last executing test programs: 25m44.864626373s ago: executing program 32 (id=217): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 25m31.068318512s ago: executing program 33 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x514, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 25m0.018376994s ago: executing program 34 (id=366): mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESOCT, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x318, &(0x7f00000002c0)="$eJzs3M9LG2kYwPEnP8wv0XhYdtmFxXd3L7uXQbN73t2wKCwbWElN6Q8ojDppQ6aJZIIlpdR66qlQeus/0IN49Ca0/gNeemsvvfTmpdBDPZROyWQmJnGiMaZG6/cDMo/zvM/kfTOjPBMcd688vl3MW1per0owpiQgIrInMiFB8QTcbdCJI9Lqgfw2+v7Vj5euXvsvncnMZJWaTc//nlJKjU8+v3Mv7g7bisrOxI3dd6m3O9/ufL/7af5WwVIFS5XKVaWrhfKbqr5gGmqpYBU1peZMQ7cMVShZRqWRLzfyebO8vFxTemlpLLFcMSxL6aWaKho1VS2raqWmQjf1QklpmqbGEoKj5NazWT3dZ/HigCeDL6RSSeshEYkfyOTWhzIhAAAwVJ39f1DUIPv/jZ+3q6OXN8fd/n8r4tf///G6cay2/j8mIr79v/f6vv2/frz+/2BHdE7Zdl9lJ+r/cTZMRg7sCuyH9WQlrSfcn1/H2vWNKSeg/wcAAAAAAAAAAAAAAAAAAAAA4DzYs+2kbdtJb+t9RUUk5jxY0vjepzQkIn8NYcoYoBOcf3wF9h/cC4+LmA9Xciu5xtYdsC0ipnP+k/LRuR5c9dh78kjVTcgLc9WtX13JhZxMOi8FMcWQaUmOSGe9bc/+m5mZVg3t9SOSaK1PSVK+8a9P+dZH5NdfWuo1ScrLRSmLKUvuA3Ne/f1ppf75P9NRH3fGiUh0OGcGAAAAAIDB0VST7/27pnXLN+qb99dTzc8Hst6xvfvrKd/787D8EB7asgEAAAAAuFCs2t2ibppGpRmMiUj7nrh0jmkNoiLSJdVTEO6r6ujAW2GvVd7fMgx4Gr0F3ou3pWLuzoG/LYFo729LlyAo/VRN1lejOlI/rfms/bDA+9io2xiZ+9vd8/REV+bxg++ePPswuAP+uRk7YqX9B6HDL4CR0/ntAwAAAOA07Tf93p6FR8OdEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF89p/He0Ya8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCs+BwAA//9T/fxT") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) 24m19.773458602s ago: executing program 35 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) times(&(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x33f2844, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1], 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f00000004c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x40000000000008b, 0x40010042, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, 0x0, 0x6, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) 20m4.368227522s ago: executing program 36 (id=1380): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000700)='./file2/file0\x00', 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000900), 0x4000087, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff}, 0x1c}}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 17m58.512283134s ago: executing program 37 (id=1878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x3000014, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000700), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000740)=0x2) recvmmsg(r3, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x2800091, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001900)="$eJzsmDFv2lAUhc+zjS1XlejaLq1UJOhQY5u2KkMH1LFDK7Vq1Q1UXERrSgUegKn9A107d+6QGWXhfyRDkilDki1TpDh69jN+ITgRAiGk3G+4Pva7PB9f4CABgiBuLQf7p3tbxYLJ9V0UYIjrh2rao0j94/zZk5322+2/9snuePKmOrOdvuj9NQCTmopAnIdhGMrrBXH8ACXROdTT9U9gsISuQ8FHoT0wfBb6m6S7vN+yvrZ9z/rS9Ztc2Lw4vLi8VGb9Hf9maEr+mLTeH46+N3zf6y0vXnPb85ayZmck/moKXkn+5PcrmY2dzg8OFDhCV8DwXuiXMJLZxCORnv+Blu6vLvn8fH4rm9rGi/v5G3py2BSrGyvMNFnWeXfxRf+10KsYuDgy12t1VeK/CaxmwzQ/w38MRSmfNCk/ykHnZ7k/HD1tdxotr+X9cN3KC/uZbT93y1EQxTUrAqHBjPLpznR/Ncxl9OpMx6ARBD0nrtNzd2Ag6LnzEleP8k9B6XHsms35kYs+JvfYI34oqcB5GJNh40/mwxAEQRAEQRAEQRAEQRAEQVzLQzP+l/US1SuX3HdR90UAAAD//2C6a2w=") read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f0000003b00)='.\x00', &(0x7f0000003b40), 0x2208000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003c00)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000003c40)=@arm64) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000003cc0)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003d00)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000040)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000080)=0x4, 0x4) unshare(0x4000080) socket$inet_icmp_raw(0x2, 0x3, 0x1) 17m41.379331895s ago: executing program 38 (id=1920): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x181441, 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24004800) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x18000, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xff, 0x304, &(0x7f0000000f00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280), &(0x7f00000012c0), 0x1003}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000001340)=0x5, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000001380)=0x7) sendmsg$inet6(r5, &(0x7f00000013c0)={&(0x7f0000001400)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0}, 0xc4) mkdir(&(0x7f0000000b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x8, &(0x7f0000000c00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) unlink(&(0x7f0000000c40)='./file0/file1\x00') 16m37.758321606s ago: executing program 39 (id=1942): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) syz_open_dev$usbfs(&(0x7f00000005c0), 0x20000007c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x4000087, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x6, 0x8, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 16m35.94828659s ago: executing program 40 (id=2048): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x4000087, 0x2, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000240), 0x4) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/174, 0xae}], 0x1, &(0x7f0000000500)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000580)={&(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="e8", 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x4800) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x10, 0x4040) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000007c0)={r5, 0x6, {0x0, 0x0, 0x0, 0xfff, 0x1, 0x0, 0x4, 0xd, 0x14, "88807bc062587da82381d361b893ea21c7e60d873a96c8388fe9215c18a8266936780c44fe3853bc8926f8d362cedb4c00", "5c9080c207fb15c589f43b785655fc7bc7167f1004f66d2127b037f2c38e5b845bab1cf3b9635278acaf3fe30d5bcf76138347aae9872cc1b0d76491a1cea9ab", "cc8354562a039edb172719e4f6f29b8eae64f92e55e2f1089aa2a384583b7a9d", [0x10000, 0xb2]}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) 14m35.403191074s ago: executing program 41 (id=2368): syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) socket(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x4a25d, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}}, 0x0) 14m32.412851847s ago: executing program 42 (id=2377): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000000), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12m49.826012746s ago: executing program 43 (id=2584): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000700)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000740)={0x0, 0x33, &(0x7f0000000780)=[{&(0x7f00000007c0)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m26.708409994s ago: executing program 44 (id=2683): socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004b40)={'macsec0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004b80)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="54000000100003040000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 11m59.8726216s ago: executing program 45 (id=2708): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000bc0), 0x400000000000041, 0x0) pidfd_getfd(r3, r3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000c00)=0x2) recvmmsg(r2, &(0x7f0000000c40), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', 0x2800091, &(0x7f0000000d00)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1be, &(0x7f0000001dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001f80)='./file2\x00', 0x80000, 0x82) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001fc0)={'bridge_slave_0\x00', 0x0}) add_key(&(0x7f0000002000)='blacklist\x00', &(0x7f0000002040)={'syz', 0x1}, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) 10m36.265785232s ago: executing program 46 (id=2898): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000700)='./file0\x00', 0x18000, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x4, 0x304, &(0x7f0000000780)="$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") r0 = creat(&(0x7f0000000ac0)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000b00)=0x0) truncate(&(0x7f0000000b40)='./file1\x00', 0x2fffffd) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x6b19, 0x8, 0xffff, 0x8e6, 0x7f, "2000d28ef989d02a51110000000800", 0x8, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000c40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000d00)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000e00), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000e40), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e80)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000f00)='net/netlink\x00') preadv(r6, &(0x7f0000000f40)=[{&(0x7f0000000f80)=""/245, 0xf5}, {&(0x7f0000001080)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001140)={0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000001280)='./sys\x00', &(0x7f00000012c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001380)='00:03', 0x5) io_submit(r1, 0x3b, &(0x7f0000000b80)=[&(0x7f0000000bc0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000c00), 0x4000}]) 9m33.912440535s ago: executing program 1 (id=3108): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x4000087, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fallocate(r2, 0x0, 0xa20, 0x8000c64) 9m32.513013107s ago: executing program 1 (id=3111): unshare(0x62020600) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x80078b, &(0x7f0000000b80)={[{@nodioread_nolock}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000001300)="$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") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001780)={0xfffffffffffffffc, 0x81, 0x8}) 9m29.029268471s ago: executing program 1 (id=3114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) 9m28.629849861s ago: executing program 1 (id=3116): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x1, 0x200, 0x7f}, 0x50) timer_create(0x0, &(0x7f0000000700)={0x0, 0x21, 0x2}, &(0x7f0000000740)) signalfd4(0xffffffffffffffff, &(0x7f0000000780)={[0x2]}, 0x8, 0x80000) timer_create(0x2, &(0x7f0000002800)={0x0, 0x21}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002900)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000002940)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x11, 0xb, &(0x7f0000002a40)=@framed={{}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000002ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002b00), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv4_newrule={0x30, 0x20, 0x10, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 9m27.477239388s ago: executing program 1 (id=3117): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x80, &(0x7f0000000b00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$erofs(&(0x7f0000001d80), &(0x7f0000001dc0)='./file1\x00', 0x3008003, &(0x7f0000001e00)=ANY=[], 0x2, 0x200, &(0x7f0000001e40)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000b80)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000c40)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 9m26.570815021s ago: executing program 1 (id=3121): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x4000087, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x103a42, 0x32) ftruncate(r4, 0x6000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c64) 9m20.226912485s ago: executing program 47 (id=3103): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000019c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001a80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0x4000087, 0x2, 0x0) unshare(0x2020600) unshare(0x2020600) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000022c0)={0x0, 0xc}, &(0x7f0000002300)=ANY=[], &(0x7f0000002340)="929835e740d6a60000000000", 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000018c0)={0x0, 0x2, 0xd, 0x3}) fcntl$lock(r3, 0x25, &(0x7f0000001900)={0x0, 0x0, 0x4000000000000002, 0xf5b}) fcntl$lock(r3, 0x25, &(0x7f0000001940)={0x2, 0x1, 0x2, 0x4}) 9m11.468772964s ago: executing program 48 (id=3121): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x4000087, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x103a42, 0x32) ftruncate(r4, 0x6000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c64) 6m30.433962712s ago: executing program 0 (id=3524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0xa7c, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000480)={'wlan0\x00', @multicast}) 6m29.208722579s ago: executing program 0 (id=3527): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000019c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001a80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) unshare(0x2020600) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000022c0)={0x0, 0xc}, &(0x7f0000002300)=ANY=[], &(0x7f0000002340)="929835e740d6a60000000000", 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000018c0)={0x0, 0x2, 0xd, 0x3}) fcntl$lock(r4, 0x25, &(0x7f0000001900)={0x0, 0x0, 0x4000000000000002, 0xf5b}) fcntl$lock(r4, 0x25, &(0x7f0000001940)={0x2, 0x1, 0x2, 0x4}) 6m26.214956258s ago: executing program 0 (id=3533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x1d, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x33, &(0x7f0000000200)=""/51, 0x40e00, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x7ff, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x5, 0x4, 0x1}, {0x5, 0x5, 0x0, 0xc}, {0x0, 0x2, 0xd, 0x4}, {0x1, 0x1, 0x6, 0xa}, {0x2, 0x1, 0x8, 0x6}, {0x0, 0x4, 0xf, 0x2}], 0x10, 0xa}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000480), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup=r1, 0xffffffffffffffff, 0x33, 0x4, r0}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 6m22.983268842s ago: executing program 0 (id=3543): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000019c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001a80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) unshare(0x2020600) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000022c0)={0x0, 0xc}, &(0x7f0000002300)=ANY=[], &(0x7f0000002340)="929835e740d6a60000000000", 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000018c0)={0x0, 0x2, 0xd, 0x3}) fcntl$lock(r4, 0x25, &(0x7f0000001900)={0x0, 0x0, 0x4000000000000002, 0xf5b}) fcntl$lock(r4, 0x25, &(0x7f0000001940)={0x2, 0x1, 0x2, 0x4}) 6m20.529347446s ago: executing program 0 (id=3545): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000040)='./sys_mnt/class/rtc/rtc0/wakealarm\x00', 0x808012, &(0x7f0000000880)=ANY=[], 0x41, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./sys_mnt\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) read(r5, &(0x7f0000000240)=""/169, 0xa9) read$FUSE(r1, &(0x7f0000000dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002e00)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000002e80)={0x60, 0x0, r6, {{0x3, 0xffffffffffffffe8, 0x9d, 0x9, 0x6, 0xb5, 0x31d, 0x8c}}}, 0x60) listxattr(&(0x7f0000007380)='./file0\x00', 0x0, 0x0) 6m18.74609978s ago: executing program 0 (id=3551): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) pidfd_getfd(r3, r3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000003ec0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x6, &(0x7f0000000440)=[{0x2, 0x5, 0x2, 0x2}, {0x2, 0x52, 0x2, 0x8001}, {0x9, 0x9, 0x1, 0x747a82d7}, {0x7c, 0xbf, 0xff, 0x3}, {0x0, 0x6, 0x40, 0xfff}, {0x8001, 0x9, 0xb1, 0x4}]}) open(&(0x7f0000004400)='./file1\x00', 0x1ae07e, 0xbe) truncate(&(0x7f0000004440)='./file1\x00', 0x1000720) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m3.632552411s ago: executing program 49 (id=3551): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) pidfd_getfd(r3, r3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000003ec0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x6, &(0x7f0000000440)=[{0x2, 0x5, 0x2, 0x2}, {0x2, 0x52, 0x2, 0x8001}, {0x9, 0x9, 0x1, 0x747a82d7}, {0x7c, 0xbf, 0xff, 0x3}, {0x0, 0x6, 0x40, 0xfff}, {0x8001, 0x9, 0xb1, 0x4}]}) open(&(0x7f0000004400)='./file1\x00', 0x1ae07e, 0xbe) truncate(&(0x7f0000004440)='./file1\x00', 0x1000720) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m19.064454734s ago: executing program 9 (id=3746): r0 = socket(0x2, 0x2, 0x1) close_range(0xffffffffffffffff, r0, 0x2) 5m18.673853654s ago: executing program 9 (id=3749): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000100)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={r3}, &(0x7f00000002c0)=0x8) 5m18.413899392s ago: executing program 9 (id=3753): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0xee00, r0) 5m18.246898689s ago: executing program 9 (id=3754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x804, &(0x7f0000000280)={[{@utf8}, {@utf8no}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@nfs_nostale_ro}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@uni_xlateno}, {@utf8}, {@fat=@discard}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x1, 0x28e, &(0x7f0000000480)="$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") syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000b, 0x9, 0x0, 0x4000000000000002, 0x6, 0x8000000000, 0x80000000000000, 0xe0, 0x0, 0x5, 0x80000000, 0x5, 0x6, 0x1000000000018, 0x7], 0xeeef0000, 0x89340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m17.383743678s ago: executing program 9 (id=3756): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pnp/devices/00:01/options\x00', 0x0, 0x0) read(r0, &(0x7f0000000340), 0x1000) 5m16.131635577s ago: executing program 9 (id=3760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000840)={r1, &(0x7f0000000880), &(0x7f00000008c0)=""/17, 0x2}, 0x20) 5m15.450952157s ago: executing program 50 (id=3760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000840)={r1, &(0x7f0000000880), &(0x7f00000008c0)=""/17, 0x2}, 0x20) 4m59.25753912s ago: executing program 5 (id=3816): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004740)={'syz_tun\x00'}) sendmsg$nl_route(r1, &(0x7f0000004780)={0x0, 0x0, &(0x7f00000047c0)={&(0x7f0000004800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004880)={'bridge0\x00'}) syz_emit_ethernet(0x35, &(0x7f0000004980)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) 4m52.543975144s ago: executing program 5 (id=3832): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8011}], 0x1, 0x4040801) 4m51.241874638s ago: executing program 5 (id=3837): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000f80)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001080)=[{{&(0x7f0000001100)={0x2, 0x4e28, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001280)="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", 0x5a5}], 0x1}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="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", 0x239}], 0x1) 4m50.702093684s ago: executing program 5 (id=3841): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001e40)=""/126, 0x7e}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4ae19000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001180)={0x0, 0x2a4, 0xfffffffffffffff9}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001580)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001980)={0x10, 0x4, {0x2, @usage=0x9, r3, 0x4, 0x8, 0x7, 0x7, 0xf, 0x2c, @usage=0x2, 0x7, 0xffffff01, [0xfff, 0x8, 0xc264, 0x6, 0xffffffffffffb796, 0xffff]}, {0x1ff, @struct={0x9, 0x6}, r5, 0x80000000, 0x8, 0x5, 0x2, 0xffff, 0x2, @struct={0x6, 0x2}, 0x7, 0x6, [0x2, 0xff, 0x0, 0x1, 0x394, 0x7]}, {0xd, @struct={0x10000, 0xf}, r4, 0x3, 0x1, 0x5, 0x0, 0x2, 0x292, @usage=0xdcd4, 0x9, 0x3, [0x2, 0x56d, 0x4, 0x80, 0x0, 0x3cd7]}, {0x1, 0xfffffffffffffff7, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x2400c000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2a}, 0x28) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x2, 0x1, 0x6, 0x6f}, 0x10) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/4096, 0x79c5}], 0x1) 4m46.649881882s ago: executing program 5 (id=3847): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='unbind\x00', 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000380)={[{@utf8}, {@session={'session', 0x3d, 0x5c}}, {@sbsector={'sbsector', 0x3d, 0xffffffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@cruft}, {@block={'block', 0x3d, 0x400}}]}, 0x41, 0x543, &(0x7f0000000440)="$eJzs3V9v09YbwPHHpf0R5SdV05gQqgocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLaG8YN26TtRXC7F7F3hPYSNtlO+oc2MdA/qbrvJ4JzYh/7PCdYfnAbHwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdl20ZKm8TpLaji3Fvit3bf9rQ8skFv7ihH9iljxH8nl5Eq66Mo3u6svx3/NyWz6blZycZGT7f9f/urBpcmJwfYjAj4Vm1vbz1d6ve6rcQdygq5eHL6uoT0T+qblNLQyoa+qlYp9Z7Eeqrpp6nA5jHRLuYF2Ij9Q8+4tVaxWy0oXlv2O16g5TT1YeP92ybYr6mGhrZ0g9L07Dwuhu2iaTeM1kjbx6rjN/fhAfGQiFWmnpdTaeq9bzhpA3Kj4KY1KWY1KdqlULJZKxcq96r37tj15YIH9ETnQYvwHLcbrGM/ewNFM9PO/NMWIJx1ZEnXoy5WaBOJLa8j6vkH+/+6OHtnv3vw/yPJXdlfPSJL/r6Xvrg3L/0NiOb3XpmzJtjyXFelJT7ryauwRne6rIVo8MRKKL0Za4iRLVH+JkqpUpCK2PJFFqUsoSupipClaQlmWUCLRyRHlSiBaHInEl0CUzIsrt0RJUapSlbIo0VKQZfGlI540pCZOspc1WU8+97Ioa1iMO42KQ4eRHxx3XSmNGO3x5v/pff+Bxn/FsZ6/gaP4Z5D/AQAAAADAuWUlP32Pr/+n5GpSq5umtscdFgAAAAAAOEbJb/5n42Iqrl0Vi+t/AAAAAADOGyu5x84SkbxcT2trYiW3S/FDAAAAAAAAzonk9//X4iKZA+W6WDvTpXD9DwAAAADAOfFr5hz7Yfui9dffEgRT1tv20rfWRjI3r7NxId3uwsd7jOoz1nR/J0lRSYvJSVfPWrm00c4kmB/6xVpWHNZuAM5OAD9/TgCXJuV3uZG2ubGalquDNWkv+bpp6oLrNx8UxXGmJyK9FP34Yv0nSYb/m9eatnKy3usWnr7srSaxvI338najP4HigXkUR8TyOplvIbnn4tARTyU3YvT7zVuytt7r2nvHP5FuPrG/xzfTI/p8J3Npq7n+jLf5/ePPxX0WC8NG34+ieMSRv5ObaZub8zfT4pAoSllRlPZGcfhncfQoyllRlI8YBQCMy1pGFrLkQN79grPcl2V3+czs/k7m0zbzM8mJdXLmkDO6nXVGt4+Y3f488AykYTk27vePj7Lq+3iD90P7DZslK/4IL7ze+EEub25t317fWHnWfdZ9USqVK/Zd275XkqlkGP2C3AMAOET2M3YyW1h3M66qv975SkFBnspL6cmqLCR3GyTfODh0r/k9X0NYyLhqzSdpMn3Cy8KIq7r/JXc5DPZbGtl2fwzlk/+HAADgFM1l5OFPyf8LGdfd+3P56Kvj/J6ntQEAgJOhgw9WPvrFCgLTflKsVotOtKhV4LuPVGBqDa2MF+nAXXS8hlbtwI9812/GlcempkMVdtptP4hU3Q9U2w/NUjJ9oOo/+j3ULceLjBu2m9oJtXJ9L3LcSNVM6Kp25/umCRd1kGwctrVr6sZ1IuN7KvQ7gasLSoVa72loatqLTN3EVU+1A9Nygpx67Dc7La1qOnQD0478dIeDvoxX94NWstvCuD9sAADOiM2t7ecrvV731QlWxj1GAACwH1kaAAAAAAAAAAAAAAAAAAAAAICz7zTu/6PyRRXpz9B7VuIZXhlMBX1W4qFyHIdfljcne2YCcNL+DQAA//86i0tB") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_clone(0x80411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) write(r1, &(0x7f00000002c0)='cpu1', 0x4) r3 = openat(r0, &(0x7f0000000300)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='cpu1', 0x4) 4m45.498290881s ago: executing program 5 (id=3853): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001e40)=""/126, 0x7e}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4m30.179013544s ago: executing program 51 (id=3853): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001e40)=""/126, 0x7e}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3m46.053829712s ago: executing program 7 (id=4109): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m45.064302303s ago: executing program 7 (id=4120): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f000002"], 0x50) 3m44.724868338s ago: executing program 7 (id=4123): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) 3m43.520267663s ago: executing program 7 (id=4129): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) setuid(0xee01) sendmmsg$inet(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="140000000000000000000000020000000c00000000000000540000000000000000000000070000008612"], 0x88}}], 0x2, 0x0) 3m41.813474569s ago: executing program 7 (id=4133): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000001980)={0x0, 0x21, 0x4}, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) 3m35.856454845s ago: executing program 7 (id=4153): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000300)={'macvtap0\x00', {0x2, 0x4e20, @multicast1}}) 3m20.178813704s ago: executing program 52 (id=4153): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000300)={'macvtap0\x00', {0x2, 0x4e20, @multicast1}}) 7.091873478s ago: executing program 2 (id=4978): socket(0x1d, 0x2, 0x6) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x20000000000000, 0x4}, 0x0, &(0x7f0000000340)={0x1d, 0x100000d3b, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 6.818336896s ago: executing program 6 (id=4981): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x46907000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x26a00a, &(0x7f00000006c0)={[], [{@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '&}&{'}}, {@euid_eq}]}, 0x21, 0x4ae, &(0x7f0000003540)="$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") socket$inet6(0xa, 0x3, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f00000001c0)) 6.761804602s ago: executing program 2 (id=4984): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000019c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001a80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) unshare(0x2020600) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000022c0)={0x0, 0xc}, &(0x7f0000002300)=ANY=[], &(0x7f0000002340)="929835e740d6a60000000000", 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000018c0)={0x0, 0x2, 0xd, 0x3}) fcntl$lock(r4, 0x25, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000001940)={0x2, 0x1, 0x2, 0x4}) 6.445894145s ago: executing program 3 (id=4987): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0xde9, r1}, 0x38) 5.363728236s ago: executing program 2 (id=4989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000024000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 5.253732758s ago: executing program 6 (id=4990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0x10, 0x6}]}}}}}}}, 0x0) 4.863811318s ago: executing program 2 (id=4992): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x40003, 0x128) r1 = io_uring_setup(0x57fe, &(0x7f00000000c0)={0x0, 0x6c33, 0x1, 0x26, 0x2a9}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001a80)={{r2}, "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"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001140)=@assoc_value={0x0}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000011c0)={r3, 0x9, 0x400, 0xf, 0x2, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000001200)={r3, 0xffffffffffffffff, 0x80000}, &(0x7f0000001240)=0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0, 0x4010, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000012c0)='./sys\x00', &(0x7f0000001300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r4, &(0x7f0000001380)='add 1', 0x5) write(r4, &(0x7f00000013c0)='add 2', 0x5) write(r4, &(0x7f0000001400)='add 3', 0x5) write(r4, &(0x7f0000001440)='add 4', 0x5) write(r4, &(0x7f0000001480)='add 5', 0x5) write(r4, &(0x7f00000014c0)='add 6', 0x5) write(r4, &(0x7f0000001500)='add 7', 0x5) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001700)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001740)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbfd, 0x34, 0x8, 0x70, 0x6e}) write(r4, &(0x7f0000001540)='add 8', 0x5) write(r4, &(0x7f0000001580)='add 1-', 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x26, &(0x7f0000001a40)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x2, 0x88, 0x0, @remote, @multicast2}, "a41dfb90"}}}}, 0x0) write(r4, &(0x7f0000001600)='add 3-', 0x6) write(r4, &(0x7f0000001640)='add 4-', 0x6) write(r4, &(0x7f0000001680)='add 5-', 0x6) 4.725975502s ago: executing program 6 (id=4993): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)="12e0667ae60a", 0x6) 4.103413157s ago: executing program 8 (id=4994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 3.950830213s ago: executing program 6 (id=4995): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x40003, 0x128) r1 = io_uring_setup(0x57fe, &(0x7f00000000c0)={0x0, 0x6c33, 0x1, 0x26, 0x2a9}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001a80)={{r2}, "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"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001140)=@assoc_value={0x0}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000011c0)={r3, 0x9, 0x400, 0xf, 0x2, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000001200)={r3, 0xffffffffffffffff, 0x80000}, &(0x7f0000001240)=0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0, 0x4010, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000012c0)='./sys\x00', &(0x7f0000001300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r4, &(0x7f0000001380)='add 1', 0x5) write(r4, &(0x7f00000013c0)='add 2', 0x5) write(r4, &(0x7f0000001400)='add 3', 0x5) write(r4, &(0x7f0000001440)='add 4', 0x5) write(r4, &(0x7f0000001480)='add 5', 0x5) write(r4, &(0x7f00000014c0)='add 6', 0x5) write(r4, &(0x7f0000001500)='add 7', 0x5) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001700)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001740)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbfd, 0x34, 0x8, 0x70, 0x6e}) write(r4, &(0x7f0000001540)='add 8', 0x5) write(r4, &(0x7f0000001580)='add 1-', 0x6) write(r4, &(0x7f00000015c0)='add 2-', 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x26, &(0x7f0000001a40)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x2, 0x88, 0x0, @remote, @multicast2}, "a41dfb90"}}}}, 0x0) write(r4, &(0x7f0000001600)='add 3-', 0x6) write(r4, &(0x7f0000001640)='add 4-', 0x6) write(r4, &(0x7f0000001680)='add 5-', 0x6) 3.858730822s ago: executing program 8 (id=4996): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}, 0x24008054) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) 3.858483122s ago: executing program 4 (id=4997): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x21, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000f3b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000600)="b800000500000000", &(0x7f0000000640)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.858115272s ago: executing program 2 (id=4998): pipe(&(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000380)=r1) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) socket$inet6(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='1', 0x1) 3.635653295s ago: executing program 8 (id=4999): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000019c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001a80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x651, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) unshare(0x2020600) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000022c0)={0x0, 0xc}, &(0x7f0000002300)=ANY=[], &(0x7f0000002340)="929835e740d6a60000000000", 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000018c0)={0x0, 0x2, 0xd, 0x3}) fcntl$lock(r4, 0x25, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000001940)={0x2, 0x1, 0x2, 0x4}) 3.635480865s ago: executing program 4 (id=5000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x34, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9c000000100001040000000003ebffffff000000", @ANYRES32=0x0, @ANYBLOB="fbb4817dbcb5f31a68001280110009006272696467655f736c61766500000000500005800400180005000900010000000500050000000000080025000000000006001f00d500000005001b000100000005000800000000000500060001000000050001000000000006001f0006000000140003006272696467655f736c6176655f30"], 0x9c}, 0x1, 0x400000000000000, 0x0, 0x894}, 0x4040) 3.634920405s ago: executing program 6 (id=5001): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x8, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x3ff, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x394, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0x100, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x80485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x5, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x9, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8003, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x2000008, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x1, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0xfad, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80000001, 0xfffffffd, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x4, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x1000000, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x3, 0xfffffff5, 0xc9, 0x5, 0x1, 0x10001, 0x400, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xffb, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x100007, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x300, 0x3f0a, 0x4, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x440, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x8, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x9, 0x2, 0x2d, 0x7, 0x7, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000014c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000001580)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001640)="80", 0x1}], 0x1}, 0x4) 3.067872833s ago: executing program 4 (id=5002): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x40003, 0x128) r1 = io_uring_setup(0x57fe, &(0x7f00000000c0)={0x0, 0x6c33, 0x1, 0x26, 0x2a9}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001a80)={{r2}, "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"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001140)=@assoc_value={0x0}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000011c0)={r3, 0x9, 0x400, 0xf, 0x2, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000001200)={r3, 0xffffffffffffffff, 0x80000}, &(0x7f0000001240)=0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0, 0x4010, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000012c0)='./sys\x00', &(0x7f0000001300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r4, &(0x7f0000001380)='add 1', 0x5) write(r4, &(0x7f00000013c0)='add 2', 0x5) write(r4, &(0x7f0000001400)='add 3', 0x5) write(r4, &(0x7f0000001440)='add 4', 0x5) write(r4, &(0x7f0000001480)='add 5', 0x5) write(r4, &(0x7f00000014c0)='add 6', 0x5) write(r4, &(0x7f0000001500)='add 7', 0x5) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001700)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001740)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbfd, 0x34, 0x8, 0x70, 0x6e}) write(r4, &(0x7f0000001540)='add 8', 0x5) write(r4, &(0x7f00000015c0)='add 2-', 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x26, &(0x7f0000001a40)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x2, 0x88, 0x0, @remote, @multicast2}, "a41dfb90"}}}}, 0x0) write(r4, &(0x7f0000001600)='add 3-', 0x6) write(r4, &(0x7f0000001640)='add 4-', 0x6) write(r4, &(0x7f0000001680)='add 5-', 0x6) 2.645146087s ago: executing program 4 (id=5003): r0 = syz_create_resource$futex(&(0x7f0000000280)=0x1) r1 = syz_create_resource$futex(&(0x7f00000002c0)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) r2 = syz_create_resource$futex(&(0x7f0000000300)=0x4) futex(r0, 0xb, 0x1, 0x0, r2, 0x2) futex(r0, 0xc, 0x1, &(0x7f0000000340)={0x0, 0x3938700}, r1, 0x1) 2.587860343s ago: executing program 3 (id=5004): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000750000008500000006000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b704000000000000b705000000000000850000001c00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)='\x00'/14, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.51886427s ago: executing program 8 (id=5005): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7a00) 2.42598627s ago: executing program 6 (id=5006): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB='\x00'], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x40000000000018e, 0x4000000) 2.301692943s ago: executing program 8 (id=5007): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @empty, 0x9, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000003c0), 0xffffff6a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) 1.55535814s ago: executing program 4 (id=5008): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x2, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.377923748s ago: executing program 3 (id=5009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'pim6reg0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'pim6reg0\x00', 0x400}) socketpair(0x1, 0x1, 0x1, 0x0) close(0x3) 1.254551851s ago: executing program 2 (id=5010): socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001300)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000013c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001480), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) setns(0xc9, 0x0) r3 = socket(0x1f, 0x3, 0x1) getsockname$packet(r3, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001ac0)=0x2) r4 = socket(0x2, 0x3, 0xfd) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) 797.881598ms ago: executing program 8 (id=5011): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000019700)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000019c80)={r0}, &(0x7f0000019cc0)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0) 743.318384ms ago: executing program 3 (id=5012): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}, 0x24008054) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) 441.875945ms ago: executing program 3 (id=5013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002800000085000000050000"], &(0x7f0000000680)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 148.904495ms ago: executing program 3 (id=5014): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 4 (id=5015): pipe(&(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000380)=r1) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='1', 0x1) kernel console output (not intermixed with test programs): 25b59fb19 code=0x7ffc0000 [ 1405.769312][ T26] audit: type=1326 audit(2000000253.650:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.7.3949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f325b59fb19 code=0x7ffc0000 [ 1405.815689][ T26] audit: type=1326 audit(2000000253.650:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.7.3949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325b59fb19 code=0x7ffc0000 [ 1405.843510][ T26] audit: type=1326 audit(2000000253.650:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.7.3949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325b59fb19 code=0x7ffc0000 [ 1406.087715][ T26] audit: type=1326 audit(2000000253.650:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.7.3949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325b59fb19 code=0x7ffc0000 [ 1406.113998][ T26] audit: type=1326 audit(2000000253.650:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.7.3949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325b59fb19 code=0x7ffc0000 [ 1406.139870][ T26] audit: type=1326 audit(2000000253.650:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.7.3949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f325b59fb19 code=0x7ffc0000 [ 1406.319312][T19855] Cannot find add_set index 0 as target [ 1407.676863][T16524] EXT4-fs (loop7): unmounting filesystem. [ 1407.896380][T19867] loop8: detected capacity change from 0 to 1024 [ 1407.995056][T19867] EXT4-fs: Ignoring removed bh option [ 1408.056517][T19867] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1408.088029][T19867] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.226281][T19876] netlink: 'syz.4.3960': attribute type 1 has an invalid length. [ 1408.237070][T19867] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 3: comm syz.8.3958: lblock 3 mapped to illegal pblock 3 (length 3) [ 1408.307860][T19867] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1408.325651][T19867] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1408.325651][T19867] [ 1408.411981][T19879] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.3958: lblock 3 mapped to illegal pblock 3 (length 1) [ 1408.464314][T19882] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.3958: lblock 3 mapped to illegal pblock 3 (length 1) [ 1408.496051][T19867] EXT4-fs error (device loop8): ext4_ext_remove_space:2945: inode #15: comm syz.8.3958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1408.541828][T19867] EXT4-fs error (device loop8) in ext4_setattr:5728: Corrupt filesystem [ 1408.639825][ T4381] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: comm kworker/u4:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 1408.685787][ T4381] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1408.703210][ T4381] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1408.703210][ T4381] [ 1408.716574][T18389] EXT4-fs (loop8): unmounting filesystem. [ 1408.976010][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 1409.076164][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 1409.205589][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.370753][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.620052][T19903] FAULT_INJECTION: forcing a failure. [ 1409.620052][T19903] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.644590][T19903] CPU: 0 PID: 19903 Comm: syz.4.3968 Not tainted syzkaller #0 [ 1409.652146][T19903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1409.662255][T19903] Call Trace: [ 1409.665578][T19903] [ 1409.668549][T19903] dump_stack_lvl+0x188/0x24e [ 1409.673296][T19903] ? show_regs_print_info+0x12/0x12 [ 1409.678558][T19903] ? load_image+0x410/0x410 [ 1409.683141][T19903] ? __might_sleep+0xd0/0xd0 [ 1409.687781][T19903] ? __lock_acquire+0x7ea0/0x7ea0 [ 1409.692858][T19903] ? __d_lookup+0x8b/0x7c0 [ 1409.697331][T19903] should_fail_ex+0x390/0x4c0 [ 1409.702156][T19903] should_failslab+0x5/0x20 [ 1409.706712][T19903] slab_pre_alloc_hook+0x59/0x300 [ 1409.711801][T19903] kmem_cache_alloc_lru+0x49/0x2e0 [ 1409.716964][T19903] ? __d_alloc+0x2e/0x6e0 [ 1409.721371][T19903] __d_alloc+0x2e/0x6e0 [ 1409.725585][T19903] d_alloc+0x46/0x250 [ 1409.729705][T19903] lookup_one_qstr_excl+0xc6/0x240 [ 1409.734871][T19903] filename_create+0x242/0x450 [ 1409.739694][T19903] ? kern_path_create+0x50/0x50 [ 1409.744595][T19903] ? __virt_addr_valid+0x467/0x540 [ 1409.749857][T19903] do_mkdirat+0xa5/0x440 [ 1409.754158][T19903] ? vfs_mkdir+0x570/0x570 [ 1409.758636][T19903] __x64_sys_mkdirat+0x85/0x90 [ 1409.763543][T19903] do_syscall_64+0x4c/0xa0 [ 1409.768023][T19903] ? clear_bhb_loop+0x60/0xb0 [ 1409.772757][T19903] ? clear_bhb_loop+0x60/0xb0 [ 1409.777496][T19903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1409.783542][T19903] RIP: 0033:0x7f197e19fb19 [ 1409.788025][T19903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.807703][T19903] RSP: 002b:00007f197f113028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1409.816191][T19903] RAX: ffffffffffffffda RBX: 00007f197e425fa0 RCX: 00007f197e19fb19 [ 1409.824335][T19903] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 1409.832450][T19903] RBP: 00007f197e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1409.840900][T19903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.848938][T19903] R13: 00007f197e426038 R14: 00007f197e425fa0 R15: 00007ffdeb4e84e8 [ 1409.857078][T19903] [ 1410.012482][T19905] syz.8.3969 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1410.025137][T19905] CPU: 1 PID: 19905 Comm: syz.8.3969 Not tainted syzkaller #0 [ 1410.032665][T19905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1410.042762][T19905] Call Trace: [ 1410.046166][T19905] [ 1410.049127][T19905] dump_stack_lvl+0x188/0x24e [ 1410.053864][T19905] ? ___ratelimit+0x14e/0x610 [ 1410.058592][T19905] ? show_regs_print_info+0x12/0x12 [ 1410.063851][T19905] ? load_image+0x410/0x410 [ 1410.068404][T19905] ? ___ratelimit+0x474/0x610 [ 1410.073120][T19905] ? radix_tree_cpu_dead+0x160/0x160 [ 1410.078441][T19905] dump_header+0xd8/0x820 [ 1410.082846][T19905] oom_kill_process+0x361/0x550 [ 1410.087838][T19905] out_of_memory+0xe25/0x1220 [ 1410.092551][T19905] ? lockdep_hardirqs_on+0x94/0x140 [ 1410.097782][T19905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1410.103978][T19905] ? mutex_lock_nested+0x10/0x10 [ 1410.108951][T19905] ? unregister_oom_notifier+0x20/0x20 [ 1410.114445][T19905] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1410.120093][T19905] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1410.125679][T19905] ? do_raw_spin_unlock+0x11d/0x230 [ 1410.130910][T19905] try_charge_memcg+0xc9d/0x17c0 [ 1410.135900][T19905] ? percpu_ref_put+0x180/0x180 [ 1410.140785][T19905] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1410.146549][T19905] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1410.152568][T19905] ? percpu_ref_tryget+0x15/0x180 [ 1410.157638][T19905] ? percpu_ref_tryget+0x15/0x180 [ 1410.162696][T19905] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1410.168452][T19905] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1410.174208][T19905] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1410.180057][T19905] obj_cgroup_charge+0x36a/0x620 [ 1410.185037][T19905] ? obj_cgroup_charge+0xe9/0x620 [ 1410.190098][T19905] ? mod_objcg_mlstate+0x320/0x320 [ 1410.195245][T19905] ? percpu_ref_tryget+0x15/0x180 [ 1410.200304][T19905] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1410.206407][T19905] slab_pre_alloc_hook+0x2e2/0x300 [ 1410.211551][T19905] ? do_raw_spin_lock+0x128/0x2f0 [ 1410.216604][T19905] ? mr_table_alloc+0x61/0x240 [ 1410.221411][T19905] __kmem_cache_alloc_node+0x4f/0x270 [ 1410.226813][T19905] ? mr_table_alloc+0x61/0x240 [ 1410.231611][T19905] kmalloc_trace+0x26/0xe0 [ 1410.236055][T19905] ? ipmr_expire_process+0xc0/0xc0 [ 1410.241263][T19905] mr_table_alloc+0x61/0x240 [ 1410.245996][T19905] ? ip6mr_cache_report+0x1340/0x1340 [ 1410.251510][T19905] ip6mr_net_init+0x245/0x3b0 [ 1410.256222][T19905] ops_init+0x360/0x5e0 [ 1410.260420][T19905] setup_net+0x4f2/0xbd0 [ 1410.264697][T19905] ? copy_net_ns+0x5b0/0x5b0 [ 1410.269315][T19905] ? copy_net_ns+0x324/0x5b0 [ 1410.273936][T19905] ? down_read_killable+0x1cc/0x340 [ 1410.279277][T19905] copy_net_ns+0x33e/0x5b0 [ 1410.283750][T19905] create_new_namespaces+0x3ce/0x700 [ 1410.289312][T19905] unshare_nsproxy_namespaces+0x116/0x160 [ 1410.295066][T19905] ksys_unshare+0x4f6/0x8e0 [ 1410.299665][T19905] ? sighand_ctor+0x40/0x40 [ 1410.304199][T19905] ? lock_chain_count+0x20/0x20 [ 1410.309095][T19905] ? syscall_enter_from_user_mode+0x21/0x80 [ 1410.315040][T19905] __x64_sys_unshare+0x34/0x40 [ 1410.319940][T19905] do_syscall_64+0x4c/0xa0 [ 1410.324400][T19905] ? clear_bhb_loop+0x60/0xb0 [ 1410.329115][T19905] ? clear_bhb_loop+0x60/0xb0 [ 1410.333846][T19905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1410.339775][T19905] RIP: 0033:0x7f801839fb19 [ 1410.344230][T19905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.364051][T19905] RSP: 002b:00007f8019200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1410.372495][T19905] RAX: ffffffffffffffda RBX: 00007f8018625fa0 RCX: 00007f801839fb19 [ 1410.380610][T19905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 1410.388605][T19905] RBP: 00007f8018437b70 R08: 0000000000000000 R09: 0000000000000000 [ 1410.396610][T19905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.404604][T19905] R13: 00007f8018626038 R14: 00007f8018625fa0 R15: 00007ffda1f84628 [ 1410.412624][T19905] [ 1410.466270][T19905] memory: usage 88kB, limit 96kB, failcnt 30 [ 1410.479961][T19905] memory+swap: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 1410.487686][T19905] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 1410.509135][T19905] Memory cgroup stats for /syz8/test: [ 1410.512727][T19905] anon 0 [ 1410.512727][T19905] file 0 [ 1410.512727][T19905] kernel 90112 [ 1410.512727][T19905] kernel_stack 0 [ 1410.512727][T19905] pagetables 0 [ 1410.512727][T19905] sec_pagetables 0 [ 1410.512727][T19905] percpu 0 [ 1410.512727][T19905] sock 0 [ 1410.512727][T19905] vmalloc 0 [ 1410.512727][T19905] shmem 0 [ 1410.512727][T19905] zswap 0 [ 1410.512727][T19905] zswapped 0 [ 1410.512727][T19905] file_mapped 0 [ 1410.512727][T19905] file_dirty 0 [ 1410.512727][T19905] file_writeback 0 [ 1410.512727][T19905] swapcached 0 [ 1410.512727][T19905] anon_thp 0 [ 1410.512727][T19905] file_thp 0 [ 1410.512727][T19905] shmem_thp 0 [ 1410.512727][T19905] inactive_anon 0 [ 1410.512727][T19905] active_anon 0 [ 1410.512727][T19905] inactive_file 0 [ 1410.512727][T19905] active_file 0 [ 1410.512727][T19905] unevictable 0 [ 1410.512727][T19905] slab_reclaimable 15440 [ 1410.512727][T19905] slab_unreclaimable 71576 [ 1410.512727][T19905] slab 87016 [ 1410.512727][T19905] workingset_refault_anon 0 [ 1410.736258][T19905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.3969,pid=19904,uid=0 [ 1410.782645][T19905] Memory cgroup out of memory: Killed process 19904 (syz.8.3969) total-vm:104324kB, anon-rss:1420kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1411.271474][T19913] unsupported nlmsg_type 40 [ 1411.273518][ T5289] bond0 (unregistering): Released all slaves [ 1411.453603][T19878] rxe_eth0 speed is unknown, defaulting to 1000 [ 1411.561022][T19661] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1411.607504][T19661] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1411.688385][T19661] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1411.724707][T19661] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1411.996817][T19886] rxe_eth0 speed is unknown, defaulting to 1000 [ 1412.166207][T19661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.247083][T19661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.283159][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1412.301273][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1412.427456][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1412.458476][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1412.500650][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.507897][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.551035][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1412.570694][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1412.600316][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.607501][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.630346][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1412.659804][T19880] rxe_eth0 speed is unknown, defaulting to 1000 [ 1412.695931][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1412.748378][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1412.844899][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1412.871318][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1412.894531][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1412.922643][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1412.948588][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1412.973017][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1413.004913][T19661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1413.046528][T19661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1413.054919][T19949] loop8: detected capacity change from 0 to 8192 [ 1413.102144][ T26] kauditd_printk_skb: 157 callbacks suppressed [ 1413.102161][ T26] audit: type=1800 audit(2000000261.250:432): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3982" name="bus" dev="loop8" ino=1048909 res=0 errno=0 [ 1413.197934][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1413.225268][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1413.256642][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1414.728798][T19969] tipc: Invalid UDP bearer configuration [ 1414.728844][T19969] tipc: Enabling of bearer rejected, failed to enable media [ 1415.617146][T19990] loop8: detected capacity change from 0 to 128 [ 1415.838633][T19990] 9pnet_fd: Insufficient options for proto=fd [ 1415.858251][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1415.866507][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1415.896019][T19661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.038600][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1416.054579][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1416.152286][T19661] device veth0_vlan entered promiscuous mode [ 1416.181327][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1416.195069][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1416.235679][T19661] device veth1_vlan entered promiscuous mode [ 1416.255840][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1416.274376][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1416.303814][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1416.395556][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1416.417332][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1416.444413][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1416.477226][T19661] device veth0_macvtap entered promiscuous mode [ 1416.518164][T19661] device veth1_macvtap entered promiscuous mode [ 1416.578263][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.619563][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.650918][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.669081][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.680258][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.696169][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.706593][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1416.717790][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.733166][T19661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.742829][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1416.756930][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1416.779096][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1416.792285][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1416.806935][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.839230][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.878099][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.908075][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.941995][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.971368][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.986109][T19661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.020078][T19661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.041811][T19661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.058771][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1417.090895][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1417.125513][T19661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.147761][T19661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.172291][T19661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.200182][T19661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.446436][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.459814][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.490639][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1417.585970][ T5312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.615213][ T5312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.649389][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1418.501619][T20046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.526570][T20048] netlink: 'syz.3.4011': attribute type 7 has an invalid length. [ 1420.202209][T20077] loop4: detected capacity change from 0 to 512 [ 1420.266635][T20077] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.4021: iget: bad i_size value: 38620345925642 [ 1420.292886][T20077] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.4021: couldn't read orphan inode 15 (err -117) [ 1420.306892][T20077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1420.350136][ T26] audit: type=1800 audit(2000000268.460:433): pid=20077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4021" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 1421.205626][T20108] netlink: 'syz.2.4028': attribute type 10 has an invalid length. [ 1422.966387][ T6527] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:22: bg 0: block 5: invalid block bitmap [ 1422.985387][T20108] team0: Device wg1 is of different type [ 1423.008064][ T6527] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 65 with error 28 [ 1423.037246][ T6527] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1423.037246][ T6527] [ 1423.048085][ T6527] EXT4-fs (loop4): Total free blocks count 0 [ 1423.054642][ T6527] EXT4-fs (loop4): Free/Dirty block details [ 1423.060761][ T6527] EXT4-fs (loop4): free_blocks=0 [ 1423.065997][ T6527] EXT4-fs (loop4): dirty_blocks=65 [ 1423.071314][ T6527] EXT4-fs (loop4): Block reservation details [ 1423.077364][ T6527] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 1423.089585][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.104515][T19075] EXT4-fs (loop4): unmounting filesystem. [ 1423.111419][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.552529][T20134] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.4038'. [ 1423.579820][T20134] netlink: zone id is out of range [ 1423.603633][T20134] netlink: del zone limit has 4 unknown bytes [ 1423.828778][T20140] loop4: detected capacity change from 0 to 512 [ 1423.888007][T20145] loop7: detected capacity change from 0 to 512 [ 1423.930181][T20140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1423.954150][T20145] EXT4-fs: Ignoring removed bh option [ 1423.998235][T20140] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1424.067926][T20145] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1424.279835][T20152] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1424.480840][T20154] EXT4-fs error (device loop4): ext4_lookup:1860: inode #12: comm syz.4.4041: iget: bad i_size value: 2533274857506816 [ 1424.520702][T20145] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1425.266233][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 1425.567139][T19075] EXT4-fs (loop4): unmounting filesystem. [ 1425.638499][T16524] EXT4-fs (loop7): unmounting filesystem. [ 1425.648289][T20159] device syzkaller0 entered promiscuous mode [ 1426.139975][T20173] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4051'. [ 1427.973442][T20230] autofs4:pid:20230:autofs_fill_super: called with bogus options [ 1429.410083][T20265] sd 0:0:1:0: PR command failed: 1026 [ 1429.415673][T20265] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1429.488606][T20265] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1431.703537][T20307] loop7: detected capacity change from 0 to 1024 [ 1431.781328][T20307] EXT4-fs: Ignoring removed mblk_io_submit option [ 1431.828344][T20307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1431.959136][T20307] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.4090: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1432.040135][T20307] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.4090: couldn't read orphan inode 11 (err -117) [ 1432.061179][T20307] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1432.204473][T20320] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1432.292549][T20307] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.4090: Invalid block bitmap block 0 in block_group 0 [ 1432.343814][T20163] Set syz0 is full, maxelem 65536 reached [ 1432.437810][T20307] Quota error (device loop7): write_blk: dquota write failed [ 1432.543316][T20307] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1432.582141][T20307] EXT4-fs error (device loop7): ext4_acquire_dquot:6848: comm syz.7.4090: Failed to acquire dquot type 0 [ 1432.732602][T16524] EXT4-fs (loop7): unmounting filesystem. [ 1433.046968][T20332] FAULT_INJECTION: forcing a failure. [ 1433.046968][T20332] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.119980][T20332] CPU: 0 PID: 20332 Comm: syz.8.4096 Not tainted syzkaller #0 [ 1433.127538][T20332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1433.137687][T20332] Call Trace: [ 1433.141013][T20332] [ 1433.143988][T20332] dump_stack_lvl+0x188/0x24e [ 1433.148743][T20332] ? show_regs_print_info+0x12/0x12 [ 1433.153996][T20332] ? load_image+0x410/0x410 [ 1433.158556][T20332] ? __might_sleep+0xd0/0xd0 [ 1433.163201][T20332] ? __lock_acquire+0x7ea0/0x7ea0 [ 1433.168300][T20332] should_fail_ex+0x390/0x4c0 [ 1433.173073][T20332] should_failslab+0x5/0x20 [ 1433.177677][T20332] slab_pre_alloc_hook+0x59/0x300 [ 1433.182777][T20332] ? v9fs_mount+0xb6/0xb60 [ 1433.187257][T20332] __kmem_cache_alloc_node+0x4f/0x270 [ 1433.192695][T20332] ? v9fs_mount+0xb6/0xb60 [ 1433.197169][T20332] kmalloc_trace+0x26/0xe0 [ 1433.201644][T20332] v9fs_mount+0xb6/0xb60 [ 1433.205934][T20332] ? rcu_is_watching+0x11/0xa0 [ 1433.210770][T20332] ? end_current_label_crit_section+0x170/0x170 [ 1433.217212][T20332] ? trace_xrep_findroot_block+0x280/0x280 [ 1433.223078][T20332] ? vfs_parse_fs_param+0x420/0x420 [ 1433.228347][T20332] legacy_get_tree+0xe6/0x180 [ 1433.233089][T20332] ? trace_xrep_findroot_block+0x280/0x280 [ 1433.238956][T20332] vfs_get_tree+0x88/0x270 [ 1433.243440][T20332] do_new_mount+0x247/0xa50 [ 1433.248014][T20332] __se_sys_mount+0x2e3/0x3d0 [ 1433.252759][T20332] ? __x64_sys_mount+0xc0/0xc0 [ 1433.257587][T20332] ? lockdep_hardirqs_on+0x94/0x140 [ 1433.262842][T20332] ? __x64_sys_mount+0x1c/0xc0 [ 1433.267666][T20332] do_syscall_64+0x4c/0xa0 [ 1433.272149][T20332] ? clear_bhb_loop+0x60/0xb0 [ 1433.276893][T20332] ? clear_bhb_loop+0x60/0xb0 [ 1433.281904][T20332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1433.287897][T20332] RIP: 0033:0x7f801839fb19 [ 1433.292370][T20332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.312060][T20332] RSP: 002b:00007f8019200028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1433.320596][T20332] RAX: ffffffffffffffda RBX: 00007f8018625fa0 RCX: 00007f801839fb19 [ 1433.328629][T20332] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0 [ 1433.336668][T20332] RBP: 00007f8018437b70 R08: 0000200000000100 R09: 0000000000000000 [ 1433.344715][T20332] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.352778][T20332] R13: 00007f8018626038 R14: 00007f8018625fa0 R15: 00007ffda1f84628 [ 1433.360841][T20332] [ 1434.644732][T20360] netlink: 'syz.3.4103': attribute type 39 has an invalid length. [ 1434.866586][T20368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.887639][T20368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.918120][T20368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1434.945881][T20368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.149987][T20366] netlink: 'syz.4.4105': attribute type 2 has an invalid length. [ 1438.248575][T20445] loop8: detected capacity change from 0 to 128 [ 1441.155927][T20454] FAULT_INJECTION: forcing a failure. [ 1441.155927][T20454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.242732][T20454] CPU: 0 PID: 20454 Comm: syz.7.4133 Not tainted syzkaller #0 [ 1441.250293][T20454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1441.260419][T20454] Call Trace: [ 1441.263740][T20454] [ 1441.266714][T20454] dump_stack_lvl+0x188/0x24e [ 1441.271483][T20454] ? show_regs_print_info+0x12/0x12 [ 1441.276738][T20454] ? load_image+0x410/0x410 [ 1441.281385][T20454] ? __lock_acquire+0x7ea0/0x7ea0 [ 1441.286476][T20454] should_fail_ex+0x390/0x4c0 [ 1441.291205][T20454] _copy_to_user+0x2c/0x130 [ 1441.295765][T20454] bpf_verifier_vlog+0x172/0x3a0 [ 1441.300841][T20454] __btf_verifier_log+0xdf/0x130 [ 1441.305899][T20454] ? btf_check_sec_info+0x350/0x350 [ 1441.311159][T20454] ? btf_parse_hdr+0x1dd/0x7d0 [ 1441.315988][T20454] btf_parse_hdr+0x456/0x7d0 [ 1441.320647][T20454] btf_new_fd+0x367/0x760 [ 1441.325302][T20454] __sys_bpf+0x612/0x780 [ 1441.329697][T20454] ? bpf_link_show_fdinfo+0x550/0x550 [ 1441.335195][T20454] ? lock_chain_count+0x20/0x20 [ 1441.340114][T20454] __x64_sys_bpf+0x78/0x90 [ 1441.344590][T20454] do_syscall_64+0x4c/0xa0 [ 1441.349077][T20454] ? clear_bhb_loop+0x60/0xb0 [ 1441.354010][T20454] ? clear_bhb_loop+0x60/0xb0 [ 1441.358762][T20454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.364721][T20454] RIP: 0033:0x7f325b59fb19 [ 1441.369191][T20454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.389034][T20454] RSP: 002b:00007f325c546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1441.397503][T20454] RAX: ffffffffffffffda RBX: 00007f325b825fa0 RCX: 00007f325b59fb19 [ 1441.405529][T20454] RDX: 0000000000000028 RSI: 0000200000000780 RDI: 0000000000000012 [ 1441.413556][T20454] RBP: 00007f325b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1441.421577][T20454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.429592][T20454] R13: 00007f325b826038 R14: 00007f325b825fa0 R15: 00007ffdca1ae418 [ 1441.437632][T20454] [ 1441.500652][T20446] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1443.060230][T20454] FAULT_INJECTION: forcing a failure. [ 1443.060230][T20454] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.112822][T20454] CPU: 0 PID: 20454 Comm: syz.7.4133 Not tainted syzkaller #0 [ 1443.120389][T20454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1443.130496][T20454] Call Trace: [ 1443.133820][T20454] [ 1443.136791][T20454] dump_stack_lvl+0x188/0x24e [ 1443.141531][T20454] ? show_regs_print_info+0x12/0x12 [ 1443.146888][T20454] ? load_image+0x410/0x410 [ 1443.151512][T20454] ? __lock_acquire+0x7ea0/0x7ea0 [ 1443.156618][T20454] should_fail_ex+0x390/0x4c0 [ 1443.161371][T20454] should_failslab+0x5/0x20 [ 1443.165922][T20454] slab_pre_alloc_hook+0x59/0x300 [ 1443.171044][T20454] kmem_cache_alloc+0x56/0x2f0 [ 1443.175858][T20454] ? vm_area_alloc+0x20/0xe0 [ 1443.180505][T20454] vm_area_alloc+0x20/0xe0 [ 1443.184979][T20454] mmap_region+0xcbc/0x1c50 [ 1443.189572][T20454] ? file_mmap_ok+0x170/0x170 [ 1443.194322][T20454] ? validate_mm+0x23f/0x2e0 [ 1443.199001][T20454] ? vma_expand+0x850/0x850 [ 1443.203565][T20454] ? cap_mmap_addr+0x153/0x2c0 [ 1443.208406][T20454] ? file_mmap_ok+0x11c/0x170 [ 1443.213141][T20454] do_mmap+0x9ce/0x10d0 [ 1443.217367][T20454] ? mlock_future_check+0x100/0x100 [ 1443.222629][T20454] ? ima_file_mmap+0xf7/0x140 [ 1443.227492][T20454] ? ima_file_free+0x3e0/0x3e0 [ 1443.232303][T20454] ? common_file_perm+0x171/0x1c0 [ 1443.237426][T20454] ? mmap_write_lock_killable+0x1d/0x70 [ 1443.243040][T20454] do_shmat+0x8a1/0xbc0 [ 1443.247268][T20454] ? __ia32_compat_sys_old_shmctl+0x90/0x90 [ 1443.253226][T20454] ? lock_chain_count+0x20/0x20 [ 1443.258147][T20454] __x64_sys_shmat+0x99/0xe0 [ 1443.262808][T20454] do_syscall_64+0x4c/0xa0 [ 1443.267306][T20454] ? clear_bhb_loop+0x60/0xb0 [ 1443.272850][T20454] ? clear_bhb_loop+0x60/0xb0 [ 1443.277600][T20454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1443.283568][T20454] RIP: 0033:0x7f325b59fb19 [ 1443.288043][T20454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.307714][T20454] RSP: 002b:00007f325c546028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1443.316197][T20454] RAX: ffffffffffffffda RBX: 00007f325b825fa0 RCX: 00007f325b59fb19 [ 1443.324226][T20454] RDX: bbdccba4532b703b RSI: 0000200000000000 RDI: 0000000000000001 [ 1443.332349][T20454] RBP: 00007f325b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1443.340390][T20454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1443.348416][T20454] R13: 00007f325b826038 R14: 00007f325b825fa0 R15: 00007ffdca1ae418 [ 1443.356555][T20454] [ 1444.119802][T20497] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1445.307829][T20505] syz.4.4148 (20505): drop_caches: 2 [ 1447.442163][T20529] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1448.224248][T20546] loop2: detected capacity change from 0 to 512 [ 1448.531647][T20546] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.4157: iget: bad i_size value: 38620345925642 [ 1448.547761][T20546] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.4157: couldn't read orphan inode 15 (err -117) [ 1448.569240][T20546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1449.402508][ T26] audit: type=1800 audit(2000000296.740:434): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4157" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1450.700425][ T5349] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:13: bg 0: block 5: invalid block bitmap [ 1450.760413][ T5349] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 65 with error 28 [ 1450.809837][ T5349] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1450.809837][ T5349] [ 1450.839633][ T5349] EXT4-fs (loop2): Total free blocks count 0 [ 1450.870977][ T5349] EXT4-fs (loop2): Free/Dirty block details [ 1450.876955][ T5349] EXT4-fs (loop2): free_blocks=0 [ 1450.933214][ T5349] EXT4-fs (loop2): dirty_blocks=65 [ 1450.938414][ T5349] EXT4-fs (loop2): Block reservation details [ 1450.974238][ T5349] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 1451.008413][T19661] EXT4-fs (loop2): unmounting filesystem. [ 1451.811546][T20579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4165'. [ 1453.063152][T20594] FAULT_INJECTION: forcing a failure. [ 1453.063152][T20594] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.101887][T20594] CPU: 0 PID: 20594 Comm: syz.2.4170 Not tainted syzkaller #0 [ 1453.109524][T20594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1453.119639][T20594] Call Trace: [ 1453.122983][T20594] [ 1453.125957][T20594] dump_stack_lvl+0x188/0x24e [ 1453.130704][T20594] ? show_regs_print_info+0x12/0x12 [ 1453.135962][T20594] ? load_image+0x410/0x410 [ 1453.140607][T20594] ? __might_sleep+0xd0/0xd0 [ 1453.145249][T20594] ? __lock_acquire+0x7ea0/0x7ea0 [ 1453.150334][T20594] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1453.156370][T20594] should_fail_ex+0x390/0x4c0 [ 1453.161115][T20594] should_failslab+0x5/0x20 [ 1453.165658][T20594] slab_pre_alloc_hook+0x59/0x300 [ 1453.170720][T20594] ? sk_prot_alloc+0xe7/0x210 [ 1453.175434][T20594] __kmem_cache_alloc_node+0x4f/0x270 [ 1453.180845][T20594] ? sk_prot_alloc+0xe7/0x210 [ 1453.185549][T20594] __kmalloc+0xa3/0x240 [ 1453.189737][T20594] sk_prot_alloc+0xe7/0x210 [ 1453.194279][T20594] ? sk_alloc+0x20/0x330 [ 1453.198553][T20594] sk_alloc+0x36/0x330 [ 1453.202650][T20594] __netlink_create+0x6b/0x2d0 [ 1453.207454][T20594] ? __lock_acquire+0x7ea0/0x7ea0 [ 1453.212517][T20594] netlink_create+0x3a7/0x510 [ 1453.217235][T20594] ? rtnetlink_rcv+0x20/0x20 [ 1453.221862][T20594] __sock_create+0x49a/0x940 [ 1453.226491][T20594] __sys_socket+0xc4/0x190 [ 1453.230942][T20594] __x64_sys_socket+0x76/0x80 [ 1453.235654][T20594] do_syscall_64+0x4c/0xa0 [ 1453.240127][T20594] ? clear_bhb_loop+0x60/0xb0 [ 1453.244842][T20594] ? clear_bhb_loop+0x60/0xb0 [ 1453.249594][T20594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.255531][T20594] RIP: 0033:0x7fa0b0f9fb19 [ 1453.259976][T20594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.279709][T20594] RSP: 002b:00007fa0b1e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1453.288187][T20594] RAX: ffffffffffffffda RBX: 00007fa0b1225fa0 RCX: 00007fa0b0f9fb19 [ 1453.296190][T20594] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 1453.304194][T20594] RBP: 00007fa0b1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1453.312195][T20594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.320193][T20594] R13: 00007fa0b1226038 R14: 00007fa0b1225fa0 R15: 00007ffd2dee2618 [ 1453.328213][T20594] [ 1453.899546][T16606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1453.912644][T16606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1453.921856][T16606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1453.931606][T16606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1453.941665][T16606] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1453.949562][T16606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1454.003741][T20605] rxe_eth0 speed is unknown, defaulting to 1000 [ 1455.494599][T20605] chnl_net:caif_netlink_parms(): no params data found [ 1455.581367][T20605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.588920][T20605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.597387][T20605] device bridge_slave_0 entered promiscuous mode [ 1455.606956][T20605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.614528][T20605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.623219][T20605] device bridge_slave_1 entered promiscuous mode [ 1455.658450][T20605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.670979][T20605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.708149][T20605] team0: Port device team_slave_0 added [ 1455.758973][T20605] team0: Port device team_slave_1 added [ 1455.812320][T20294] bridge0: port 3(syz_tun) entered disabled state [ 1455.982647][T20294] device syz_tun left promiscuous mode [ 1456.008642][T20294] bridge0: port 3(syz_tun) entered disabled state [ 1456.029886][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 1457.063715][ T5513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.134924][T20605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.161084][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.286383][T20605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.397341][ T5513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.469019][T20605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.484667][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.573263][T20605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.694124][ T5513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.900672][T20657] device syzkaller0 entered promiscuous mode [ 1458.018032][ T5513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.109964][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 1458.160509][T20605] device hsr_slave_0 entered promiscuous mode [ 1458.218786][T20605] device hsr_slave_1 entered promiscuous mode [ 1458.245481][T20605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1458.264016][T20605] Cannot create hsr debugfs directory [ 1460.189966][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 1461.861353][T16606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1461.875692][T16606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1461.884846][T16606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1461.897957][T16606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1461.907475][T16606] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1461.915595][T16606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1462.273616][T16606] Bluetooth: hci2: command 0x0419 tx timeout [ 1463.955158][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1464.444038][T20678] rxe_eth0 speed is unknown, defaulting to 1000 [ 1464.611803][T20691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4192'. [ 1464.654787][ T5513] tipc: Left network mode [ 1466.030194][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 1466.302402][ T5513] bond1: (slave gretap1): Releasing active interface [ 1466.348482][T20678] chnl_net:caif_netlink_parms(): no params data found [ 1466.928444][T20605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1466.978501][T20739] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4203'. [ 1467.010565][T20605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1467.070492][T20605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1467.152345][T20749] netlink: 143932 bytes leftover after parsing attributes in process `syz.8.4204'. [ 1467.189334][T20749] netlink: zone id is out of range [ 1467.229936][T20749] netlink: zone id is out of range [ 1467.242926][T20749] netlink: zone id is out of range [ 1467.286786][T20749] netlink: zone id is out of range [ 1467.296916][T20749] netlink: zone id is out of range [ 1467.314089][T20749] netlink: zone id is out of range [ 1467.347201][T20749] netlink: zone id is out of range [ 1467.359911][T20749] netlink: zone id is out of range [ 1467.377012][T20605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1467.390636][T20749] netlink: zone id is out of range [ 1467.396458][T20749] netlink: zone id is out of range [ 1467.440658][T20678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.447955][T20678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.462033][T20678] device bridge_slave_0 entered promiscuous mode [ 1467.507938][T20678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.228864][T16606] Bluetooth: hci3: command 0x040f tx timeout [ 1468.283956][T20754] syz.4.4205 (20754): drop_caches: 2 [ 1468.313494][T20678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.365219][T20678] device bridge_slave_1 entered promiscuous mode [ 1468.517901][T20678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.721848][T20678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.850001][ T5513] device hsr_slave_0 left promiscuous mode [ 1468.857119][ T5513] device hsr_slave_1 left promiscuous mode [ 1469.053488][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.181752][ T5513] device bridge_slave_0 left promiscuous mode [ 1469.327010][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.981468][ T5513] device veth1_macvtap left promiscuous mode [ 1470.024925][ T5513] device veth0_macvtap left promiscuous mode [ 1470.059947][ T5513] device veth1_vlan left promiscuous mode [ 1470.089823][ T5513] device veth0_vlan left promiscuous mode [ 1470.279968][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 1471.240054][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 1471.340793][ T5513] bond1 (unregistering): Released all slaves [ 1471.990815][T20794] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1472.234396][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1472.312264][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1472.383320][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.449681][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.961019][ T5513] bond0 (unregistering): Released all slaves [ 1473.868752][T20798] syz.2.4216 (20798): drop_caches: 2 [ 1474.082757][T20678] team0: Port device team_slave_0 added [ 1474.209846][ T7] hid-generic 0003:1234:5678.000F: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 1474.245267][T20678] team0: Port device team_slave_1 added [ 1474.368410][T20605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.400546][T20678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.407573][T20678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.569755][T20678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.620126][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1474.635500][T20804] fido_id[20804]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1474.656843][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1474.693709][T20678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.706592][T20678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.769855][T20678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.831905][T20605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1474.890938][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1474.920604][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1474.961230][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.968418][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.051879][T20820] loop4: detected capacity change from 0 to 128 [ 1475.139178][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1475.153417][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1475.200122][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1475.218414][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.225666][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.304922][T20678] device hsr_slave_0 entered promiscuous mode [ 1475.349276][T20678] device hsr_slave_1 entered promiscuous mode [ 1475.389886][T20678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1475.417883][T20678] Cannot create hsr debugfs directory [ 1475.439998][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1475.526598][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1475.556689][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1475.610698][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1475.637463][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1475.682015][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1475.739175][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1475.841460][T20605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1475.909828][T20605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1476.825527][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1476.851196][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1476.888243][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1476.934368][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1477.478401][T20605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.614430][T20833] loop2: detected capacity change from 0 to 512 [ 1477.976663][T20833] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.4226: iget: bad i_size value: 38620345925642 [ 1477.992226][T20833] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.4226: couldn't read orphan inode 15 (err -117) [ 1478.023811][T20833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1478.437395][ T26] audit: type=1800 audit(2000000326.210:435): pid=20833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4226" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1478.640725][T20860] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1479.566530][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1479.590246][ T5349] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 65 with error 28 [ 1479.593537][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1479.619376][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1479.627467][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1479.642244][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1479.668341][ T5349] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1479.668341][ T5349] [ 1479.698797][ T5349] EXT4-fs (loop2): Total free blocks count 0 [ 1479.708695][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1479.730790][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1479.737099][ T5349] EXT4-fs (loop2): Free/Dirty block details [ 1479.755400][ T5349] EXT4-fs (loop2): free_blocks=0 [ 1479.772357][ T5349] EXT4-fs (loop2): dirty_blocks=65 [ 1479.777602][ T5349] EXT4-fs (loop2): Block reservation details [ 1479.785610][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1479.796652][ T5349] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 1479.809477][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1479.840258][T19661] EXT4-fs (loop2): unmounting filesystem. [ 1479.987753][T20886] FAULT_INJECTION: forcing a failure. [ 1479.987753][T20886] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.029494][T20886] CPU: 0 PID: 20886 Comm: syz.4.4236 Not tainted syzkaller #0 [ 1480.037054][T20886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1480.047164][T20886] Call Trace: [ 1480.050485][T20886] [ 1480.053538][T20886] dump_stack_lvl+0x188/0x24e [ 1480.058364][T20886] ? show_regs_print_info+0x12/0x12 [ 1480.063732][T20886] ? load_image+0x410/0x410 [ 1480.068299][T20886] ? __might_sleep+0xd0/0xd0 [ 1480.072951][T20886] ? __lock_acquire+0x7ea0/0x7ea0 [ 1480.078160][T20886] should_fail_ex+0x390/0x4c0 [ 1480.082912][T20886] should_failslab+0x5/0x20 [ 1480.087481][T20886] slab_pre_alloc_hook+0x59/0x300 [ 1480.092602][T20886] kmem_cache_alloc_lru+0x49/0x2e0 [ 1480.097753][T20886] ? __d_alloc+0x2e/0x6e0 [ 1480.102121][T20886] __d_alloc+0x2e/0x6e0 [ 1480.106317][T20886] ? d_alloc_pseudo+0xe/0x70 [ 1480.110946][T20886] d_alloc_pseudo+0x19/0x70 [ 1480.115495][T20886] alloc_file_pseudo+0xe0/0x200 [ 1480.120402][T20886] ? alloc_empty_file_noaccount+0x80/0x80 [ 1480.126179][T20886] ? alloc_fd+0x590/0x640 [ 1480.130565][T20886] sock_alloc_file+0xb3/0x240 [ 1480.135295][T20886] __sys_socket+0x12d/0x190 [ 1480.139837][T20886] __x64_sys_socket+0x76/0x80 [ 1480.144561][T20886] do_syscall_64+0x4c/0xa0 [ 1480.149030][T20886] ? clear_bhb_loop+0x60/0xb0 [ 1480.153762][T20886] ? clear_bhb_loop+0x60/0xb0 [ 1480.158473][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.164433][T20886] RIP: 0033:0x7f197e19fb19 [ 1480.168882][T20886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.188528][T20886] RSP: 002b:00007f197f113028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1480.197007][T20886] RAX: ffffffffffffffda RBX: 00007f197e425fa0 RCX: 00007f197e19fb19 [ 1480.205014][T20886] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 1480.213128][T20886] RBP: 00007f197e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1480.221134][T20886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.229159][T20886] R13: 00007f197e426038 R14: 00007f197e425fa0 R15: 00007ffdeb4e84e8 [ 1480.237181][T20886] [ 1480.307136][T20605] device veth0_vlan entered promiscuous mode [ 1480.631345][T20605] device veth1_vlan entered promiscuous mode [ 1480.659200][T20901] loop2: detected capacity change from 0 to 2048 [ 1480.684243][T20904] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1480.728259][T20904] net_ratelimit: 7330 callbacks suppressed [ 1480.728279][T20904] netlink: zone id is out of range [ 1480.745901][T20901] loop2: p2 p3 p7 [ 1480.765469][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1480.814669][T20904] netlink: zone id is out of range [ 1480.850320][T20904] netlink: zone id is out of range [ 1480.863321][T20904] netlink: zone id is out of range [ 1480.888091][T20904] netlink: zone id is out of range [ 1480.914858][T20904] netlink: zone id is out of range [ 1480.940717][T20904] netlink: zone id is out of range [ 1480.976479][T20904] netlink: zone id is out of range [ 1481.025393][T20904] netlink: zone id is out of range [ 1481.076303][T20904] netlink: zone id is out of range [ 1481.406146][T20605] device veth0_macvtap entered promiscuous mode [ 1481.447355][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1481.471609][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1481.506566][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1481.582989][T20605] device veth1_macvtap entered promiscuous mode [ 1481.682697][T20926] FAULT_INJECTION: forcing a failure. [ 1481.682697][T20926] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.740528][T20926] CPU: 0 PID: 20926 Comm: syz.2.4248 Not tainted syzkaller #0 [ 1481.748080][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1481.758196][T20926] Call Trace: [ 1481.761518][T20926] [ 1481.764494][T20926] dump_stack_lvl+0x188/0x24e [ 1481.769263][T20926] ? show_regs_print_info+0x12/0x12 [ 1481.774526][T20926] ? load_image+0x410/0x410 [ 1481.779174][T20926] ? __might_sleep+0xd0/0xd0 [ 1481.783920][T20926] ? __lock_acquire+0x7ea0/0x7ea0 [ 1481.789013][T20926] should_fail_ex+0x390/0x4c0 [ 1481.793762][T20926] should_failslab+0x5/0x20 [ 1481.798320][T20926] slab_pre_alloc_hook+0x59/0x300 [ 1481.803407][T20926] kmem_cache_alloc+0x56/0x2f0 [ 1481.808223][T20926] ? __alloc_file+0x25/0x230 [ 1481.812872][T20926] __alloc_file+0x25/0x230 [ 1481.817341][T20926] alloc_empty_file+0x90/0x180 [ 1481.822161][T20926] alloc_file+0x5b/0x5f0 [ 1481.826467][T20926] alloc_file_pseudo+0x180/0x200 [ 1481.831458][T20926] ? alloc_empty_file_noaccount+0x80/0x80 [ 1481.837238][T20926] ? alloc_fd+0x590/0x640 [ 1481.841632][T20926] sock_alloc_file+0xb3/0x240 [ 1481.846369][T20926] __sys_socket+0x12d/0x190 [ 1481.850925][T20926] __x64_sys_socket+0x76/0x80 [ 1481.855665][T20926] do_syscall_64+0x4c/0xa0 [ 1481.860136][T20926] ? clear_bhb_loop+0x60/0xb0 [ 1481.864869][T20926] ? clear_bhb_loop+0x60/0xb0 [ 1481.869670][T20926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1481.875622][T20926] RIP: 0033:0x7fa0b0f9fb19 [ 1481.880088][T20926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.899774][T20926] RSP: 002b:00007fa0b1e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1481.908254][T20926] RAX: ffffffffffffffda RBX: 00007fa0b1225fa0 RCX: 00007fa0b0f9fb19 [ 1481.916286][T20926] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 1481.924401][T20926] RBP: 00007fa0b1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1481.932431][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.940459][T20926] R13: 00007fa0b1226038 R14: 00007fa0b1225fa0 R15: 00007ffd2dee2618 [ 1481.948494][T20926] [ 1481.957401][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.988915][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.019342][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.039749][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.058131][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.073924][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.096923][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1482.115672][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.142446][T20605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1482.165351][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1482.187091][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1482.215666][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1482.296685][T20678] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1482.343589][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.380082][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.409760][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.437847][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.463687][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.489891][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.504181][T20605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.524976][T20605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.560348][T20605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1482.734106][T20678] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1482.744742][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1482.916902][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1483.548667][T20678] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1483.648760][T20605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.669880][T20605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.692608][T20605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.722080][T20605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.749478][T20678] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1483.769553][T20963] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.4256'. [ 1484.147133][ T5349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.166820][ T5349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.234780][T20973] FAULT_INJECTION: forcing a failure. [ 1484.234780][T20973] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1484.252807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1484.265347][T20973] CPU: 0 PID: 20973 Comm: syz.2.4262 Not tainted syzkaller #0 [ 1484.272883][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1484.282992][T20973] Call Trace: [ 1484.286367][T20973] [ 1484.289339][T20973] dump_stack_lvl+0x188/0x24e [ 1484.294079][T20973] ? security_file_alloc+0x30/0x110 [ 1484.299354][T20973] ? alloc_empty_file+0x90/0x180 [ 1484.304350][T20973] ? show_regs_print_info+0x12/0x12 [ 1484.309613][T20973] ? load_image+0x410/0x410 [ 1484.314215][T20973] ? mark_lock+0x94/0x320 [ 1484.318706][T20973] should_fail_ex+0x390/0x4c0 [ 1484.323460][T20973] get_futex_key+0x1a6/0xe70 [ 1484.328110][T20973] ? futex_setup_timer+0xc0/0xc0 [ 1484.333161][T20973] futex_wake+0x123/0x4f0 [ 1484.337558][T20973] ? futex_wake_mark+0x150/0x150 [ 1484.342558][T20973] ? percpu_counter_add_batch+0x135/0x150 [ 1484.348346][T20973] do_futex+0x2e2/0x320 [ 1484.352562][T20973] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1484.358519][T20973] ? __lock_acquire+0x7ea0/0x7ea0 [ 1484.363614][T20973] __se_sys_futex+0x381/0x410 [ 1484.368355][T20973] ? __x64_sys_futex+0xf0/0xf0 [ 1484.373187][T20973] ? __x64_sys_futex+0x1d/0xf0 [ 1484.378018][T20973] do_syscall_64+0x4c/0xa0 [ 1484.382493][T20973] ? clear_bhb_loop+0x60/0xb0 [ 1484.387239][T20973] ? clear_bhb_loop+0x60/0xb0 [ 1484.391957][T20973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1484.397944][T20973] RIP: 0033:0x7fa0b0f9fb19 [ 1484.402394][T20973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.422035][T20973] RSP: 002b:00007fa0b1e2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1484.430489][T20973] RAX: ffffffffffffffda RBX: 00007fa0b1225fa8 RCX: 00007fa0b0f9fb19 [ 1484.438490][T20973] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0b1225fac [ 1484.446496][T20973] RBP: 00007fa0b1225fa0 R08: 000aac1ae8e42d84 R09: 0000000000000000 [ 1484.454502][T20973] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1484.462507][T20973] R13: 00007fa0b1226038 R14: 00007ffd2dee2530 R15: 00007ffd2dee2618 [ 1484.470536][T20973] [ 1484.515203][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.523439][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.597232][T20678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.644835][ T8539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.668726][ T8539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.756584][T20979] loop2: detected capacity change from 0 to 2048 [ 1484.784654][T20678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.810700][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1484.819062][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1484.876113][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1485.008284][T20979] loop2: unable to read partition table [ 1485.018726][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1485.040361][T20979] loop2: partition table beyond EOD, truncated [ 1485.050634][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1485.063201][T20979] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1485.084002][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.091374][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.111657][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1485.127532][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1485.138158][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.145387][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.197573][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1485.273884][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1485.307085][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1485.315592][ T3644] loop2: unable to read partition table [ 1485.328674][ T3644] loop2: partition table beyond EOD, truncated [ 1485.346605][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1485.436754][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1485.558530][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1485.682168][T17275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1485.704240][T17275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1485.778717][T17275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1485.796254][T17275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1486.025882][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1486.043468][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1486.078591][T20678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1486.134952][ T4279] Bluetooth: hci3: command 0x0405 tx timeout [ 1486.627929][T21024] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1486.646860][T21024] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 1486.676855][T21024] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 1486.789438][T21024] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1486.854421][T21024] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 1486.861802][T21024] pci 0000:00:05.0: vgaarb: bridge control possible [ 1486.868436][T21024] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1486.887499][T21024] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 [ 1486.911138][T21024] pci 0000:00:07.0: BAR 0 [io 0xc0a0-0xc0bf] [ 1486.934686][T21024] pci 0000:00:07.0: BAR 1 [mem 0xfe802000-0xfe80203f] [ 1487.045457][T21024] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 1487.065384][T21024] pci 0000:00:07.0: BAR 1 [mem 0xc0800000-0xc080003f]: assigned [ 1487.081659][T21024] pci 0000:00:07.0: BAR 0 [io 0xc0a0-0xc0bf]: assigned [ 1487.388317][ T4370] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 1487.978702][ T5513] device hsr_slave_0 left promiscuous mode [ 1488.047037][ T5513] device hsr_slave_1 left promiscuous mode [ 1488.108511][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.123652][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.152335][ T5513] device bridge_slave_1 left promiscuous mode [ 1488.176126][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.192505][ T5513] bond1 (unregistering): Released all slaves [ 1488.278008][T21053] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.4284'. [ 1488.308007][T21053] net_ratelimit: 7330 callbacks suppressed [ 1488.308038][T21053] netlink: zone id is out of range [ 1488.328601][T21053] netlink: zone id is out of range [ 1488.338344][T21053] netlink: zone id is out of range [ 1488.357853][T21053] netlink: zone id is out of range [ 1488.380770][T21053] netlink: zone id is out of range [ 1488.399929][T21053] netlink: zone id is out of range [ 1488.415173][T21053] netlink: zone id is out of range [ 1488.423186][T21053] netlink: zone id is out of range [ 1488.428441][T21053] netlink: zone id is out of range [ 1488.449979][T21053] netlink: zone id is out of range [ 1489.926225][T21069] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1489.947426][T21069] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 [ 1489.971699][T21069] pci 0000:00:07.0: BAR 0 [io 0xc0a0-0xc0bf] [ 1489.993538][T21069] pci 0000:00:07.0: BAR 1 [mem 0xc0800000-0xc080003f] [ 1490.097825][T21069] pci 0000:00:07.0: BAR 1 [mem 0xc0800000-0xc080003f]: assigned [ 1490.106023][T21069] pci 0000:00:07.0: BAR 0 [io 0xc0a0-0xc0bf]: assigned [ 1490.636837][ T4370] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 1491.254814][T21092] netlink: 143932 bytes leftover after parsing attributes in process `syz.8.4298'. [ 1491.506722][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 1491.601596][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 1491.672646][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.751063][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.307645][T21109] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1493.072511][T21112] FAULT_INJECTION: forcing a failure. [ 1493.072511][T21112] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.087595][T21112] CPU: 1 PID: 21112 Comm: syz.2.4308 Not tainted syzkaller #0 [ 1493.095229][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1493.105512][T21112] Call Trace: [ 1493.108843][T21112] [ 1493.111822][T21112] dump_stack_lvl+0x188/0x24e [ 1493.116708][T21112] ? show_regs_print_info+0x12/0x12 [ 1493.121977][T21112] ? load_image+0x410/0x410 [ 1493.126575][T21112] ? __might_sleep+0xd0/0xd0 [ 1493.131222][T21112] ? __lock_acquire+0x7ea0/0x7ea0 [ 1493.136333][T21112] should_fail_ex+0x390/0x4c0 [ 1493.141123][T21112] should_failslab+0x5/0x20 [ 1493.145692][T21112] slab_pre_alloc_hook+0x59/0x300 [ 1493.150789][T21112] kmem_cache_alloc+0x56/0x2f0 [ 1493.155597][T21112] ? __proc_create+0x36f/0x8b0 [ 1493.160427][T21112] __proc_create+0x36f/0x8b0 [ 1493.165065][T21112] ? proc_symlink+0x210/0x210 [ 1493.169789][T21112] ? _raw_write_unlock+0x24/0x40 [ 1493.174779][T21112] ? proc_register+0x5d1/0x7e0 [ 1493.179585][T21112] proc_create_reg+0x87/0x100 [ 1493.184304][T21112] proc_create_net_single+0x90/0x170 [ 1493.189629][T21112] ? sockstat6_seq_show+0x180/0x180 [ 1493.194949][T21112] ? proc_create_net_data_write+0x1c0/0x1c0 [ 1493.200884][T21112] ? bpf_iter_fini_seq_net+0xc0/0xc0 [ 1493.206257][T21112] ? fib_default_rule_add+0x1fa/0x390 [ 1493.211689][T21112] ipv6_proc_init_net+0x8e/0x150 [ 1493.216666][T21112] ops_init+0x360/0x5e0 [ 1493.220881][T21112] setup_net+0x4f2/0xbd0 [ 1493.225159][T21112] ? copy_net_ns+0x5b0/0x5b0 [ 1493.229836][T21112] ? copy_net_ns+0x324/0x5b0 [ 1493.234469][T21112] ? down_read_killable+0x1cc/0x340 [ 1493.239730][T21112] copy_net_ns+0x33e/0x5b0 [ 1493.244198][T21112] create_new_namespaces+0x3ce/0x700 [ 1493.249541][T21112] unshare_nsproxy_namespaces+0x116/0x160 [ 1493.255355][T21112] ksys_unshare+0x4f6/0x8e0 [ 1493.259924][T21112] ? sighand_ctor+0x40/0x40 [ 1493.264489][T21112] ? lock_chain_count+0x20/0x20 [ 1493.269386][T21112] ? syscall_enter_from_user_mode+0x21/0x80 [ 1493.275362][T21112] __x64_sys_unshare+0x34/0x40 [ 1493.280193][T21112] do_syscall_64+0x4c/0xa0 [ 1493.284659][T21112] ? clear_bhb_loop+0x60/0xb0 [ 1493.289390][T21112] ? clear_bhb_loop+0x60/0xb0 [ 1493.294112][T21112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1493.300060][T21112] RIP: 0033:0x7fa0b0f9fb19 [ 1493.304552][T21112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.324220][T21112] RSP: 002b:00007fa0b1e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1493.332832][T21112] RAX: ffffffffffffffda RBX: 00007fa0b1225fa0 RCX: 00007fa0b0f9fb19 [ 1493.340849][T21112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1493.348889][T21112] RBP: 00007fa0b1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1493.356896][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.364911][T21112] R13: 00007fa0b1226038 R14: 00007fa0b1225fa0 R15: 00007ffd2dee2618 [ 1493.372939][T21112] [ 1493.609426][ T5513] bond0 (unregistering): Released all slaves [ 1493.749430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1493.760035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1493.803308][T20678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.280625][T21134] device syzkaller0 entered promiscuous mode [ 1494.967403][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4327'. [ 1495.020284][T21164] loop2: detected capacity change from 0 to 1024 [ 1495.080990][T21164] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1495.140075][T21164] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1495.179348][T21164] EXT4-fs (loop2): invalid journal inode [ 1495.226513][T21164] EXT4-fs (loop2): can't get journal size [ 1495.282570][T21164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1495.369602][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1495.391679][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1495.426289][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1495.492089][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1495.693786][T20678] device veth0_vlan entered promiscuous mode [ 1495.793059][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1495.889606][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1495.947003][T20678] device veth1_vlan entered promiscuous mode [ 1496.106087][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1496.134960][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1496.153799][T19661] EXT4-fs (loop2): unmounting filesystem. [ 1496.166345][T20678] device veth0_macvtap entered promiscuous mode [ 1496.207091][T20678] device veth1_macvtap entered promiscuous mode [ 1496.255866][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.277828][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.292645][T21190] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1496.332672][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.339962][T21190] net_ratelimit: 7330 callbacks suppressed [ 1496.340007][T21190] netlink: zone id is out of range [ 1496.369948][T21190] netlink: zone id is out of range [ 1496.375151][T21190] netlink: zone id is out of range [ 1496.380399][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.409760][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.423717][T21190] netlink: zone id is out of range [ 1496.445232][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.449853][T21190] netlink: zone id is out of range [ 1496.466163][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.478283][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.490012][T21190] netlink: zone id is out of range [ 1496.495210][T21190] netlink: zone id is out of range [ 1496.506748][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.509885][T21190] netlink: zone id is out of range [ 1496.534696][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.561329][T20678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.578741][T21190] netlink: zone id is out of range [ 1496.610732][T21194] device syzkaller0 entered promiscuous mode [ 1496.619738][T21190] netlink: zone id is out of range [ 1496.627876][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1496.658916][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1496.674002][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1496.684118][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1496.697662][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.727811][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.748624][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.776529][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.787201][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.798446][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.808960][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.820567][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.832470][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.845902][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.858276][T20678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.770824][T21217] FAULT_INJECTION: forcing a failure. [ 1498.770824][T21217] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.842367][T21217] CPU: 1 PID: 21217 Comm: syz.4.4343 Not tainted syzkaller #0 [ 1498.850219][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1498.860423][T21217] Call Trace: [ 1498.863777][T21217] [ 1498.866785][T21217] dump_stack_lvl+0x188/0x24e [ 1498.872257][T21217] ? show_regs_print_info+0x12/0x12 [ 1498.877546][T21217] ? load_image+0x410/0x410 [ 1498.882391][T21217] ? __might_sleep+0xd0/0xd0 [ 1498.887174][T21217] ? __lock_acquire+0x7ea0/0x7ea0 [ 1498.892272][T21217] should_fail_ex+0x390/0x4c0 [ 1498.897026][T21217] should_failslab+0x5/0x20 [ 1498.901589][T21217] slab_pre_alloc_hook+0x59/0x300 [ 1498.906709][T21217] ? lockdep_softirqs_off+0x430/0x430 [ 1498.912161][T21217] ? pkcs1pad_verify+0x109/0x5e0 [ 1498.917238][T21217] __kmem_cache_alloc_node+0x4f/0x270 [ 1498.922665][T21217] ? lockdep_softirqs_off+0x430/0x430 [ 1498.928106][T21217] ? pkcs1pad_verify+0x109/0x5e0 [ 1498.933096][T21217] __kmalloc+0xa3/0x240 [ 1498.937304][T21217] pkcs1pad_verify+0x109/0x5e0 [ 1498.942122][T21217] ? __init_swait_queue_head+0xa4/0x140 [ 1498.947749][T21217] public_key_verify_signature+0x888/0xd20 [ 1498.953650][T21217] ? x509_cert_parse+0x53a/0x7a0 [ 1498.958641][T21217] ? x509_key_preparse+0x60/0x660 [ 1498.963735][T21217] ? public_key_free+0x80/0x80 [ 1498.968691][T21217] ? asymmetric_key_generate_id+0x52/0xd0 [ 1498.974642][T21217] ? asymmetric_key_id_same+0x63/0xe0 [ 1498.980087][T21217] x509_check_for_self_signed+0x317/0x420 [ 1498.985945][T21217] x509_cert_parse+0x59c/0x7a0 [ 1498.990785][T21217] x509_key_preparse+0x60/0x660 [ 1498.995921][T21217] ? down_read+0x1a8/0x2d0 [ 1499.000512][T21217] asymmetric_key_preparse+0xa5/0x140 [ 1499.005974][T21217] key_create_or_update+0x405/0xa50 [ 1499.011273][T21217] ? key_type_put+0x20/0x20 [ 1499.015890][T21217] ? __might_fault+0xc2/0x120 [ 1499.020823][T21217] ? __might_fault+0xa6/0x120 [ 1499.025556][T21217] __se_sys_add_key+0x34b/0x410 [ 1499.030481][T21217] ? __x64_sys_add_key+0xc0/0xc0 [ 1499.035485][T21217] ? lockdep_hardirqs_on+0x94/0x140 [ 1499.040735][T21217] ? __x64_sys_add_key+0x1c/0xc0 [ 1499.045739][T21217] do_syscall_64+0x4c/0xa0 [ 1499.050214][T21217] ? clear_bhb_loop+0x60/0xb0 [ 1499.055049][T21217] ? clear_bhb_loop+0x60/0xb0 [ 1499.059811][T21217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.065888][T21217] RIP: 0033:0x7f197e19fb19 [ 1499.070360][T21217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.090136][T21217] RSP: 002b:00007f197f113028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1499.098611][T21217] RAX: ffffffffffffffda RBX: 00007f197e425fa0 RCX: 00007f197e19fb19 [ 1499.106634][T21217] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1499.114743][T21217] RBP: 00007f197e237b70 R08: 000000001d5997dd R09: 0000000000000000 [ 1499.123400][T21217] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1499.131445][T21217] R13: 00007f197e426038 R14: 00007f197e425fa0 R15: 00007ffdeb4e84e8 [ 1499.139499][T21217] [ 1499.540289][T21221] loop2: detected capacity change from 0 to 1024 [ 1499.630657][T21221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1499.639275][T21221] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1499.857154][T19661] EXT4-fs (loop2): unmounting filesystem. [ 1503.321379][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1503.330599][ T6527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1503.344933][T21215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1503.354535][T21215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1503.362433][T21215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1503.548926][T20678] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.609872][T20678] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.618662][T20678] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.685118][T20678] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.730731][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4350'. [ 1503.754819][T21249] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.4349'. [ 1503.772543][T21249] net_ratelimit: 3660 callbacks suppressed [ 1503.772561][T21249] netlink: zone id is out of range [ 1503.811854][T21247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1503.818855][T21249] netlink: zone id is out of range [ 1503.824541][T21249] netlink: zone id is out of range [ 1503.829930][T21249] netlink: zone id is out of range [ 1503.835298][T21249] netlink: zone id is out of range [ 1503.841143][T21249] netlink: zone id is out of range [ 1503.848086][T21249] netlink: zone id is out of range [ 1503.853430][T21249] netlink: zone id is out of range [ 1503.858601][T21249] netlink: zone id is out of range [ 1503.864133][T21249] netlink: zone id is out of range [ 1504.112818][ T6596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.130653][ T6596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.206201][ T5349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1504.245172][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.264818][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.293901][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1504.628476][T21276] loop4: detected capacity change from 0 to 1024 [ 1504.725735][T21276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1505.159388][T21276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1505.596775][T21278] device syzkaller0 entered promiscuous mode [ 1505.949784][ T4365] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1506.114572][ T4365] usb 5-1: device descriptor read/64, error -71 [ 1506.424376][ T4365] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1507.190754][ T4365] usb 5-1: device descriptor read/64, error -71 [ 1507.320531][ T4365] usb usb5-port1: attempt power cycle [ 1507.478986][T19075] EXT4-fs (loop4): unmounting filesystem. [ 1510.186078][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1510.534813][T21338] device syzkaller0 entered promiscuous mode [ 1510.601718][T21338] tipc: Started in network mode [ 1510.646671][T21338] tipc: Node identity ce333086dff7, cluster identity 4711 [ 1510.700930][T21338] tipc: Enabled bearer , priority 0 [ 1510.763924][T21338] tipc: Resetting bearer [ 1510.801532][T21350] FAULT_INJECTION: forcing a failure. [ 1510.801532][T21350] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.815579][ T7281] tipc: Resetting bearer [ 1510.849815][T21350] CPU: 0 PID: 21350 Comm: syz.6.4380 Not tainted syzkaller #0 [ 1510.857368][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1510.867476][T21350] Call Trace: [ 1510.870804][T21350] [ 1510.873785][T21350] dump_stack_lvl+0x188/0x24e [ 1510.878530][T21350] ? show_regs_print_info+0x12/0x12 [ 1510.883817][T21350] ? load_image+0x410/0x410 [ 1510.888388][T21350] ? __might_sleep+0xd0/0xd0 [ 1510.893043][T21350] ? __lock_acquire+0x7ea0/0x7ea0 [ 1510.898147][T21350] should_fail_ex+0x390/0x4c0 [ 1510.902901][T21350] should_failslab+0x5/0x20 [ 1510.907462][T21350] slab_pre_alloc_hook+0x59/0x300 [ 1510.912553][T21350] ? ip6_route_net_init+0x208/0x7e0 [ 1510.917924][T21350] __kmem_cache_alloc_node+0x4f/0x270 [ 1510.923411][T21350] ? ip6_route_net_init+0x208/0x7e0 [ 1510.928688][T21350] __kmalloc_node_track_caller+0xa0/0x240 [ 1510.934487][T21350] kmemdup+0x27/0x60 [ 1510.938488][T21350] ip6_route_net_init+0x208/0x7e0 [ 1510.943590][T21350] ops_init+0x360/0x5e0 [ 1510.947820][T21350] setup_net+0x4f2/0xbd0 [ 1510.952132][T21350] ? copy_net_ns+0x5b0/0x5b0 [ 1510.956799][T21350] ? copy_net_ns+0x324/0x5b0 [ 1510.961461][T21350] ? down_read_killable+0x1cc/0x340 [ 1510.966769][T21350] copy_net_ns+0x33e/0x5b0 [ 1510.971265][T21350] create_new_namespaces+0x3ce/0x700 [ 1510.976654][T21350] unshare_nsproxy_namespaces+0x116/0x160 [ 1510.982442][T21350] ksys_unshare+0x4f6/0x8e0 [ 1510.987037][T21350] ? sighand_ctor+0x40/0x40 [ 1510.991612][T21350] ? lock_chain_count+0x20/0x20 [ 1510.996550][T21350] ? syscall_enter_from_user_mode+0x21/0x80 [ 1511.002528][T21350] __x64_sys_unshare+0x34/0x40 [ 1511.007368][T21350] do_syscall_64+0x4c/0xa0 [ 1511.011873][T21350] ? clear_bhb_loop+0x60/0xb0 [ 1511.016659][T21350] ? clear_bhb_loop+0x60/0xb0 [ 1511.021412][T21350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1511.027375][T21350] RIP: 0033:0x7f34f859fb19 [ 1511.031852][T21350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.051531][T21350] RSP: 002b:00007f34f67f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1511.060027][T21350] RAX: ffffffffffffffda RBX: 00007f34f8825fa0 RCX: 00007f34f859fb19 [ 1511.068074][T21350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1511.076115][T21350] RBP: 00007f34f8637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1511.084155][T21350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.092198][T21350] R13: 00007f34f8826038 R14: 00007f34f8825fa0 R15: 00007fffe97ba0d8 [ 1511.100326][T21350] [ 1511.203586][ T7281] tipc: Disabling bearer [ 1511.337325][T17095] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1511.371673][T17095] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1511.518052][T21366] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.4384'. [ 1511.578909][T21366] net_ratelimit: 3660 callbacks suppressed [ 1511.578928][T21366] netlink: zone id is out of range [ 1511.612196][T21366] netlink: zone id is out of range [ 1511.632487][T21366] netlink: zone id is out of range [ 1511.645644][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4385'. [ 1511.650037][T21366] netlink: zone id is out of range [ 1511.668492][T21363] fido_id[21363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1511.702621][T21366] netlink: zone id is out of range [ 1511.719883][T21366] netlink: zone id is out of range [ 1511.735717][T21368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1511.739166][T21366] netlink: zone id is out of range [ 1511.750686][T21366] netlink: zone id is out of range [ 1511.769974][T21366] netlink: zone id is out of range [ 1511.800587][T21366] netlink: zone id is out of range [ 1512.076017][T21377] device syzkaller0 entered promiscuous mode [ 1513.098727][T21399] loop3: detected capacity change from 0 to 512 [ 1513.681629][T21399] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.4392: iget: bad i_size value: 38620345925642 [ 1513.700795][T21399] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.4392: couldn't read orphan inode 15 (err -117) [ 1513.715557][T21399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1513.786199][ T26] audit: type=1800 audit(2000000361.930:436): pid=21399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4392" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1516.031210][T21405] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1517.319879][T16606] Bluetooth: hci4: command 0x0406 tx timeout [ 1518.224077][ T5513] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 65 with error 28 [ 1518.249744][ T5513] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1518.249744][ T5513] [ 1518.264253][ T5513] EXT4-fs (loop3): Total free blocks count 0 [ 1518.270373][ T5513] EXT4-fs (loop3): Free/Dirty block details [ 1518.276335][ T5513] EXT4-fs (loop3): free_blocks=0 [ 1518.299759][ T5513] EXT4-fs (loop3): dirty_blocks=65 [ 1518.304950][ T5513] EXT4-fs (loop3): Block reservation details [ 1518.324154][ T5513] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 1518.342843][T20605] EXT4-fs (loop3): unmounting filesystem. [ 1520.615326][T21457] rxe_eth0 speed is unknown, defaulting to 1000 [ 1523.237154][T21494] device syzkaller0 entered promiscuous mode [ 1523.267748][T21498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1523.288359][T21498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1523.312735][T21498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1524.534083][T21513] Cannot find add_set index 0 as target [ 1524.610092][T21447] net_ratelimit: 3660 callbacks suppressed [ 1524.610114][T21447] Set syz1 is full, maxelem 65536 reached [ 1524.668751][T21517] ip_tables: iptables: counters copy to user failed while replacing table [ 1526.895612][T21547] 9pnet_fd: p9_fd_create_unix (21547): problem connecting socket: ./proc: -111 [ 1528.122930][T21554] FAULT_INJECTION: forcing a failure. [ 1528.122930][T21554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1528.180142][T21554] CPU: 0 PID: 21554 Comm: syz.3.4442 Not tainted syzkaller #0 [ 1528.187700][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1528.197814][T21554] Call Trace: [ 1528.201147][T21554] [ 1528.204132][T21554] dump_stack_lvl+0x188/0x24e [ 1528.208888][T21554] ? show_regs_print_info+0x12/0x12 [ 1528.214191][T21554] ? load_image+0x410/0x410 [ 1528.218817][T21554] ? __lock_acquire+0x7ea0/0x7ea0 [ 1528.223919][T21554] should_fail_ex+0x390/0x4c0 [ 1528.228663][T21554] prepare_alloc_pages+0x1e1/0x5b0 [ 1528.233928][T21554] __alloc_pages+0x130/0x4f0 [ 1528.238608][T21554] ? zone_statistics+0x170/0x170 [ 1528.243651][T21554] folio_alloc+0x1c/0x60 [ 1528.247997][T21554] filemap_alloc_folio+0xdb/0x480 [ 1528.253122][T21554] ? __filemap_get_folio+0x10f/0xde0 [ 1528.258483][T21554] ? filemap_add_folio+0x3d0/0x3d0 [ 1528.263675][T21554] ? __lock_acquire+0x7ea0/0x7ea0 [ 1528.268776][T21554] ? xas_load+0x127/0x140 [ 1528.273206][T21554] __filemap_get_folio+0x6ba/0xde0 [ 1528.278397][T21554] ? __filemap_get_folio+0x10f/0xde0 [ 1528.283766][T21554] ? page_cache_prev_miss+0x380/0x380 [ 1528.289204][T21554] ? count_memcg_event_mm+0x358/0x3a0 [ 1528.294672][T21554] ? down_read+0x1a8/0x2d0 [ 1528.299152][T21554] filemap_fault+0x9d5/0x1590 [ 1528.303891][T21554] ? mapping_seek_hole_data+0x1370/0x1370 [ 1528.309662][T21554] ? filemap_map_pages+0x1ae/0x11e0 [ 1528.314917][T21554] ? filemap_read_folio+0x7a0/0x7a0 [ 1528.320167][T21554] ? count_memcg_event_mm+0x8a/0x3c0 [ 1528.325527][T21554] __do_fault+0x13b/0x4e0 [ 1528.329899][T21554] ? handle_mm_fault+0x2600/0x3d40 [ 1528.335145][T21554] handle_mm_fault+0x2610/0x3d40 [ 1528.340137][T21554] ? numa_migrate_prep+0x250/0x250 [ 1528.345327][T21554] __get_user_pages+0x40d/0xec0 [ 1528.350232][T21554] ? populate_vma_page_range+0x2b0/0x2b0 [ 1528.355952][T21554] populate_vma_page_range+0x214/0x2b0 [ 1528.361459][T21554] __mm_populate+0x25c/0x380 [ 1528.366089][T21554] ? check_vma_flags+0x4c0/0x4c0 [ 1528.371157][T21554] ? common_file_perm+0x171/0x1c0 [ 1528.376307][T21554] ? up_write+0x1b6/0x410 [ 1528.380700][T21554] vm_mmap_pgoff+0x212/0x2d0 [ 1528.385341][T21554] ? account_locked_vm+0xe0/0xe0 [ 1528.390322][T21554] ksys_mmap_pgoff+0x4bf/0x720 [ 1528.395133][T21554] ? lockdep_hardirqs_on+0x94/0x140 [ 1528.400394][T21554] do_syscall_64+0x4c/0xa0 [ 1528.404854][T21554] ? clear_bhb_loop+0x60/0xb0 [ 1528.409573][T21554] ? clear_bhb_loop+0x60/0xb0 [ 1528.414315][T21554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1528.420351][T21554] RIP: 0033:0x7f3001b9fb19 [ 1528.424798][T21554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.444529][T21554] RSP: 002b:00007f3002b23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1528.452976][T21554] RAX: ffffffffffffffda RBX: 00007f3001e25fa0 RCX: 00007f3001b9fb19 [ 1528.460994][T21554] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 1528.469027][T21554] RBP: 00007f3001c37b70 R08: 0000000000000006 R09: 0000000000000000 [ 1528.477118][T21554] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000 [ 1528.485124][T21554] R13: 00007f3001e26038 R14: 00007f3001e25fa0 R15: 00007ffe8a984018 [ 1528.493161][T21554] [ 1528.563939][T21566] loop3: detected capacity change from 0 to 128 [ 1528.742533][T21566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1528.849919][T21566] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.939577][T21566] EXT4-fs (loop3): unmounting filesystem. [ 1530.116782][T21590] 9pnet_fd: p9_fd_create_unix (21590): problem connecting socket: ./proc: -111 [ 1533.415758][T21620] syz.8.4460 (21620): drop_caches: 2 [ 1533.752188][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4463'. [ 1533.913316][T21627] FAULT_INJECTION: forcing a failure. [ 1533.913316][T21627] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.967300][T21627] CPU: 1 PID: 21627 Comm: syz.4.4465 Not tainted syzkaller #0 [ 1533.974861][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1533.984995][T21627] Call Trace: [ 1533.988362][T21627] [ 1533.991338][T21627] dump_stack_lvl+0x188/0x24e [ 1533.996089][T21627] ? show_regs_print_info+0x12/0x12 [ 1534.001361][T21627] ? load_image+0x410/0x410 [ 1534.005934][T21627] ? __might_sleep+0xd0/0xd0 [ 1534.010588][T21627] ? __lock_acquire+0x7ea0/0x7ea0 [ 1534.015689][T21627] should_fail_ex+0x390/0x4c0 [ 1534.020434][T21627] should_failslab+0x5/0x20 [ 1534.024994][T21627] slab_pre_alloc_hook+0x59/0x300 [ 1534.030087][T21627] ? mutex_unlock+0x10/0x10 [ 1534.034654][T21627] ? __list_lru_init+0xb0/0x600 [ 1534.039577][T21627] __kmem_cache_alloc_node+0x4f/0x270 [ 1534.045037][T21627] ? __list_lru_init+0xb0/0x600 [ 1534.049973][T21627] __kmalloc+0xa3/0x240 [ 1534.054196][T21627] __list_lru_init+0xb0/0x600 [ 1534.058965][T21627] alloc_super+0x795/0x930 [ 1534.063475][T21627] ? kill_litter_super+0xa0/0xa0 [ 1534.068486][T21627] sget_fc+0x2d4/0x750 [ 1534.072620][T21627] ? kill_litter_super+0xa0/0xa0 [ 1534.077662][T21627] ? proc_reconfigure+0x370/0x370 [ 1534.082748][T21627] get_tree_nodev+0x26/0x160 [ 1534.087410][T21627] vfs_get_tree+0x88/0x270 [ 1534.091898][T21627] do_new_mount+0x247/0xa50 [ 1534.096494][T21627] __se_sys_mount+0x2e3/0x3d0 [ 1534.101249][T21627] ? __x64_sys_mount+0xc0/0xc0 [ 1534.106158][T21627] ? lockdep_hardirqs_on+0x94/0x140 [ 1534.111420][T21627] ? __x64_sys_mount+0x1c/0xc0 [ 1534.116255][T21627] do_syscall_64+0x4c/0xa0 [ 1534.120735][T21627] ? clear_bhb_loop+0x60/0xb0 [ 1534.125474][T21627] ? clear_bhb_loop+0x60/0xb0 [ 1534.130228][T21627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1534.136192][T21627] RIP: 0033:0x7f197e19fb19 [ 1534.140685][T21627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.160361][T21627] RSP: 002b:00007f197f113028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1534.168830][T21627] RAX: ffffffffffffffda RBX: 00007f197e425fa0 RCX: 00007f197e19fb19 [ 1534.176877][T21627] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1534.184900][T21627] RBP: 00007f197e237b70 R08: 0000000000000000 R09: 0000000000000000 [ 1534.193101][T21627] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.201125][T21627] R13: 00007f197e426038 R14: 00007f197e425fa0 R15: 00007ffdeb4e84e8 [ 1534.209177][T21627] [ 1534.848935][T21644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1534.886355][T21644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1534.948890][T21644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1535.779520][T21667] syz.2.4477 (21667): drop_caches: 2 [ 1537.238833][T21691] 9pnet_fd: p9_fd_create_unix (21691): problem connecting socket: ./proc: -111 [ 1538.740328][T21706] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1540.784546][T21722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4495'. [ 1541.712472][T21747] rxe_eth0 speed is unknown, defaulting to 1000 [ 1542.315727][T21766] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1543.657739][T21785] syz.4.4511 (21785): drop_caches: 2 [ 1544.527563][T21796] netlink: 'syz.8.4518': attribute type 10 has an invalid length. [ 1544.540274][T21795] loop3: detected capacity change from 0 to 512 [ 1544.565760][T21796] device netdevsim0 left promiscuous mode [ 1544.630275][T21795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1544.683532][T21796] team0: Port device netdevsim0 added [ 1544.689791][T21795] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1544.706634][T21803] loop4: detected capacity change from 0 to 128 [ 1544.856324][T21803] FAT-fs (loop4): Unrecognized mount option "ÿÿ" or missing value [ 1545.090798][T21796] netlink: 'syz.8.4518': attribute type 10 has an invalid length. [ 1545.184293][T21796] team0: Port device netdevsim0 removed [ 1545.227302][T21796] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1545.678964][T20605] EXT4-fs (loop3): unmounting filesystem. [ 1545.965743][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.972140][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.466204][T21836] syz.4.4528 (21836): drop_caches: 2 [ 1546.839241][T21850] device syzkaller0 entered promiscuous mode [ 1551.724234][T21924] syz.3.4545 (21924): drop_caches: 2 [ 1551.893373][T21932] FAULT_INJECTION: forcing a failure. [ 1551.893373][T21932] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.968763][T21932] CPU: 0 PID: 21932 Comm: syz.8.4547 Not tainted syzkaller #0 [ 1551.976313][T21932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1551.986415][T21932] Call Trace: [ 1551.989732][T21932] [ 1551.992701][T21932] dump_stack_lvl+0x188/0x24e [ 1551.997439][T21932] ? show_regs_print_info+0x12/0x12 [ 1552.002697][T21932] ? load_image+0x410/0x410 [ 1552.007250][T21932] ? __might_sleep+0xd0/0xd0 [ 1552.011944][T21932] ? __lock_acquire+0x7ea0/0x7ea0 [ 1552.017053][T21932] should_fail_ex+0x390/0x4c0 [ 1552.021781][T21932] should_failslab+0x5/0x20 [ 1552.026336][T21932] slab_pre_alloc_hook+0x59/0x300 [ 1552.031415][T21932] kmem_cache_alloc+0x56/0x2f0 [ 1552.036229][T21932] ? create_new_namespaces+0x34/0x700 [ 1552.041659][T21932] create_new_namespaces+0x34/0x700 [ 1552.046936][T21932] ? apparmor_capable+0x12c/0x190 [ 1552.052094][T21932] ? bpf_lsm_capable+0x5/0x10 [ 1552.056841][T21932] ? security_capable+0x85/0xb0 [ 1552.061781][T21932] unshare_nsproxy_namespaces+0x116/0x160 [ 1552.067557][T21932] ksys_unshare+0x4f6/0x8e0 [ 1552.072116][T21932] ? sighand_ctor+0x40/0x40 [ 1552.076665][T21932] ? lock_chain_count+0x20/0x20 [ 1552.081580][T21932] ? syscall_enter_from_user_mode+0x21/0x80 [ 1552.087527][T21932] __x64_sys_unshare+0x34/0x40 [ 1552.092359][T21932] do_syscall_64+0x4c/0xa0 [ 1552.096836][T21932] ? clear_bhb_loop+0x60/0xb0 [ 1552.101655][T21932] ? clear_bhb_loop+0x60/0xb0 [ 1552.106386][T21932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1552.112328][T21932] RIP: 0033:0x7f801839fb19 [ 1552.116785][T21932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.136445][T21932] RSP: 002b:00007f8019200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1552.144950][T21932] RAX: ffffffffffffffda RBX: 00007f8018625fa0 RCX: 00007f801839fb19 [ 1552.153046][T21932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1552.161086][T21932] RBP: 00007f8018437b70 R08: 0000000000000000 R09: 0000000000000000 [ 1552.169185][T21932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.177203][T21932] R13: 00007f8018626038 R14: 00007f8018625fa0 R15: 00007ffda1f84628 [ 1552.185239][T21932] [ 1552.639183][T21942] loop3: detected capacity change from 0 to 128 [ 1553.388718][T21965] device syzkaller0 entered promiscuous mode [ 1553.465061][T21972] loop4: detected capacity change from 0 to 512 [ 1553.477680][T21972] EXT4-fs: inline encryption not supported [ 1553.511253][T21972] EXT4-fs: inline encryption not supported [ 1553.612015][T21972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1553.679363][T21972] EXT4-fs (loop4): 1 truncate cleaned up [ 1553.712365][T21972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1553.764494][T21977] syz.8.4561 (21977): drop_caches: 2 [ 1553.786834][T21972] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6005: inode #12: comm syz.4.4560: bad extra_isize 62 (inode size 256) [ 1553.980463][T19075] EXT4-fs (loop4): unmounting filesystem. [ 1554.168658][ T26] audit: type=1326 audit(2000000402.310:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.4.4564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f197e19fb19 code=0x0 [ 1557.847845][T21980] rxe_eth0 speed is unknown, defaulting to 1000 [ 1559.212242][T22050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1559.550286][T16606] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1561.777959][T22078] syz.3.4590 (22078): drop_caches: 2 [ 1562.148564][T22089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1562.734898][T22099] loop3: detected capacity change from 0 to 1024 [ 1562.791233][T22099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1562.853436][T22099] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1562.892229][T22099] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.4599: Bad quota inum: 10, type: 2 [ 1562.986872][T22099] EXT4-fs (loop3): Remounting filesystem read-only [ 1563.034076][T22099] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=2, err=-117, ino=10). Please run e2fsck to fix. [ 1563.121095][T22099] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1563.128760][T22099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1564.014107][T20605] EXT4-fs (loop3): unmounting filesystem. [ 1567.112071][T22171] FAULT_INJECTION: forcing a failure. [ 1567.112071][T22171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.146584][T22171] CPU: 1 PID: 22171 Comm: syz.4.4623 Not tainted syzkaller #0 [ 1567.154164][T22171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1567.164362][T22171] Call Trace: [ 1567.167683][T22171] [ 1567.170661][T22171] dump_stack_lvl+0x188/0x24e [ 1567.175414][T22171] ? show_regs_print_info+0x12/0x12 [ 1567.180673][T22171] ? load_image+0x410/0x410 [ 1567.185259][T22171] ? __lock_acquire+0x7ea0/0x7ea0 [ 1567.190430][T22171] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1567.196758][T22171] ? ktime_get_real_ts64+0x440/0x440 [ 1567.202112][T22171] should_fail_ex+0x390/0x4c0 [ 1567.206841][T22171] _copy_to_user+0x2c/0x130 [ 1567.211428][T22171] put_timespec64+0xc5/0x120 [ 1567.216152][T22171] ? get_timespec64+0x1b0/0x1b0 [ 1567.221065][T22171] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1567.226333][T22171] poll_select_finish+0x45e/0x640 [ 1567.231448][T22171] ? pollwake+0x210/0x210 [ 1567.235839][T22171] ? sigprocmask+0x190/0x190 [ 1567.240489][T22171] __se_sys_pselect6+0x30b/0x3c0 [ 1567.245471][T22171] ? __x64_sys_pselect6+0xf0/0xf0 [ 1567.250539][T22171] ? __x64_sys_pselect6+0x1d/0xf0 [ 1567.255604][T22171] do_syscall_64+0x4c/0xa0 [ 1567.260065][T22171] ? clear_bhb_loop+0x60/0xb0 [ 1567.264775][T22171] ? clear_bhb_loop+0x60/0xb0 [ 1567.269492][T22171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1567.275419][T22171] RIP: 0033:0x7f197e19fb19 [ 1567.279896][T22171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.299566][T22171] RSP: 002b:00007f197f113028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1567.308027][T22171] RAX: ffffffffffffffda RBX: 00007f197e425fa0 RCX: 00007f197e19fb19 [ 1567.316062][T22171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1567.324077][T22171] RBP: 00007f197e237b70 R08: 0000200000000240 R09: 00002000000003c0 [ 1567.332086][T22171] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1567.340092][T22171] R13: 00007f197e426038 R14: 00007f197e425fa0 R15: 00007ffdeb4e84e8 [ 1567.348120][T22171] [ 1567.950802][T22191] syz.4.4626 (22191): drop_caches: 2 [ 1568.408189][T22201] loop2: detected capacity change from 0 to 512 [ 1568.648528][T22197] ip_tables: iptables: counters copy to user failed while replacing table [ 1569.328880][T22208] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1569.364272][T22216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1570.795455][T22193] loop2: detected capacity change from 0 to 512 [ 1571.693452][T22193] EXT4-fs: Ignoring removed orlov option [ 1571.757922][T22193] EXT4-fs (loop2): invalid journal inode [ 1572.024761][T22260] syz.8.4643 (22260): drop_caches: 2 [ 1574.238872][T22286] FAULT_INJECTION: forcing a failure. [ 1574.238872][T22286] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.290970][T22286] CPU: 0 PID: 22286 Comm: syz.8.4654 Not tainted syzkaller #0 [ 1574.298566][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1574.308677][T22286] Call Trace: [ 1574.312042][T22286] [ 1574.315010][T22286] dump_stack_lvl+0x188/0x24e [ 1574.319747][T22286] ? show_regs_print_info+0x12/0x12 [ 1574.325004][T22286] ? load_image+0x410/0x410 [ 1574.329564][T22286] ? __might_sleep+0xd0/0xd0 [ 1574.334208][T22286] ? __lock_acquire+0x7ea0/0x7ea0 [ 1574.339316][T22286] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1574.345452][T22286] should_fail_ex+0x390/0x4c0 [ 1574.350196][T22286] should_failslab+0x5/0x20 [ 1574.354772][T22286] slab_pre_alloc_hook+0x59/0x300 [ 1574.359858][T22286] ? sk_prot_alloc+0xe7/0x210 [ 1574.364608][T22286] __kmem_cache_alloc_node+0x4f/0x270 [ 1574.370064][T22286] ? sk_prot_alloc+0xe7/0x210 [ 1574.374796][T22286] __kmalloc+0xa3/0x240 [ 1574.379009][T22286] sk_prot_alloc+0xe7/0x210 [ 1574.383569][T22286] ? sk_alloc+0x20/0x330 [ 1574.387871][T22286] sk_alloc+0x36/0x330 [ 1574.391996][T22286] __netlink_create+0x6b/0x2d0 [ 1574.396850][T22286] ? __lock_acquire+0x7ea0/0x7ea0 [ 1574.402041][T22286] netlink_create+0x3a7/0x510 [ 1574.406814][T22286] ? rtnetlink_rcv+0x20/0x20 [ 1574.411495][T22286] __sock_create+0x49a/0x940 [ 1574.416151][T22286] __sys_socket+0xc4/0x190 [ 1574.420669][T22286] __x64_sys_socket+0x76/0x80 [ 1574.425405][T22286] do_syscall_64+0x4c/0xa0 [ 1574.430066][T22286] ? clear_bhb_loop+0x60/0xb0 [ 1574.434892][T22286] ? clear_bhb_loop+0x60/0xb0 [ 1574.439643][T22286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.445594][T22286] RIP: 0033:0x7f801839fb19 [ 1574.450056][T22286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.469716][T22286] RSP: 002b:00007f8019200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1574.478191][T22286] RAX: ffffffffffffffda RBX: 00007f8018625fa0 RCX: 00007f801839fb19 [ 1574.486222][T22286] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 1574.494250][T22286] RBP: 00007f8018437b70 R08: 0000000000000000 R09: 0000000000000000 [ 1574.502368][T22286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.510391][T22286] R13: 00007f8018626038 R14: 00007f8018625fa0 R15: 00007ffda1f84628 [ 1574.518470][T22286] [ 1575.842943][T22313] loop8: detected capacity change from 0 to 128 [ 1575.917054][T22305] syz.2.4658 (22305): drop_caches: 2 [ 1576.032840][T22313] FAT-fs (loop8): Unrecognized mount option "ÿÿ" or missing value [ 1577.144165][T22339] loop4: detected capacity change from 0 to 512 [ 1578.844714][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 1578.975261][T22361] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1579.297198][T22363] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1580.736227][T22370] syz.3.4671 (22370): drop_caches: 2 [ 1581.122987][T22384] loop3: detected capacity change from 0 to 2048 [ 1581.241582][T22384] loop3: p1 p2 p3 p4 [ 1581.241582][T22384] p1: [ 1581.272974][T22384] loop3: p1 size 67110656 extends beyond EOD, truncated [ 1581.294542][T22377] device-mapper: ioctl: unable to find target [ 1581.753897][T22384] loop3: p3 size 134217728 extends beyond EOD, truncated [ 1581.991317][T22384] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 1582.070538][T22384] loop3: p5 size 67110656 extends beyond EOD, truncated [ 1582.106432][T22384] loop3: p6 size 134217728 extends beyond EOD, truncated [ 1582.673283][ T26] audit: type=1800 audit(2000000430.820:438): pid=22408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4678" name="file2" dev="sda1" ino=2090 res=0 errno=0 [ 1582.733778][T22409] netlink: 143932 bytes leftover after parsing attributes in process `syz.8.4679'. [ 1582.846247][T22409] netlink: zone id is out of range [ 1582.879809][T22409] netlink: zone id is out of range [ 1582.885067][T22409] netlink: zone id is out of range [ 1582.960264][T22409] netlink: zone id is out of range [ 1582.994456][T22409] netlink: zone id is out of range [ 1583.066083][T22409] netlink: zone id is out of range [ 1583.090451][T22409] netlink: zone id is out of range [ 1583.129880][T22409] netlink: zone id is out of range [ 1583.135076][T22409] netlink: zone id is out of range [ 1583.240590][T22409] netlink: zone id is out of range [ 1585.809374][T22432] loop8: detected capacity change from 0 to 128 [ 1585.907211][T22432] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1586.032770][T22432] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.123435][T22433] syz.3.4685 (22433): drop_caches: 2 [ 1586.605830][T22449] loop4: detected capacity change from 0 to 128 [ 1586.819596][T22449] FAT-fs (loop4): Unrecognized mount option "ÿÿ" or missing value [ 1587.076769][T18389] EXT4-fs (loop8): unmounting filesystem. [ 1587.266329][T22465] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.4693'. [ 1587.492692][T22468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4694'. [ 1587.615772][T22472] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1589.897671][T16606] Bluetooth: hci3: command 0x0406 tx timeout [ 1593.086160][T22501] syz.8.4701 (22501): drop_caches: 2 [ 1593.856825][ T26] audit: type=1800 audit(2000000442.000:439): pid=22506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4705" name="file2" dev="sda1" ino=2090 res=0 errno=0 [ 1596.071541][T22525] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1597.740513][T22539] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1600.441742][ T5349] bond0: (slave bond_slave_0): interface is now down [ 1600.473986][ T5349] bond0: (slave bond_slave_1): interface is now down [ 1600.592864][ T5349] bond0: now running without any active interface! [ 1602.394610][T22598] device syzkaller0 entered promiscuous mode [ 1602.474225][T22605] net_ratelimit: 7330 callbacks suppressed [ 1602.474246][T22605] TC_ACT_REPEAT abuse ? [ 1607.397041][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.403474][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.677631][T22681] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1613.155786][T22736] ip_tables: iptables: counters copy to user failed while replacing table [ 1613.483458][T22749] ip_tables: iptables: counters copy to user failed while replacing table [ 1613.640029][T22757] ip_tables: iptables: counters copy to user failed while replacing table [ 1615.431435][T22778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4777'. [ 1615.618091][T22780] ip_tables: iptables: counters copy to user failed while replacing table [ 1615.641102][T22784] device syzkaller0 entered promiscuous mode [ 1615.888581][T22795] ip_tables: iptables: counters copy to user failed while replacing table [ 1616.266472][T22805] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1616.308963][T22802] ip_tables: iptables: counters copy to user failed while replacing table [ 1616.850044][T22812] ip_tables: iptables: counters copy to user failed while replacing table [ 1617.920413][T22825] FAULT_INJECTION: forcing a failure. [ 1617.920413][T22825] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.961629][T22828] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4794'. [ 1617.980340][T22825] CPU: 1 PID: 22825 Comm: syz.2.4793 Not tainted syzkaller #0 [ 1617.987897][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1617.997998][T22825] Call Trace: [ 1618.001309][T22825] [ 1618.004284][T22825] dump_stack_lvl+0x188/0x24e [ 1618.009015][T22825] ? show_regs_print_info+0x12/0x12 [ 1618.014254][T22825] ? load_image+0x410/0x410 [ 1618.018806][T22825] ? __might_sleep+0xd0/0xd0 [ 1618.023454][T22825] ? __lock_acquire+0x7ea0/0x7ea0 [ 1618.028522][T22825] should_fail_ex+0x390/0x4c0 [ 1618.033239][T22825] should_failslab+0x5/0x20 [ 1618.037789][T22825] slab_pre_alloc_hook+0x59/0x300 [ 1618.042859][T22825] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1618.048962][T22825] ? p9_client_create+0xcb/0x1040 [ 1618.054125][T22825] __kmem_cache_alloc_node+0x4f/0x270 [ 1618.059540][T22825] ? p9_client_create+0xcb/0x1040 [ 1618.064597][T22825] kmalloc_trace+0x26/0xe0 [ 1618.069061][T22825] p9_client_create+0xcb/0x1040 [ 1618.073949][T22825] ? do_trace_9p_fid_put+0x20/0x20 [ 1618.079092][T22825] ? lockdep_softirqs_off+0x430/0x430 [ 1618.084504][T22825] ? lockdep_softirqs_off+0x430/0x430 [ 1618.089915][T22825] ? free_zapped_rcu+0x1f0/0x1f0 [ 1618.094997][T22825] ? v9fs_session_init+0xf5/0x1780 [ 1618.100170][T22825] ? __raw_spin_lock_init+0x41/0x100 [ 1618.105489][T22825] v9fs_session_init+0x1a9/0x1780 [ 1618.110552][T22825] ? v9fs_show_options+0x610/0x610 [ 1618.115709][T22825] v9fs_mount+0xcc/0xb60 [ 1618.119976][T22825] ? rcu_is_watching+0x11/0xa0 [ 1618.124796][T22825] ? end_current_label_crit_section+0x170/0x170 [ 1618.131164][T22825] ? trace_xrep_findroot_block+0x280/0x280 [ 1618.137009][T22825] ? vfs_parse_fs_param+0x420/0x420 [ 1618.142260][T22825] legacy_get_tree+0xe6/0x180 [ 1618.146975][T22825] ? trace_xrep_findroot_block+0x280/0x280 [ 1618.152817][T22825] vfs_get_tree+0x88/0x270 [ 1618.157271][T22825] do_new_mount+0x247/0xa50 [ 1618.161813][T22825] __se_sys_mount+0x2e3/0x3d0 [ 1618.166546][T22825] ? __x64_sys_mount+0xc0/0xc0 [ 1618.171347][T22825] ? lockdep_hardirqs_on+0x94/0x140 [ 1618.176576][T22825] ? __x64_sys_mount+0x1c/0xc0 [ 1618.181367][T22825] do_syscall_64+0x4c/0xa0 [ 1618.185818][T22825] ? clear_bhb_loop+0x60/0xb0 [ 1618.190539][T22825] ? clear_bhb_loop+0x60/0xb0 [ 1618.195250][T22825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1618.201177][T22825] RIP: 0033:0x7fa0b0f9fb19 [ 1618.205624][T22825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.225262][T22825] RSP: 002b:00007fa0b1e2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1618.233712][T22825] RAX: ffffffffffffffda RBX: 00007fa0b1225fa0 RCX: 00007fa0b0f9fb19 [ 1618.241713][T22825] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0 [ 1618.249713][T22825] RBP: 00007fa0b1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1618.257728][T22825] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.265727][T22825] R13: 00007fa0b1226038 R14: 00007fa0b1225fa0 R15: 00007ffd2dee2618 [ 1618.273744][T22825] [ 1618.466094][T22834] device syzkaller0 entered promiscuous mode [ 1618.636815][T22842] ip_tables: iptables: counters copy to user failed while replacing table [ 1619.379226][T22851] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1619.454105][T22852] ip_tables: iptables: counters copy to user failed while replacing table [ 1619.464430][T22853] ip_tables: iptables: counters copy to user failed while replacing table [ 1620.762390][T22879] FAULT_INJECTION: forcing a failure. [ 1620.762390][T22879] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.775229][T22879] CPU: 1 PID: 22879 Comm: syz.2.4808 Not tainted syzkaller #0 [ 1620.782745][T22879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1620.792859][T22879] Call Trace: [ 1620.796189][T22879] [ 1620.799160][T22879] dump_stack_lvl+0x188/0x24e [ 1620.803932][T22879] ? show_regs_print_info+0x12/0x12 [ 1620.809207][T22879] ? load_image+0x410/0x410 [ 1620.813780][T22879] ? __might_sleep+0xd0/0xd0 [ 1620.818438][T22879] ? __lock_acquire+0x7ea0/0x7ea0 [ 1620.823552][T22879] should_fail_ex+0x390/0x4c0 [ 1620.828322][T22879] should_failslab+0x5/0x20 [ 1620.832876][T22879] slab_pre_alloc_hook+0x59/0x300 [ 1620.837944][T22879] ? v9fs_session_init+0xf5/0x1780 [ 1620.843138][T22879] __kmem_cache_alloc_node+0x4f/0x270 [ 1620.848554][T22879] ? v9fs_session_init+0xf5/0x1780 [ 1620.853741][T22879] __kmalloc_node_track_caller+0xa0/0x240 [ 1620.859516][T22879] kstrdup+0x37/0x70 [ 1620.863464][T22879] v9fs_session_init+0xf5/0x1780 [ 1620.868456][T22879] ? v9fs_show_options+0x610/0x610 [ 1620.873628][T22879] v9fs_mount+0xcc/0xb60 [ 1620.877903][T22879] ? rcu_is_watching+0x11/0xa0 [ 1620.882727][T22879] ? end_current_label_crit_section+0x170/0x170 [ 1620.889025][T22879] ? trace_xrep_findroot_block+0x280/0x280 [ 1620.894866][T22879] ? vfs_parse_fs_param+0x420/0x420 [ 1620.900107][T22879] legacy_get_tree+0xe6/0x180 [ 1620.904827][T22879] ? trace_xrep_findroot_block+0x280/0x280 [ 1620.910667][T22879] vfs_get_tree+0x88/0x270 [ 1620.915119][T22879] do_new_mount+0x247/0xa50 [ 1620.919665][T22879] __se_sys_mount+0x2e3/0x3d0 [ 1620.924461][T22879] ? simple_xattr_list_add+0xf0/0xf0 [ 1620.929778][T22879] ? __x64_sys_mount+0xc0/0xc0 [ 1620.934581][T22879] ? lockdep_hardirqs_on+0x94/0x140 [ 1620.939901][T22879] ? __x64_sys_mount+0x1c/0xc0 [ 1620.944703][T22879] do_syscall_64+0x4c/0xa0 [ 1620.949154][T22879] ? clear_bhb_loop+0x60/0xb0 [ 1620.953867][T22879] ? clear_bhb_loop+0x60/0xb0 [ 1620.958584][T22879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1620.964532][T22879] RIP: 0033:0x7fa0b0f9fb19 [ 1620.968978][T22879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.988717][T22879] RSP: 002b:00007fa0b1e2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1620.997199][T22879] RAX: ffffffffffffffda RBX: 00007fa0b1225fa0 RCX: 00007fa0b0f9fb19 [ 1621.005489][T22879] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0 [ 1621.013513][T22879] RBP: 00007fa0b1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1621.021537][T22879] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.029553][T22879] R13: 00007fa0b1226038 R14: 00007fa0b1225fa0 R15: 00007ffd2dee2618 [ 1621.037586][T22879] [ 1621.388901][T22897] device syzkaller0 entered promiscuous mode [ 1621.406181][T22899] ip_tables: iptables: counters copy to user failed while replacing table [ 1621.773690][T22911] ip_tables: iptables: counters copy to user failed while replacing table [ 1622.038868][T22919] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1623.980233][T22927] ip_tables: iptables: counters copy to user failed while replacing table [ 1624.146079][T22934] ip_tables: iptables: counters copy to user failed while replacing table [ 1624.302652][T22938] ip_tables: iptables: counters copy to user failed while replacing table [ 1624.593978][T22948] device syzkaller0 entered promiscuous mode [ 1624.664997][T22951] ip_tables: iptables: counters copy to user failed while replacing table [ 1626.068174][T22973] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1627.612825][T22980] ip_tables: iptables: counters copy to user failed while replacing table [ 1628.876325][T23005] ip_tables: iptables: counters copy to user failed while replacing table [ 1629.222163][T23013] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1630.042002][T23019] device syzkaller0 entered promiscuous mode [ 1631.155314][T23030] ip_tables: iptables: counters copy to user failed while replacing table [ 1631.334312][T23039] ip_tables: iptables: counters copy to user failed while replacing table [ 1631.434836][T23048] ip_tables: iptables: counters copy to user failed while replacing table [ 1631.719218][T23053] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1633.401103][T23070] device syzkaller0 entered promiscuous mode [ 1634.219121][T23100] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1634.803956][T23101] ip_tables: iptables: counters copy to user failed while replacing table [ 1636.953465][T23127] device syzkaller0 entered promiscuous mode [ 1637.274355][T23142] ip_tables: iptables: counters copy to user failed while replacing table [ 1637.573921][T23152] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1638.971363][T23157] ip_tables: iptables: counters copy to user failed while replacing table [ 1640.375363][T23194] ip_tables: iptables: counters copy to user failed while replacing table [ 1640.474632][T23202] ip_tables: iptables: counters copy to user failed while replacing table [ 1641.591083][T23213] ip_tables: iptables: counters copy to user failed while replacing table [ 1641.692305][T23216] ip_tables: iptables: counters copy to user failed while replacing table [ 1642.375922][T23244] syz.3.4910 (23244): drop_caches: 2 [ 1643.840078][T23258] ip_tables: iptables: counters copy to user failed while replacing table [ 1645.311980][T23272] ip_tables: iptables: counters copy to user failed while replacing table [ 1647.272596][T23311] loop8: detected capacity change from 0 to 128 [ 1647.351297][T23311] FAT-fs (loop8): Unrecognized mount option "ÿÿ" or missing value [ 1647.467846][T23313] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1650.724111][T23359] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1651.403573][T23367] loop4: detected capacity change from 0 to 128 [ 1651.476714][T23367] FAT-fs (loop4): Unrecognized mount option "ÿÿ" or missing value [ 1653.000085][T23403] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1654.300742][ T5289] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.395096][T23435] ip_tables: iptables: counters copy to user failed while replacing table [ 1654.513390][ T5289] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.707589][ T5289] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.887493][ T5289] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.158917][T23476] loop8: detected capacity change from 0 to 128 [ 1656.318898][T23476] FAT-fs (loop8): Unrecognized mount option "ÿÿ" or missing value [ 1657.330921][T23490] ip_tables: iptables: counters copy to user failed while replacing table [ 1658.236797][T23505] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1658.505861][T23529] ip_tables: iptables: counters copy to user failed while replacing table [ 1660.421495][T23554] rxe_eth0 speed is unknown, defaulting to 1000 [ 1661.260212][ T5289] device hsr_slave_0 left promiscuous mode [ 1661.287829][ T5289] device hsr_slave_1 left promiscuous mode [ 1661.320600][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.353227][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.371906][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.379442][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.464905][ T5289] device bridge_slave_1 left promiscuous mode [ 1661.499865][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.791305][T23578] ------------[ cut here ]------------ [ 1661.796937][T23578] kernel BUG at include/linux/scatterlist.h:163! [ 1661.813232][ T5289] device veth1_macvtap left promiscuous mode [ 1661.819574][ T5289] device veth0_macvtap left promiscuous mode [ 1661.832474][T23578] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1661.838630][T23578] CPU: 1 PID: 23578 Comm: syz.8.5011 Not tainted syzkaller #0 [ 1661.846133][T23578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1661.856491][T23578] RIP: 0010:sg_init_one+0x14a/0x160 [ 1661.861770][T23578] Code: 80 c1 03 38 c1 7c cf e8 24 7f c5 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 0d 7f c5 fd eb c8 e8 d6 1a 74 fd <0f> 0b e8 cf 1a 74 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 1661.881681][T23578] RSP: 0018:ffffc9000d94f948 EFLAGS: 00010287 [ 1661.887796][T23578] RAX: ffffffff840e4dca RBX: dffffc0000000000 RCX: 0000000000080000 [ 1661.895814][T23578] RDX: ffffc900106a3000 RSI: 0000000000001239 RDI: 000000000000123a [ 1661.903832][T23578] RBP: 0000000000000000 R08: ffffc9000d94fa9f R09: ffffc9000d94fa88 [ 1661.911848][T23578] R10: dffffc0000000000 R11: fffff52001b29f54 R12: 1ffff92001b29f50 [ 1661.919860][T23578] R13: dffffc0000000000 R14: ffffc9000d94fa80 R15: 0000000000000010 [ 1661.927865][T23578] FS: 00007f80192006c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1661.936942][T23578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1661.943571][T23578] CR2: 00007f4f990fde9c CR3: 000000006505a000 CR4: 00000000003506e0 [ 1661.951590][T23578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1661.959600][T23578] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1661.967696][T23578] Call Trace: [ 1661.971051][T23578] [ 1661.974047][T23578] software_key_eds_op+0x4f7/0xba0 [ 1661.979216][T23578] ? __se_sys_keyctl+0x647/0x870 [ 1661.984201][T23578] ? software_key_query+0x820/0x820 [ 1661.989463][T23578] ? keyctl_pkey_e_d_s+0x1a7/0x300 [ 1661.994616][T23578] ? rcu_is_watching+0x11/0xa0 [ 1661.999517][T23578] ? keyctl_pkey_e_d_s+0x1a7/0x300 [ 1662.004667][T23578] ? __kmalloc+0xe4/0x240 [ 1662.009050][T23578] ? asymmetric_key_eds_op+0xe9/0x130 [ 1662.014480][T23578] keyctl_pkey_e_d_s+0x208/0x300 [ 1662.019463][T23578] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 1662.025138][T23578] ? futex_wake_mark+0x150/0x150 [ 1662.030138][T23578] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1662.036178][T23578] __se_sys_keyctl+0x647/0x870 [ 1662.040990][T23578] ? __x64_sys_keyctl+0xc0/0xc0 [ 1662.045915][T23578] ? do_futex+0x2e2/0x320 [ 1662.050291][T23578] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1662.056224][T23578] ? slab_free_freelist_hook+0x133/0x1b0 [ 1662.061917][T23578] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1662.067953][T23578] ? lock_chain_count+0x20/0x20 [ 1662.072857][T23578] ? lockdep_hardirqs_on+0x94/0x140 [ 1662.078094][T23578] ? __x64_sys_keyctl+0x1c/0xc0 [ 1662.082997][T23578] do_syscall_64+0x4c/0xa0 [ 1662.087464][T23578] ? clear_bhb_loop+0x60/0xb0 [ 1662.092192][T23578] ? clear_bhb_loop+0x60/0xb0 [ 1662.096918][T23578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1662.102946][T23578] RIP: 0033:0x7f801839fb19 [ 1662.107411][T23578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.127069][T23578] RSP: 002b:00007f8019200028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1662.135564][T23578] RAX: ffffffffffffffda RBX: 00007f8018625fa0 RCX: 00007f801839fb19 [ 1662.143582][T23578] RDX: 0000200000019cc0 RSI: 0000200000019c80 RDI: 000000000000001b [ 1662.151591][T23578] RBP: 00007f8018437b70 R08: 0000000000000000 R09: 0000000000000000 [ 1662.159605][T23578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1662.167725][T23578] R13: 00007f8018626038 R14: 00007f8018625fa0 R15: 00007ffda1f84628 [ 1662.175753][T23578] [ 1662.178819][T23578] Modules linked in: [ 1662.439083][ T5289] device veth1_vlan left promiscuous mode [ 1662.445212][ T5289] device veth0_vlan left promiscuous mode [ 1662.481931][T23578] ---[ end trace 0000000000000000 ]--- [ 1662.487555][T23578] RIP: 0010:sg_init_one+0x14a/0x160 [ 1662.493433][T23578] Code: 80 c1 03 38 c1 7c cf e8 24 7f c5 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 0d 7f c5 fd eb c8 e8 d6 1a 74 fd <0f> 0b e8 cf 1a 74 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 1662.517078][T23578] RSP: 0018:ffffc9000d94f948 EFLAGS: 00010287 [ 1662.546215][T23578] RAX: ffffffff840e4dca RBX: dffffc0000000000 RCX: 0000000000080000 [ 1662.572797][T23578] RDX: ffffc900106a3000 RSI: 0000000000001239 RDI: 000000000000123a [ 1662.596874][T23578] RBP: 0000000000000000 R08: ffffc9000d94fa9f R09: ffffc9000d94fa88 [ 1662.632461][T23578] R10: dffffc0000000000 R11: fffff52001b29f54 R12: 1ffff92001b29f50 [ 1662.649502][T23578] R13: dffffc0000000000 R14: ffffc9000d94fa80 R15: 0000000000000010 [ 1662.688601][T23578] FS: 00007f80192006c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1662.699098][T23578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1662.721085][T23578] CR2: 00007f34f87f72f8 CR3: 000000006505a000 CR4: 00000000003506f0 [ 1662.747396][T23578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1662.769755][T23578] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1662.800752][T23578] Kernel panic - not syncing: Fatal exception [ 1662.807525][T23578] Kernel Offset: disabled [ 1662.811885][T23578] Rebooting in 86400 seconds..