248][ T5871] usb 1-1: SerialNumber: syz [ 115.130129][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.164350][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.189860][ T60] vlan2: left promiscuous mode [ 115.196809][ T60] bridge0: port 3(vlan2) entered disabled state [ 115.224825][ T60] bridge_slave_1: left allmulticast mode [ 115.248166][ T60] bridge_slave_1: left promiscuous mode [ 115.264502][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.288449][ T60] bridge_slave_0: left promiscuous mode [ 115.303040][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.401485][ T60] veth1_macvtap: left promiscuous mode [ 115.401849][ T5871] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 115.407066][ T60] veth0_macvtap: left promiscuous mode [ 115.448197][ T60] veth1_vlan: left promiscuous mode [ 115.453766][ T60] veth0_vlan: left promiscuous mode [ 115.456029][ T5871] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 115.871664][ T5871] usb 1-1: USB disconnect, device number 3 [ 115.926043][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.988500][ T5794] Bluetooth: hci3: command tx timeout [ 116.353567][ T60] team0 (unregistering): Port device team_slave_1 removed [ 116.395385][ T60] team0 (unregistering): Port device team_slave_0 removed [ 116.439256][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.494045][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.899687][ T60] bond0 (unregistering): Released all slaves [ 116.959046][ T6697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.983792][ T6780] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 117.004572][ T6780] netlink: 'syz.2.202': attribute type 2 has an invalid length. [ 117.012800][ T6780] Zero length message leads to an empty skb [ 117.212503][ T6697] team0: Port device team_slave_0 added [ 117.254247][ T6697] team0: Port device team_slave_1 added [ 117.355332][ T6697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.367035][ T6697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.394137][ T6697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.419878][ T6697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.427090][ T6697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.453696][ T6697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.520298][ T6697] hsr_slave_0: entered promiscuous mode [ 117.527806][ T6697] hsr_slave_1: entered promiscuous mode [ 117.535861][ T6697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.546637][ T6697] Cannot create hsr debugfs directory [ 117.651127][ T6589] veth0_vlan: entered promiscuous mode [ 117.722870][ T6589] veth1_vlan: entered promiscuous mode [ 117.797401][ T6589] veth0_macvtap: entered promiscuous mode [ 117.812546][ T6589] veth1_macvtap: entered promiscuous mode [ 117.837634][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.849793][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.865117][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.932249][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.947392][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.960321][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.974789][ T6697] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 118.013510][ T6589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.048039][ T6589] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056830][ T6589] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.068104][ T5794] Bluetooth: hci3: command tx timeout [ 118.085800][ T6589] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.100673][ T6697] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 118.121355][ T6697] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 118.134531][ T6697] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 118.378820][ T4970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.386674][ T4970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.431325][ T6823] tipc: Started in network mode [ 118.437524][ T6823] tipc: Node identity ac14140f, cluster identity 4711 [ 118.448460][ T6823] tipc: Enabled bearer , priority 10 [ 118.473685][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.492933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.603317][ T6697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.697440][ T6697] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.725143][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.732411][ T4970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.824096][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.831347][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.976107][ T6697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.014424][ T6697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.519175][ T6697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.543474][ T6851] netlink: 'syz.6.213': attribute type 1 has an invalid length. [ 119.570987][ T5871] tipc: Node number set to 2886997007 [ 120.138786][ T5794] Bluetooth: hci3: command tx timeout [ 120.161496][ T6875] ip_tables: iptables: counters copy to user failed while replacing table [ 120.175879][ T6876] input: syz0 as /devices/virtual/input/input7 [ 120.189250][ T6697] veth0_vlan: entered promiscuous mode [ 120.202208][ T6697] veth1_vlan: entered promiscuous mode [ 120.272611][ T6697] veth0_macvtap: entered promiscuous mode [ 120.305883][ T6697] veth1_macvtap: entered promiscuous mode [ 120.362133][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.388974][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.409123][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.437986][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.465920][ T6697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.498067][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.521409][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.536260][ T6697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.559805][ T6697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.581085][ T6697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.615764][ T6697] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.630543][ T6697] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.647089][ T6697] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.662727][ T6697] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.923039][ T4970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.952113][ T4970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.984970][ T6898] FAULT_INJECTION: forcing a failure. [ 120.984970][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 121.048218][ T6898] CPU: 1 PID: 6898 Comm: syz.6.225 Not tainted syzkaller #0 [ 121.055577][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.065670][ T6898] Call Trace: [ 121.068999][ T6898] [ 121.071963][ T6898] dump_stack_lvl+0x18c/0x250 [ 121.076684][ T6898] ? show_regs_print_info+0x20/0x20 [ 121.081923][ T6898] ? load_image+0x420/0x420 [ 121.086470][ T6898] ? __might_sleep+0xe0/0xe0 [ 121.091101][ T6898] ? __lock_acquire+0x7eb0/0x7eb0 [ 121.096197][ T6898] should_fail_ex+0x394/0x4c0 [ 121.100921][ T6898] should_failslab+0x9/0x20 [ 121.105456][ T6898] slab_pre_alloc_hook+0x59/0x300 [ 121.110523][ T6898] ? d_instantiate+0x6f/0x90 [ 121.115162][ T6898] kmem_cache_alloc+0x5a/0x2d0 [ 121.119962][ T6898] ? alloc_empty_file+0x9e/0x1d0 [ 121.124942][ T6898] alloc_empty_file+0x9e/0x1d0 [ 121.129746][ T6898] alloc_file+0x5b/0x600 [ 121.134031][ T6898] alloc_file_pseudo+0x184/0x210 [ 121.139011][ T6898] ? fput+0x1a0/0x1a0 [ 121.143048][ T6898] ? mas_destroy+0x20a0/0x20a0 [ 121.147858][ T6898] __shmem_file_setup+0x23c/0x2c0 [ 121.152927][ T6898] shmem_zero_setup+0x8d/0x130 [ 121.157757][ T6898] mmap_region+0x1225/0x2090 [ 121.162409][ T6898] ? file_mmap_ok+0x170/0x170 [ 121.167129][ T6898] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 121.172710][ T6898] ? cap_mmap_addr+0x157/0x2b0 [ 121.177522][ T6898] do_mmap+0x98f/0x10a0 [ 121.181733][ T6898] ? mlock_future_ok+0xf0/0xf0 [ 121.186543][ T6898] ? down_write+0x200/0x200 [ 121.191099][ T6898] vm_mmap_pgoff+0x1c4/0x3f0 [ 121.195746][ T6898] ? account_locked_vm+0x200/0x200 [ 121.200905][ T6898] ? ksys_mmap_pgoff+0xf3/0x720 [ 121.205795][ T6898] ? __x64_sys_mmap+0x7a/0x130 [ 121.210603][ T6898] do_syscall_64+0x55/0xb0 [ 121.215057][ T6898] ? clear_bhb_loop+0x40/0x90 [ 121.219782][ T6898] ? clear_bhb_loop+0x40/0x90 [ 121.224502][ T6898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.230433][ T6898] RIP: 0033:0x7f830939fb19 [ 121.234879][ T6898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.254622][ T6898] RSP: 002b:00007f830a19e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.263088][ T6898] RAX: ffffffffffffffda RBX: 00007f8309625fa0 RCX: 00007f830939fb19 [ 121.271094][ T6898] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 121.279106][ T6898] RBP: 00007f8309437b70 R08: ffffffffffffffff R09: 0000000000000000 [ 121.287197][ T6898] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 121.295196][ T6898] R13: 00007f8309626038 R14: 00007f8309625fa0 R15: 00007fffa61724e8 [ 121.303216][ T6898] [ 121.312148][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.328184][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.580071][ T6916] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 122.149653][ T6938] loop6: detected capacity change from 0 to 128 [ 122.371122][ T6947] input: syz1 as /devices/virtual/input/input8 [ 122.448488][ T5871] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 122.717167][ T5871] usb 8-1: Using ep0 maxpacket: 16 [ 122.729275][ T5871] usb 8-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 122.742302][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.751164][ T5871] usb 8-1: Product: syz [ 122.765054][ T5871] usb 8-1: Manufacturer: syz [ 122.771046][ T5871] usb 8-1: SerialNumber: syz [ 122.809147][ T5871] usb 8-1: config 0 descriptor?? [ 122.846012][ T5871] usb 8-1: selecting invalid altsetting 1 [ 122.875197][ T5871] technisat-usb2: could not set alternate setting to 0 [ 123.055866][ T5871] technisat-usb2: firmware version: 0.0 [ 123.074266][ T5871] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 123.238841][ T23] kernel write not supported for file /gssd/clntXX/gssd (pid: 23 comm: kworker/1:0) [ 123.394919][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'. [ 123.399381][ T6987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.412433][ T6987] bridge0: port 3(bond1) entered blocking state [ 123.421282][ T6987] bridge0: port 3(bond1) entered disabled state [ 123.438389][ T6987] bond1: entered allmulticast mode [ 123.447493][ T6987] bond1: entered promiscuous mode [ 123.475157][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.477355][ T6987] bridge0: port 3(bond1) entered blocking state [ 123.485753][ T5871] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 123.491368][ T6987] bridge0: port 3(bond1) entered forwarding state [ 123.502280][ T5871] usb 8-1: media controller created [ 123.513991][ T5871] technisat-usb2: i2c-error: out failed 53 = -22 [ 123.520937][ T5871] dvb-usb: MAC address reading failed. [ 123.545717][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.548648][ T6984] nbd: socks must be embedded in a SOCK_ITEM attr [ 123.617116][ T6157] block nbd64: NBD_DISCONNECT [ 123.660593][ T5871] DVB: Unable to find symbol stv090x_attach() [ 123.671922][ T6940] technisat-usb2: i2c TX buffer can't exceed 62 bytes (dev 0x01) [ 123.688672][ T6940] technisat-usb2: i2c-error: out failed 01 = -22 [ 123.715020][ T5871] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 123.815170][ T42] bridge0: port 3(bond1) entered disabled state [ 123.918779][ T5871] rc_core: IR keymap rc-technisat-usb2 not found [ 123.925188][ T5871] Registered IR keymap rc-empty [ 123.966817][ T5871] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 124.005720][ T5871] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input9 [ 124.009394][ T6157] udevd[6157]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 124.049480][ T7000] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n [ 124.085001][ T5871] dvb-usb: schedule remote query interval to 100 msecs. [ 124.094309][ T7000] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 124.115894][ T7000] device-mapper: ioctl: error adding target to table [ 124.125734][ T5871] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 124.154221][ T5871] usb 8-1: USB disconnect, device number 2 [ 124.273808][ T5871] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 124.778898][ T7033] ------------[ cut here ]------------ [ 124.785116][ T7033] kobject: '(null)' (ffff88805bfd80f0): is not initialized, yet kobject_get() is being called. [ 124.827675][ T7033] WARNING: CPU: 0 PID: 7033 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90 [ 124.837629][ T7033] Modules linked in: [ 124.841688][ T7033] CPU: 0 PID: 7033 Comm: syz.0.258 Not tainted syzkaller #0 [ 124.849110][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.859375][ T7033] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 124.865403][ T7033] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 124.885193][ T7033] RSP: 0018:ffffc900040ff8c8 EFLAGS: 00010246 [ 124.891953][ T7033] RAX: 2ff309a9b1d2c100 RBX: ffff888027338878 RCX: 0000000000080000 [ 124.900089][ T7033] RDX: ffffc9000ddfd000 RSI: 000000000000c922 RDI: 000000000000c923 [ 124.908417][ T7033] RBP: 0000000000000000 R08: ffffc900040ff4c7 R09: 1ffff9200081fe98 [ 124.916521][ T7033] R10: dffffc0000000000 R11: fffff5200081fe99 R12: ffff88805bfd80f0 [ 124.924567][ T7033] R13: dffffc0000000000 R14: ffff88805bfd812c R15: dffffc0000000000 [ 124.932610][ T7033] FS: 00007f9ac6d286c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 124.941916][ T7033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.948591][ T7033] CR2: 000055ae1ed7f950 CR3: 00000000594c2000 CR4: 00000000003526f0 [ 124.956689][ T7033] Call Trace: [ 124.960060][ T7033] [ 124.963029][ T7033] ? kfree+0x31/0x1a0 [ 124.967056][ T7033] kobject_add+0x164/0x240 [ 124.971553][ T7033] ? kobject_init+0x1d0/0x1d0 [ 124.976291][ T7033] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 124.982106][ T7033] bind_rdev_to_array+0xb51/0x1270 [ 124.987280][ T7033] ? bind_rdev_to_array+0x5fb/0x1270 [ 124.993129][ T7033] ? md_import_device+0x7b0/0x7b0 [ 124.998440][ T7033] md_add_new_disk+0xe31/0x17b0 [ 125.003360][ T7033] md_ioctl+0x2152/0x24e0 [ 125.007755][ T7033] ? blkdev_common_ioctl+0x10ee/0x2580 [ 125.013392][ T7033] ? md_release+0x1e0/0x1e0 [ 125.017989][ T7033] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 125.023668][ T7033] ? blkdev_bszset+0x1f0/0x1f0 [ 125.028656][ T7033] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 125.034205][ T7033] ? md_release+0x1e0/0x1e0 [ 125.038971][ T7033] blkdev_ioctl+0x5b2/0x730 [ 125.043531][ T7033] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 125.049071][ T7033] ? bpf_lsm_file_ioctl+0x9/0x10 [ 125.054114][ T7033] ? security_file_ioctl+0x80/0xa0 [ 125.059302][ T7033] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 125.064826][ T7033] __se_sys_ioctl+0xfd/0x170 [ 125.069527][ T7033] do_syscall_64+0x55/0xb0 [ 125.073990][ T7033] ? clear_bhb_loop+0x40/0x90 [ 125.078803][ T7033] ? clear_bhb_loop+0x40/0x90 [ 125.083532][ T7033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.089591][ T7033] RIP: 0033:0x7f9ac5d9fb19 [ 125.094449][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.114598][ T7033] RSP: 002b:00007f9ac6d28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.123114][ T7033] RAX: ffffffffffffffda RBX: 00007f9ac6026090 RCX: 00007f9ac5d9fb19 [ 125.131178][ T7033] RDX: 0000200000000200 RSI: 0000000040140921 RDI: 0000000000000004 [ 125.139218][ T7033] RBP: 00007f9ac5e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 125.147220][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.155336][ T7033] R13: 00007f9ac6026128 R14: 00007f9ac6026090 R15: 00007fff31228f38 [ 125.163396][ T7033] [ 125.166438][ T7033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.173773][ T7033] CPU: 0 PID: 7033 Comm: syz.0.258 Not tainted syzkaller #0 [ 125.181057][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.191202][ T7033] Call Trace: [ 125.194505][ T7033] [ 125.197429][ T7033] dump_stack_lvl+0x18c/0x250 [ 125.202111][ T7033] ? show_regs_print_info+0x20/0x20 [ 125.207308][ T7033] ? load_image+0x420/0x420 [ 125.211823][ T7033] panic+0x2ca/0x720 [ 125.215714][ T7033] ? bpf_jit_dump+0xd0/0xd0 [ 125.220221][ T7033] __warn+0x2e0/0x470 [ 125.224239][ T7033] ? kobject_add_internal+0x115/0xc90 [ 125.229625][ T7033] ? kobject_add_internal+0x115/0xc90 [ 125.235003][ T7033] report_bug+0x2be/0x4f0 [ 125.239358][ T7033] ? kobject_add_internal+0x115/0xc90 [ 125.244726][ T7033] ? kobject_add_internal+0x115/0xc90 [ 125.250087][ T7033] ? kobject_add_internal+0x117/0xc90 [ 125.255483][ T7033] handle_bug+0xcf/0x120 [ 125.259723][ T7033] exc_invalid_op+0x1a/0x50 [ 125.264220][ T7033] asm_exc_invalid_op+0x1a/0x20 [ 125.269071][ T7033] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 125.275070][ T7033] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 125.294670][ T7033] RSP: 0018:ffffc900040ff8c8 EFLAGS: 00010246 [ 125.300733][ T7033] RAX: 2ff309a9b1d2c100 RBX: ffff888027338878 RCX: 0000000000080000 [ 125.308699][ T7033] RDX: ffffc9000ddfd000 RSI: 000000000000c922 RDI: 000000000000c923 [ 125.316669][ T7033] RBP: 0000000000000000 R08: ffffc900040ff4c7 R09: 1ffff9200081fe98 [ 125.325179][ T7033] R10: dffffc0000000000 R11: fffff5200081fe99 R12: ffff88805bfd80f0 [ 125.333153][ T7033] R13: dffffc0000000000 R14: ffff88805bfd812c R15: dffffc0000000000 [ 125.341148][ T7033] ? kobject_add_internal+0x115/0xc90 [ 125.346519][ T7033] ? kfree+0x31/0x1a0 [ 125.350505][ T7033] kobject_add+0x164/0x240 [ 125.354917][ T7033] ? kobject_init+0x1d0/0x1d0 [ 125.359591][ T7033] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 125.365312][ T7033] bind_rdev_to_array+0xb51/0x1270 [ 125.370428][ T7033] ? bind_rdev_to_array+0x5fb/0x1270 [ 125.375717][ T7033] ? md_import_device+0x7b0/0x7b0 [ 125.380758][ T7033] md_add_new_disk+0xe31/0x17b0 [ 125.385611][ T7033] md_ioctl+0x2152/0x24e0 [ 125.389940][ T7033] ? blkdev_common_ioctl+0x10ee/0x2580 [ 125.395409][ T7033] ? md_release+0x1e0/0x1e0 [ 125.399912][ T7033] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 125.405541][ T7033] ? blkdev_bszset+0x1f0/0x1f0 [ 125.410494][ T7033] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 125.415978][ T7033] ? md_release+0x1e0/0x1e0 [ 125.420487][ T7033] blkdev_ioctl+0x5b2/0x730 [ 125.425002][ T7033] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 125.430499][ T7033] ? bpf_lsm_file_ioctl+0x9/0x10 [ 125.435615][ T7033] ? security_file_ioctl+0x80/0xa0 [ 125.440815][ T7033] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 125.446273][ T7033] __se_sys_ioctl+0xfd/0x170 [ 125.450869][ T7033] do_syscall_64+0x55/0xb0 [ 125.455288][ T7033] ? clear_bhb_loop+0x40/0x90 [ 125.459961][ T7033] ? clear_bhb_loop+0x40/0x90 [ 125.464664][ T7033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.470552][ T7033] RIP: 0033:0x7f9ac5d9fb19 [ 125.475046][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.494648][ T7033] RSP: 002b:00007f9ac6d28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.503150][ T7033] RAX: ffffffffffffffda RBX: 00007f9ac6026090 RCX: 00007f9ac5d9fb19 [ 125.511117][ T7033] RDX: 0000200000000200 RSI: 0000000040140921 RDI: 0000000000000004 [ 125.519086][ T7033] RBP: 00007f9ac5e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 125.527082][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.535048][ T7033] R13: 00007f9ac6026128 R14: 00007f9ac6026090 R15: 00007fff31228f38 [ 125.543036][ T7033] [ 125.546311][ T7033] Kernel Offset: disabled [ 125.550703][ T7033] Rebooting in 86400 seconds..