last executing test programs: 3m57.132828472s ago: executing program 32 (id=95): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xa, 0x5, 0xfff, 0x8, r3}, 0x10) 3m50.71746412s ago: executing program 33 (id=136): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) listen(r1, 0x7) 3m35.950718004s ago: executing program 4 (id=225): r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x2040420, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) 3m35.72913911s ago: executing program 4 (id=228): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 3m35.447012306s ago: executing program 4 (id=232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18083, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 3m34.383353683s ago: executing program 4 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r1, &(0x7f0000000100)="84fc4a26", 0x4, 0x84fed1) r2 = openat(0xffffffffffffff9c, 0x0, 0x129042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x0) 3m34.197545157s ago: executing program 4 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m33.998940282s ago: executing program 4 (id=245): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c00050008"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 3m28.304378283s ago: executing program 0 (id=277): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) 3m28.069878238s ago: executing program 0 (id=280): read$watch_queue(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0x7d, 0x4) 3m27.879026503s ago: executing program 0 (id=282): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 3m27.559784081s ago: executing program 0 (id=283): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000340)={[{@bsdgroups}, {@norecovery}, {@prjquota}, {@noquota}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$eJzs3c9rG9kdAPDvyJbtOGntQqFNT4ZCawiR69RNWig0pYdSaCDQnpMYWTGpZStYcoiNIQml0EsPLT0sbC45b3azt1z3x3X3sn/DHpaE7K4TNsseFi8jjRLZlhwltuQs/nxgrPdmnvTeV2/mzbNmkAI4tCbSP7mI4xH5NDmWrU8iWxGDEWcb5Z5urBfTJYnNzb99kdTLPNlYL0bLc1JHs8xPI+KDf0WcyO2st7q6tjBbLpeWs/xUbfHqVHV17eSVxdn50nxp6fT0zMypM785c3r/Yv3q47VjD//751++c/abf/7k3n8+TOJsHMu2tcaxXyZiIntP8ulbuMWf9ruyA5Z0VaabUvRTemgONI7yOB5jMbBLH/2hry0DAHrlRkRsAgCHTOL8DwCHTPNzgCcb68XmEo3rOTcP9IOJPnn0x4gYacTfvL7Z2DLYuGb3yUj9Oujok6R+jaQpiYjxfah/IiJu379wN12iR9chAdq5eSsiLo1PbB//0xFu+z0LL+tXXZSZ2JY3/kH/vJfOf367c/4XkcuO/5H63+3zn+E2x+6rePHxn3uwJZvfh0pbpPO/37fc2/a0Jf7M+ECW+0F9zpdPLl8pl9Kx7YcRMRn54TQ/vUsdk4+/fdxpW+v878v//eOttP708XmJ3IPB4a3PmZutze4l5laPbkX8bLBd/Mmz/k86zH/Pd1nHX3737zc7bUvjT+NtLjvj763NOxG/aNv/z++DSna9P3GqvjtMNXeKNt799I3RTvW39v/t+2lN68Xm/wL9kPb/6O7xjyet92tWX76Oj+6Mvd9p29b4L9xN698af/v9fyj5ez09lK27PlurLU9HDCV/3bn+1PPnNvPN8mn8kz9vf/zvtv+nw9ClLL35gtsaBx9+/varx99bafxzaf8nWRAv7P+XT9x7ujDQqf7u+n+mnprM1uwc/wZ3vG63DdzTmwcAAAAAAAAAAAAAAAAAAAAAAAAAXcpFxLFIcoVn6VyuUGj8hvePYzRXrlRrJy5XVpbmov5b2eORzzW/6nKs5ftQp7Pvw2/mT23L/zoifhQR/x8+Us8XipXy3EEHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACZox1+/z/12fBBtw4A6JmRg24AANB3zv8AcPh0OP8PtV99pKdtAQD6o37+TwYPuhkAQB/5/B8ADh/nfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrs/Llz6bL59cZ6Mc3PXVtdWahcOzlXqi4UFleKhWJl+WphvlKZL5cKxcpixxe62XgoVypXZ2Jp5fpUrVStTVVX1y4uVlaWahevLM7Oly6W8n2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6V11dW5gtl0vLErsnbrwWzbiVddueXzAfr0M4EntLDEdEr6poHSWOHMzgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA98F0AAAD///BHHvM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r2) setreuid(0xffffffffffffffff, 0xee01) write$cgroup_pid(r1, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 3m27.126858562s ago: executing program 0 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 3m25.932377871s ago: executing program 0 (id=295): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 3m25.760969065s ago: executing program 34 (id=295): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 3m18.890135535s ago: executing program 35 (id=245): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c00050008"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 3m7.75675111s ago: executing program 5 (id=385): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) 3m5.995483803s ago: executing program 5 (id=396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x1, 0xff, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 3m4.852509141s ago: executing program 5 (id=404): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0300"}) 3m4.601935438s ago: executing program 5 (id=408): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x39d, &(0x7f00000013c0)="$eJzs3T1vW9UbAPAnbvPW/79xBoQECHHUjcVKwhdohFoJEQkUalQ6IG6JU6y4cWRbQa4QZEBi5RuwV4xsSIgvkAF2NrYsjB2qGvkttVOnrzGXit9Pis5jn+e5OceWr85y9Rxd//72znaztJ21onA5RSEiCvcilntR38xgLPTiuRh1EG8Xr//x5kef3Hh/fWPjymZKV9evvbOWUlp665cvv/rx0q+t/33809LP83G4/OnRX2t/Hr56+NrRg2tfVJup2ky79VbK0s16vZXdrFXSVrW5U0rpw1ola1ZSdbdZaYzNb9fqe3vtlO1uXbyw16g0mynbbaedSju16qnVaKfsVlbdTaVSKV28EDxJ+e7mZrbejxcek3f5n1oQU9BorGfd3/D8IzPlu7ksCADI1XOf/w/6w9xTnf9vFEbO/wtx6vl/Npz/z8Ts06WNnv+f+yL8y3XP/3OD3+84538AAAAAAAAAAAAAAHgZ3Ot0ip1OpzgcO8OHhAevc14eU/bI93/ibyR1JsdlMiUjD+4tRNS+2y/vl/tjf359O6pRi0qsRDHud28LQ/346nsbV1ZSz3JcvP1Nr/7SbxHlc+P1q1GM5cn1q/36dFwf3XE2LozWr8Vn8crk+rWJ9XOx8sNIfSmK8fvnUY9abPVubw/rv15N6d0PNk7Uz/fyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhvKKWhN6Lf936/HLEY+4P+/aWHCcvj/fH79cf99VeiGPcn9+dfmdif/3y8fj7fvQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAULN9Zyer1SqNsw0WT50a9vzvvTM3DE6/4Ew//eDE1GKMJ88/6TovGBSeqWpxsMkJUw86nU4vuPXtmS91YTp7n0YwGxGPyekMPsAX/1//j4jRd86N58xHxFR3utQNCvl/4M8c5HE3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHwdN/3uvpjJezUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkpdm+s5PVapXGFIO89wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAy+TsAAP//6DcLSg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x2, 0x8ffff) 3m3.036127396s ago: executing program 5 (id=419): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) syz_clone(0x68104091, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20042, 0x40) 3m2.415014731s ago: executing program 5 (id=423): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect$uac3(0x5, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x45, 0x10, 0xe4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x35}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x1e, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x405, 0x6, 0x4, 0xc9, 0x3, 0x80, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x9, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xfd, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0xd, 0xd}}}}}}}}]}}, 0x0) setfsuid(0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m1.900387534s ago: executing program 36 (id=423): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect$uac3(0x5, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x45, 0x10, 0xe4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x35}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x1e, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x405, 0x6, 0x4, 0xc9, 0x3, 0x80, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x9, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xfd, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0xd, 0xd}}}}}}}}]}}, 0x0) setfsuid(0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m31.294897029s ago: executing program 1 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) socket$kcm(0x11, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 2m31.042623785s ago: executing program 1 (id=692): syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x8, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) fcntl$setlease(r0, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 2m30.897000788s ago: executing program 1 (id=694): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80801, 0x10) 2m30.607022476s ago: executing program 1 (id=697): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x39d, &(0x7f00000013c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x2, 0x8ffff) 2m30.557911577s ago: executing program 6 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.209288906s ago: executing program 1 (id=700): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150fdf0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcb05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc28afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f2724f5024a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4a7e642fdc56d11c2ec87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b09ffd42a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3da452647e342e2591be4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0xffffffffffffffff, 0xfffffffffffffe, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40, 0x3}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.092158709s ago: executing program 6 (id=701): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) rt_sigtimedwait(&(0x7f0000000080)={[0xffffffffffffff7f]}, 0x0, 0x0, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 2m29.779975516s ago: executing program 6 (id=703): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m29.647085409s ago: executing program 1 (id=704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8, 0x0, 0x3fffffffd, 0x80000001, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {0xfffffffffffffffd}, 0x0, 0x6, 0x1b91ce1394114402}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xffffffff, 0x6c}, 0x0, @in6=@loopback, 0x3503, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x200003}}, 0xe8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3}) 2m29.019164195s ago: executing program 37 (id=704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8, 0x0, 0x3fffffffd, 0x80000001, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {0xfffffffffffffffd}, 0x0, 0x6, 0x1b91ce1394114402}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xffffffff, 0x6c}, 0x0, @in6=@loopback, 0x3503, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x200003}}, 0xe8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3}) 2m28.562567516s ago: executing program 6 (id=712): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x39d, &(0x7f00000013c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x2, 0x8ffff) 2m28.070712518s ago: executing program 6 (id=714): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x5, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m27.327627657s ago: executing program 6 (id=718): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000400)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4, r1}, 0x10) 2m26.933031656s ago: executing program 38 (id=718): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000400)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4, r1}, 0x10) 10.999047889s ago: executing program 3 (id=1597): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 9.642778072s ago: executing program 3 (id=1600): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x33) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) 7.485460085s ago: executing program 3 (id=1615): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xea, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1106, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfc, 0x7}}}}}]}}]}}, 0x0) setns(0xc9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x4}}}, 0x7) syz_emit_vhci(0x0, 0x17) 5.570539962s ago: executing program 3 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f00000001c0)='0\x00', 0x2) 5.299104109s ago: executing program 3 (id=1622): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5.214461061s ago: executing program 3 (id=1623): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000002e0001002dbd7000fbdbdf2508000d00", @ANYRES32, @ANYBLOB="1c00458018001b800c005700070000000000000008000100", @ANYRES32], 0x34}], 0x1, 0x0, 0x0, 0x4050}, 0xc000) socket$inet6(0xa, 0x800000000000002, 0x0) syz_io_uring_setup(0x5b64, 0x0, 0x0, &(0x7f0000000100), 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 4.166937937s ago: executing program 8 (id=1630): getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0xf0}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68fd5d7c3d516dce08adf9b56f1b52064b280f6", 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x800000, 0x4, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) 4.115376218s ago: executing program 7 (id=1631): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000980)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, 0x0, 0x0, 0x407f0b00}]) 4.06153802s ago: executing program 2 (id=1632): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000280)={0x2, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240)={0xa, {0x3, 0xb, 0x98}}, 0xa) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.907570363s ago: executing program 8 (id=1634): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") r0 = gettid() timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3.875191504s ago: executing program 7 (id=1635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000e35000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x7, 0x4000040000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0x7, 0x8000, 0xd, 0x0, 0x0, 0x1, 0xfffffdff}}, {0x0, 0xc3293c87af04c7fd}}}, 0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xfec08000, 0x40000, 0xc, 0xf1, 0x25, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x6}, {0x1ffe, 0x1, 0xa, 0x19, 0x8, 0x3, 0x42, 0xb, 0x7, 0x41, 0x7, 0x45}, {0x8080000, 0xdddd1000, 0xf, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0xa, 0x5, 0x10, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x60000, 0xffff1000, 0x10, 0x2, 0x3, 0x9, 0x4, 0xc3, 0x4, 0x94, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb3, 0x1, 0xff, 0x7}, {0x6000, 0x6}, {0x40000, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14008a, 0x6, 0x0, 0xe6e70c00, [0x7, 0x401, 0x8, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x4, 0x8, 0x0, 0x882, 0x6, 0x7, 0x4, 0x5, 0x4, 0x6, 0x6, 0x0, 0x3fe, 0x985, 0x7, 0x7, 0x1, 0x7, '\x00', 0x7, 0x5}) 3.704162019s ago: executing program 7 (id=1636): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)=ANY=[], 0x835, 0x1) sync() sync() openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 3.592192461s ago: executing program 8 (id=1637): socket(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) 3.469179824s ago: executing program 9 (id=1639): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x9, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000), 0x100000000000005f) timer_create(0x0, 0x0, 0x0) mmap$IORING_OFF_PBUF_RING(0x0, 0x2, 0x1000004, 0x2010, 0xffffffffffffffff, 0x87973a9d) 3.188843401s ago: executing program 8 (id=1640): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000012c0)={0x2c, &(0x7f0000001140)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0}) 3.173008452s ago: executing program 7 (id=1641): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) 3.050951924s ago: executing program 7 (id=1642): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)={[{@mblk_io_submit}, {@nobarrier}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}, {@nobarrier}]}, 0x4, 0xbbf, &(0x7f0000000700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc0202103, 0x0) r1 = open(&(0x7f0000000800)='./file1\x00', 0x105142, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) fallocate(r2, 0x0, 0x3f, 0x8000c62) sendfile(r1, r1, 0x0, 0x7a680000) 3.007084886s ago: executing program 2 (id=1643): socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) write$dsp(r0, &(0x7f0000000200)="bb", 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 2.513473128s ago: executing program 8 (id=1644): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 2.462869959s ago: executing program 9 (id=1645): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 1.360477736s ago: executing program 8 (id=1646): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x500) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.359838456s ago: executing program 7 (id=1656): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.359300056s ago: executing program 2 (id=1647): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000042, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) 1.297140438s ago: executing program 9 (id=1648): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.18462833s ago: executing program 2 (id=1649): r0 = socket$inet6(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x7, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x9}}, 0x14) 1.026051954s ago: executing program 9 (id=1650): r0 = socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) ftruncate(0xffffffffffffffff, 0x4a8e) rename(0x0, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r1, 0x0, 0x3ffffffffd, 0x3) 657.263523ms ago: executing program 2 (id=1651): socket(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) 657.103733ms ago: executing program 9 (id=1652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 392.99234ms ago: executing program 9 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d2838", 0x19}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 0s ago: executing program 2 (id=1654): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) kernel console output (not intermixed with test programs): dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 186.021845][ T6701] FAULT_INJECTION: forcing a failure. [ 186.021845][ T6701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.064481][ T4598] usb 10-1: USB disconnect, device number 2 [ 186.086568][ T4598] usblp0: removed [ 186.120636][ T6701] CPU: 0 PID: 6701 Comm: syz.1.677 Not tainted syzkaller #0 [ 186.128009][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.138135][ T6701] Call Trace: [ 186.141456][ T6701] [ 186.144420][ T6701] dump_stack_lvl+0x188/0x24e [ 186.149151][ T6701] ? show_regs_print_info+0x12/0x12 [ 186.154394][ T6701] ? load_image+0x410/0x410 [ 186.158951][ T6701] ? __lock_acquire+0x7ea0/0x7ea0 [ 186.164045][ T6701] should_fail_ex+0x390/0x4c0 [ 186.168778][ T6701] prepare_alloc_pages+0x1e1/0x5b0 [ 186.173941][ T6701] __alloc_pages+0x130/0x4f0 [ 186.178590][ T6701] ? zone_statistics+0x170/0x170 [ 186.183591][ T6701] ? mark_lock+0x94/0x320 [ 186.187981][ T6701] ? __lock_acquire+0x142d/0x7ea0 [ 186.193078][ T6701] pte_alloc_one+0x7b/0x310 [ 186.197636][ T6701] ? pfn_modify_allowed+0x560/0x560 [ 186.202884][ T6701] ? count_memcg_event_mm+0x8a/0x3c0 [ 186.208222][ T6701] ? khugepaged_enter_vma+0x102/0x120 [ 186.213647][ T6701] do_huge_pmd_anonymous_page+0x852/0x1510 [ 186.219524][ T6701] ? count_memcg_event_mm+0x36b/0x3c0 [ 186.224948][ T6701] ? count_memcg_event_mm+0x8a/0x3c0 [ 186.230279][ T6701] ? vma_thp_gfp_mask+0x160/0x160 [ 186.235367][ T6701] ? hugepage_vma_check+0x46d/0x540 [ 186.240624][ T6701] handle_mm_fault+0x11f0/0x3d40 [ 186.245675][ T6701] ? numa_migrate_prep+0x250/0x250 [ 186.250858][ T6701] __get_user_pages+0x40d/0xec0 [ 186.255778][ T6701] ? populate_vma_page_range+0x2b0/0x2b0 [ 186.261484][ T6701] populate_vma_page_range+0x214/0x2b0 [ 186.267000][ T6701] __mm_populate+0x25c/0x380 [ 186.271652][ T6701] ? check_vma_flags+0x4c0/0x4c0 [ 186.276681][ T6701] ? up_write+0x1b6/0x410 [ 186.281060][ T6701] ? do_mlock+0x194/0x640 [ 186.285433][ T6701] do_mlock+0x53a/0x640 [ 186.289648][ T6701] ? lru_gen_add_folio+0xe20/0xe20 [ 186.294809][ T6701] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.300848][ T6701] ? lock_chain_count+0x20/0x20 [ 186.305754][ T6701] ? syscall_enter_from_user_mode+0x21/0x80 [ 186.311793][ T6701] __x64_sys_mlock+0x5c/0x70 [ 186.316456][ T6701] do_syscall_64+0x4c/0xa0 [ 186.320917][ T6701] ? clear_bhb_loop+0x60/0xb0 [ 186.325642][ T6701] ? clear_bhb_loop+0x60/0xb0 [ 186.330380][ T6701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.336320][ T6701] RIP: 0033:0x7fee5a19e199 [ 186.340775][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.360430][ T6701] RSP: 002b:00007fee5afa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 186.368899][ T6701] RAX: ffffffffffffffda RBX: 00007fee5a425fa0 RCX: 00007fee5a19e199 [ 186.376916][ T6701] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 186.384928][ T6701] RBP: 00007fee5a2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 186.392943][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.401042][ T6701] R13: 00007fee5a426038 R14: 00007fee5a425fa0 R15: 00007ffde3856268 [ 186.409071][ T6701] [ 187.196241][ T6702] loop6: detected capacity change from 0 to 32768 [ 187.276856][ T6702] JBD2: Ignoring recovery information on journal [ 187.409196][ T6702] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 187.649548][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 187.793255][ T4852] ocfs2: Unmounting device (7,6) on (node local) [ 188.340039][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.363386][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.386534][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.411570][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.463925][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.497212][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.532637][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.556622][ T4605] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 188.584506][ T4605] hid-generic 0000:0000:0001.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 188.831107][ T6762] loop7: detected capacity change from 0 to 1024 [ 188.853416][ T6758] fido_id[6758]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.887893][ T6762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.917670][ T6762] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.005986][ T6762] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 189.140072][ T6395] udevd[6395]: incorrect ext4 checksum on /dev/loop7 [ 189.154684][ T6762] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.683: Invalid inode table block 15696045716092632849 in block_group 0 [ 189.170224][ T6762] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.683: Invalid inode table block 15696045716092632849 in block_group 0 [ 189.207334][ T6762] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 189.228496][ T6762] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #15: comm syz.7.683: mark_inode_dirty error [ 189.271288][ T6762] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.683: Invalid inode table block 15696045716092632849 in block_group 0 [ 189.304239][ T6762] EXT4-fs error (device loop7): ext4_get_max_inline_size:116: inode #15: comm syz.7.683: can't get inode location 15 [ 189.349116][ T6762] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.683: Invalid inode table block 15696045716092632849 in block_group 0 [ 189.467528][ T57] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm kworker/u4:4: Invalid inode table block 15696045716092632849 in block_group 0 [ 189.522128][ T5364] EXT4-fs (loop7): unmounting filesystem. [ 189.835702][ T6799] loop1: detected capacity change from 0 to 512 [ 189.982289][ T6799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 190.033979][ T6799] FAT-fs (loop1): Filesystem has been set read-only [ 190.151135][ T4272] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.214673][ T4272] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 190.806760][ T4319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.039551][ T4319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.242563][ T4319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.411746][ T4319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.969091][ T6838] loop6: detected capacity change from 0 to 512 [ 192.130273][ T6838] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 192.170015][ T6838] FAT-fs (loop6): Filesystem has been set read-only [ 192.299916][ T4852] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 192.348920][ T4852] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 192.501810][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.512791][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.521097][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.530169][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.538521][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.553905][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.955175][ T6845] lo speed is unknown, defaulting to 1000 [ 192.962797][ T6857] netlink: 'syz.7.717': attribute type 1 has an invalid length. [ 193.159439][ T6857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.215512][ T6854] netlink: 'syz.9.716': attribute type 4 has an invalid length. [ 193.354208][ T6858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.381742][ T6858] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 193.414365][ T6858] bond1: (slave vti0): Error -95 calling set_mac_address [ 193.449925][ T6855] netlink: 'syz.9.716': attribute type 4 has an invalid length. [ 193.777277][ T6884] 9pnet_fd: Insufficient options for proto=fd [ 194.057285][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.064351][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.079348][ T6887] netlink: 'syz.9.724': attribute type 1 has an invalid length. [ 194.207352][ T6887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.335895][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.347550][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.357264][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.366728][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.377886][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.385531][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.488543][ T6892] bond1: (slave veth3): Enslaving as an active interface with a down link [ 194.557860][ T6894] bond1: (slave syz_tun): making interface the new active one [ 194.585768][ T6894] device syz_tun entered promiscuous mode [ 194.595632][ T6894] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 194.617413][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 194.647801][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 194.684585][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 194.804412][ T6895] lo speed is unknown, defaulting to 1000 [ 195.066587][ T4319] device hsr_slave_0 left promiscuous mode [ 195.092846][ T4319] device hsr_slave_1 left promiscuous mode [ 195.119706][ T4319] batman_adv: batadv0: Interface deactivated: dummy0 [ 195.132592][ T4319] batman_adv: batadv0: Removing interface: dummy0 [ 195.155839][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.176759][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.196575][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.216713][ T4319] device vlan2 left promiscuous mode [ 195.222071][ T4319] device vlan0 left promiscuous mode [ 195.238372][ T4319] bridge0: port 3(vlan2) entered disabled state [ 195.258011][ T4319] device bridge_slave_1 left promiscuous mode [ 195.271939][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.302250][ T4319] device bridge_slave_0 left promiscuous mode [ 195.316131][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.430641][ T4319] device veth1_macvtap left promiscuous mode [ 195.452932][ T4319] device veth0_macvtap left promiscuous mode [ 195.472980][ T4319] device veth1_vlan left promiscuous mode [ 195.491183][ T4319] device veth0_vlan left promiscuous mode [ 195.757252][ T4319] infiniband syz0: set down [ 195.772416][ T4319] bond1 (unregistering): Released all slaves [ 196.409370][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 196.449034][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 196.474256][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 196.522690][ T4319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.571261][ T4319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.765078][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 196.992277][ T4319] bond0 (unregistering): Released all slaves [ 197.056312][ T4641] smc: removing ib device syz0 [ 197.066276][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.073525][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.083462][ T6845] device bridge_slave_0 entered promiscuous mode [ 197.095938][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.103230][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.133198][ T6845] device bridge_slave_1 entered promiscuous mode [ 197.146043][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.9.729'. [ 197.235525][ T6911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.305501][ T6915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.312572][ T6915] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 197.327534][ T6915] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 197.386460][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.731'. [ 197.422996][ T4605] infiniband syz0: ib_query_port failed (-19) [ 197.513798][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.9.733'. [ 197.617474][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.710548][ T6937] syz.7.735 sent an empty control message without MSG_MORE. [ 197.742283][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.902218][ T6845] team0: Port device team_slave_0 added [ 197.945731][ T6845] team0: Port device team_slave_1 added [ 198.035891][ T6951] netlink: 'syz.7.736': attribute type 1 has an invalid length. [ 198.153967][ T6951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.325888][ T6953] bond2: (slave veth7): Enslaving as an active interface with a down link [ 198.494985][ T6955] bond2: (slave syz_tun): making interface the new active one [ 198.524367][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 198.539798][ T6955] device syz_tun entered promiscuous mode [ 198.564050][ T6955] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 198.594183][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.601188][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.764129][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.823253][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 198.843870][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 198.932954][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.943812][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.999625][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.238816][ T6845] device hsr_slave_0 entered promiscuous mode [ 199.274752][ T6845] device hsr_slave_1 entered promiscuous mode [ 199.304438][ T4600] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 199.312249][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.337911][ T6845] Cannot create hsr debugfs directory [ 199.353898][ T6981] netlink: 'syz.7.742': attribute type 4 has an invalid length. [ 199.371358][ T6982] netlink: 'syz.7.742': attribute type 4 has an invalid length. [ 199.445741][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 199.513811][ T4600] usb 10-1: Using ep0 maxpacket: 16 [ 199.520932][ T4600] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.571759][ T4600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.603364][ T4600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.628613][ T4600] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.646094][ T4600] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.713411][ T4600] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.805773][ T4600] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.842081][ T4600] usb 10-1: Manufacturer: syz [ 199.933788][ T4600] usb 10-1: config 0 descriptor?? [ 200.016729][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.047869][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.083987][ T6895] device bridge_slave_0 entered promiscuous mode [ 200.149315][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.189194][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.225093][ T6895] device bridge_slave_1 entered promiscuous mode [ 200.453757][ T4600] rc_core: IR keymap rc-hauppauge not found [ 200.462138][ T4600] Registered IR keymap rc-empty [ 200.469902][ T6845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.492113][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.553919][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.594469][ T4600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 200.608644][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 200.639821][ T4600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input11 [ 200.660337][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.666408][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.703806][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.744129][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.773772][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.813953][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.844126][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.894235][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.924714][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 200.930782][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.963866][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 200.976717][ T6845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.995259][ T4600] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 201.035142][ T4600] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 201.046327][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.053749][ T4600] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 201.102480][ T4600] usb 10-1: USB disconnect, device number 3 [ 201.320740][ T6845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.392946][ T6895] team0: Port device team_slave_0 added [ 201.506227][ T6845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.550742][ T6895] team0: Port device team_slave_1 added [ 201.608820][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.623560][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.729451][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.777377][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.811448][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.896402][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.060065][ T6895] device hsr_slave_0 entered promiscuous mode [ 202.078343][ T6895] device hsr_slave_1 entered promiscuous mode [ 202.107280][ T6895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.130821][ T6895] Cannot create hsr debugfs directory [ 202.453857][ T6845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.481636][ T6845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.516446][ T7044] netlink: 24 bytes leftover after parsing attributes in process `syz.7.756'. [ 202.618281][ T6845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.652628][ T6845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.693996][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 202.994826][ T6895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.190815][ T6895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.363421][ T6895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.396144][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.515775][ T6895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.580945][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.594531][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.607096][ T7068] loop9: detected capacity change from 0 to 2048 [ 203.622133][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.659700][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.670764][ T7068] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 203.680641][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.710523][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.717705][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.728943][ T7068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.806630][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.830248][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.875458][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.896726][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.903914][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.932831][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.990853][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.001884][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.017672][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.027033][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.037545][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.060134][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.081359][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.150705][ T6845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.180994][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.199523][ T7076] device hsr0 entered promiscuous mode [ 204.224015][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.764'. [ 204.480589][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.490051][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.499393][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.539938][ T7086] device vlan2 entered promiscuous mode [ 204.560388][ T7086] device bridge0 entered promiscuous mode [ 204.589552][ T7089] bridge0: port 3(vlan3) entered blocking state [ 204.596750][ T7089] bridge0: port 3(vlan3) entered disabled state [ 204.612915][ T7089] device vlan3 entered promiscuous mode [ 204.631901][ T7089] net_ratelimit: 12 callbacks suppressed [ 204.631917][ T7089] bridge0: mtu less than device minimum [ 204.688934][ T7075] device hsr0 left promiscuous mode [ 204.750033][ T6895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.815632][ T6895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.862301][ T6895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.896513][ T6895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.069250][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.772'. [ 205.363141][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.395707][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.414365][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.445179][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.471981][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.490132][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.500386][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.539393][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.562725][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.596010][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.603222][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.655182][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.684676][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.714312][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.721479][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.785150][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.825511][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.850713][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.878478][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.914057][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.966268][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.995479][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.026047][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.064892][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.094069][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.136632][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.174776][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.188467][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.235665][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.252843][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.321410][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.335696][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.356982][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.386127][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.408975][ T6845] device veth0_vlan entered promiscuous mode [ 206.432593][ T7135] device vlan2 entered promiscuous mode [ 206.456661][ T7135] device bridge0 entered promiscuous mode [ 206.483815][ T7137] netlink: 668 bytes leftover after parsing attributes in process `syz.8.782'. [ 206.507449][ T6845] device veth1_vlan entered promiscuous mode [ 206.542685][ T7135] bridge0: port 3(vlan3) entered blocking state [ 206.573969][ T7135] bridge0: port 3(vlan3) entered disabled state [ 206.593840][ T7135] device vlan3 entered promiscuous mode [ 206.614444][ T7135] bridge0: mtu less than device minimum [ 206.722372][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.741310][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.774670][ T32] device syz_tun left promiscuous mode [ 206.795306][ T6845] device veth0_macvtap entered promiscuous mode [ 206.844947][ T6845] device veth1_macvtap entered promiscuous mode [ 206.937794][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.975586][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.035540][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.072565][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.105733][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.143961][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.174376][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.211212][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.250522][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.271661][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.292440][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.313598][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.335461][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.353371][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.385850][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.404792][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.424387][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.452854][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.476540][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.507048][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.524192][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.553926][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.573762][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.595391][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.613817][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.632279][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.653701][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.673818][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.704487][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.723891][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.786087][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.803668][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.827451][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.875664][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.890558][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.935873][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.954762][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.962353][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.980284][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.037602][ T5364] bond2: (slave syz_tun): Releasing active interface [ 208.053871][ T5364] device syz_tun left promiscuous mode [ 208.093691][ T6845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.117957][ T6845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.144001][ T6845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.163126][ T6845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.274647][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.283479][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.380497][ T7173] overlayfs: failed to clone upperpath [ 208.482511][ T4640] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.666102][ T4640] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.716361][ T6895] device veth0_vlan entered promiscuous mode [ 208.724276][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.733406][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.787345][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.814722][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.906252][ T4640] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.068628][ T4640] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.109610][ T6895] device veth1_vlan entered promiscuous mode [ 209.144530][ T4641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.152508][ T4641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.258740][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.264326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.285460][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.306145][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.354044][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.384927][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.425276][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.436399][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.455392][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.464586][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.474001][ T6895] device veth0_macvtap entered promiscuous mode [ 209.486391][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.496208][ T6895] device veth1_macvtap entered promiscuous mode [ 209.497275][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.520957][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.532760][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.544907][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.555871][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.568471][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.643269][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.686904][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.721176][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.759050][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.833791][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.913332][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.992562][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.056098][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.121430][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.188334][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.256237][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.320653][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.642028][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.657750][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.706076][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.758765][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.805226][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.845700][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.883826][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.901368][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.914439][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.939990][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.960398][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.981315][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.004578][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.043057][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.076563][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.122976][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.151998][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.204092][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.244966][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.283672][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.316113][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.382797][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.418504][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.469696][ T6895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.510292][ T6895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.540643][ T6895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.563994][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 211.571343][ T6895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.880878][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.910095][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.250684][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.385420][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.393322][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.493924][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.537078][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 213.196502][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.224429][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.256777][ T7189] device bridge_slave_0 entered promiscuous mode [ 213.352682][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.394831][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.403206][ T7189] device bridge_slave_1 entered promiscuous mode [ 213.584402][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.629729][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.644003][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 213.662436][ T7289] FAULT_INJECTION: forcing a failure. [ 213.662436][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 213.743954][ T7289] CPU: 1 PID: 7289 Comm: syz.9.820 Not tainted syzkaller #0 [ 213.751357][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.761523][ T7289] Call Trace: [ 213.764837][ T7289] [ 213.767792][ T7289] dump_stack_lvl+0x188/0x24e [ 213.772522][ T7289] ? show_regs_print_info+0x12/0x12 [ 213.777783][ T7289] ? load_image+0x410/0x410 [ 213.782331][ T7289] ? __might_sleep+0xd0/0xd0 [ 213.786946][ T7289] ? __lock_acquire+0x7ea0/0x7ea0 [ 213.792006][ T7289] should_fail_ex+0x390/0x4c0 [ 213.796717][ T7289] should_failslab+0x5/0x20 [ 213.801262][ T7289] slab_pre_alloc_hook+0x59/0x300 [ 213.806313][ T7289] ? assoc_array_insert+0x441/0x3080 [ 213.811624][ T7289] __kmem_cache_alloc_node+0x4f/0x270 [ 213.817044][ T7289] ? assoc_array_insert+0x441/0x3080 [ 213.822382][ T7289] kmalloc_trace+0x26/0xe0 [ 213.826829][ T7289] assoc_array_insert+0x441/0x3080 [ 213.831974][ T7289] ? request_key_and_link+0x2ae/0x1400 [ 213.837464][ T7289] ? __lock_acquire+0x7ea0/0x7ea0 [ 213.842531][ T7289] __key_link_begin+0xd2/0x1e0 [ 213.847329][ T7289] request_key_and_link+0xb87/0x1400 [ 213.852649][ T7289] ? request_key_and_link+0x2ae/0x1400 [ 213.858172][ T7289] ? complete_request_key+0xa0/0xa0 [ 213.863413][ T7289] ? __might_sleep+0xd0/0xd0 [ 213.868029][ T7289] ? asymmetric_key_cmp+0x240/0x240 [ 213.873245][ T7289] ? keyring_search_rcu+0x280/0x280 [ 213.878473][ T7289] ? down_read+0x1a8/0x2d0 [ 213.882919][ T7289] __se_sys_request_key+0x293/0x350 [ 213.888148][ T7289] ? __x64_sys_request_key+0xa0/0xa0 [ 213.893464][ T7289] ? lockdep_hardirqs_on+0x94/0x140 [ 213.898693][ T7289] do_syscall_64+0x4c/0xa0 [ 213.903129][ T7289] ? clear_bhb_loop+0x60/0xb0 [ 213.907826][ T7289] ? clear_bhb_loop+0x60/0xb0 [ 213.912541][ T7289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.918465][ T7289] RIP: 0033:0x7f37e6b9e199 [ 213.922897][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.942532][ T7289] RSP: 002b:00007f37e7a7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 213.950976][ T7289] RAX: ffffffffffffffda RBX: 00007f37e6e25fa0 RCX: 00007f37e6b9e199 [ 213.958970][ T7289] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 213.966960][ T7289] RBP: 00007f37e6c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 213.974973][ T7289] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 213.982964][ T7289] R13: 00007f37e6e26038 R14: 00007f37e6e25fa0 R15: 00007ffe32c2c8e8 [ 213.990972][ T7289] [ 214.200846][ T7189] team0: Port device team_slave_0 added [ 214.429159][ T7189] team0: Port device team_slave_1 added [ 214.532442][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 214.595458][ T4640] device hsr_slave_0 left promiscuous mode [ 214.604837][ T4640] device hsr_slave_1 left promiscuous mode [ 214.626531][ T4640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.650927][ T4640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.682362][ T4640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.710769][ T4640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.748228][ T4640] device vlan3 left promiscuous mode [ 214.773323][ T4640] bridge0: port 3(vlan3) entered disabled state [ 215.142901][ T4640] device bridge_slave_1 left promiscuous mode [ 215.159605][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.180211][ T4640] device bridge_slave_0 left promiscuous mode [ 215.191562][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.284289][ T4640] device veth1_macvtap left promiscuous mode [ 215.293305][ T4640] device veth0_macvtap left promiscuous mode [ 215.314495][ T4640] device veth1_vlan left promiscuous mode [ 215.329808][ T4640] device veth0_vlan left promiscuous mode [ 215.743650][ C0] sched: RT throttling activated [ 215.784121][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 216.605685][ T4640] bond2 (unregistering): (slave veth7): Releasing active interface [ 216.667001][ T7334] ip_tables: iptables: counters copy to user failed while replacing table [ 216.732943][ T7336] FAULT_INJECTION: forcing a failure. [ 216.732943][ T7336] name failslab, interval 1, probability 0, space 0, times 0 [ 216.759473][ T7336] CPU: 0 PID: 7336 Comm: syz.3.832 Not tainted syzkaller #0 [ 216.766823][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.776912][ T7336] Call Trace: [ 216.780218][ T7336] [ 216.783185][ T7336] dump_stack_lvl+0x188/0x24e [ 216.787916][ T7336] ? show_regs_print_info+0x12/0x12 [ 216.793175][ T7336] ? load_image+0x410/0x410 [ 216.797739][ T7336] ? __might_sleep+0xd0/0xd0 [ 216.802372][ T7336] ? __lock_acquire+0x7ea0/0x7ea0 [ 216.807466][ T7336] should_fail_ex+0x390/0x4c0 [ 216.812202][ T7336] should_failslab+0x5/0x20 [ 216.816745][ T7336] slab_pre_alloc_hook+0x59/0x300 [ 216.821810][ T7336] ? assoc_array_insert+0x441/0x3080 [ 216.827153][ T7336] __kmem_cache_alloc_node+0x4f/0x270 [ 216.832583][ T7336] ? assoc_array_insert+0x441/0x3080 [ 216.837912][ T7336] kmalloc_trace+0x26/0xe0 [ 216.842384][ T7336] assoc_array_insert+0x441/0x3080 [ 216.847557][ T7336] ? request_key_and_link+0x2ae/0x1400 [ 216.853091][ T7336] ? __lock_acquire+0x7ea0/0x7ea0 [ 216.858192][ T7336] __key_link_begin+0xd2/0x1e0 [ 216.863007][ T7336] request_key_and_link+0xb87/0x1400 [ 216.868346][ T7336] ? request_key_and_link+0x2ae/0x1400 [ 216.873860][ T7336] ? complete_request_key+0xa0/0xa0 [ 216.879112][ T7336] ? __might_sleep+0xd0/0xd0 [ 216.883743][ T7336] ? asymmetric_key_cmp+0x240/0x240 [ 216.888988][ T7336] ? keyring_search_rcu+0x280/0x280 [ 216.894239][ T7336] ? down_read+0x1a8/0x2d0 [ 216.898710][ T7336] __se_sys_request_key+0x293/0x350 [ 216.903993][ T7336] ? __x64_sys_request_key+0xa0/0xa0 [ 216.909340][ T7336] ? lockdep_hardirqs_on+0x94/0x140 [ 216.914589][ T7336] do_syscall_64+0x4c/0xa0 [ 216.919057][ T7336] ? clear_bhb_loop+0x60/0xb0 [ 216.923776][ T7336] ? clear_bhb_loop+0x60/0xb0 [ 216.928502][ T7336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.934444][ T7336] RIP: 0033:0x7ff4ff99e199 [ 216.938898][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.958558][ T7336] RSP: 002b:00007ff50084b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 216.967021][ T7336] RAX: ffffffffffffffda RBX: 00007ff4ffc25fa0 RCX: 00007ff4ff99e199 [ 216.975059][ T7336] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 216.983065][ T7336] RBP: 00007ff4ffa358e0 R08: 0000000000000000 R09: 0000000000000000 [ 216.991066][ T7336] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 216.999076][ T7336] R13: 00007ff4ffc26038 R14: 00007ff4ffc25fa0 R15: 00007ffefdd74ef8 [ 217.007113][ T7336] [ 217.212476][ T4640] bond2 (unregistering): Released all slaves [ 217.504868][ T4640] bond1 (unregistering): Released all slaves [ 217.816071][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 218.724010][ T4640] team0 (unregistering): Port device team_slave_1 removed [ 218.805713][ T4640] team0 (unregistering): Port device team_slave_0 removed [ 218.861569][ T4640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.914450][ T4640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.005730][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.313544][ T4640] bond0 (unregistering): Released all slaves [ 219.426828][ T7362] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.841'. [ 219.467058][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.494039][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.557550][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.607893][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.658036][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.706488][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.872943][ T7189] device hsr_slave_0 entered promiscuous mode [ 219.901620][ T7189] device hsr_slave_1 entered promiscuous mode [ 219.931475][ T7189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.981367][ T7189] Cannot create hsr debugfs directory [ 221.938973][ T7189] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.089654][ T7189] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.909371][ T7189] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.955261][ T7189] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 223.798174][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.900449][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.932312][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.969445][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.248163][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.260987][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.304245][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.311470][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.404246][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.412427][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.453555][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.468539][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.475778][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.498760][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.552688][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.590016][ T7482] ip_tables: iptables: counters copy to user failed while replacing table [ 224.771015][ T7487] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 224.839808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.864333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.918362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.936846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.957355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.974112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.993317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.043878][ T4640] device hsr_slave_0 left promiscuous mode [ 225.084356][ T4640] device hsr_slave_1 left promiscuous mode [ 225.104149][ T4640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.111642][ T4640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.174872][ T4640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.182369][ T4640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.213016][ T4640] device bridge_slave_1 left promiscuous mode [ 225.237494][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.281684][ T4640] device bridge_slave_0 left promiscuous mode [ 225.305239][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.448998][ T4640] device veth1_macvtap left promiscuous mode [ 225.458460][ T4640] device veth0_macvtap left promiscuous mode [ 225.465839][ T4640] device veth1_vlan left promiscuous mode [ 225.471778][ T4640] device veth0_vlan left promiscuous mode [ 225.942189][ T26] audit: type=1326 audit(2000000093.360:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4ff99e199 code=0x0 [ 226.332068][ T4640] team0 (unregistering): Port device team_slave_1 removed [ 226.387838][ T4640] team0 (unregistering): Port device team_slave_0 removed [ 226.448901][ T4640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.516304][ T4640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.927445][ T4640] bond0 (unregistering): Released all slaves [ 227.001545][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.018502][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.028341][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.9.878'. [ 227.123002][ T7189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.151322][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.161760][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.191288][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.517707][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.534841][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.629268][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.657792][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.689381][ T7189] device veth0_vlan entered promiscuous mode [ 229.705047][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.724823][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.760197][ T7189] device veth1_vlan entered promiscuous mode [ 229.868085][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.911302][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.931776][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.976386][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.017522][ T7189] device veth0_macvtap entered promiscuous mode [ 230.058641][ T7189] device veth1_macvtap entered promiscuous mode [ 230.133903][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.182254][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.212831][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.246362][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.278050][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.323718][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.343695][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.387384][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.423952][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.484598][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.524239][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.574761][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.623996][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.665153][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.729922][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.779779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.798202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.843097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.887287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.930290][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.951168][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.981850][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.021045][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.050815][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.072146][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.102887][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.133731][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.157292][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.193714][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.223672][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.253731][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.283700][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.323729][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.355461][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.364009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.383153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.544869][ T7189] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.590302][ T7189] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.623962][ T7189] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.653062][ T7189] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.913473][ T4640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.931773][ T4640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.972319][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.013707][ T7659] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 232.106302][ T7659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.149476][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.177370][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.277686][ T7668] bond1: (slave geneve2): making interface the new active one [ 232.361876][ T7668] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 232.405863][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 232.421890][ T7668] syz.3.911 (7668) used greatest stack depth: 20208 bytes left [ 232.429952][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.528862][ T7676] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 232.593209][ T7676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.756002][ T7676] bond1: (slave geneve2): making interface the new active one [ 232.771984][ T7685] loop7: detected capacity change from 0 to 256 [ 232.799519][ T7676] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 232.818425][ T7685] exfat: Deprecated parameter 'namecase' [ 232.840214][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 232.956638][ T7685] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 234.627591][ T7737] loop2: detected capacity change from 0 to 1024 [ 234.733549][ T7737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.859430][ T6845] EXT4-fs (loop2): unmounting filesystem. [ 235.124972][ T7745] netlink: 'syz.2.929': attribute type 12 has an invalid length. [ 236.652372][ T7786] netlink: 'syz.8.940': attribute type 1 has an invalid length. [ 236.685692][ T7786] netlink: 64363 bytes leftover after parsing attributes in process `syz.8.940'. [ 237.209675][ T7810] loop3: detected capacity change from 0 to 128 [ 237.319380][ T7779] loop7: detected capacity change from 0 to 32768 [ 237.420123][ T7779] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 237.462127][ T7779] JBD2: Ignoring recovery information on journal [ 237.521087][ T7819] loop2: detected capacity change from 0 to 512 [ 237.554895][ T7779] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 237.662187][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 237.675521][ T7819] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.951: inode has both inline data and extents flags [ 237.718319][ T7819] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.951: couldn't read orphan inode 15 (err -117) [ 237.780349][ T7779] ocfs2: Unmounting device (7,7) on (node local) [ 237.784915][ T7819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 238.104918][ T7834] overlayfs: failed to clone upperpath [ 238.315770][ T6845] EXT4-fs (loop2): unmounting filesystem. [ 238.475668][ T7844] fuse: Bad value for 'fd' [ 239.592178][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.9.973'. [ 239.972610][ T7888] team0: Port device team_slave_0 removed [ 239.993504][ T7897] loop2: detected capacity change from 0 to 512 [ 240.087407][ T7897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.339915][ T6845] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 240.363235][ T7909] netlink: 'syz.7.989': attribute type 1 has an invalid length. [ 240.477023][ T6845] EXT4-fs error (device loop2): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 240.495693][ T6845] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 240.513384][ T7909] bond1 (unregistering): Released all slaves [ 240.520190][ T6845] EXT4-fs error (device loop2): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 240.536460][ T6845] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 240.554239][ T6845] EXT4-fs error (device loop2): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 240.583930][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.7.989'. [ 240.594088][ T6845] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 240.622396][ T6845] EXT4-fs error (device loop2): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 240.650175][ T7914] device veth1_to_bridge entered promiscuous mode [ 240.662686][ T6845] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 240.697696][ T6845] EXT4-fs error (device loop2): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 240.912744][ T7929] netlink: 'syz.7.984': attribute type 13 has an invalid length. [ 240.957281][ T7932] loop3: detected capacity change from 0 to 8 [ 240.986978][ T7929] netlink: 172 bytes leftover after parsing attributes in process `syz.7.984'. [ 241.456879][ T6845] EXT4-fs (loop2): unmounting filesystem. [ 241.634829][ T7458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.831675][ T7458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.987994][ T7458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.040865][ T7961] netlink: 'syz.9.996': attribute type 1 has an invalid length. [ 242.274103][ T7458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.358647][ T7967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.369850][ T7967] bond3: (slave bond4): making interface the new active one [ 242.377894][ T7967] bond3: (slave bond4): Enslaving as an active interface with an up link [ 242.386793][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.9.996'. [ 242.396768][ T7961] device bond3 entered promiscuous mode [ 242.402361][ T7961] device bond4 entered promiscuous mode [ 242.409657][ T7961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.964110][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.975811][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.034006][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.043537][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.051485][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.059873][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.642075][ T8006] device hsr_slave_0 left promiscuous mode [ 243.701552][ T8006] device hsr_slave_1 left promiscuous mode [ 243.918838][ T8012] device bond0 entered promiscuous mode [ 243.941844][ T8012] device bond_slave_0 entered promiscuous mode [ 243.950995][ T8012] device bond_slave_1 entered promiscuous mode [ 243.975330][ T8012] device gretap0 entered promiscuous mode [ 243.994500][ T8012] device dummy0 entered promiscuous mode [ 244.045435][ T8019] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1008'. [ 244.131871][ T8019] device dummy0 left promiscuous mode [ 244.156965][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 244.370677][ T8021] team0: Port device team_slave_0 removed [ 244.526811][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 244.773255][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.780756][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.789588][ T7989] device bridge_slave_0 entered promiscuous mode [ 244.799719][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.807552][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.815876][ T7989] device bridge_slave_1 entered promiscuous mode [ 244.991853][ T8054] overlayfs: failed to clone upperpath [ 245.159540][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.169265][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 245.885850][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.023342][ T7458] device hsr_slave_0 left promiscuous mode [ 246.044296][ T7458] device hsr_slave_1 left promiscuous mode [ 246.055273][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.085068][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.104596][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.112088][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.153802][ T7458] device bridge_slave_1 left promiscuous mode [ 246.168470][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.182855][ T7458] device bridge_slave_0 left promiscuous mode [ 246.189660][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.322194][ T7458] device veth1_macvtap left promiscuous mode [ 246.353711][ T7458] device veth0_macvtap left promiscuous mode [ 246.360070][ T7458] device veth1_vlan left promiscuous mode [ 246.394473][ T7458] device veth0_vlan left promiscuous mode [ 246.808378][ T7458] bond1 (unregistering): (slave geneve2): Releasing active interface [ 247.115869][ T7458] bond1 (unregistering): Released all slaves [ 247.244043][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 248.334721][ T7458] team0 (unregistering): Port device team_slave_1 removed [ 248.414945][ T7458] team0 (unregistering): Port device team_slave_0 removed [ 248.472213][ T7458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.523261][ T7458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.966124][ T7458] bond0 (unregistering): Released all slaves [ 249.152084][ T7989] team0: Port device team_slave_0 added [ 249.215861][ T7989] team0: Port device team_slave_1 added [ 249.302102][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.323810][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 249.350291][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.376445][ T7989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.391723][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.399224][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.426899][ T7989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.548559][ T7989] device hsr_slave_0 entered promiscuous mode [ 249.566007][ T7989] device hsr_slave_1 entered promiscuous mode [ 249.584809][ T7989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.623904][ T7989] Cannot create hsr debugfs directory [ 250.696494][ T7989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.725970][ T7989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.770838][ T7989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.803323][ T7989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.004528][ T4343] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.193150][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.247616][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.271805][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.307358][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.334501][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.344623][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.386075][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.393294][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.404057][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 251.442422][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.453059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.463190][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.472333][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.479579][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.491433][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.504218][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.516992][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.539893][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.562075][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.584471][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.604470][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.627078][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.644212][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.671701][ T7989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.709579][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.725239][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.739268][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.592380][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.604469][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.646368][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.724062][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.747054][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.808624][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.829363][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.868584][ T7989] device veth0_vlan entered promiscuous mode [ 252.883164][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.908176][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.942296][ T7989] device veth1_vlan entered promiscuous mode [ 253.039296][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.057887][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.090776][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.134652][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.176719][ T7989] device veth0_macvtap entered promiscuous mode [ 253.218504][ T7989] device veth1_macvtap entered promiscuous mode [ 253.265216][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.283558][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.330951][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.365032][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.395334][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.444372][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.481679][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.511019][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.524832][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.535751][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.556259][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.575023][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.585381][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.596593][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.614319][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.677833][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.695915][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.708881][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.718714][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.730772][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.765191][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.813747][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.856258][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.903842][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.926640][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.963823][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.005907][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.034104][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.064995][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.105514][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.155323][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.177724][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.212495][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.263857][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.287039][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.307359][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.563670][ T7989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.572447][ T7989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.597349][ T7989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.613231][ T7989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.857673][ T4638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.881908][ T4638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.974566][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.975808][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.982431][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.063980][ T7458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.486411][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.492784][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.004472][ T8328] tipc: Started in network mode [ 256.009433][ T8328] tipc: Node identity ac14140f, cluster identity 4711 [ 256.054376][ T8328] tipc: New replicast peer: 255.255.255.255 [ 256.062640][ T8328] tipc: Enabled bearer , priority 10 [ 256.958205][ T8352] loop2: detected capacity change from 0 to 512 [ 257.063083][ T8352] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 257.080480][ T8352] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1095: invalid indirect mapped block 256 (level 1) [ 257.123539][ T8352] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1095: invalid indirect mapped block 2683928664 (level 1) [ 257.156963][ T8352] EXT4-fs (loop2): 1 truncate cleaned up [ 257.174495][ T4520] tipc: Node number set to 2886997007 [ 257.186179][ T8352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 257.324248][ T8352] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz.2.1095: bad inode number: 6 [ 257.452546][ T7989] EXT4-fs (loop2): unmounting filesystem. [ 257.608704][ T26] audit: type=1326 audit(2000000381.029:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 257.699921][ T26] audit: type=1326 audit(2000000381.059:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 257.766702][ T26] audit: type=1326 audit(2000000381.059:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 257.846017][ T26] audit: type=1326 audit(2000000381.059:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 257.949020][ T26] audit: type=1326 audit(2000000381.059:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 258.044755][ T26] audit: type=1326 audit(2000000381.059:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 258.137026][ T26] audit: type=1326 audit(2000000381.059:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 258.263511][ T26] audit: type=1326 audit(2000000381.059:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 258.353142][ T26] audit: type=1326 audit(2000000381.059:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 258.464226][ T26] audit: type=1326 audit(2000000381.059:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1099" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fec30f9e199 code=0x7ffc0000 [ 258.886505][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 258.947573][ T8404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.775237][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1119'. [ 260.108455][ T8447] fuse: Bad value for 'fd' [ 260.395853][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1125'. [ 260.434938][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1125'. [ 260.477034][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1125'. [ 260.659718][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 260.782253][ T8462] device bond3 entered promiscuous mode [ 260.881852][ T8462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.306702][ T8462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.394330][ T8462] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 261.667728][ T8462] bond3: (slave sit1): Error -95 calling set_mac_address [ 263.261926][ T8556] loop2: detected capacity change from 0 to 512 [ 264.017345][ T8583] netlink: 'syz.8.1147': attribute type 1 has an invalid length. [ 264.218050][ T8585] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.274991][ T8585] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.315916][ T8585] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.329830][ T8585] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.357895][ T8585] bond1: (slave geneve2): making interface the new active one [ 264.379577][ T8585] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 264.998849][ T4273] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 265.567099][ T11] rpcbind: server 127.0.0.1 not responding, timed out [ 266.359845][ T8636] netlink: 'syz.8.1159': attribute type 12 has an invalid length. [ 267.351801][ T8653] loop3: detected capacity change from 0 to 512 [ 267.414758][ T8653] EXT4-fs: Ignoring removed i_version option [ 267.483896][ T8653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.616687][ T4520] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 267.676975][ T8653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 267.763904][ T8653] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.804195][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 267.817717][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.843316][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.924554][ T4520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.994045][ T4520] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.003162][ T4520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.042815][ T4520] usb 3-1: config 0 descriptor?? [ 268.263518][ T6895] EXT4-fs (loop3): unmounting filesystem. [ 268.527661][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 268.561815][ T4520] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 268.591426][ T4520] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 268.695268][ T4520] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 268.884304][ T4519] usb 3-1: USB disconnect, device number 2 [ 269.099193][ T8690] fido_id[8690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 269.296852][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1175'. [ 270.442899][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1196'. [ 270.560239][ T8730] device bond1 entered promiscuous mode [ 270.579115][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 270.699997][ T8730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.860724][ T8741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.893411][ T8741] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 271.015827][ T8741] bond1: (slave sit1): Error -95 calling set_mac_address [ 271.054137][ T8746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 272.225936][ T8776] netlink: 'syz.3.1191': attribute type 12 has an invalid length. [ 273.491325][ T8801] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.586759][ T8801] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 273.660300][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.720043][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.247783][ T8839] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 275.403814][ T8839] CIFS: Attempting to mount \\127.0.0.1\share [ 275.672373][ T8826] netlink: 'syz.9.1210': attribute type 12 has an invalid length. [ 276.053545][ T8839] CIFS: VFS: Error connecting to socket. Aborting operation. [ 276.120817][ T8839] CIFS: VFS: cifs_mount failed w/return code = -4 [ 276.360989][ T8862] device ip6gre1 entered promiscuous mode [ 276.426751][ T8862] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 276.488411][ T8862] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 276.738096][ T8876] overlayfs: failed to clone upperpath [ 276.932631][ T8881] netlink: 'syz.9.1227': attribute type 1 has an invalid length. [ 277.071500][ T8881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.334593][ T8883] bond5: (slave ip6gretap1): making interface the new active one [ 277.411154][ T8883] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 277.470273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 277.587716][ T8890] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.147037][ T8906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 278.570815][ T8920] 0: reclassify loop, rule prio 0, protocol 03 [ 278.903250][ T8926] bridge0: port 3(vlan0) entered blocking state [ 278.944777][ T8926] bridge0: port 3(vlan0) entered disabled state [ 278.955405][ T8926] device vlan0 entered promiscuous mode [ 278.978499][ T8930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.032434][ T8930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.065861][ T8930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.088047][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.190054][ T8930] device bridge_slave_1 left promiscuous mode [ 279.216061][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.289531][ T8930] bond0: (slave bond_slave_0): Releasing backup interface [ 279.334746][ T8930] bond0: (slave bond_slave_1): Releasing backup interface [ 279.474122][ T8930] team0: Port device team_slave_0 removed [ 279.532867][ T8930] team0: Port device team_slave_1 removed [ 279.565890][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.594878][ T8930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.633297][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.654512][ T8930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.747187][ T8930] device vlan0 left promiscuous mode [ 279.752660][ T8930] device bridge_slave_0 left promiscuous mode [ 279.798292][ T8930] bridge0: port 3(vlan0) entered disabled state [ 279.856092][ T8934] loop3: detected capacity change from 0 to 8192 [ 279.979029][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 279.989208][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 279.996812][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.006913][ T4273] Workqueue: hci0 hci_rx_work [ 280.011678][ T4273] Call Trace: [ 280.015025][ T4273] [ 280.018024][ T4273] dump_stack_lvl+0x188/0x24e [ 280.022764][ T4273] ? show_regs_print_info+0x12/0x12 [ 280.028055][ T4273] ? load_image+0x410/0x410 [ 280.032648][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 280.037823][ T4273] ? __lock_acquire+0x7ea0/0x7ea0 [ 280.042909][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 280.047644][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 280.053005][ T4273] kobject_add_internal+0x617/0xca0 [ 280.058269][ T4273] kobject_add+0x160/0x230 [ 280.062751][ T4273] ? kobject_init+0x1c0/0x1c0 [ 280.067488][ T4273] ? __raw_spin_lock_init+0x41/0x100 [ 280.072820][ T4273] ? klist_children_get+0x50/0x50 [ 280.077913][ T4273] ? get_device_parent+0x121/0x3e0 [ 280.083097][ T4273] device_add+0x470/0x1050 [ 280.087583][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 280.092589][ T4273] le_conn_complete_evt+0xf93/0x15c0 [ 280.098027][ T4273] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 280.104323][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 280.110007][ T4273] ? mutex_unlock+0x10/0x10 [ 280.114579][ T4273] ? skb_pull_data+0xec/0x1f0 [ 280.119317][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 280.124920][ T4273] ? hci_remote_host_features_evt+0x230/0x230 [ 280.131043][ T4273] hci_event_packet+0x7b3/0x1290 [ 280.136049][ T4273] ? lock_chain_count+0x20/0x20 [ 280.141051][ T4273] ? bis_list+0x280/0x280 [ 280.145466][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 280.151405][ T4273] ? kcov_remote_start+0x50f/0x810 [ 280.156570][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 280.161832][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 280.167096][ T4273] hci_rx_work+0x3eb/0xd40 [ 280.171577][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 280.176485][ T4273] ? process_one_work+0x7b4/0x1160 [ 280.181651][ T4273] process_one_work+0x8ab/0x1160 [ 280.186705][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 280.192394][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 280.197479][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 280.203136][ T4273] ? wq_worker_running+0x97/0x190 [ 280.208365][ T4273] worker_thread+0xaf5/0x12a0 [ 280.213214][ T4273] kthread+0x29d/0x330 [ 280.217333][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 280.222415][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 280.227078][ T4273] ret_from_fork+0x1f/0x30 [ 280.231602][ T4273] [ 280.237365][ T4273] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 280.251708][ T4273] Bluetooth: hci0: failed to register connection device [ 280.351022][ T8934] loop3: p1 p2 < > p3 p4 < p5 > [ 280.436442][ T8934] loop3: partition table partially beyond EOD, truncated [ 280.476905][ T8934] loop3: p1 size 1342439424 extends beyond EOD, truncated [ 280.524550][ T8943] netlink: 'syz.8.1250': attribute type 4 has an invalid length. [ 280.538510][ T8946] futex_wake_op: syz.7.1251 tries to shift op by 32; fix this program [ 280.561797][ T8934] loop3: p2 start 16384 is beyond EOD, truncated [ 280.645337][ T8934] loop3: p3 start 67108864 is beyond EOD, truncated [ 280.723174][ T8944] netlink: 'syz.8.1250': attribute type 4 has an invalid length. [ 280.734088][ T8934] loop3: p5 size 1342439424 extends beyond EOD, truncated [ 280.810487][ T8949] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1252'. [ 281.343214][ T8891] udevd[8891]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 281.363264][ T8962] udevd[8962]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 281.381725][ T8963] udevd[8963]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 283.004759][ T4343] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.163725][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 283.255089][ T9010] FAULT_INJECTION: forcing a failure. [ 283.255089][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 283.278170][ T9010] CPU: 0 PID: 9010 Comm: syz.3.1276 Not tainted syzkaller #0 [ 283.285616][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 283.295712][ T9010] Call Trace: [ 283.299033][ T9010] [ 283.302006][ T9010] dump_stack_lvl+0x188/0x24e [ 283.306746][ T9010] ? show_regs_print_info+0x12/0x12 [ 283.312026][ T9010] ? load_image+0x410/0x410 [ 283.316617][ T9010] ? __might_sleep+0xd0/0xd0 [ 283.321254][ T9010] ? __lock_acquire+0x7ea0/0x7ea0 [ 283.326344][ T9010] should_fail_ex+0x390/0x4c0 [ 283.331083][ T9010] should_failslab+0x5/0x20 [ 283.335674][ T9010] slab_pre_alloc_hook+0x59/0x300 [ 283.340741][ T9010] ? driver_register+0x32d/0x430 [ 283.345713][ T9010] ? usb_gadget_register_driver_owner+0xf5/0x260 [ 283.352075][ T9010] ? raw_ioctl+0x13a0/0x3cd0 [ 283.356695][ T9010] ? kobject_set_name_vargs+0x5d/0x110 [ 283.362188][ T9010] __kmem_cache_alloc_node+0x4f/0x270 [ 283.367593][ T9010] ? kobject_set_name_vargs+0x5d/0x110 [ 283.373101][ T9010] __kmalloc_node_track_caller+0xa0/0x240 [ 283.378864][ T9010] kstrdup_const+0x56/0x90 [ 283.383351][ T9010] kobject_set_name_vargs+0x5d/0x110 [ 283.388683][ T9010] kobject_init_and_add+0xeb/0x190 [ 283.393839][ T9010] ? kobject_add+0x230/0x230 [ 283.398487][ T9010] ? __raw_spin_lock_init+0x41/0x100 [ 283.403830][ T9010] bus_add_driver+0x1de/0x5d0 [ 283.408558][ T9010] driver_register+0x32d/0x430 [ 283.413359][ T9010] usb_gadget_register_driver_owner+0xf5/0x260 [ 283.419558][ T9010] raw_ioctl+0x13a0/0x3cd0 [ 283.424004][ T9010] ? __kmem_cache_free+0xb6/0x200 [ 283.429082][ T9010] ? tomoyo_path_number_perm+0x205/0x650 [ 283.434777][ T9010] ? tomoyo_path_number_perm+0x5a4/0x650 [ 283.440445][ T9010] ? tomoyo_path_number_perm+0x205/0x650 [ 283.446110][ T9010] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 283.451599][ T9010] ? make_qualifier+0x3b0/0x3b0 [ 283.456505][ T9010] ? __fget_files+0x28/0x460 [ 283.461134][ T9010] ? bpf_lsm_file_ioctl+0x5/0x10 [ 283.466098][ T9010] ? security_file_ioctl+0x7c/0xa0 [ 283.471282][ T9010] ? make_qualifier+0x3b0/0x3b0 [ 283.476185][ T9010] __se_sys_ioctl+0xfa/0x170 [ 283.480827][ T9010] do_syscall_64+0x4c/0xa0 [ 283.485285][ T9010] ? clear_bhb_loop+0x60/0xb0 [ 283.489995][ T9010] ? clear_bhb_loop+0x60/0xb0 [ 283.494705][ T9010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.500649][ T9010] RIP: 0033:0x7ff4ff99de2b [ 283.505102][ T9010] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 283.524750][ T9010] RSP: 002b:00007ff500848f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.533214][ T9010] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff4ff99de2b [ 283.541226][ T9010] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 283.549225][ T9010] RBP: 00007ff500849fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 283.557225][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.565226][ T9010] R13: 0000200000000240 R14: 0000000000000002 R15: 0000000000000000 [ 283.573241][ T9010] [ 283.730766][ T9010] kobject: can not set name properly! [ 283.747636][ T9010] UDC core: USB Raw Gadget: driver registration failed: -12 [ 283.781931][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 284.244294][ T9019] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 285.095259][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 285.116117][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 285.147033][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 285.185149][ T9048] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 285.623548][ T9046] infiniband syz0: set active [ 285.628903][ T4311] dummy0 speed is unknown, defaulting to 1000 [ 285.673967][ T9046] infiniband syz0: added dummy0 [ 285.701498][ T9066] netlink: 'syz.7.1295': attribute type 1 has an invalid length. [ 285.857142][ T9068] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.886907][ T9068] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.922436][ T9046] RDS/IB: syz0: added [ 285.941307][ T9046] smc: adding ib device syz0 with port count 1 [ 285.956039][ T9068] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.965390][ T9046] smc: ib device syz0 port 1 has pnetid [ 286.003931][ T9068] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.048240][ T9068] bond3: (slave geneve2): making interface the new active one [ 286.105818][ T9068] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 286.135318][ T4599] dummy0 speed is unknown, defaulting to 1000 [ 286.147513][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 286.184630][ T9068] syz.7.1295 (9068) used greatest stack depth: 19936 bytes left [ 286.588729][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 286.656064][ T9085] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.755526][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.763865][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.095344][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 287.358926][ T9099] input: syz0 as /devices/virtual/input/input13 [ 287.371710][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 287.588029][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 288.094139][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 288.470286][ T9111] netlink: 'syz.7.1309': attribute type 12 has an invalid length. [ 288.483376][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 288.868197][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 288.966048][ T9117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.219539][ T9046] dummy0 speed is unknown, defaulting to 1000 [ 289.275388][ T9124] loop2: detected capacity change from 0 to 256 [ 289.301231][ T9124] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.351001][ T9124] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.466914][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1325'. [ 290.490009][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1325'. [ 290.515431][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1325'. [ 291.934225][ T4520] dummy0 speed is unknown, defaulting to 1000 [ 292.543735][ T4600] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 292.762378][ T9195] device hsr_slave_0 left promiscuous mode [ 292.823124][ T9195] device hsr_slave_1 left promiscuous mode [ 293.078425][ T9204] device bond0 entered promiscuous mode [ 293.146401][ T9204] device bond_slave_0 entered promiscuous mode [ 293.152839][ T9204] device bond_slave_1 entered promiscuous mode [ 293.301931][ T9204] device gretap0 entered promiscuous mode [ 293.352774][ T9204] device dummy0 entered promiscuous mode [ 293.387449][ T9204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.414057][ T9204] Cannot create hsr debugfs directory [ 293.433948][ T9207] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1336'. [ 293.664518][ T9207] device dummy0 left promiscuous mode [ 293.780221][ T4600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.804399][ T4600] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 293.842528][ T4600] usb 3-1: can't read configurations, error -71 [ 294.029359][ T9182] syz.8.1332 (9182) used greatest stack depth: 19632 bytes left [ 294.179345][ T9228] netlink: 'syz.9.1343': attribute type 10 has an invalid length. [ 294.238889][ T9228] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 294.253207][ T9228] team0: Failed to send options change via netlink (err -105) [ 294.263784][ T9228] team0: Port device netdevsim0 added [ 295.701113][ T9253] loop2: detected capacity change from 0 to 764 [ 296.607111][ T4343] rpcbind: server 127.0.0.1 not responding, timed out [ 296.768655][ T9270] bond1: Unknown bonding mode 6 for xdp xmit [ 297.027856][ T9279] loop2: detected capacity change from 0 to 512 [ 297.044893][ T9279] EXT4-fs: Ignoring removed bh option [ 297.111672][ T9279] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1364: inode #13: comm syz.2.1364: iget: illegal inode # [ 297.172656][ T9279] EXT4-fs (loop2): Remounting filesystem read-only [ 297.182306][ T9279] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1364: couldn't read orphan inode 13 (err -117) [ 297.211897][ T9279] EXT4-fs (loop2): Remounting filesystem read-only [ 297.219704][ T9279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 297.386559][ T7989] EXT4-fs (loop2): unmounting filesystem. [ 298.207716][ T9308] overlayfs: failed to clone upperpath [ 298.441658][ T26] kauditd_printk_skb: 309 callbacks suppressed [ 298.441675][ T26] audit: type=1326 audit(2000000421.859:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.9.1375" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37e6b9e199 code=0x0 [ 298.814411][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.847308][ T9322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.979827][ T9330] dummy0 speed is unknown, defaulting to 1000 [ 300.785686][ T9350] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 300.946228][ T9350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.128625][ T9358] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 301.164988][ T9364] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 301.173073][ T9364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1388'. [ 301.826974][ T9390] dummy0 speed is unknown, defaulting to 1000 [ 302.474454][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1405'. [ 302.595632][ T9403] netlink: 'syz.8.1402': attribute type 12 has an invalid length. [ 303.578463][ T9434] 9pnet_fd: p9_fd_create_tcp (9434): problem binding to privport [ 303.802541][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 303.865955][ T9442] netlink: 'syz.7.1418': attribute type 1 has an invalid length. [ 303.908021][ T9442] netlink: 'syz.7.1418': attribute type 4 has an invalid length. [ 303.924825][ T9442] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1418'. [ 303.998726][ T9443] netlink: 'syz.7.1418': attribute type 1 has an invalid length. [ 304.033737][ T9443] netlink: 'syz.7.1418': attribute type 4 has an invalid length. [ 304.045137][ T9443] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1418'. [ 304.124030][ T9445] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1419'. [ 305.803813][ T4273] Bluetooth: hci0: command 0x0401 tx timeout [ 305.810069][ T4273] Bluetooth: hci5: command 0x1003 tx timeout [ 305.811238][ T4275] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 306.872085][ T9529] dummy0 speed is unknown, defaulting to 1000 [ 307.791372][ T4599] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 308.008780][ T4599] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 308.036468][ T4599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.061345][ T4599] usb 4-1: config 0 descriptor?? [ 308.667650][ T8677] syz.8.1168 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 308.739009][ T8677] CPU: 0 PID: 8677 Comm: syz.8.1168 Not tainted syzkaller #0 [ 308.746471][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.756567][ T8677] Call Trace: [ 308.759889][ T8677] [ 308.762860][ T8677] dump_stack_lvl+0x188/0x24e [ 308.767590][ T8677] ? ___ratelimit+0x14e/0x610 [ 308.772322][ T8677] ? show_regs_print_info+0x12/0x12 [ 308.777575][ T8677] ? load_image+0x410/0x410 [ 308.782127][ T8677] ? ___ratelimit+0x474/0x610 [ 308.786862][ T8677] ? radix_tree_cpu_dead+0x160/0x160 [ 308.792215][ T8677] dump_header+0xd8/0x820 [ 308.796612][ T8677] oom_kill_process+0x361/0x550 [ 308.801535][ T8677] out_of_memory+0xe25/0x1220 [ 308.806270][ T8677] ? mutex_lock_nested+0x10/0x10 [ 308.811254][ T8677] ? unregister_oom_notifier+0x20/0x20 [ 308.816784][ T8677] mem_cgroup_out_of_memory+0x2c0/0x390 [ 308.822383][ T8677] ? mem_cgroup_oom_trylock+0x210/0x210 [ 308.827998][ T8677] ? do_raw_spin_unlock+0x11d/0x230 [ 308.833229][ T8677] try_charge_memcg+0xc9d/0x17c0 [ 308.838247][ T8677] ? percpu_ref_put+0x180/0x180 [ 308.843165][ T8677] ? get_mem_cgroup_from_mm+0x34/0x290 [ 308.848694][ T8677] charge_memcg+0x117/0x3b0 [ 308.853246][ T8677] ? __mem_cgroup_charge+0x80/0x80 [ 308.858402][ T8677] ? get_mem_cgroup_from_mm+0x34/0x290 [ 308.863932][ T8677] ? get_mem_cgroup_from_mm+0x34/0x290 [ 308.869440][ T8677] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 308.875027][ T8677] __mem_cgroup_charge+0x21/0x80 [ 308.880030][ T8677] shmem_add_to_page_cache+0x8d7/0x1c90 [ 308.885617][ T8677] ? __filemap_get_folio+0x10f/0xde0 [ 308.890945][ T8677] ? __filemap_get_folio+0x10f/0xde0 [ 308.896355][ T8677] ? put_page+0x270/0x270 [ 308.900730][ T8677] ? mark_lock+0x94/0x320 [ 308.905134][ T8677] shmem_get_folio_gfp+0x1663/0x35e0 [ 308.910490][ T8677] shmem_write_begin+0xee/0x3f0 [ 308.915382][ T8677] generic_perform_write+0x2fa/0x5c0 [ 308.920710][ T8677] ? generic_file_direct_write+0x330/0x330 [ 308.926548][ T8677] ? __file_remove_privs+0x5f0/0x5f0 [ 308.931948][ T8677] ? rwsem_write_trylock+0x135/0x1c0 [ 308.937262][ T8677] ? clear_nonspinnable+0x60/0x60 [ 308.942327][ T8677] ? generic_write_checks_count+0x363/0x440 [ 308.948263][ T8677] __generic_file_write_iter+0x148/0x2a0 [ 308.953939][ T8677] generic_file_write_iter+0xab/0x2e0 [ 308.959351][ T8677] __kernel_write_iter+0x298/0x690 [ 308.964530][ T8677] ? vfs_read+0x960/0x960 [ 308.968917][ T8677] ? dump_user_range+0x308/0x840 [ 308.973889][ T8677] ? iov_iter_bvec+0x4a/0x1f0 [ 308.978627][ T8677] dump_user_range+0x40a/0x840 [ 308.983450][ T8677] ? dump_skip+0x40/0x40 [ 308.987728][ T8677] ? dump_emit+0x74/0xe0 [ 308.992019][ T8677] ? dump_emit+0xa2/0xe0 [ 308.996291][ T8677] ? elf_core_dump+0x2aa9/0x3630 [ 309.001259][ T8677] elf_core_dump+0x30ca/0x3630 [ 309.006069][ T8677] ? load_elf_binary+0x2820/0x2820 [ 309.011208][ T8677] ? dump_vma_snapshot+0xaea/0xe40 [ 309.016348][ T8677] ? verify_lock_unused+0x140/0x140 [ 309.021604][ T8677] ? __lock_acquire+0x7ea0/0x7ea0 [ 309.026730][ T8677] ? mas_next_entry+0xe03/0xe90 [ 309.031658][ T8677] ? rcu_read_lock_any_held+0xb0/0x130 [ 309.037170][ T8677] ? 0xffffffffff600000 [ 309.041353][ T8677] ? getname_kernel+0x142/0x2f0 [ 309.046242][ T8677] do_coredump+0x16c1/0x2480 [ 309.050885][ T8677] ? nfs_stat_to_errno+0x170/0x170 [ 309.056040][ T8677] ? rcu_is_watching+0x11/0xa0 [ 309.060867][ T8677] ? _raw_spin_unlock_irq+0x25/0x40 [ 309.066119][ T8677] get_signal+0x1093/0x1340 [ 309.070688][ T8677] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 309.076711][ T8677] arch_do_signal_or_restart+0xc4/0x1310 [ 309.082396][ T8677] ? get_sigframe_size+0x10/0x10 [ 309.087374][ T8677] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 309.093413][ T8677] ? exit_to_user_mode_loop+0x3b/0x110 [ 309.098915][ T8677] exit_to_user_mode_loop+0x70/0x110 [ 309.104243][ T8677] exit_to_user_mode_prepare+0xee/0x180 [ 309.109828][ T8677] irqentry_exit_to_user_mode+0x5/0x30 [ 309.115350][ T8677] exc_page_fault+0x88/0x100 [ 309.119976][ T8677] asm_exc_page_fault+0x22/0x30 [ 309.124856][ T8677] RIP: 0033:0x7f9cefa53bd7 [ 309.129301][ T8677] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 72 13 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 309.148943][ T8677] RSP: 002b:00007f9cf0ac8120 EFLAGS: 00010202 [ 309.155057][ T8677] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9cefb9e199 [ 309.163046][ T8677] RDX: 00007f9cf0ac8140 RSI: 00007f9cf0ac8270 RDI: 000000000000000b [ 309.171050][ T8677] RBP: 00007f9cefc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 309.179049][ T8677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 309.187055][ T8677] R13: 00007f9cefe26038 R14: 00007f9cefe25fa0 R15: 00007fff7e9ddbd8 [ 309.195069][ T8677] [ 309.203627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 309.283968][ T8677] memory: usage 307200kB, limit 307200kB, failcnt 24842 [ 309.343740][ T8677] memory+swap: usage 431832kB, limit 9007199254740988kB, failcnt 0 [ 309.385106][ T8677] kmem: usage 2944kB, limit 9007199254740988kB, failcnt 0 [ 309.453145][ T8677] Memory cgroup stats for /syz8: [ 309.454293][ T8677] anon 647168 [ 309.454293][ T8677] file 310702080 [ 309.454293][ T8677] kernel 3047424 [ 309.454293][ T8677] kernel_stack 98304 [ 309.454293][ T8677] pagetables 700416 [ 309.454293][ T8677] sec_pagetables 0 [ 309.454293][ T8677] percpu 9472 [ 309.454293][ T8677] sock 0 [ 309.454293][ T8677] vmalloc 0 [ 309.454293][ T8677] shmem 310702080 [ 309.454293][ T8677] zswap 0 [ 309.454293][ T8677] zswapped 0 [ 309.454293][ T8677] file_mapped 219303936 [ 309.454293][ T8677] file_dirty 0 [ 309.454293][ T8677] file_writeback 0 [ 309.454293][ T8677] swapcached 130367488 [ 309.454293][ T8677] anon_thp 0 [ 309.454293][ T8677] file_thp 0 [ 309.454293][ T8677] shmem_thp 0 [ 309.454293][ T8677] inactive_anon 116924416 [ 309.454293][ T8677] active_anon 194404352 [ 309.454293][ T8677] inactive_file 0 [ 309.454293][ T8677] active_file 0 [ 309.454293][ T8677] unevictable 0 [ 309.454293][ T8677] slab_reclaimable 1373096 [ 309.454293][ T8677] slab_unreclaimable 812536 [ 309.607656][ T8677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1168,pid=8677,uid=0 [ 309.636713][ T8677] Memory cgroup out of memory: Killed process 8677 (syz.8.1168) total-vm:200560kB, anon-rss:1560kB, file-rss:20608kB, shmem-rss:110216kB, UID:0 pgtables:320kB oom_score_adj:0 [ 309.829914][ T4599] usb 4-1: Cannot set autoneg [ 309.842830][ T4599] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 309.870025][ T4599] usb 4-1: USB disconnect, device number 3 [ 310.026006][ T9575] 0: reclassify loop, rule prio 0, protocol 03 [ 310.822184][ T9593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1465'. [ 310.894229][ T9593] device syzkaller1 entered promiscuous mode [ 311.959607][ T9618] loop2: detected capacity change from 0 to 512 [ 311.985899][ T9618] EXT4-fs: Ignoring removed i_version option [ 312.028043][ T9618] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.079748][ T9618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.193916][ T9618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 312.253799][ T9618] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.387788][ T9625] overlayfs: failed to clone upperpath [ 312.778074][ T7989] EXT4-fs (loop2): unmounting filesystem. [ 312.793772][ T4360] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 312.993742][ T4360] usb 4-1: Using ep0 maxpacket: 16 [ 313.000951][ T4360] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.048959][ T4360] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.069642][ T4360] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.093482][ T4360] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.123955][ T4360] usb 4-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 313.133182][ T4360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.162960][ T4360] usb 4-1: config 0 descriptor?? [ 313.224322][ T9643] fuse: Bad value for 'fd' [ 313.611266][ T4360] wacom 0003:056A:5200.0004: ignoring exceeding usage max [ 313.653246][ T4360] wacom 0003:056A:5200.0004: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 313.817791][ T127] usb 4-1: USB disconnect, device number 4 [ 314.370587][ T9676] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 314.508909][ T9680] dummy0 speed is unknown, defaulting to 1000 [ 315.009529][ T8510] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.883519][ T9711] overlayfs: failed to clone upperpath [ 316.197647][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 316.304546][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 316.822043][ T9728] dummy0 speed is unknown, defaulting to 1000 [ 317.065718][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.072107][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.094019][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 319.513945][ T127] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 319.705839][ T127] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.733783][ T127] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.777183][ T127] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 319.805370][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 319.833649][ T127] usb 3-1: Product: syz [ 319.853859][ T127] usb 3-1: Manufacturer: syz [ 319.891650][ T127] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 320.905576][ T9794] dummy0 speed is unknown, defaulting to 1000 [ 321.115228][ T9800] overlayfs: failed to clone lowerpath [ 321.147675][ T9800] overlayfs: failed to clone upperpath [ 321.729595][ T127] mos7840: probe of ttyUSB0 failed with error -71 [ 321.770130][ T127] usb 3-1: USB disconnect, device number 5 [ 321.792546][ T127] mos7840 3-1:1.0: device disconnected [ 322.133438][ T4275] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 323.027079][ T9833] netlink: 'syz.7.1553': attribute type 11 has an invalid length. [ 323.065482][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1553'. [ 323.467524][ T9841] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 323.786244][ T8677] syz.8.1168 (8677) used greatest stack depth: 17936 bytes left [ 324.312345][ T9870] FAULT_INJECTION: forcing a failure. [ 324.312345][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 324.354902][ T9870] CPU: 0 PID: 9870 Comm: syz.3.1564 Not tainted syzkaller #0 [ 324.362378][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.372484][ T9870] Call Trace: [ 324.375901][ T9870] [ 324.378873][ T9870] dump_stack_lvl+0x188/0x24e [ 324.383617][ T9870] ? show_regs_print_info+0x12/0x12 [ 324.388875][ T9870] ? load_image+0x410/0x410 [ 324.393446][ T9870] ? __might_sleep+0xd0/0xd0 [ 324.398104][ T9870] ? __lock_acquire+0x7ea0/0x7ea0 [ 324.403195][ T9870] ? __mutex_lock+0x1ab/0xae0 [ 324.407931][ T9870] should_fail_ex+0x390/0x4c0 [ 324.412673][ T9870] should_failslab+0x5/0x20 [ 324.417230][ T9870] slab_pre_alloc_hook+0x59/0x300 [ 324.422309][ T9870] ? memset+0x1e/0x40 [ 324.426361][ T9870] ? loopback_open+0x123/0xa50 [ 324.431178][ T9870] __kmem_cache_alloc_node+0x4f/0x270 [ 324.436638][ T9870] ? loopback_open+0x123/0xa50 [ 324.441475][ T9870] kmalloc_trace+0x26/0xe0 [ 324.445943][ T9870] loopback_open+0x123/0xa50 [ 324.450585][ T9870] ? snd_pcm_attach_substream+0x83a/0xac0 [ 324.456370][ T9870] snd_pcm_open_substream+0x109a/0x26a0 [ 324.461982][ T9870] ? snd_pcm_drop+0x250/0x250 [ 324.466721][ T9870] snd_pcm_oss_open+0x107e/0x1e60 [ 324.471820][ T9870] ? snd_pcm_oss_mmap+0x440/0x440 [ 324.476882][ T9870] ? soundcore_open+0x270/0x4b0 [ 324.481773][ T9870] ? __lock_acquire+0x7ea0/0x7ea0 [ 324.486833][ T9870] ? do_task_dead+0xd0/0xd0 [ 324.491379][ T9870] ? do_raw_spin_unlock+0x11d/0x230 [ 324.496620][ T9870] chrdev_open+0x585/0x5f0 [ 324.501068][ T9870] ? cd_forget+0x160/0x160 [ 324.505514][ T9870] ? fsnotify_perm+0x39b/0x550 [ 324.510306][ T9870] ? cd_forget+0x160/0x160 [ 324.514760][ T9870] do_dentry_open+0x7dd/0x10b0 [ 324.519570][ T9870] path_openat+0x2674/0x2f10 [ 324.524231][ T9870] ? kasan_set_track+0x60/0x70 [ 324.529030][ T9870] ? verify_lock_unused+0x140/0x140 [ 324.534284][ T9870] ? do_sys_openat2+0xdd/0x4f0 [ 324.539101][ T9870] ? do_filp_open+0x420/0x420 [ 324.543832][ T9870] do_filp_open+0x1ee/0x420 [ 324.548372][ T9870] ? vfs_tmpfile+0x470/0x470 [ 324.553037][ T9870] ? _raw_spin_unlock+0x24/0x40 [ 324.557913][ T9870] ? alloc_fd+0x590/0x640 [ 324.562283][ T9870] do_sys_openat2+0x14b/0x4f0 [ 324.567003][ T9870] ? do_sys_open+0xe0/0xe0 [ 324.571458][ T9870] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 324.577480][ T9870] ? lock_chain_count+0x20/0x20 [ 324.582366][ T9870] __x64_sys_openat+0x135/0x160 [ 324.587259][ T9870] do_syscall_64+0x4c/0xa0 [ 324.591798][ T9870] ? clear_bhb_loop+0x60/0xb0 [ 324.596506][ T9870] ? clear_bhb_loop+0x60/0xb0 [ 324.601211][ T9870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.607135][ T9870] RIP: 0033:0x7ff4ff99e199 [ 324.611572][ T9870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.631208][ T9870] RSP: 002b:00007ff50084b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.639652][ T9870] RAX: ffffffffffffffda RBX: 00007ff4ffc25fa0 RCX: 00007ff4ff99e199 [ 324.647664][ T9870] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 324.655660][ T9870] RBP: 00007ff4ffa358e0 R08: 0000000000000000 R09: 0000000000000000 [ 324.663657][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.671646][ T9870] R13: 00007ff4ffc26038 R14: 00007ff4ffc25fa0 R15: 00007ffefdd74ef8 [ 324.679656][ T9870] [ 324.721123][ T9875] loop2: detected capacity change from 0 to 512 [ 324.788323][ T9875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 324.850912][ T9875] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.567392][ T7989] EXT4-fs (loop2): unmounting filesystem. [ 326.105628][ T9909] mmap: syz.9.1575 (9909) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 327.752664][ T9935] overlayfs: upper fs does not support file handles, falling back to index=off. [ 328.677409][ T9953] ip_tables: iptables: counters copy to user failed while replacing table [ 331.755344][ T9998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.763623][ T9998] IPv6: NLM_F_CREATE should be set when creating new route [ 332.208504][ T9981] overlayfs: refusing to follow metacopy origin for (/file1) [ 332.924973][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.932578][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.623847][ T4518] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 333.825743][ T4518] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.846998][ T4518] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.870164][ T4518] usb 4-1: config 0 interface 0 has no altsetting 0 [ 333.879344][ T4518] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 333.899526][ T4518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.942276][ T4518] usb 4-1: config 0 descriptor?? [ 334.188585][ T4518] usbhid 4-1:0.0: can't add hid device: -71 [ 334.201691][ T4518] usbhid: probe of 4-1:0.0 failed with error -71 [ 334.219285][ T4518] usb 4-1: USB disconnect, device number 5 [ 334.363695][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 334.670646][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.760376][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.586563][T10001] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.596314][T10001] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.605353][T10001] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.616078][T10001] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.761517][T10001] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.770576][T10001] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.779534][T10001] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.788709][T10001] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.877938][T10001] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.887231][T10001] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.896685][T10001] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.905933][T10001] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 336.213864][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 336.369801][ T127] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 336.416274][ T127] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.520942][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1633'. [ 340.364379][ C0] ------------[ cut here ]------------ [ 340.370770][ C0] WARNING: CPU: 0 PID: 10126 at net/core/flow_dissector.c:1027 __skb_flow_dissect+0xade/0x6d50 [ 340.381227][ C0] Modules linked in: [ 340.385197][ C0] CPU: 0 PID: 10126 Comm: syz.7.1656 Not tainted syzkaller #0 [ 340.392711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.402868][ C0] RIP: 0010:__skb_flow_dissect+0xade/0x6d50 [ 340.408853][ C0] Code: c6 e8 76 28 4d f9 85 db 0f 84 5b 06 00 00 80 3d 78 3b d7 05 01 0f 85 81 06 00 00 e8 fc 24 4d f9 e9 e7 f9 ff ff e8 f2 24 4d f9 <0f> 0b e8 0b 9e fe 01 89 c3 31 ff 89 c6 e8 40 28 4d f9 85 db 74 18 [ 340.428625][ C0] RSP: 0018:ffffc900000067c0 EFLAGS: 00010246 [ 340.434784][ C0] RAX: ffffffff8835218e RBX: 0000000000000000 RCX: ffff888029658000 [ 340.442801][ C0] RDX: 0000000000000100 RSI: ffffffff8adf6dc0 RDI: ffffffff8adf6d80 [ 340.450896][ C0] RBP: ffffc90000006d88 R08: dffffc0000000000 R09: 1ffffffff2166648 [ 340.458955][ C0] R10: dffffc0000000000 R11: fffffbfff2166649 R12: ffffffff8e214abc [ 340.467017][ C0] R13: 1ffffffff1c42958 R14: ffffffff8e214ac2 R15: dffffc0000000000 [ 340.475059][ C0] FS: 00007f78759816c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 340.484084][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.490831][ C0] CR2: 00002000000ee030 CR3: 000000004a00c000 CR4: 00000000003506f0 [ 340.498937][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.506986][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 340.515044][ C0] Call Trace: [ 340.518362][ C0] [ 340.521256][ C0] ? __skb_flow_dissect+0x407/0x6d50 [ 340.526658][ C0] ? __lock_acquire+0x142d/0x7ea0 [ 340.531770][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 340.537066][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 340.542146][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 340.547282][ C0] ? mark_lock+0x94/0x320 [ 340.551678][ C0] ? deref_stack_reg+0x18e/0x220 [ 340.556722][ C0] ? is_bpf_text_address+0x28b/0x2a0 [ 340.562063][ C0] ? mark_lock+0x94/0x320 [ 340.566497][ C0] ? __lock_acquire+0x1359/0x7ea0 [ 340.571574][ C0] ? unwind_get_return_address+0x49/0x80 [ 340.577305][ C0] ? stack_trace_save+0xf0/0xf0 [ 340.582239][ C0] ? verify_lock_unused+0x140/0x140 [ 340.587556][ C0] ? mark_lock+0x94/0x320 [ 340.591971][ C0] ? __lock_acquire+0x142d/0x7ea0 [ 340.597108][ C0] ? __netif_receive_skb_list_core+0x704/0x770 [ 340.603402][ C0] ? netif_receive_skb_list_internal+0x93f/0xca0 [ 340.609868][ C0] ___skb_get_hash+0x55/0x6e0 [ 340.614643][ C0] __skb_get_hash+0xd2/0x270 [ 340.619285][ C0] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 340.625110][ C0] ? __virt_addr_valid+0x467/0x540 [ 340.630319][ C0] nft_trace_init+0x1e0/0x430 [ 340.635097][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 340.640715][ C0] nft_do_chain+0x1612/0x16d0 [ 340.645501][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 340.650582][ C0] ? __lock_acquire+0x1359/0x7ea0 [ 340.655776][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 340.661721][ C0] ? mark_lock+0x94/0x320 [ 340.666224][ C0] nft_do_chain_inet+0x25c/0x340 [ 340.671219][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 340.676173][ C0] ? ipt_do_table+0x2c1/0x1580 [ 340.681004][ C0] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 340.686484][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 340.691396][ C0] nf_hook_slow+0xb9/0x200 [ 340.695942][ C0] ? nf_hook+0x390/0x390 [ 340.700245][ C0] nf_hook+0x224/0x390 [ 340.704422][ C0] ? nf_hook+0x9e/0x390 [ 340.708627][ C0] ? __ip_local_out+0x5d0/0x5d0 [ 340.713526][ C0] ? nf_hook+0x390/0x390 [ 340.717880][ C0] ? ip_fast_csum+0x1ea/0x2b0 [ 340.722613][ C0] __ip_local_out+0x49c/0x5d0 [ 340.727387][ C0] ? nf_hook+0x390/0x390 [ 340.731706][ C0] ip_local_out+0x26/0x120 [ 340.736240][ C0] iptunnel_xmit+0x4a1/0x880 [ 340.740896][ C0] udp_tunnel_xmit_skb+0x22b/0x380 [ 340.746174][ C0] tipc_udp_xmit+0x85d/0xb40 [ 340.750828][ C0] ? tipc_udp_xmit+0xb3/0xb40 [ 340.755617][ C0] ? __pskb_copy_fclone+0xaa/0x1130 [ 340.760867][ C0] ? tipc_udp_msg2addr+0x1c0/0x1c0 [ 340.766092][ C0] ? __pskb_copy_fclone+0xaa/0x1130 [ 340.771350][ C0] ? __copy_skb_header+0x3ba/0x4f0 [ 340.776582][ C0] ? memcpy+0x3c/0x60 [ 340.780614][ C0] ? __copy_skb_header+0x3ba/0x4f0 [ 340.785839][ C0] ? __pskb_copy_fclone+0xadb/0x1130 [ 340.791192][ C0] tipc_udp_send_msg+0x27a/0x3e0 [ 340.796255][ C0] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 340.801505][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 340.806897][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 340.812251][ C0] tipc_disc_timeout+0x5e1/0x740 [ 340.817309][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 340.822587][ C0] call_timer_fn+0x1ac/0x670 [ 340.827293][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 340.832546][ C0] ? call_timer_fn+0xcf/0x670 [ 340.837316][ C0] ? __run_timers+0x810/0x810 [ 340.842048][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 340.847343][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 340.852607][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 340.857930][ C0] __run_timers+0x56c/0x810 [ 340.862506][ C0] ? detach_timer+0x350/0x350 [ 340.867305][ C0] ? lock_chain_count+0x20/0x20 [ 340.872255][ C0] run_timer_softirq+0x63/0xf0 [ 340.877130][ C0] handle_softirqs+0x291/0x910 [ 340.882038][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 340.887007][ C0] ? do_softirq+0x210/0x210 [ 340.891578][ C0] ? hrtimer_interrupt+0x775/0x980 [ 340.896793][ C0] __irq_exit_rcu+0x13b/0x230 [ 340.901548][ C0] ? irq_exit_rcu+0x20/0x20 [ 340.906165][ C0] irq_exit_rcu+0x5/0x20 [ 340.910457][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 340.916205][ C0] [ 340.919224][ C0] [ 340.922205][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 340.928302][ C0] RIP: 0010:__might_resched+0x172/0x5f0 [ 340.933931][ C0] Code: 2b 84 c0 0f 85 49 03 00 00 8b 02 c1 e0 08 44 01 e0 3b 44 24 2c 75 72 43 c6 44 2f 0c 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c <8f> 84 24 a0 00 00 00 f7 84 24 a0 00 00 00 00 02 00 00 43 c6 44 2f [ 340.953649][ C0] RSP: 0018:ffffc9000cc47b58 EFLAGS: 00000246 [ 340.959786][ C0] RAX: 0000000000000000 RBX: 1ffff110052cb087 RCX: e1820734c8d15c00 [ 340.967923][ C0] RDX: ffff88802965843c RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0 [ 340.976138][ C0] RBP: ffffc9000cc47c70 R08: ffffffff8e20d96f R09: 1ffffffff1c41b2d [ 340.984224][ C0] R10: dffffc0000000000 R11: fffffbfff1c41b2e R12: 0000000000000000 [ 340.992262][ C0] R13: dffffc0000000000 R14: ffff888029658000 R15: 1ffff92001988f74 [ 341.000359][ C0] ? __might_fault+0xa6/0x120 [ 341.005129][ C0] ? __might_sleep+0xd0/0xd0 [ 341.009772][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 341.014941][ C0] ? __might_fault+0xc2/0x120 [ 341.019681][ C0] ? __might_fault+0xa6/0x120 [ 341.024459][ C0] do_recvmmsg+0x552/0x810 [ 341.028954][ C0] ? __sys_recvmmsg+0x290/0x290 [ 341.033935][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.039900][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 341.045047][ C0] ? do_recvmmsg+0x810/0x810 [ 341.049726][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 341.055060][ C0] do_syscall_64+0x4c/0xa0 [ 341.059531][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.064315][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.069051][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.075139][ C0] RIP: 0033:0x7f7874b9e199 [ 341.079607][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.099326][ C0] RSP: 002b:00007f7875981028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 341.107837][ C0] RAX: ffffffffffffffda RBX: 00007f7874e26090 RCX: 00007f7874b9e199 [ 341.115975][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 341.124045][ C0] RBP: 00007f7874c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 341.132060][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 341.140147][ C0] R13: 00007f7874e26128 R14: 00007f7874e26090 R15: 00007ffd272a28e8 [ 341.148230][ C0] [ 341.151409][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.158725][ C0] CPU: 0 PID: 10126 Comm: syz.7.1656 Not tainted syzkaller #0 [ 341.166396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 341.176511][ C0] Call Trace: [ 341.179843][ C0] [ 341.182728][ C0] dump_stack_lvl+0x188/0x24e [ 341.187463][ C0] ? memcpy+0x3c/0x60 [ 341.191493][ C0] ? show_regs_print_info+0x12/0x12 [ 341.196746][ C0] ? load_image+0x410/0x410 [ 341.201430][ C0] panic+0x2d3/0x710 [ 341.205384][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 341.209960][ C0] __warn+0x2f8/0x4f0 [ 341.213997][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 341.219334][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 341.224671][ C0] report_bug+0x2ba/0x4f0 [ 341.229060][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 341.234392][ C0] handle_bug+0x3a/0x70 [ 341.238596][ C0] exc_invalid_op+0x16/0x40 [ 341.243142][ C0] asm_exc_invalid_op+0x16/0x20 [ 341.248036][ C0] RIP: 0010:__skb_flow_dissect+0xade/0x6d50 [ 341.254062][ C0] Code: c6 e8 76 28 4d f9 85 db 0f 84 5b 06 00 00 80 3d 78 3b d7 05 01 0f 85 81 06 00 00 e8 fc 24 4d f9 e9 e7 f9 ff ff e8 f2 24 4d f9 <0f> 0b e8 0b 9e fe 01 89 c3 31 ff 89 c6 e8 40 28 4d f9 85 db 74 18 [ 341.273712][ C0] RSP: 0018:ffffc900000067c0 EFLAGS: 00010246 [ 341.279820][ C0] RAX: ffffffff8835218e RBX: 0000000000000000 RCX: ffff888029658000 [ 341.287846][ C0] RDX: 0000000000000100 RSI: ffffffff8adf6dc0 RDI: ffffffff8adf6d80 [ 341.295859][ C0] RBP: ffffc90000006d88 R08: dffffc0000000000 R09: 1ffffffff2166648 [ 341.303867][ C0] R10: dffffc0000000000 R11: fffffbfff2166649 R12: ffffffff8e214abc [ 341.311905][ C0] R13: 1ffffffff1c42958 R14: ffffffff8e214ac2 R15: dffffc0000000000 [ 341.319933][ C0] ? __skb_flow_dissect+0xade/0x6d50 [ 341.325287][ C0] ? __skb_flow_dissect+0x407/0x6d50 [ 341.330632][ C0] ? __lock_acquire+0x142d/0x7ea0 [ 341.335733][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 341.340977][ C0] ? bpf_flow_dissect+0x3f0/0x3f0 [ 341.346045][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 341.351117][ C0] ? mark_lock+0x94/0x320 [ 341.355527][ C0] ? deref_stack_reg+0x18e/0x220 [ 341.360521][ C0] ? is_bpf_text_address+0x28b/0x2a0 [ 341.365867][ C0] ? mark_lock+0x94/0x320 [ 341.370256][ C0] ? __lock_acquire+0x1359/0x7ea0 [ 341.375335][ C0] ? unwind_get_return_address+0x49/0x80 [ 341.381009][ C0] ? stack_trace_save+0xf0/0xf0 [ 341.385936][ C0] ? verify_lock_unused+0x140/0x140 [ 341.391196][ C0] ? mark_lock+0x94/0x320 [ 341.395612][ C0] ? __lock_acquire+0x142d/0x7ea0 [ 341.400688][ C0] ? __netif_receive_skb_list_core+0x704/0x770 [ 341.406884][ C0] ? netif_receive_skb_list_internal+0x93f/0xca0 [ 341.413293][ C0] ___skb_get_hash+0x55/0x6e0 [ 341.418022][ C0] __skb_get_hash+0xd2/0x270 [ 341.422667][ C0] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 341.428423][ C0] ? __virt_addr_valid+0x467/0x540 [ 341.433612][ C0] nft_trace_init+0x1e0/0x430 [ 341.438339][ C0] ? nf_trace_fill_pkt_info+0x870/0x870 [ 341.443940][ C0] nft_do_chain+0x1612/0x16d0 [ 341.448670][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 341.453736][ C0] ? __lock_acquire+0x1359/0x7ea0 [ 341.458938][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 341.464904][ C0] ? mark_lock+0x94/0x320 [ 341.469352][ C0] nft_do_chain_inet+0x25c/0x340 [ 341.474341][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 341.479230][ C0] ? ipt_do_table+0x2c1/0x1580 [ 341.484076][ C0] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 341.489494][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 341.494384][ C0] nf_hook_slow+0xb9/0x200 [ 341.498870][ C0] ? nf_hook+0x390/0x390 [ 341.503175][ C0] nf_hook+0x224/0x390 [ 341.507289][ C0] ? nf_hook+0x9e/0x390 [ 341.511485][ C0] ? __ip_local_out+0x5d0/0x5d0 [ 341.516385][ C0] ? nf_hook+0x390/0x390 [ 341.520667][ C0] ? ip_fast_csum+0x1ea/0x2b0 [ 341.525405][ C0] __ip_local_out+0x49c/0x5d0 [ 341.530117][ C0] ? nf_hook+0x390/0x390 [ 341.534405][ C0] ip_local_out+0x26/0x120 [ 341.538889][ C0] iptunnel_xmit+0x4a1/0x880 [ 341.543547][ C0] udp_tunnel_xmit_skb+0x22b/0x380 [ 341.548723][ C0] tipc_udp_xmit+0x85d/0xb40 [ 341.553371][ C0] ? tipc_udp_xmit+0xb3/0xb40 [ 341.558121][ C0] ? __pskb_copy_fclone+0xaa/0x1130 [ 341.563361][ C0] ? tipc_udp_msg2addr+0x1c0/0x1c0 [ 341.568527][ C0] ? __pskb_copy_fclone+0xaa/0x1130 [ 341.573784][ C0] ? __copy_skb_header+0x3ba/0x4f0 [ 341.578938][ C0] ? memcpy+0x3c/0x60 [ 341.582969][ C0] ? __copy_skb_header+0x3ba/0x4f0 [ 341.588119][ C0] ? __pskb_copy_fclone+0xadb/0x1130 [ 341.593476][ C0] tipc_udp_send_msg+0x27a/0x3e0 [ 341.598473][ C0] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 341.603820][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 341.609147][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 341.614504][ C0] tipc_disc_timeout+0x5e1/0x740 [ 341.619494][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 341.624772][ C0] call_timer_fn+0x1ac/0x670 [ 341.629424][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 341.634672][ C0] ? call_timer_fn+0xcf/0x670 [ 341.639401][ C0] ? __run_timers+0x810/0x810 [ 341.644131][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 341.649383][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 341.654624][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 341.659873][ C0] __run_timers+0x56c/0x810 [ 341.664428][ C0] ? detach_timer+0x350/0x350 [ 341.669146][ C0] ? lock_chain_count+0x20/0x20 [ 341.674056][ C0] run_timer_softirq+0x63/0xf0 [ 341.678876][ C0] handle_softirqs+0x291/0x910 [ 341.683680][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 341.688583][ C0] ? do_softirq+0x210/0x210 [ 341.693121][ C0] ? hrtimer_interrupt+0x775/0x980 [ 341.698285][ C0] __irq_exit_rcu+0x13b/0x230 [ 341.703017][ C0] ? irq_exit_rcu+0x20/0x20 [ 341.707592][ C0] irq_exit_rcu+0x5/0x20 [ 341.711875][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 341.717565][ C0] [ 341.720536][ C0] [ 341.723500][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 341.729527][ C0] RIP: 0010:__might_resched+0x172/0x5f0 [ 341.735111][ C0] Code: 2b 84 c0 0f 85 49 03 00 00 8b 02 c1 e0 08 44 01 e0 3b 44 24 2c 75 72 43 c6 44 2f 0c 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c <8f> 84 24 a0 00 00 00 f7 84 24 a0 00 00 00 00 02 00 00 43 c6 44 2f [ 341.754757][ C0] RSP: 0018:ffffc9000cc47b58 EFLAGS: 00000246 [ 341.760878][ C0] RAX: 0000000000000000 RBX: 1ffff110052cb087 RCX: e1820734c8d15c00 [ 341.768887][ C0] RDX: ffff88802965843c RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0 [ 341.776905][ C0] RBP: ffffc9000cc47c70 R08: ffffffff8e20d96f R09: 1ffffffff1c41b2d [ 341.784908][ C0] R10: dffffc0000000000 R11: fffffbfff1c41b2e R12: 0000000000000000 [ 341.792922][ C0] R13: dffffc0000000000 R14: ffff888029658000 R15: 1ffff92001988f74 [ 341.800953][ C0] ? __might_fault+0xa6/0x120 [ 341.805690][ C0] ? __might_sleep+0xd0/0xd0 [ 341.810325][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 341.815411][ C0] ? __might_fault+0xc2/0x120 [ 341.820121][ C0] ? __might_fault+0xa6/0x120 [ 341.824835][ C0] do_recvmmsg+0x552/0x810 [ 341.829320][ C0] ? __sys_recvmmsg+0x290/0x290 [ 341.834238][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.840176][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 341.845242][ C0] ? do_recvmmsg+0x810/0x810 [ 341.849878][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 341.855151][ C0] do_syscall_64+0x4c/0xa0 [ 341.859603][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.864327][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.869075][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.875009][ C0] RIP: 0033:0x7f7874b9e199 [ 341.879484][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.899135][ C0] RSP: 002b:00007f7875981028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 341.907592][ C0] RAX: ffffffffffffffda RBX: 00007f7874e26090 RCX: 00007f7874b9e199 [ 341.915633][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 341.923638][ C0] RBP: 00007f7874c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 341.931647][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 341.939657][ C0] R13: 00007f7874e26128 R14: 00007f7874e26090 R15: 00007ffd272a28e8 [ 341.947681][ C0] [ 341.951314][ C0] Kernel Offset: disabled [ 341.955765][ C0] Rebooting in 86400 seconds..