last executing test programs: 2m46.139655214s ago: executing program 3 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000780), &(0x7f00000007c0)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) 2m45.837439114s ago: executing program 3 (id=205): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2m45.180884681s ago: executing program 3 (id=211): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d8978d244929c7e584d3e858fc84e5fd63668897b1e5c17efd3c8452b5716c833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b"], 0x1, 0x248, &(0x7f0000000140)="$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") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940), 0x802, 0x0) pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000780)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x1) 2m44.536194236s ago: executing program 3 (id=218): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x1a000}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m44.344435175s ago: executing program 3 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m44.083663652s ago: executing program 3 (id=221): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000019840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000019880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000198c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000019900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019940), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000019980)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2m28.81750181s ago: executing program 32 (id=221): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000019840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000019880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000198c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000019900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019940), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000019980)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2m18.596691026s ago: executing program 1 (id=416): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/157, 0x9d) mmap(&(0x7f00006bc000/0x3000)=nil, 0x3000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xeda07000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000440)={{&(0x7f0000f13000/0x4000)=nil, 0x4000}, 0x1}) 2m17.440331173s ago: executing program 1 (id=419): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) 2m17.245637483s ago: executing program 1 (id=423): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file1\x00', 0x841e, &(0x7f0000000980)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000e40)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x602ea1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m16.067559992s ago: executing program 1 (id=431): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2m14.647428237s ago: executing program 1 (id=442): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m13.180437305s ago: executing program 1 (id=449): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000380)=[{}], 0x1, 0x1ff, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000005c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf5, &(0x7f0000000740)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) timer_settime(0x0, 0x0, 0x0, 0x0) 2m12.763922888s ago: executing program 33 (id=449): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000380)=[{}], 0x1, 0x1ff, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000005c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf5, &(0x7f0000000740)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r1, &(0x7f0000000780)={0x2020}, 0x2020) timer_settime(0x0, 0x0, 0x0, 0x0) 2m1.458391704s ago: executing program 4 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="dc0200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000b0020380ac0200800c000180060001"], 0x2dc}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m0.928841847s ago: executing program 4 (id=516): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x387181) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xc4042, 0x22) syz_open_dev$usbmon(&(0x7f00000008c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000940), 0x80d02, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a40), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000a80)={{}, {0x18}, 0x0, 0x3}) 2m0.499711231s ago: executing program 4 (id=520): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x24048811) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 2m0.139907058s ago: executing program 4 (id=523): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m58.869756676s ago: executing program 4 (id=526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000900)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000980)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_getevents(r1, 0x2, 0x2, &(0x7f00000009c0)=[{}, {}], 0x0) ppoll(&(0x7f0000000a00)=[{r2, 0x81}, {r0, 0x1000}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1m57.608269015s ago: executing program 4 (id=532): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x3}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x2, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x40, 0x88, 0x0, 0x8, 0x8a], 0xfec00000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m57.06507994s ago: executing program 34 (id=532): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x3}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x2, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x40, 0x88, 0x0, 0x8, 0x8a], 0xfec00000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m22.479759006s ago: executing program 0 (id=757): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 1m22.218049193s ago: executing program 0 (id=760): r0 = fsopen(&(0x7f00000000c0)='befs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) dup2(r0, r1) 1m21.305420215s ago: executing program 0 (id=765): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5de82a4e, 0xffffffff, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0xffff, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xd11, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x5, 0x4, 0x4885, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0xd, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xf4, 0x6, 0x1, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x40000021, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0xffffffff, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x800, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffff8, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xffffffff}}}, &(0x7f0000000440)=0x84) 1m21.006693725s ago: executing program 0 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000680)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xa41, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)={[{@utf8}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0xffffffff}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000000780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.events\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 1m20.616422974s ago: executing program 0 (id=771): mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f00000001c0)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000440)={0x0, {0x1, 0x0}, 0x0, 0x40408}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000480)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 1m20.201415827s ago: executing program 0 (id=774): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f0000000300), 0x40000000000026c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m19.598775458s ago: executing program 35 (id=774): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="17", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f0000000300), 0x40000000000026c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 56.776249403s ago: executing program 7 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1900000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x2, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 56.436198798s ago: executing program 7 (id=926): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000040)='./sys\x00', 0x2000775) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents(r3, &(0x7f0000000200)=""/4096, 0x1000) 56.227489639s ago: executing program 7 (id=930): r0 = gettid() timer_create(0x0, &(0x7f00000008c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000900)=0x0) timer_settime(r1, 0x0, &(0x7f0000000940)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = io_uring_setup(0xfb8, &(0x7f0000000a00)={0x0, 0xae7a, 0x0, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000ac0)=r3, 0x4) recvmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40010002) close_range(r2, 0xffffffffffffffff, 0x0) 55.934994099s ago: executing program 7 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000680)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xa41, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)={[{@utf8}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0xffffffff}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000000780)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cgroup.events\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 55.409558542s ago: executing program 7 (id=941): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x8000}, 0x4) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2b, 0x0, 0x0, 0x3}}}}}, 0x0) 55.006813202s ago: executing program 7 (id=945): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffe38]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 54.418910782s ago: executing program 36 (id=945): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffe38]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.730351551s ago: executing program 9 (id=1273): r0 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000020000000000000a9d2", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000200)='./file0\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000004f00)='./file0\x00', 0xa6d43, 0x101) 3.461185599s ago: executing program 9 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002380)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {0x10, 0xffff}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4040004) 3.173513408s ago: executing program 2 (id=1278): syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.173402928s ago: executing program 9 (id=1279): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r1, 0x6, 0x0, 0x0, 0x0, 0x4) futex(r1, 0xd, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x1) 2.724424624s ago: executing program 2 (id=1281): socket$inet(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r1], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1.77240602s ago: executing program 9 (id=1288): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x20004, 0xa6bd, 0x3, 0x8, 0x7fff, 0x0, 0x0, 0x40, 0x2}}, 0x50) 1.602109137s ago: executing program 5 (id=1290): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 1.541055444s ago: executing program 9 (id=1291): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.530244014s ago: executing program 2 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.499360428s ago: executing program 8 (id=1293): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0xf5c, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x50) 1.3759409s ago: executing program 5 (id=1294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = inotify_init1(0x800) r3 = fcntl$dupfd(r0, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)={0x20000011}) r4 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0x20000004}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) 1.323428535s ago: executing program 2 (id=1295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 1.291810979s ago: executing program 9 (id=1296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x42) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0xc0) 1.254004092s ago: executing program 8 (id=1297): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000380)=[{r2}], 0x1, 0x0, &(0x7f00000003c0), 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.090909899s ago: executing program 6 (id=1298): r0 = fsopen(&(0x7f00000016c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000001700)='.\x00', 0xffffff70) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./dev\x00', 0x1ff) 1.090026129s ago: executing program 5 (id=1299): getpid() io_uring_setup(0x2393, &(0x7f0000000080)={0x0, 0x80005ad0, 0x80, 0x0, 0x218}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c509000035000800c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.063658342s ago: executing program 2 (id=1300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x4e, 0x0, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4772000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @loopback, 0x6}, 0x1c) 975.042371ms ago: executing program 8 (id=1301): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x2e) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 907.983368ms ago: executing program 6 (id=1302): r0 = io_uring_setup(0x4a86, &(0x7f00000000c0)={0x0, 0xfbe0, 0x40, 0x8001002, 0x112}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000740)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0xa300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000007c0)=0x1) close(0x3) pread64(r2, 0x0, 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 752.381564ms ago: executing program 8 (id=1303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fchmod(0xffffffffffffffff, 0x91) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 744.781934ms ago: executing program 6 (id=1304): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 725.193796ms ago: executing program 5 (id=1305): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x3, 0x3, {0xa, 0x4e21, 0x101, @private0, 0x6}}}, 0x3a) 564.358812ms ago: executing program 8 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x5, 0x8, 0x100, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x44}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 523.473567ms ago: executing program 5 (id=1307): timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,errors=continue,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32f2367ac88ec9428d5c7acbe688a0077fcfc4862ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3"], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") close(0x3) unshare(0x22020600) mq_timedreceive(r0, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 486.97637ms ago: executing program 6 (id=1308): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x642, &(0x7f0000000040)="235913100000004a3525c373b8be3e8d2672540e4fff5f", 0x0, 0x17}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 407.832988ms ago: executing program 8 (id=1309): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 214.798508ms ago: executing program 5 (id=1310): socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x87, 0x80, 0xfc, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x3, 0x5}}}}}]}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x20}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 213.894288ms ago: executing program 6 (id=1320): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000a40)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) chdir(&(0x7f0000000a80)='mnt/encrypted_dir\x00') mount(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000b00)={@id={0x2, 0x0, @b}}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x140, 0x10) 158.58µs ago: executing program 6 (id=1311): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 0s ago: executing program 2 (id=1312): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.4.495'. [ 154.911051][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.924755][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.959082][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.992973][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.000231][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.053369][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.083851][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.140927][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.198814][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.211516][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.256805][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.276277][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.330629][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.393521][ T5755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.447769][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.498633][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.507649][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.544862][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.041901][ T5926] xt_hashlimit: max too large, truncated to 1048576 [ 156.122176][ T5911] device-mapper: table: 248:1: multipath: error getting device (-ENXIO) [ 156.146308][ T5911] device-mapper: ioctl: error adding target to table [ 156.205756][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 156.502896][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.515204][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.563486][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.043633][ T5953] loop0: detected capacity change from 0 to 1024 [ 157.058197][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.507'. [ 157.693848][ T58] hfsplus: b-tree write err: -5, ino 25 [ 157.723886][ T58] hfsplus: b-tree write err: -5, ino 4 [ 157.742895][ T58] hfsplus: b-tree write err: -5, ino 2 [ 157.762082][ T58] hfsplus: b-tree write err: -5, ino 26 [ 157.826276][ T5974] loop5: detected capacity change from 0 to 512 [ 157.894482][ T5974] EXT4-fs: Ignoring removed nobh option [ 157.961793][ T5974] EXT4-fs (loop5): Test dummy encryption mode enabled [ 157.993308][ T5974] EXT4-fs (loop5): can't mount with both data=journal and dax [ 158.028817][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.064095][ T5974] FAULT_INJECTION: forcing a failure. [ 158.064095][ T5974] name fail_futex, interval 1, probability 0, space 0, times 1 [ 158.077931][ T5978] netlink: 668 bytes leftover after parsing attributes in process `syz.4.513'. [ 158.098662][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.109351][ T5974] CPU: 0 PID: 5974 Comm: syz.5.510 Not tainted syzkaller #0 [ 158.116720][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 158.126828][ T5974] Call Trace: [ 158.130155][ T5974] [ 158.133131][ T5974] dump_stack_lvl+0x188/0x24e [ 158.137885][ T5974] ? show_regs_print_info+0x12/0x12 [ 158.143151][ T5974] ? load_image+0x410/0x410 [ 158.147712][ T5974] ? stack_trace_save+0xa6/0xf0 [ 158.152626][ T5974] ? __stack_depot_save+0x35/0x480 [ 158.157839][ T5974] should_fail_ex+0x390/0x4c0 [ 158.162577][ T5974] get_futex_key+0x1a6/0xe70 [ 158.167262][ T5974] ? futex_setup_timer+0xc0/0xc0 [ 158.172261][ T5974] futex_wake+0x123/0x4f0 [ 158.176650][ T5974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.182713][ T5974] ? futex_wake_mark+0x150/0x150 [ 158.187763][ T5974] ? lockdep_hardirqs_on+0x94/0x140 [ 158.193037][ T5974] do_futex+0x2e2/0x320 [ 158.197253][ T5974] ? __ia32_sys_get_robust_list+0x100/0x100 [ 158.203213][ T5974] __se_sys_futex+0x381/0x410 [ 158.207954][ T5974] ? __x64_sys_futex+0xf0/0xf0 [ 158.212775][ T5974] ? __x64_sys_futex+0x1d/0xf0 [ 158.217575][ T5974] do_syscall_64+0x4c/0xa0 [ 158.222036][ T5974] ? clear_bhb_loop+0x60/0xb0 [ 158.226754][ T5974] ? clear_bhb_loop+0x60/0xb0 [ 158.231486][ T5974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.237422][ T5974] RIP: 0033:0x7f73bd1a8f19 [ 158.241868][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.261533][ T5974] RSP: 002b:00007f73be0190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.270012][ T5974] RAX: ffffffffffffffda RBX: 00007f73bd425fa8 RCX: 00007f73bd1a8f19 [ 158.278009][ T5974] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73bd425fac [ 158.286006][ T5974] RBP: 00007f73bd425fa0 R08: 000008079c6e7ddc R09: 0000000000000000 [ 158.294008][ T5974] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 158.302013][ T5974] R13: 00007f73bd426038 R14: 00007fff6608a6f0 R15: 00007fff6608a7d8 [ 158.310027][ T5974] [ 158.398217][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.408727][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.432011][ T5755] device veth0_vlan entered promiscuous mode [ 158.453274][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.476670][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.524021][ T5755] device veth1_vlan entered promiscuous mode [ 158.629559][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 158.778221][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 158.808694][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.843033][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.877354][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.904543][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.975411][ T5755] device veth0_macvtap entered promiscuous mode [ 159.003954][ T5755] device veth1_macvtap entered promiscuous mode [ 159.036072][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.055224][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.093661][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.163262][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.193572][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.225833][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.245752][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.280653][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.302032][ T6011] loop4: detected capacity change from 0 to 512 [ 159.315642][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.366748][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.387591][ T6011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.408352][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.425654][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.469059][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.485781][ T6011] EXT4-fs (loop4): 1 truncate cleaned up [ 159.506585][ T6011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 159.548131][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.585940][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.590389][ T26] audit: type=1800 audit(2000000003.390:148): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.523" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 159.631058][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.662308][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.696495][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.718808][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.758720][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.789538][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.821452][ T5755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.839472][ T5755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.879257][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.917382][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.932898][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.974381][ T5755] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.001561][ T5755] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.020913][ T5755] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.041329][ T5755] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.267920][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.289339][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.327506][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.377475][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.385369][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.410648][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.522355][ T4278] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /124/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.610577][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 160.626181][ T4278] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 160.721671][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 160.729260][ T4278] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /124/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.786860][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 160.814257][ T4278] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 160.841243][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 160.853778][ T4278] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /124/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.886760][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 160.894177][ T4278] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 160.968436][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 160.980829][ T4278] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /124/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 161.024278][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 161.035493][ T4278] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.056853][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 161.063875][ T4278] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /124/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 161.094516][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 161.113188][ T4278] EXT4-fs error (device loop4): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.295866][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 161.485945][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 161.493465][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.553330][ T7] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.573203][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.590927][ T7] usb 7-1: Product: syz [ 161.605535][ T7] usb 7-1: Manufacturer: syz [ 161.611459][ T7] usb 7-1: SerialNumber: syz [ 161.625847][ T7] usb 7-1: config 0 descriptor?? [ 161.654289][ T7] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.674252][ T7] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 161.832515][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.015621][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.160212][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.253000][ T7] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 162.289965][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.590462][ T6069] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.700564][ T58] tipc: Disabling bearer [ 162.718256][ T58] tipc: Left network mode [ 163.029043][ T6078] block device autoloading is deprecated and will be removed. [ 163.082718][ T7] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 163.113664][ T7] em28xx 7-1:0.0: board has no eeprom [ 163.205733][ T7] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 163.213791][ T7] em28xx 7-1:0.0: dvb set to bulk mode. [ 163.272568][ T7] usb 7-1: USB disconnect, device number 2 [ 163.304211][ T7] em28xx 7-1:0.0: Disconnecting em28xx [ 163.310839][ T14] em28xx 7-1:0.0: Binding DVB extension [ 163.328011][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.338900][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.347774][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.356259][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.364721][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.372496][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.424052][ T6085] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.686981][ T14] em28xx 7-1:0.0: Registering input extension [ 163.693818][ T7] em28xx 7-1:0.0: Closing input extension [ 163.778395][ T7] em28xx 7-1:0.0: Freeing device [ 163.809239][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.541'. [ 163.848575][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.541'. [ 163.986032][ T6095] loop2: detected capacity change from 0 to 4096 [ 164.725927][ T6085] chnl_net:caif_netlink_parms(): no params data found [ 164.862118][ T6124] ip_tables: iptables: counters copy to user failed while replacing table [ 164.882335][ T26] audit: type=1326 audit(2000000008.680:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.2.547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f637f9a8f19 code=0x0 [ 165.093428][ T6132] FAULT_INJECTION: forcing a failure. [ 165.093428][ T6132] name fail_futex, interval 1, probability 0, space 0, times 0 [ 165.107090][ T6132] CPU: 1 PID: 6132 Comm: syz.0.551 Not tainted syzkaller #0 [ 165.114452][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 165.124591][ T6132] Call Trace: [ 165.127918][ T6132] [ 165.130893][ T6132] dump_stack_lvl+0x188/0x24e [ 165.135635][ T6132] ? show_regs_print_info+0x12/0x12 [ 165.140887][ T6132] ? load_image+0x410/0x410 [ 165.145446][ T6132] should_fail_ex+0x390/0x4c0 [ 165.150183][ T6132] get_futex_key+0x1a6/0xe70 [ 165.154828][ T6132] ? up_read+0x20/0x20 [ 165.158959][ T6132] ? futex_setup_timer+0xc0/0xc0 [ 165.163972][ T6132] ? fixup_user_fault+0x406/0x4a0 [ 165.169071][ T6132] futex_requeue+0x9b4/0x13a0 [ 165.173804][ T6132] ? futex_unqueue+0xc7/0xf0 [ 165.178466][ T6132] ? put_task_struct+0x80/0x80 [ 165.183310][ T6132] ? futex_wait_setup+0x270/0x270 [ 165.188409][ T6132] ? vm_mmap_pgoff+0x1dc/0x2d0 [ 165.193226][ T6132] ? userfaultfd_unmap_complete+0x28f/0x310 [ 165.199174][ T6132] do_futex+0x23d/0x320 [ 165.203396][ T6132] ? __ia32_sys_get_robust_list+0x100/0x100 [ 165.209351][ T6132] __se_sys_futex+0x381/0x410 [ 165.214151][ T6132] ? __x64_sys_futex+0xf0/0xf0 [ 165.218951][ T6132] ? __x64_sys_futex+0x1d/0xf0 [ 165.223745][ T6132] do_syscall_64+0x4c/0xa0 [ 165.228215][ T6132] ? clear_bhb_loop+0x60/0xb0 [ 165.232930][ T6132] ? clear_bhb_loop+0x60/0xb0 [ 165.237660][ T6132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.243597][ T6132] RIP: 0033:0x7f3a0d3a8f19 [ 165.248050][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.267702][ T6132] RSP: 002b:00007f3a0e246028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.276148][ T6132] RAX: ffffffffffffffda RBX: 00007f3a0d625fa0 RCX: 00007f3a0d3a8f19 [ 165.284144][ T6132] RDX: 0000000000000001 RSI: 000000000000008c RDI: 0000200000000700 [ 165.292167][ T6132] RBP: 00007f3a0d437f6d R08: 0000000000000000 R09: 0000000000000000 [ 165.300158][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.308147][ T6132] R13: 00007f3a0d626038 R14: 00007f3a0d625fa0 R15: 00007ffca909ac68 [ 165.316170][ T6132] [ 165.406317][ T50] Bluetooth: hci1: command 0x0409 tx timeout [ 165.434235][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.479070][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.496028][ T6085] device bridge_slave_0 entered promiscuous mode [ 165.560032][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.615770][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.634680][ T6085] device bridge_slave_1 entered promiscuous mode [ 165.751917][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.827842][ T58] device hsr_slave_0 left promiscuous mode [ 165.835024][ T58] device hsr_slave_1 left promiscuous mode [ 165.849664][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.864621][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.884138][ T6150] FAULT_INJECTION: forcing a failure. [ 165.884138][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 165.885145][ T58] device bridge_slave_1 left promiscuous mode [ 165.919868][ T6150] CPU: 1 PID: 6150 Comm: syz.2.555 Not tainted syzkaller #0 [ 165.927232][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 165.935947][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.937315][ T6150] Call Trace: [ 165.947706][ T6150] [ 165.950678][ T6150] dump_stack_lvl+0x188/0x24e [ 165.955431][ T6150] ? show_regs_print_info+0x12/0x12 [ 165.960694][ T6150] ? load_image+0x410/0x410 [ 165.965264][ T6150] ? __might_sleep+0xd0/0xd0 [ 165.969912][ T6150] ? __lock_acquire+0x7ea0/0x7ea0 [ 165.975006][ T6150] should_fail_ex+0x390/0x4c0 [ 165.979740][ T6150] should_failslab+0x5/0x20 [ 165.984282][ T6150] slab_pre_alloc_hook+0x59/0x300 [ 165.989347][ T6150] ? trace_parse_run_command+0x59/0x2c0 [ 165.994930][ T6150] __kmem_cache_alloc_node+0x4f/0x270 [ 166.000334][ T6150] ? trace_parse_run_command+0x59/0x2c0 [ 166.005916][ T6150] kmalloc_trace+0x26/0xe0 [ 166.010362][ T6150] ? probes_open+0x130/0x130 [ 166.014990][ T6150] trace_parse_run_command+0x59/0x2c0 [ 166.020401][ T6150] ? uprobe_buffer_disable+0x1c0/0x1c0 [ 166.025908][ T6150] vfs_write+0x2dc/0x9a0 [ 166.030194][ T6150] ? file_end_write+0x250/0x250 [ 166.035077][ T6150] ? __fget_files+0x28/0x460 [ 166.039706][ T6150] ? __fget_files+0x3fc/0x460 [ 166.044427][ T6150] ? __fdget_pos+0x2ae/0x360 [ 166.049072][ T6150] ? ksys_write+0x70/0x260 [ 166.053529][ T6150] ksys_write+0x14d/0x260 [ 166.057905][ T6150] ? __ia32_sys_read+0x80/0x80 [ 166.062710][ T6150] ? lockdep_hardirqs_on+0x94/0x140 [ 166.067947][ T6150] do_syscall_64+0x4c/0xa0 [ 166.072399][ T6150] ? clear_bhb_loop+0x60/0xb0 [ 166.077119][ T6150] ? clear_bhb_loop+0x60/0xb0 [ 166.081855][ T6150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.087785][ T6150] RIP: 0033:0x7f637f9a8f19 [ 166.092241][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.111884][ T6150] RSP: 002b:00007f63808c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.120341][ T6150] RAX: ffffffffffffffda RBX: 00007f637fc25fa0 RCX: 00007f637f9a8f19 [ 166.128345][ T6150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 166.136358][ T6150] RBP: 00007f637fa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 166.144356][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.152363][ T6150] R13: 00007f637fc26038 R14: 00007f637fc25fa0 R15: 00007ffc472304f8 [ 166.160401][ T6150] [ 166.180460][ T58] device bridge_slave_0 left promiscuous mode [ 166.188266][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.298979][ T58] device veth1_macvtap left promiscuous mode [ 166.305211][ T58] device veth0_macvtap left promiscuous mode [ 166.326680][ T58] device veth1_vlan left promiscuous mode [ 166.348861][ T58] device veth0_vlan left promiscuous mode [ 167.254048][ T6182] tipc: Failed to remove unknown binding: 66,0,0/0:3910370493/3910370494 [ 167.449271][ T58] team0 (unregistering): Port device team_slave_1 removed [ 167.503999][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 167.522637][ T58] team0 (unregistering): Port device team_slave_0 removed [ 167.602210][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.655429][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.670181][ T6188] FAULT_INJECTION: forcing a failure. [ 167.670181][ T6188] name failslab, interval 1, probability 0, space 0, times 0 [ 167.683822][ T6188] CPU: 1 PID: 6188 Comm: syz.2.567 Not tainted syzkaller #0 [ 167.691169][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 167.701275][ T6188] Call Trace: [ 167.704594][ T6188] [ 167.707590][ T6188] dump_stack_lvl+0x188/0x24e [ 167.712331][ T6188] ? show_regs_print_info+0x12/0x12 [ 167.717675][ T6188] ? load_image+0x410/0x410 [ 167.722265][ T6188] ? __might_sleep+0xd0/0xd0 [ 167.726893][ T6188] ? __lock_acquire+0x7ea0/0x7ea0 [ 167.731941][ T6188] should_fail_ex+0x390/0x4c0 [ 167.736645][ T6188] should_failslab+0x5/0x20 [ 167.741182][ T6188] slab_pre_alloc_hook+0x59/0x300 [ 167.746235][ T6188] ? blk_stat_alloc_callback+0x92/0x210 [ 167.751871][ T6188] __kmem_cache_alloc_node+0x4f/0x270 [ 167.757305][ T6188] ? blk_stat_alloc_callback+0x92/0x210 [ 167.762883][ T6188] __kmalloc+0xa3/0x240 [ 167.767070][ T6188] ? blk_mq_init_allocated_queue+0x1800/0x1800 [ 167.773265][ T6188] ? blk_mq_poll_stats_fn+0x1e0/0x1e0 [ 167.778677][ T6188] blk_stat_alloc_callback+0x92/0x210 [ 167.784126][ T6188] ? blk_mq_init_allocated_queue+0x1800/0x1800 [ 167.790320][ T6188] ? blk_mq_poll_stats_fn+0x1e0/0x1e0 [ 167.795738][ T6188] blk_mq_init_allocated_queue+0x181/0x1800 [ 167.801674][ T6188] ? blk_mq_alloc_disk_for_queue+0x60/0x60 [ 167.807507][ T6188] ? blk_set_default_limits+0x17b/0x4b0 [ 167.813081][ T6188] ? blk_alloc_queue+0x50d/0x5d0 [ 167.818059][ T6188] __blk_mq_alloc_disk+0xba/0x1e0 [ 167.823123][ T6188] loop_add+0x326/0x9a0 [ 167.827314][ T6188] loop_control_ioctl+0x124/0x590 [ 167.832374][ T6188] ? loop_set_hw_queue_depth+0x60/0x60 [ 167.837867][ T6188] ? bpf_lsm_file_ioctl+0x5/0x10 [ 167.842844][ T6188] ? security_file_ioctl+0x7c/0xa0 [ 167.847992][ T6188] ? loop_set_hw_queue_depth+0x60/0x60 [ 167.853476][ T6188] __se_sys_ioctl+0xfa/0x170 [ 167.858121][ T6188] do_syscall_64+0x4c/0xa0 [ 167.862613][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 167.867341][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 167.872073][ T6188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.878022][ T6188] RIP: 0033:0x7f637f9a8f19 [ 167.882480][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.902126][ T6188] RSP: 002b:00007f63808c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.910585][ T6188] RAX: ffffffffffffffda RBX: 00007f637fc25fa0 RCX: 00007f637f9a8f19 [ 167.918585][ T6188] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 167.926586][ T6188] RBP: 00007f637fa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 167.934646][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.942643][ T6188] R13: 00007f637fc26038 R14: 00007f637fc25fa0 R15: 00007ffc472304f8 [ 167.950662][ T6188] [ 168.317493][ T58] bond0 (unregistering): Released all slaves [ 168.371985][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.382147][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.5.556'. [ 168.391544][ T6156] netlink: 48 bytes leftover after parsing attributes in process `syz.5.556'. [ 168.405126][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.556'. [ 168.531774][ T6085] team0: Port device team_slave_0 added [ 168.556128][ T4265] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 168.564777][ T6085] team0: Port device team_slave_1 added [ 168.604759][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.626630][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.747284][ T6085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.777683][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.797693][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.811274][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.831535][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.867440][ T4265] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 168.884175][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.914817][ T4265] usb 3-1: config 0 descriptor?? [ 168.924254][ T6085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.042632][ T6085] device hsr_slave_0 entered promiscuous mode [ 169.062157][ T6085] device hsr_slave_1 entered promiscuous mode [ 169.352024][ T4265] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 169.369985][ T4265] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 169.392487][ T4265] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 169.414161][ T4265] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 169.437530][ T4265] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 169.453882][ T4265] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 169.469813][ T4265] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 169.495138][ T4265] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 169.565749][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 169.609590][ T6085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.621704][ T6085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.630292][ T4265] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 169.652981][ T6085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.679071][ T6085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.936167][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.993945][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.021142][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.063167][ T6085] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.093047][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.117445][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.149316][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.156507][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.188692][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.229315][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.239159][ T6192] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 170.257318][ T4265] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 170.259355][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.305952][ T4265] usb 3-1: USB disconnect, device number 2 [ 170.347147][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.354365][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.418546][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.443443][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.470597][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.487286][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.535301][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.560628][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.577576][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.590987][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.604482][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.614800][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.629965][ T6232] fido_id[6232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 170.640680][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.677578][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.215790][ T131] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 171.362904][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.375709][ T4357] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 171.402782][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.429278][ T6085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.437702][ T131] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 171.454200][ T131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.505761][ T131] usb 3-1: Product: syz [ 171.510038][ T131] usb 3-1: Manufacturer: syz [ 171.514667][ T131] usb 3-1: SerialNumber: syz [ 171.576650][ T4357] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 171.605673][ T4357] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 171.615540][ T4357] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 171.646160][ T4357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.649508][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 171.861491][ T6276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.912064][ T6276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.179690][ T6282] overlayfs: failed to get inode (-116) [ 172.224780][ T6282] overlayfs: failed to get inode (-116) [ 172.241652][ T131] rtl8150 3-1:1.0: eth9: rtl8150 is detected [ 172.297505][ T6284] device wlan0 entered promiscuous mode [ 172.401866][ T128] usb 3-1: USB disconnect, device number 3 [ 172.808804][ T6299] mmap: syz.0.593 (6299): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 172.829404][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.839306][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.902925][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.930009][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.952210][ T6085] device veth0_vlan entered promiscuous mode [ 172.968709][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.983305][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.002147][ T6085] device veth1_vlan entered promiscuous mode [ 173.094250][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 173.122008][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 173.146270][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.181174][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.211016][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.230827][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.273608][ T6085] device veth0_macvtap entered promiscuous mode [ 173.314549][ T6085] device veth1_macvtap entered promiscuous mode [ 173.358885][ T4357] pegasus 6-1:1.0: setup Pegasus II specific registers [ 173.380201][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.397194][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.407714][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.418570][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.429203][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.439980][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.450968][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.471188][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.493609][ T4357] pegasus 6-1:1.0: can't locate MII phy, using default [ 173.507195][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.543404][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.563917][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.602969][ T4357] pegasus 6-1:1.0: eth9, 3Com USB Ethernet 3C460B, 4a:78:1d:5e:07:03 [ 173.611585][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.639394][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.647986][ T4357] usb 6-1: USB disconnect, device number 2 [ 173.679649][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.716532][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.740321][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.773577][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.790638][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.802538][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.814751][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.828401][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.839387][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.850343][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.855152][ T6322] sctp: [Deprecated]: syz.2.601 (pid 6322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.855152][ T6322] Use struct sctp_sack_info instead [ 173.860740][ T6085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.908434][ T6085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.932764][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.963531][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.982608][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.016820][ T6085] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.036550][ T6085] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.046021][ T4353] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.065770][ T6085] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.087664][ T6085] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.248191][ T4353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.274035][ T4353] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.304625][ T4353] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 174.324396][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.324781][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.352337][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.394751][ T4353] usb 1-1: 0:1 : does not exist [ 174.445455][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.478095][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.507796][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.534595][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.665761][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.686016][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.082792][ T6359] loop0: detected capacity change from 0 to 128 [ 175.115869][ T6359] FAT-fs (loop0): bogus number of reserved sectors [ 175.145975][ T6359] FAT-fs (loop0): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 175.184667][ T6359] FAT-fs (loop0): Can't find a valid FAT filesystem [ 176.018898][ T6379] loop6: detected capacity change from 0 to 16 [ 176.048937][ T6379] erofs: (device loop6): mounted with root inode @ nid 36. [ 176.796884][ T7] usb 1-1: USB disconnect, device number 3 [ 177.328966][ T6411] netlink: 'syz.6.625': attribute type 1 has an invalid length. [ 177.438393][ T6411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.538729][ T6416] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 177.558153][ T4375] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.588399][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 177.635715][ T4353] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 177.831300][ T4353] usb 3-1: Using ep0 maxpacket: 32 [ 177.843745][ T4353] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 177.894818][ T4353] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 177.925225][ T4353] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 177.942495][ T4353] usb 3-1: Product: syz [ 177.952557][ T4353] usb 3-1: Manufacturer: syz [ 177.961885][ T4353] usb 3-1: SerialNumber: syz [ 177.995571][ T4353] usb 3-1: config 0 descriptor?? [ 178.011493][ T6413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.101814][ T6411] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 178.127935][ T6411] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 178.167713][ T6411] bond1 (unregistering): Released all slaves [ 178.453226][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.520499][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.805997][ T7] usb 3-1: USB disconnect, device number 4 [ 178.934462][ T6446] fscrypt (sda1, inode 1262): Unsupported encryption modes (contents 0, filenames 0) [ 179.748976][ T6479] loop2: detected capacity change from 0 to 256 [ 179.851148][ T6479] FAT-fs (loop2): Directory bread(block 64) failed [ 179.881467][ T6479] FAT-fs (loop2): Directory bread(block 65) failed [ 179.908983][ T6479] FAT-fs (loop2): Directory bread(block 66) failed [ 179.943881][ T6479] FAT-fs (loop2): Directory bread(block 67) failed [ 179.983718][ T6479] FAT-fs (loop2): Directory bread(block 68) failed [ 180.003222][ T6479] FAT-fs (loop2): Directory bread(block 69) failed [ 180.014249][ T6479] FAT-fs (loop2): Directory bread(block 70) failed [ 180.024905][ T6479] FAT-fs (loop2): Directory bread(block 71) failed [ 180.039351][ T6479] FAT-fs (loop2): Directory bread(block 72) failed [ 180.054925][ T6479] FAT-fs (loop2): Directory bread(block 73) failed [ 180.279283][ T26] audit: type=1326 audit(2000000024.080:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.6.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f5d5a8f19 code=0x0 [ 181.699660][ T6535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 182.104860][ T50] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 182.937617][ T6573] loop5: detected capacity change from 0 to 1024 [ 183.216269][ T4298] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 183.228242][ T4298] CPU: 0 PID: 4298 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 183.235859][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.245972][ T4298] Workqueue: hci0 hci_rx_work [ 183.250717][ T4298] Call Trace: [ 183.254057][ T4298] [ 183.257026][ T4298] dump_stack_lvl+0x188/0x24e [ 183.261780][ T4298] ? show_regs_print_info+0x12/0x12 [ 183.267060][ T4298] ? load_image+0x410/0x410 [ 183.271604][ T4298] sysfs_create_dir_ns+0x26a/0x290 [ 183.276838][ T4298] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.281905][ T4298] ? sysfs_warn_dup+0xa0/0xa0 [ 183.286632][ T4298] ? do_raw_spin_unlock+0x11d/0x230 [ 183.291867][ T4298] kobject_add_internal+0x617/0xca0 [ 183.297109][ T4298] kobject_add+0x160/0x230 [ 183.301584][ T4298] ? kobject_init+0x1c0/0x1c0 [ 183.306311][ T4298] ? __raw_spin_lock_init+0x41/0x100 [ 183.311630][ T4298] ? get_device_parent+0x121/0x3e0 [ 183.316775][ T4298] device_add+0x470/0x1050 [ 183.321225][ T4298] hci_conn_add_sysfs+0xd1/0x1e0 [ 183.326207][ T4298] hci_sync_conn_complete_evt+0x88c/0xd20 [ 183.331989][ T4298] hci_event_packet+0x66a/0xe60 [ 183.336892][ T4298] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 183.342924][ T4298] ? bis_list+0x280/0x280 [ 183.347295][ T4298] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 183.353222][ T4298] ? kcov_remote_start+0x50f/0x810 [ 183.358362][ T4298] ? lockdep_hardirqs_on+0x94/0x140 [ 183.363695][ T4298] ? hci_send_to_monitor+0x9c/0x4a0 [ 183.368931][ T4298] hci_rx_work+0x3eb/0xd40 [ 183.373391][ T4298] ? _raw_spin_unlock+0x40/0x40 [ 183.378275][ T4298] ? process_one_work+0x7b4/0x1160 [ 183.383418][ T4298] process_one_work+0x8ab/0x1160 [ 183.388397][ T4298] ? worker_detach_from_pool+0x240/0x240 [ 183.394089][ T4298] ? _raw_spin_lock_irq+0xb7/0xf0 [ 183.399153][ T4298] ? _raw_spin_lock_irqsave+0x100/0x100 [ 183.404818][ T4298] ? wq_worker_running+0x97/0x190 [ 183.409878][ T4298] worker_thread+0xaf5/0x12a0 [ 183.414594][ T4298] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 183.420544][ T4298] kthread+0x29d/0x330 [ 183.424659][ T4298] ? worker_clr_flags+0x1a0/0x1a0 [ 183.429736][ T4298] ? kthread_blkcg+0xd0/0xd0 [ 183.434377][ T4298] ret_from_fork+0x1f/0x30 [ 183.438832][ T4298] [ 183.447666][ T4298] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.461623][ T4298] Bluetooth: hci0: failed to register connection device [ 184.012015][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.072489][ T6605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.505892][ T4265] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.583458][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.591900][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.725745][ T4265] usb 6-1: Using ep0 maxpacket: 32 [ 184.734569][ T4265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.759186][ T4265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.781638][ T4265] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 184.811578][ T26] audit: type=1326 audit(2000000028.610:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.6.683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5d5a8f19 code=0x7fc00000 [ 184.857412][ T4265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.878752][ T4265] usb 6-1: config 0 descriptor?? [ 185.247816][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 185.313107][ T4265] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 185.322278][ T4265] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 185.335446][ T4265] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 185.509000][ T4265] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 185.520617][ T26] audit: type=1326 audit(2000000029.320:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.6.683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f5d5a2c97 code=0x7fc00000 [ 185.547704][ T26] audit: type=1326 audit(2000000029.320:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.6.683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f5d541159 code=0x7fc00000 [ 185.580230][ T26] audit: type=1326 audit(2000000029.320:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.6.683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f5d54121d code=0x7fc00000 [ 185.637743][ T26] audit: type=1326 audit(2000000029.320:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.6.683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5f5d5a8f19 code=0x7fc00000 [ 185.646600][ T4298] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 185.665055][ T4291] Bluetooth: hci5: command 0x1003 tx timeout [ 185.917869][ T4265] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 185.930909][ T4265] ft260 0003:0403:6030.0005: failed to retrieve status: -32 [ 186.018749][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.176402][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.187795][ T4265] usb 6-1: USB disconnect, device number 3 [ 186.775682][ T6612] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 186.784225][ T6650] loop0: detected capacity change from 0 to 512 [ 186.833806][ T6650] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.922254][ T6650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.953353][ T6650] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.965736][ T6612] usb 8-1: Using ep0 maxpacket: 32 [ 186.975176][ T6612] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 187.032925][ T6612] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.070471][ T6612] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.083040][ T6612] usb 8-1: Product: syz [ 187.091464][ T6612] usb 8-1: Manufacturer: syz [ 187.099869][ T6612] usb 8-1: SerialNumber: syz [ 187.127213][ T6612] usb 8-1: config 0 descriptor?? [ 187.132840][ T6643] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 187.228384][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 187.784331][ T4265] usb 8-1: USB disconnect, device number 2 [ 187.802263][ T6603] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.821135][ T6603] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.842999][ T6603] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.852626][ T6603] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.675119][ T6693] loop0: detected capacity change from 0 to 256 [ 188.750157][ T6693] FAT-fs (loop0): Directory bread(block 64) failed [ 188.792196][ T6693] FAT-fs (loop0): Directory bread(block 65) failed [ 188.819135][ T6693] FAT-fs (loop0): Directory bread(block 66) failed [ 188.842429][ T6693] FAT-fs (loop0): Directory bread(block 67) failed [ 188.876119][ T6693] FAT-fs (loop0): Directory bread(block 68) failed [ 188.882736][ T6693] FAT-fs (loop0): Directory bread(block 69) failed [ 188.922417][ T6693] FAT-fs (loop0): Directory bread(block 70) failed [ 188.955819][ T6693] FAT-fs (loop0): Directory bread(block 71) failed [ 188.962653][ T6693] FAT-fs (loop0): Directory bread(block 72) failed [ 188.969863][ T6693] FAT-fs (loop0): Directory bread(block 73) failed [ 190.960903][ T6753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.710'. [ 191.217271][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.714'. [ 191.229019][ T6760] loop6: detected capacity change from 0 to 512 [ 191.315356][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 191.341938][ T6760] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 191.377989][ T6760] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.608932][ T6780] loop2: detected capacity change from 0 to 764 [ 191.638027][ T5755] EXT4-fs (loop6): unmounting filesystem. [ 191.885812][ T4365] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.038528][ T6797] FAULT_INJECTION: forcing a failure. [ 192.038528][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 192.085726][ T4265] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 192.085726][ T4365] usb 1-1: Using ep0 maxpacket: 32 [ 192.186283][ T6797] CPU: 1 PID: 6797 Comm: syz.2.723 Not tainted syzkaller #0 [ 192.193738][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 192.203844][ T6797] Call Trace: [ 192.207156][ T6797] [ 192.210096][ T6797] dump_stack_lvl+0x188/0x24e [ 192.214797][ T6797] ? show_regs_print_info+0x12/0x12 [ 192.220013][ T6797] ? load_image+0x410/0x410 [ 192.224548][ T6797] ? __lock_acquire+0x7ea0/0x7ea0 [ 192.229592][ T6797] should_fail_ex+0x390/0x4c0 [ 192.234288][ T6797] should_failslab+0x5/0x20 [ 192.238821][ T6797] slab_pre_alloc_hook+0x59/0x300 [ 192.243854][ T6797] ? erofs_init_fs_context+0xc8/0x310 [ 192.249284][ T6797] __kmem_cache_alloc_node+0x4f/0x270 [ 192.254706][ T6797] ? erofs_init_fs_context+0xc8/0x310 [ 192.260126][ T6797] kmalloc_trace+0x26/0xe0 [ 192.264572][ T6797] erofs_init_fs_context+0xc8/0x310 [ 192.269803][ T6797] alloc_fs_context+0x628/0x7d0 [ 192.274686][ T6797] do_new_mount+0x10d/0xa50 [ 192.279223][ T6797] __se_sys_mount+0x2e3/0x3d0 [ 192.283925][ T6797] ? __x64_sys_mount+0xc0/0xc0 [ 192.288730][ T6797] ? lockdep_hardirqs_on+0x94/0x140 [ 192.293970][ T6797] ? __x64_sys_mount+0x1c/0xc0 [ 192.298782][ T6797] do_syscall_64+0x4c/0xa0 [ 192.303234][ T6797] ? clear_bhb_loop+0x60/0xb0 [ 192.307940][ T6797] ? clear_bhb_loop+0x60/0xb0 [ 192.312648][ T6797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.318577][ T6797] RIP: 0033:0x7f637f9a8f19 [ 192.323026][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.342667][ T6797] RSP: 002b:00007f63808c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.351132][ T6797] RAX: ffffffffffffffda RBX: 00007f637fc25fa0 RCX: 00007f637f9a8f19 [ 192.359148][ T6797] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 192.367145][ T6797] RBP: 00007f637fa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 192.375144][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.383146][ T6797] R13: 00007f637fc26038 R14: 00007f637fc25fa0 R15: 00007ffc472304f8 [ 192.391161][ T6797] [ 192.410842][ T4365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 192.448397][ T4365] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 192.498607][ T4265] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.525879][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 192.534381][ T4265] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.559712][ T4265] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.564960][ T4365] usb 1-1: Product: syz [ 192.596199][ T4265] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.629901][ T4365] usb 1-1: Manufacturer: syz [ 192.636040][ T4265] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 192.636743][ T4365] usb 1-1: SerialNumber: syz [ 192.665663][ T4265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.710719][ T4365] usb 1-1: config 0 descriptor?? [ 192.724955][ T6782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.834524][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 193.263783][ T4365] usb 1-1: USB disconnect, device number 4 [ 193.696662][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.731'. [ 193.936234][ T4265] gud 7-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 193.943128][ T4265] gud 7-1:1.0: USB-1: Failed to add properties (ret=-5) [ 193.959327][ T4265] gud 7-1:1.0: Failed to get connectors (error=-5) [ 193.971127][ T4265] gud: probe of 7-1:1.0 failed with error -5 [ 194.141015][ T4265] usb 7-1: USB disconnect, device number 3 [ 194.209109][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.215525][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.327173][ T6853] loop2: detected capacity change from 0 to 32768 [ 195.440109][ T6853] XFS (loop2): Mounting V5 Filesystem [ 195.625099][ T6853] XFS (loop2): Ending clean mount [ 195.974221][ T4277] XFS (loop2): Unmounting Filesystem [ 197.751038][ T6958] netlink: 'syz.5.763': attribute type 1 has an invalid length. [ 197.883639][ T6958] device bond1 entered promiscuous mode [ 197.962600][ T6958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.020683][ T6960] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.131117][ T6960] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 198.154253][ T6960] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 198.491607][ T6977] loop0: detected capacity change from 0 to 256 [ 198.512644][ T6977] exfat: Deprecated parameter 'utf8' [ 198.525002][ T6977] exfat: Deprecated parameter 'namecase' [ 198.553782][ T6977] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 199.263944][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.309617][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.580843][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.625894][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.849333][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.875921][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.088705][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.138959][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.645492][ T4298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.664430][ T4298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.673596][ T4298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.682718][ T4298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.696742][ T4298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.704185][ T4298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.039126][ T7019] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.275844][ T4265] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 201.406446][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 201.467669][ T4265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.505006][ T4265] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.545007][ T4265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.581845][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.603492][ T4265] usb 3-1: Product: syz [ 201.620506][ T4265] usb 3-1: Manufacturer: syz [ 201.635458][ T4265] usb 3-1: SerialNumber: syz [ 202.348848][ T7019] chnl_net:caif_netlink_parms(): no params data found [ 202.564755][ T7074] loop5: detected capacity change from 0 to 7 [ 202.667505][ T7074] loop5: [ 202.676388][ T7074] loop5: partition table partially beyond EOD, truncated [ 202.698736][ T4265] cdc_ncm 3-1:1.0: bind() failure [ 202.718436][ T4265] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 202.725886][ T4265] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 202.736067][ T4265] usbtest: probe of 3-1:1.1 failed with error -71 [ 202.747770][ T4265] usb 3-1: USB disconnect, device number 5 [ 202.765849][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 203.126706][ T7096] ip_tables: iptables: counters copy to user failed while replacing table [ 203.306130][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.313326][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.362785][ T7019] device bridge_slave_0 entered promiscuous mode [ 203.408415][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.408504][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.419672][ T7019] device bridge_slave_1 entered promiscuous mode [ 203.513394][ T7019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.585710][ T7019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.694905][ T7019] team0: Port device team_slave_0 added [ 203.713263][ T7019] team0: Port device team_slave_1 added [ 203.845818][ T31] device hsr_slave_0 left promiscuous mode [ 203.848520][ T31] device hsr_slave_1 left promiscuous mode [ 203.849717][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.849765][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.851715][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.851749][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.856593][ T31] device bridge_slave_1 left promiscuous mode [ 203.856739][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.879613][ T31] device bridge_slave_0 left promiscuous mode [ 203.879784][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.072844][ T31] device veth1_macvtap left promiscuous mode [ 204.072911][ T31] device veth0_macvtap left promiscuous mode [ 204.073120][ T31] device veth1_vlan left promiscuous mode [ 204.073223][ T31] device veth0_vlan left promiscuous mode [ 204.462697][ T7129] Cannot find set identified by id 0 to match [ 204.657696][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 204.667473][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 204.675074][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 204.685184][ T4291] Workqueue: hci0 hci_rx_work [ 204.689936][ T4291] Call Trace: [ 204.693246][ T4291] [ 204.696211][ T4291] dump_stack_lvl+0x188/0x24e [ 204.700930][ T4291] ? show_regs_print_info+0x12/0x12 [ 204.706168][ T4291] ? load_image+0x410/0x410 [ 204.710722][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 204.715871][ T4291] ? __lock_acquire+0x7ea0/0x7ea0 [ 204.720947][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 204.725673][ T4291] ? do_raw_spin_unlock+0x11d/0x230 [ 204.730900][ T4291] kobject_add_internal+0x617/0xca0 [ 204.736159][ T4291] kobject_add+0x160/0x230 [ 204.740625][ T4291] ? kobject_init+0x1c0/0x1c0 [ 204.745329][ T4291] ? __raw_spin_lock_init+0x41/0x100 [ 204.750658][ T4291] ? klist_children_get+0x50/0x50 [ 204.755719][ T4291] ? get_device_parent+0x121/0x3e0 [ 204.760864][ T4291] device_add+0x470/0x1050 [ 204.765315][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 204.770287][ T4291] le_conn_complete_evt+0x10db/0x17c0 [ 204.775699][ T4291] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 204.781974][ T4291] ? __copy_skb_header+0x3ba/0x4f0 [ 204.787140][ T4291] ? memcpy+0x3c/0x60 [ 204.791195][ T4291] ? skb_pull_data+0xec/0x1f0 [ 204.796346][ T4291] hci_le_enh_conn_complete_evt+0x185/0x460 [ 204.802271][ T4291] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 204.808724][ T4291] hci_event_packet+0x61f/0xe60 [ 204.813617][ T4291] ? hci_remote_host_features_evt+0x230/0x230 [ 204.819730][ T4291] ? bis_list+0x280/0x280 [ 204.824093][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 204.830020][ T4291] ? kcov_remote_start+0x50f/0x810 [ 204.835156][ T4291] ? lockdep_hardirqs_on+0x94/0x140 [ 204.840409][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 204.845645][ T4291] hci_rx_work+0x3eb/0xd40 [ 204.850093][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 204.854979][ T4291] ? process_one_work+0x7b4/0x1160 [ 204.860133][ T4291] process_one_work+0x8ab/0x1160 [ 204.865109][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 204.870784][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 204.875841][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 204.881419][ T4291] ? wq_worker_running+0x97/0x190 [ 204.886473][ T4291] worker_thread+0xaf5/0x12a0 [ 204.891203][ T4291] kthread+0x29d/0x330 [ 204.895312][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 204.900383][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 204.905002][ T4291] ret_from_fork+0x1f/0x30 [ 204.909481][ T4291] [ 204.912540][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.921187][ T4298] Bluetooth: hci2: command 0x041b tx timeout [ 204.931354][ T4291] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 204.945773][ T4291] Bluetooth: hci0: failed to register connection device [ 206.335137][ T31] team0 (unregistering): Port device team_slave_1 removed [ 206.404483][ T31] team0 (unregistering): Port device team_slave_0 removed [ 206.487615][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.536934][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.016025][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 207.076541][ T31] bond0 (unregistering): Released all slaves [ 207.161150][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.168922][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.194845][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.202342][ T7019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.245155][ T7147] smc: net device team0 applied user defined pnetid SYZ2 [ 207.450415][ T7149] smc: removing net device team0 with user defined pnetid SYZ2 [ 207.509456][ T7149] team0 (unregistering): Port device team_slave_0 removed [ 207.529349][ T7149] team0 (unregistering): Port device team_slave_1 removed [ 207.563066][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.570471][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.600889][ T7019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.789810][ T7019] device hsr_slave_0 entered promiscuous mode [ 207.837107][ T7019] device hsr_slave_1 entered promiscuous mode [ 207.865840][ T7019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.873467][ T7019] Cannot create hsr debugfs directory [ 208.108156][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.7.834'. [ 208.146301][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.7.834'. [ 208.265979][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.834'. [ 208.324317][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.834'. [ 208.707210][ T7214] loop7: detected capacity change from 0 to 128 [ 208.759224][ T7019] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 208.820899][ T7019] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 208.856537][ T7214] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 208.883250][ T7019] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 208.904599][ T7214] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.982883][ T7019] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 209.027711][ T7214] EXT4-fs (loop7): shut down requested (2) [ 209.049890][ T7214] fscrypt (loop7, inode 12): Error -5 getting encryption context [ 209.085763][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 209.300750][ T6085] EXT4-fs (loop7): unmounting filesystem. [ 209.310617][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.400796][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.426514][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.444160][ T7019] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.497394][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.521680][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.551374][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.558591][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.632347][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.045127][ T7241] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.145298][ T7241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.237824][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.253376][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.283628][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.290909][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.343331][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.372599][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.411362][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.483409][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.515741][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.544972][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.573126][ T7019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.605432][ T7019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.635937][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.646692][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.668012][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.701709][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.730178][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.773153][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.177781][ T4291] Bluetooth: hci2: command 0x0407 tx timeout [ 211.604834][ T7288] bond0: (slave ip6tnl1): refused to change device type [ 211.813411][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.843936][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.880483][ T7019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.302939][ T7317] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 213.013211][ T7343] netlink: 'syz.7.865': attribute type 1 has an invalid length. [ 213.144177][ T7343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.323301][ T7353] bond1: (slave macvlan0): making interface the new active one [ 213.428362][ T7353] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 213.498395][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 213.557256][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.606445][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.707497][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.728130][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.779296][ T7019] device veth0_vlan entered promiscuous mode [ 213.800864][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.867138][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.931945][ T7019] device veth1_vlan entered promiscuous mode [ 214.055649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.075637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.085627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.095624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.105623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.115619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.125768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 214.135630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 214.145623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 214.155624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 215.084082][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.092865][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.196689][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.222646][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.259348][ T7019] device veth0_macvtap entered promiscuous mode [ 215.299767][ T7019] device veth1_macvtap entered promiscuous mode [ 215.343271][ T7373] netlink: 'syz.2.871': attribute type 4 has an invalid length. [ 215.466095][ T7] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 215.508141][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.600989][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.625916][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.655952][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.668456][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.685845][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.696197][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.718511][ T7] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 215.729802][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.754282][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.755507][ T7] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.767155][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.791708][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.808007][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.823657][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.848571][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.889034][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.930218][ T7] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 215.975669][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.992548][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.002140][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.021557][ T7019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.065638][ T7019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.096049][ T7019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.129735][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.143893][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.175266][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.210443][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.239701][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.265411][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.314074][ T7019] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.331010][ T7019] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.352285][ T7019] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.388816][ T7019] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.699536][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.726387][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.782037][ T7406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.826879][ T7408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.834780][ T7408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.860327][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.153918][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.776'. [ 217.280090][ T7] gud 8-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 217.295764][ T7] gud 8-1:1.0: USB-1: Failed to add properties (ret=-5) [ 217.319973][ T7] gud 8-1:1.0: Failed to get connectors (error=-5) [ 217.337966][ T7] gud: probe of 8-1:1.0 failed with error -5 [ 217.505186][ T7] usb 8-1: USB disconnect, device number 3 [ 217.913493][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.981200][ T7465] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 218.164462][ T26] audit: type=1804 audit(2000000061.960:156): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.890" name="file1" dev="ramfs" ino=47329 res=1 errno=0 [ 218.338032][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.891'. [ 218.965868][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 219.183564][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 219.197681][ T7] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 219.235764][ T7] usb 6-1: config 0 has no interface number 0 [ 219.267470][ T7] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 219.310641][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.351290][ T7] usb 6-1: Product: syz [ 219.355539][ T7] usb 6-1: Manufacturer: syz [ 219.383615][ T7] usb 6-1: SerialNumber: syz [ 219.402865][ T7] usb 6-1: config 0 descriptor?? [ 219.447545][ T7] smsc95xx v2.0.0 [ 219.852669][ T7] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 219.894095][ T7] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 220.940075][ T7] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 220.965972][ T7] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 221.009824][ T7] usb 6-1: USB disconnect, device number 4 [ 221.292812][ T7538] loop7: detected capacity change from 0 to 4096 [ 221.823515][ T7538] EXT4-fs (loop7): Test dummy encryption mode enabled [ 221.879696][ T7538] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 221.984006][ T7538] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 222.198445][ T6085] EXT4-fs (loop7): unmounting filesystem. [ 222.251721][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'. [ 222.566213][ T7581] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.624649][ T7581] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.397844][ T7620] netlink: 156 bytes leftover after parsing attributes in process `syz.5.931'. [ 223.455146][ T7620] netlink: 'syz.5.931': attribute type 3 has an invalid length. [ 223.490320][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 223.626703][ T7624] loop7: detected capacity change from 0 to 256 [ 223.641625][ T7624] exfat: Deprecated parameter 'utf8' [ 223.695869][ T7624] exfat: Deprecated parameter 'namecase' [ 223.772403][ T7624] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 224.185708][ T128] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 224.232164][ T7648] loop5: detected capacity change from 0 to 16 [ 224.273862][ T7648] erofs: (device loop5): mounted with root inode @ nid 36. [ 224.393962][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 224.405074][ T128] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 224.443709][ T128] usb 3-1: config 0 has no interface number 0 [ 224.464923][ T128] usb 3-1: config 0 interface 12 has no altsetting 0 [ 224.509898][ T128] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 224.541690][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.565882][ T128] usb 3-1: Product: syz [ 224.570194][ T128] usb 3-1: Manufacturer: syz [ 224.589842][ T128] usb 3-1: SerialNumber: syz [ 224.617163][ T128] usb 3-1: config 0 descriptor?? [ 224.673036][ T7408] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.887349][ T7408] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.041524][ T7408] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.200734][ T7408] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.908039][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.922976][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.932668][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.942306][ T4298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.949998][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.957676][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.084526][ T7685] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.253373][ T7684] rxe_eth0 speed is unknown, defaulting to 1000 [ 226.261770][ T128] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 226.279861][ T128] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 226.295808][ T128] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 226.333965][ T128] f81534: probe of 3-1:0.12 failed with error -71 [ 226.385153][ T128] usb 3-1: USB disconnect, device number 6 [ 227.619481][ T7684] chnl_net:caif_netlink_parms(): no params data found [ 227.818166][ T7740] sctp: [Deprecated]: syz.8.966 (pid 7740) Use of int in max_burst socket option. [ 227.818166][ T7740] Use struct sctp_assoc_value instead [ 227.974236][ T7729] ip_tables: iptables: counters copy to user failed while replacing table [ 228.046175][ T50] Bluetooth: hci1: command 0x0409 tx timeout [ 228.116028][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.123436][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.145403][ T7684] device bridge_slave_0 entered promiscuous mode [ 228.184369][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.215992][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.258056][ T7684] device bridge_slave_1 entered promiscuous mode [ 228.375000][ T7684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.446687][ T7408] device hsr_slave_0 left promiscuous mode [ 228.493756][ T7408] device hsr_slave_1 left promiscuous mode [ 228.504228][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.530433][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.576675][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.584275][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.642765][ T7408] device bridge_slave_1 left promiscuous mode [ 228.663060][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.687777][ T7408] device bridge_slave_0 left promiscuous mode [ 228.711110][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.868414][ T7737] loop2: detected capacity change from 0 to 32768 [ 228.918261][ T7408] device veth1_macvtap left promiscuous mode [ 228.924478][ T7408] device veth0_macvtap left promiscuous mode [ 228.946249][ T7408] device veth1_vlan left promiscuous mode [ 228.953291][ T7408] device veth0_vlan left promiscuous mode [ 229.001452][ T7737] XFS (loop2): Mounting V5 Filesystem [ 229.164322][ T7737] XFS (loop2): Ending clean mount [ 229.552659][ T4277] XFS (loop2): Unmounting Filesystem [ 230.133161][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 230.162521][ T7408] bond1 (unregistering): (slave macvlan0): Releasing active interface [ 230.212139][ T7408] bond1 (unregistering): Released all slaves [ 231.398201][ T7408] team0 (unregistering): Port device team_slave_1 removed [ 231.503033][ T7408] team0 (unregistering): Port device team_slave_0 removed [ 231.658294][ T7408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.777638][ T7408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.205888][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 232.811913][ T7408] bond0 (unregistering): Released all slaves [ 232.901703][ T7684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.020337][ T7684] team0: Port device team_slave_0 added [ 233.121841][ T7684] team0: Port device team_slave_1 added [ 233.357874][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.364917][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.410184][ T7684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.530805][ T7867] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.996'. [ 233.556432][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.563481][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.675869][ T7684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.783404][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.6.999'. [ 233.895300][ T7684] device hsr_slave_0 entered promiscuous mode [ 233.929379][ T7684] device hsr_slave_1 entered promiscuous mode [ 234.114154][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1004'. [ 234.127820][ T7894] loop8: detected capacity change from 0 to 164 [ 234.274905][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1004'. [ 234.285873][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 234.531186][ T7903] loop6: detected capacity change from 0 to 2048 [ 234.701048][ T7905] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.749516][ T7684] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 234.796836][ T7684] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 234.833475][ T7684] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 234.884286][ T7684] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 235.173536][ T7684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.248527][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.283084][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.314956][ T7684] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.347483][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.379122][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.442764][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.449956][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.522134][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.570622][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.598731][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.654420][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.661677][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.739230][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1012'. [ 235.759148][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.803183][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.828905][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.974858][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.054211][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.080238][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.132741][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.171581][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.214892][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.253065][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.290579][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.357636][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.162911][ T7967] ip_tables: iptables: counters copy to user failed while replacing table [ 237.236960][ T7967] ip_tables: iptables: counters copy to user failed while replacing table [ 237.457039][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.464629][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.473515][ T7977] tipc: Failed to remove unknown binding: 66,0,2/0:1487522101/1487522102 [ 237.499685][ T7684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.516446][ T7977] tipc: Failed to remove unknown binding: 66,0,2/0:1487522101/1487522102 [ 237.638444][ T7984] device macvlan0 entered promiscuous mode [ 237.660567][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1025'. [ 237.910048][ T7984] device macvlan0 left promiscuous mode [ 238.239388][ T8007] netlink: 64559 bytes leftover after parsing attributes in process `syz.6.1030'. [ 239.004634][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.028592][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.119528][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.135436][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.177723][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.247262][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.290415][ T7684] device veth0_vlan entered promiscuous mode [ 239.328938][ T7684] device veth1_vlan entered promiscuous mode [ 239.421190][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 239.453623][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 239.476657][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.503201][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.528012][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.545013][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.567304][ T7684] device veth0_macvtap entered promiscuous mode [ 239.597321][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 239.641315][ T7684] device veth1_macvtap entered promiscuous mode [ 239.716570][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.755745][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.786427][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.835527][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.856714][ T26] audit: type=1326 audit(2000000083.660:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.5.1040" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bd1a8f19 code=0x7ffc0000 [ 239.893399][ T8042] loop5: detected capacity change from 0 to 512 [ 239.893407][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.893428][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.943595][ T8042] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 239.967209][ T26] audit: type=1326 audit(2000000083.660:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.5.1040" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bd1a8f19 code=0x7ffc0000 [ 240.004646][ T8042] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.036800][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.072575][ T26] audit: type=1326 audit(2000000083.680:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.5.1040" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bd1a8f19 code=0x7ffc0000 [ 240.085826][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.152555][ T8042] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 94 vs 41 free clusters [ 240.174301][ T8042] Quota error (device loop5): write_blk: dquota write failed [ 240.182348][ T8042] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 240.187241][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.196295][ T8042] Quota error (device loop5): write_blk: dquota write failed [ 240.207173][ T8042] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 240.217745][ T8042] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.1040: Failed to acquire dquot type 1 [ 240.230427][ T8042] EXT4-fs (loop5): 1 truncate cleaned up [ 240.237250][ T8042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 240.255746][ T26] audit: type=1326 audit(2000000083.680:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.5.1040" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bd1a8f19 code=0x7ffc0000 [ 240.307554][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.326261][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.361364][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.375752][ T26] audit: type=1326 audit(2000000083.680:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.5.1040" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f73bd1a8f19 code=0x7ffc0000 [ 240.423006][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.445157][ T8051] loop2: detected capacity change from 0 to 4096 [ 240.457280][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.476855][ T26] audit: type=1326 audit(2000000083.680:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.5.1040" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bd1a8f19 code=0x7ffc0000 [ 240.501111][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.520904][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.544632][ T8051] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.556697][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.584228][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.615958][ T8051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.663742][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.684787][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.696871][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.710161][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.721335][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.730944][ T5457] EXT4-fs (loop5): unmounting filesystem. [ 240.763849][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.829264][ T7684] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.855736][ T7684] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.913694][ T7684] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.930678][ T7684] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.968376][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 241.178982][ T8061] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 241.329122][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.490613][ T8065] bond0: (slave gretap1): making interface the new active one [ 241.500737][ T8065] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 241.509945][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 241.549577][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.578308][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.634569][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.672100][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.683055][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.715986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.826264][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 243.491232][ T4291] Bluetooth: hci5: command 0x1003 tx timeout [ 243.499940][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.013092][ T8110] loop2: detected capacity change from 0 to 8192 [ 244.034159][ T8110] FAT-fs (loop2): Unrecognized mount option "0x00000000000000000xffffffffffffffff" or missing value [ 244.368586][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.902429][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.960466][ T8103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.837817][ T8103] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.853712][ T8103] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.863089][ T8103] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.879479][ T8103] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.067004][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 246.083564][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 246.337807][ T8143] block device autoloading is deprecated and will be removed. [ 246.369179][ T8143] md: loop0 has zero or unknown size, marking faulty! [ 246.390122][ T8143] md: md_import_device returned -22 [ 246.640685][ T8158] loop5: detected capacity change from 0 to 512 [ 246.682585][ T8158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.795053][ T8158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 246.811194][ T8158] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.060560][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 247.071058][ T50] CPU: 1 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 247.078503][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 247.088602][ T50] Workqueue: hci1 hci_rx_work [ 247.093328][ T50] Call Trace: [ 247.096651][ T50] [ 247.099605][ T50] dump_stack_lvl+0x188/0x24e [ 247.104322][ T50] ? show_regs_print_info+0x12/0x12 [ 247.109554][ T50] ? load_image+0x410/0x410 [ 247.114101][ T50] sysfs_create_dir_ns+0x26a/0x290 [ 247.119526][ T50] ? __lock_acquire+0x7ea0/0x7ea0 [ 247.124610][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 247.129343][ T50] ? do_raw_spin_unlock+0x11d/0x230 [ 247.134586][ T50] kobject_add_internal+0x617/0xca0 [ 247.139826][ T50] kobject_add+0x160/0x230 [ 247.144287][ T50] ? kobject_init+0x1c0/0x1c0 [ 247.148997][ T50] ? __raw_spin_lock_init+0x41/0x100 [ 247.154307][ T50] ? klist_children_get+0x50/0x50 [ 247.159361][ T50] ? get_device_parent+0x121/0x3e0 [ 247.164510][ T50] device_add+0x470/0x1050 [ 247.168965][ T50] hci_conn_add_sysfs+0xd1/0x1e0 [ 247.173986][ T50] le_conn_complete_evt+0x10db/0x17c0 [ 247.179488][ T50] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 247.185761][ T50] ? __copy_skb_header+0x3ba/0x4f0 [ 247.191079][ T50] ? memcpy+0x3c/0x60 [ 247.195096][ T50] ? skb_pull_data+0xec/0x1f0 [ 247.199808][ T50] hci_le_enh_conn_complete_evt+0x185/0x460 [ 247.205738][ T50] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 247.212187][ T50] hci_event_packet+0x61f/0xe60 [ 247.217089][ T50] ? hci_remote_host_features_evt+0x230/0x230 [ 247.223182][ T50] ? bis_list+0x280/0x280 [ 247.227807][ T50] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 247.233751][ T50] ? kcov_remote_start+0x50f/0x810 [ 247.238892][ T50] ? lockdep_hardirqs_on+0x94/0x140 [ 247.244211][ T50] ? hci_send_to_monitor+0x9c/0x4a0 [ 247.249467][ T50] hci_rx_work+0x3eb/0xd40 [ 247.253931][ T50] ? _raw_spin_unlock+0x40/0x40 [ 247.258824][ T50] ? process_one_work+0x7b4/0x1160 [ 247.263968][ T50] process_one_work+0x8ab/0x1160 [ 247.268966][ T50] ? worker_detach_from_pool+0x240/0x240 [ 247.274628][ T50] ? _raw_spin_lock_irq+0xb7/0xf0 [ 247.279678][ T50] ? _raw_spin_lock_irqsave+0x100/0x100 [ 247.285257][ T50] ? wq_worker_running+0x97/0x190 [ 247.290313][ T50] worker_thread+0xaf5/0x12a0 [ 247.295048][ T50] kthread+0x29d/0x330 [ 247.299141][ T50] ? worker_clr_flags+0x1a0/0x1a0 [ 247.304195][ T50] ? kthread_blkcg+0xd0/0xd0 [ 247.308833][ T50] ret_from_fork+0x1f/0x30 [ 247.313293][ T50] [ 247.327145][ T50] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.340504][ T50] Bluetooth: hci1: failed to register connection device [ 247.361825][ T5457] EXT4-fs (loop5): unmounting filesystem. [ 248.682797][ T8208] loop5: detected capacity change from 0 to 8192 [ 248.727457][ T8208] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.745809][ T8208] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 248.755315][ T8208] REISERFS (device loop5): using ordered data mode [ 248.855713][ T8208] reiserfs: using flush barriers [ 248.900903][ T8208] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.004297][ T8208] REISERFS (device loop5): checking transaction log (loop5) [ 249.356197][ T8234] FAULT_INJECTION: forcing a failure. [ 249.356197][ T8234] name failslab, interval 1, probability 0, space 0, times 0 [ 249.415753][ T8234] CPU: 0 PID: 8234 Comm: syz.8.1093 Not tainted syzkaller #0 [ 249.423278][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 249.433423][ T8234] Call Trace: [ 249.436750][ T8234] [ 249.439718][ T8234] dump_stack_lvl+0x188/0x24e [ 249.444466][ T8234] ? show_regs_print_info+0x12/0x12 [ 249.449723][ T8234] ? load_image+0x410/0x410 [ 249.454297][ T8234] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.459398][ T8234] should_fail_ex+0x390/0x4c0 [ 249.464140][ T8234] should_failslab+0x5/0x20 [ 249.468703][ T8234] slab_pre_alloc_hook+0x59/0x300 [ 249.473811][ T8234] ? sk_prot_alloc+0xe7/0x210 [ 249.478541][ T8234] __kmem_cache_alloc_node+0x4f/0x270 [ 249.483969][ T8234] ? sk_prot_alloc+0xe7/0x210 [ 249.488710][ T8234] __kmalloc+0xa3/0x240 [ 249.492919][ T8234] sk_prot_alloc+0xe7/0x210 [ 249.497469][ T8234] ? sk_alloc+0x20/0x330 [ 249.501759][ T8234] sk_alloc+0x36/0x330 [ 249.506007][ T8234] alg_create+0xa0/0x130 [ 249.510338][ T8234] __sock_create+0x49a/0x940 [ 249.514981][ T8234] __sys_socket+0xc4/0x190 [ 249.519462][ T8234] __x64_sys_socket+0x76/0x80 [ 249.524196][ T8234] do_syscall_64+0x4c/0xa0 [ 249.528693][ T8234] ? clear_bhb_loop+0x60/0xb0 [ 249.533454][ T8234] ? clear_bhb_loop+0x60/0xb0 [ 249.538200][ T8234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.544161][ T8234] RIP: 0033:0x7f246b3a8f19 [ 249.548626][ T8234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.568374][ T8234] RSP: 002b:00007f246c29b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 249.576850][ T8234] RAX: ffffffffffffffda RBX: 00007f246b625fa0 RCX: 00007f246b3a8f19 [ 249.584885][ T8234] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 249.593005][ T8234] RBP: 00007f246b437f6d R08: 0000000000000000 R09: 0000000000000000 [ 249.601030][ T8234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.609054][ T8234] R13: 00007f246b626038 R14: 00007f246b625fa0 R15: 00007ffdfefcf308 [ 249.617140][ T8234] [ 249.665831][ T8208] REISERFS (device loop5): Using tea hash to sort names [ 249.726440][ T8208] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 250.128290][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.240417][ T8259] overlayfs: failed to clone upperpath [ 250.285971][ T50] Bluetooth: hci1: command 0x0407 tx timeout [ 250.392369][ T8248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.577641][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 250.577657][ T26] audit: type=1326 audit(2000000094.380:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 250.688438][ T26] audit: type=1326 audit(2000000094.380:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 250.808477][ T26] audit: type=1326 audit(2000000094.380:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 250.955788][ T26] audit: type=1326 audit(2000000094.380:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 251.044687][ T26] audit: type=1326 audit(2000000094.380:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 251.132902][ T26] audit: type=1326 audit(2000000094.380:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 251.222998][ T26] audit: type=1326 audit(2000000094.380:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 251.270609][ T26] audit: type=1326 audit(2000000094.380:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 251.333158][ T26] audit: type=1326 audit(2000000094.380:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 251.357948][ T26] audit: type=1326 audit(2000000094.380:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.2.1095" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637f9a8f19 code=0x7fc00000 [ 251.656251][ T8298] ip_tables: iptables: counters copy to user failed while replacing table [ 251.710513][ T8300] fuse: Bad value for 'fd' [ 252.205893][ T22] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 252.418134][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.438940][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.468522][ T22] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.485776][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.504273][ T22] usb 6-1: Product: syz [ 252.509012][ T22] usb 6-1: Manufacturer: syz [ 252.518115][ T22] usb 6-1: SerialNumber: syz [ 252.750877][ T22] usb 6-1: 0:2 : does not exist [ 252.757131][ T22] usb 6-1: unit 9 not found! [ 252.798691][ T22] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4) [ 252.838414][ T22] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 252.866954][ T22] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 252.962440][ T22] usb 6-1: USB disconnect, device number 5 [ 253.249473][ T7371] udevd[7371]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.974864][ T8377] loop8: detected capacity change from 0 to 32768 [ 255.032465][ T8377] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1131 (8377) [ 255.196008][ T8377] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 255.247937][ T8377] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 255.281269][ T8377] BTRFS info (device loop8): using free space tree [ 255.648628][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655513][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.675924][ T8377] BTRFS info (device loop8): enabling ssd optimizations [ 256.155791][ T8431] FAULT_INJECTION: forcing a failure. [ 256.155791][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 256.169114][ T8431] CPU: 1 PID: 8431 Comm: syz.2.1140 Not tainted syzkaller #0 [ 256.176540][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 256.186636][ T8431] Call Trace: [ 256.189958][ T8431] [ 256.192926][ T8431] dump_stack_lvl+0x188/0x24e [ 256.197671][ T8431] ? show_regs_print_info+0x12/0x12 [ 256.202931][ T8431] ? load_image+0x410/0x410 [ 256.207489][ T8431] ? verify_lock_unused+0x140/0x140 [ 256.212741][ T8431] ? __kmalloc+0xb3/0x240 [ 256.217118][ T8431] should_fail_ex+0x390/0x4c0 [ 256.221872][ T8431] should_failslab+0x5/0x20 [ 256.226434][ T8431] slab_pre_alloc_hook+0x59/0x300 [ 256.231516][ T8431] ? flow_action_cookie_create+0x22/0x90 [ 256.237228][ T8431] __kmem_cache_alloc_node+0x4f/0x270 [ 256.242668][ T8431] ? flow_action_cookie_create+0x22/0x90 [ 256.248352][ T8431] __kmalloc+0xa3/0x240 [ 256.252559][ T8431] flow_action_cookie_create+0x22/0x90 [ 256.258076][ T8431] ? tc_setup_action+0x16c/0x9d0 [ 256.263076][ T8431] tc_setup_action+0x2e3/0x9d0 [ 256.267899][ T8431] ? tcf_action_offload_add_ex+0x3ed/0x800 [ 256.273761][ T8431] ? tc_cleanup_offload_action+0x130/0x130 [ 256.279721][ T8431] ? is_tcf_skbedit_with_flag+0x72/0x2d0 [ 256.285605][ T8431] tcf_action_offload_add_ex+0x4c5/0x800 [ 256.291285][ T8431] ? net_generic+0x240/0x240 [ 256.296131][ T8431] ? tcf_action_fill_size+0x1c/0x2d0 [ 256.301464][ T8431] ? tcf_action_fill_size+0x1c/0x2d0 [ 256.306793][ T8431] ? tcf_skbedit_get_fill_size+0x5/0x10 [ 256.312406][ T8431] tcf_action_init+0x2df/0x940 [ 256.317226][ T8431] ? tcf_action_init_1+0x6d0/0x6d0 [ 256.322490][ T8431] tc_ctl_action+0x40e/0xbd0 [ 256.327141][ T8431] ? tca_get_fill+0x550/0x550 [ 256.331885][ T8431] ? trace_raw_output_contention_end+0xd0/0xd0 [ 256.338142][ T8431] ? tca_get_fill+0x550/0x550 [ 256.342873][ T8431] rtnetlink_rcv_msg+0x863/0xfb0 [ 256.347872][ T8431] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 256.353043][ T8431] ? rtnetlink_bind+0x80/0x80 [ 256.357776][ T8431] ? __local_bh_enable_ip+0x136/0x1c0 [ 256.363195][ T8431] ? lockdep_hardirqs_on+0x94/0x140 [ 256.368560][ T8431] ? __local_bh_enable_ip+0x136/0x1c0 [ 256.373982][ T8431] ? _local_bh_enable+0xa0/0xa0 [ 256.378886][ T8431] ? __dev_queue_xmit+0x274/0x3a70 [ 256.384039][ T8431] ? __dev_queue_xmit+0x274/0x3a70 [ 256.389204][ T8431] ? __dev_queue_xmit+0x1496/0x3a70 [ 256.394458][ T8431] ? __dev_queue_xmit+0x274/0x3a70 [ 256.399634][ T8431] ? ref_tracker_free+0x682/0x830 [ 256.404706][ T8431] ? refcount_inc+0x70/0x70 [ 256.409267][ T8431] ? memcpy+0x3c/0x60 [ 256.413293][ T8431] ? __copy_skb_header+0x3ba/0x4f0 [ 256.418491][ T8431] ? __skb_clone+0x446/0x6c0 [ 256.423159][ T8431] netlink_rcv_skb+0x1ef/0x440 [ 256.427982][ T8431] ? rtnetlink_bind+0x80/0x80 [ 256.432748][ T8431] ? netlink_ack+0x1160/0x1160 [ 256.437571][ T8431] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.442848][ T8431] netlink_unicast+0x7ad/0x920 [ 256.447703][ T8431] netlink_sendmsg+0x8ad/0xbd0 [ 256.452531][ T8431] ? netlink_getsockopt+0x550/0x550 [ 256.457783][ T8431] ? apparmor_socket_sendmsg+0x16c/0x330 [ 256.463467][ T8431] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 256.468794][ T8431] ? security_socket_sendmsg+0x7c/0xa0 [ 256.474296][ T8431] ? netlink_getsockopt+0x550/0x550 [ 256.479551][ T8431] ____sys_sendmsg+0x5ed/0x9a0 [ 256.484375][ T8431] ? __sys_sendmsg_sock+0x30/0x30 [ 256.489454][ T8431] ? __import_iovec+0x306/0x510 [ 256.494355][ T8431] ? import_iovec+0x6f/0xa0 [ 256.498907][ T8431] ___sys_sendmsg+0x2a2/0x360 [ 256.503667][ T8431] ? __sys_sendmsg+0x2a0/0x2a0 [ 256.508532][ T8431] __se_sys_sendmsg+0x1c3/0x2b0 [ 256.513443][ T8431] ? __x64_sys_sendmsg+0x80/0x80 [ 256.518448][ T8431] ? lockdep_hardirqs_on+0x94/0x140 [ 256.523697][ T8431] do_syscall_64+0x4c/0xa0 [ 256.528163][ T8431] ? clear_bhb_loop+0x60/0xb0 [ 256.532892][ T8431] ? clear_bhb_loop+0x60/0xb0 [ 256.537661][ T8431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.543621][ T8431] RIP: 0033:0x7f637f9a8f19 [ 256.548113][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.567786][ T8431] RSP: 002b:00007f63808c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.576259][ T8431] RAX: ffffffffffffffda RBX: 00007f637fc25fa0 RCX: 00007f637f9a8f19 [ 256.584289][ T8431] RDX: 000000002400c808 RSI: 0000200000000380 RDI: 0000000000000004 [ 256.592347][ T8431] RBP: 00007f637fa37f6d R08: 0000000000000000 R09: 0000000000000000 [ 256.600381][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.608406][ T8431] R13: 00007f637fc26038 R14: 00007f637fc25fa0 R15: 00007ffc472304f8 [ 256.616441][ T8431] [ 256.676886][ T8377] BTRFS info (device loop8): balance: start -d -m [ 256.875554][ T8377] BTRFS info (device loop8): relocating block group 6881280 flags data|metadata [ 257.224381][ T8377] BTRFS info (device loop8): relocating block group 5242880 flags data|metadata [ 257.326818][ T8445] ip_tables: iptables: counters copy to user failed while replacing table [ 257.348082][ T8445] ip_tables: iptables: counters copy to user failed while replacing table [ 257.446811][ T8377] BTRFS info (device loop8): balance: canceled [ 257.676989][ T7019] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 257.725813][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 258.849900][ T8480] netlink: 'syz.5.1152': attribute type 4 has an invalid length. [ 258.978850][ T8483] device ipvlan2 entered promiscuous mode [ 259.032424][ T8483] team0: Device ipvlan2 failed to register rx_handler [ 259.765191][ T8514] loop8: detected capacity change from 0 to 512 [ 259.864138][ T8514] EXT4-fs (loop8): 1 truncate cleaned up [ 259.895496][ T8514] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 260.220126][ T7019] EXT4-fs (loop8): unmounting filesystem. [ 262.635873][ T27] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 262.677733][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1183'. [ 262.850103][ T27] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.881275][ T27] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 262.908643][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.952759][ T27] usb 10-1: config 0 descriptor?? [ 263.040373][ T8595] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1185'. [ 263.104310][ T8595] unsupported nlmsg_type 40 [ 263.195492][ T27] usbhid 10-1:0.0: can't add hid device: -71 [ 263.204400][ T27] usbhid: probe of 10-1:0.0 failed with error -71 [ 263.222323][ T8598] loop2: detected capacity change from 0 to 1024 [ 263.237114][ T27] usb 10-1: USB disconnect, device number 2 [ 263.258846][ T8601] netlink: 197348 bytes leftover after parsing attributes in process `syz.6.1188'. [ 263.287244][ T8598] ext4: Unknown parameter 'noacl' [ 263.805873][ T27] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 263.836269][ T8621] fuse: Bad value for 'fd' [ 263.999560][ T8628] ip_tables: iptables: counters copy to user failed while replacing table [ 264.008821][ T27] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.028904][ T27] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 264.045209][ T8628] raw_sendmsg: syz.5.1195 forgot to set AF_INET. Fix it! [ 264.054697][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.092633][ T27] usb 10-1: config 0 descriptor?? [ 264.957162][ T27] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 264.995206][ T27] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input9 [ 265.483707][ T6610] usb 10-1: USB disconnect, device number 3 [ 265.483767][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 265.778960][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1203'. [ 267.955711][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.019927][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.128511][ T8715] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.201963][ T8715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.246594][ T8719] fuse: Bad value for 'fd' [ 269.279228][ T8746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'. [ 269.694667][ T8760] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 269.736335][ T8763] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 269.736335][ T8763] The task syz.2.1228 (8763) triggered the difference, watch for misbehavior. [ 269.796695][ T8760] bond2: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 271.653680][ T4375] rpcbind: server 127.0.0.1 not responding, timed out [ 271.715800][ T6610] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 271.750809][ T8826] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.964846][ T6610] usb 3-1: Using ep0 maxpacket: 32 [ 271.974387][ T6610] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 272.014081][ T6610] usb 3-1: config 0 has no interface number 0 [ 272.040134][ T6610] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.090583][ T6610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.112146][ T6610] usb 3-1: Product: syz [ 272.132574][ T6610] usb 3-1: Manufacturer: syz [ 272.159007][ T6610] usb 3-1: SerialNumber: syz [ 272.190932][ T6610] usb 3-1: config 0 descriptor?? [ 272.212603][ T6610] smsc95xx v2.0.0 [ 272.620376][ T6610] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 272.660171][ T6610] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.005938][ T4281] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 273.085851][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 273.215250][ T4281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.250365][ T4281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.284415][ T4281] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 273.324251][ T4281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.364955][ T4281] usb 6-1: config 0 descriptor?? [ 273.711141][ T6610] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 273.729257][ T6610] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 273.759878][ T6610] usb 3-1: USB disconnect, device number 7 [ 273.807268][ T4281] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 273.814323][ T4281] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 273.851919][ T4281] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 273.876797][ T4281] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 273.903468][ T4281] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 273.928017][ T4281] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 273.942781][ T4281] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 273.973891][ T4281] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 274.066702][ T4281] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 274.341626][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1258'. [ 274.671575][ T8848] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 274.691414][ T4281] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 274.751313][ T4281] usb 6-1: USB disconnect, device number 6 [ 274.905461][ T8905] loop8: detected capacity change from 0 to 512 [ 274.949100][ T8905] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 275.061646][ T8909] fido_id[8909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 276.015453][ T8946] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1275'. [ 276.589862][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.681993][ T8960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.241735][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1283'. [ 277.648808][ T8985] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 278.278579][ T9006] Bluetooth: Short BCSP packet [ 278.728815][ T9030] sctp: [Deprecated]: syz.6.1304 (pid 9030) Use of int in maxseg socket option. [ 278.728815][ T9030] Use struct sctp_assoc_value instead [ 279.004310][ T9040] loop5: detected capacity change from 0 to 256 [ 279.493739][ T9058] MPTCP: kernel_bind error, err=-99 [ 279.496266][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 279.763984][ T9053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.820882][ T6610] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 280.286287][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110