last executing test programs: 9m57.329993975s ago: executing program 32 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2d, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8c4) 9m39.829714104s ago: executing program 33 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010104}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @empty}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 8m53.480224234s ago: executing program 34 (id=1410): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/147) 8m8.841727603s ago: executing program 35 (id=1700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) 7m20.354238269s ago: executing program 36 (id=1958): socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 7m20.302807862s ago: executing program 37 (id=1962): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") 4m12.959947335s ago: executing program 38 (id=2961): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, 0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) 3m31.399882354s ago: executing program 39 (id=3195): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000e00), 0xd, 0x20010020, 0x0) 3m4.940055495s ago: executing program 1 (id=3340): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1008041, &(0x7f0000000000)=ANY=[], 0x0, 0x2cf, &(0x7f00000000c0)="$eJzs3M9rI3UUAPA3TbqbLkh7WFkUcUe8eCrdFe8p0sJqQVGKKB4sbhYlUxc2UGgO2+7Jf0LxP9CjBy+Cgnjx4D8gglTBi3sTESLNTJNMzC+VJLJ8Ppe8zHtv5n2npTOH8n3nqcPm7butOw8fnkXt6SSq9ajHHxEbsRKVyJ0GAPAo+b3Tid86uWXPAgAsxn97/ifzGAkAmLMZn/+v5h8nixoLAJij6c//tUWPBADM2etvvvXy9t7ezmtpWos4/PBo/2i/+3nx2L8T70cWjdiK9fgzonhV+KLIdnZv7e1sped+3oj9w5Oi/+RoP//vwe2if+X8y0avv/u20el0ru/eSnZupLly/2pcKfp/uBKNuBnrcfVv/d3r3xzZfymee7Z//diM9fj+3bgbWdw+H3yg//6NNH3xlb00qjHQf7lb19V/BaoM3LqXrj5eX8jPCAAAAAAAAAAAAAAAAAAAAACAR89m2jNy/57NzXH5vH97YH+gapT256ld7K+zNXJ/nmo8WV3u2gEAAAAAAAAAAAAAAAAAAOD/onXcbh5kq/mX0yxr3MuPlIIPvv30qzGpfnD23ekb02razaS47nAqKc1TSn098YRDwVpEzFb82DM/fTS+5kHSmydWxtQkQ0fqUa6pFOeYefg8+PL60JG3KzOcJzkdlaqdt/WP1Iq7PH2MypRRvzl774nnW9deGF1TiX+25HKwNrGmMi61OuZXqxv8uh6Xi3w59WDstYq7HtNm/mzCcqrxb2/CrMHFqqcWX/u4fvD5/R9/me3MK3P8mwMAAAAAAAAAAAAAAAAAAIzWOm43a8seAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWrHXcbh5kWeNSHLc/iSxr3Ls4MjHYnaGmFyx7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FcAAAD//wAtdtY=") socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3m4.531221888s ago: executing program 1 (id=3343): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x200) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 3m4.201447217s ago: executing program 1 (id=3347): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="81"], 0x650) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 3m3.585162426s ago: executing program 1 (id=3352): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) creat(&(0x7f0000000100)='./bus\x00', 0x1b) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x8005, 0x0, 0x0, 0x1e, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce100", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="85", 0x1}], 0x1, 0x4008, 0x7, 0x13) 3m2.754011085s ago: executing program 1 (id=3360): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000400)=0xa7) ppoll(&(0x7f0000000500)=[{r4, 0x200}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) 3m2.334865473s ago: executing program 1 (id=3361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[], 0x0) 3m1.436178094s ago: executing program 40 (id=3361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[], 0x0) 2m12.426099422s ago: executing program 8 (id=3583): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m11.598864234s ago: executing program 8 (id=3589): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close(0x3) 2m11.070524262s ago: executing program 8 (id=3595): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 2m9.759914729s ago: executing program 8 (id=3606): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m9.064859525s ago: executing program 8 (id=3608): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0xf, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) 2m8.438607392s ago: executing program 3 (id=3613): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='800', 0x3) 2m8.128273659s ago: executing program 8 (id=3615): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000040b50f120300000000000109022400010000800109040000020300010009210100050122eb0009058103"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m6.63896301s ago: executing program 41 (id=3615): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000040b50f120300000000000109022400010000800109040000020300010009210100050122eb0009058103"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m6.606883197s ago: executing program 3 (id=3618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0xd, 0x40, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001f40)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "8ecce285b4d252ff19632b927d22f2a61f0167913bba859ee9f99e98d028d5baffb147a03eb6939c8cd99362370967d5ee2543770342507098f4d4358c41ac654ad614ca497eb4d45847dd35b44e4e3a"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 2m5.358274152s ago: executing program 3 (id=3637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001b00)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x3}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x9, 0x24, 0x67, 0x0, 0x80, 0x21, 0x0, @multicast2, @rand_addr=0x64010102}, {{0x4e22, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x2, 0x5, "72ed5d", 0x40, "0774b1"}}}}}}, 0x0) 2m4.802984659s ago: executing program 3 (id=3629): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nomblk_io_submit}, {@usrquota}, {@grpid}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x75, 0x8005, 0x0, 0x0, 0x2, 0xd, "ef359f413bb90100010000000000fbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7a628a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263a9f53d11e72cb39b71038259ca1727e1a311ef545032d71e14ef3dc177e9b48b005d00", "f28359738ee6d60200000000000000010000000100", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m3.495070037s ago: executing program 3 (id=3645): write(0xffffffffffffffff, &(0x7f0000000440)="20196575a57cd8b3bd94120e1aaddb7e5cdd31f326de7f6e5dcbe03f477a91e363bef30645a42e17ebd83b30c522e15cc873b37882d840392a9cd208ee0000d25fe82761bf7fe2e8f4540059eaeb4359c5b3abdd95f9817742025cd78f2b097f4cfc461722ac4a321b501218dfc974ff", 0x70) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 2m1.319578203s ago: executing program 3 (id=3647): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20002000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 2m0.36967414s ago: executing program 42 (id=3647): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20002000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 1m0.395505992s ago: executing program 7 (id=3984): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0xfd, 0xc8e}, {0x16, 0xff, 0x6, 0x6}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000010940)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 59.901255947s ago: executing program 7 (id=3989): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 59.424824548s ago: executing program 7 (id=3995): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8031, 0xffffffffffffffff, 0x13732000) 58.862863291s ago: executing program 7 (id=4000): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) write(r0, &(0x7f0000000280)="ff80", 0x2) 57.879021203s ago: executing program 7 (id=4004): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}], 0x1, 0x0, 0x0, 0x0) 53.878612548s ago: executing program 7 (id=4018): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xfffffffffffffda3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xa, 0x7, 0xf7, 0x7, 0x1, 0x3, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 52.949002336s ago: executing program 43 (id=4018): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xfffffffffffffda3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xa, 0x7, 0xf7, 0x7, 0x1, 0x3, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 14.890873616s ago: executing program 4 (id=4258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 13.673916144s ago: executing program 4 (id=4267): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x51c, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) timer_create(0x3, 0x0, &(0x7f0000000040)) 12.863222043s ago: executing program 9 (id=4272): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 12.073546405s ago: executing program 4 (id=4278): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r2, &(0x7f00000005c0)={0x2d, 0x0, r4, 0xc}, 0x10) close(r2) 11.816225196s ago: executing program 4 (id=4282): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) r1 = getpgid(0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r0, 0xc) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) 11.527963706s ago: executing program 5 (id=4285): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="bb28", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) 11.401815877s ago: executing program 9 (id=4286): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x880, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11.217550658s ago: executing program 5 (id=4287): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='cdg', 0x3) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 11.114795577s ago: executing program 4 (id=4288): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r2, &(0x7f0000000300), 0x1) read(r2, &(0x7f0000000400), 0x120) 10.71772741s ago: executing program 4 (id=4289): unshare(0x20020480) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) unshare(0x42040280) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0}) 9.878525726s ago: executing program 5 (id=4292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 9.01563484s ago: executing program 5 (id=4295): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x41}, @dev={0xac, 0x14, 0x0, 0x1}, {[@timestamp={0x44, 0x4, 0xbb, 0x0, 0x7}]}}, {0x1234, 0x4e20, 0x57, 0x0, @opaque="5a09b3c501c2eb4c413dcab90300a9c0388123500c50ff2cac28d97915198c5c52ef55da678db6851a370d5bd9e72a5e5f0721a0e702983f086dfec5dd066134efdb0303145d24862bb1934d336cf7"}}}, 0x79) 8.503747142s ago: executing program 2 (id=4296): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x3, 0x2bc, &(0x7f00000015c0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 8.215608553s ago: executing program 6 (id=4298): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 7.792540633s ago: executing program 9 (id=4299): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 7.568725948s ago: executing program 0 (id=4300): r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001, 0x0, 0x397}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x8, 0x4, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x24000000) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000004", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x8035}}}}}}}, 0x0) 7.166539989s ago: executing program 2 (id=4302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvfrom(r0, &(0x7f00000014c0)=""/4074, 0xffa, 0x40010060, 0x0, 0xfffffffffffffe5d) 7.030808455s ago: executing program 0 (id=4303): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4) utime(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 6.69230885s ago: executing program 6 (id=4304): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) read$alg(r2, &(0x7f0000000680)=""/132, 0x84) 6.62379269s ago: executing program 2 (id=4305): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 6.272823696s ago: executing program 6 (id=4306): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90d, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5524, 0x4, 0x3, 0x1ce}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x1, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 5.265989613s ago: executing program 0 (id=4307): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x7fff) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0x81, 0xb) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0x8c}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 4.731790026s ago: executing program 6 (id=4308): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) getsockopt(r1, 0x4, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.647000093s ago: executing program 0 (id=4309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="059a"], 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 4.110552647s ago: executing program 9 (id=4310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x8, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.278874752s ago: executing program 6 (id=4311): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x802217, 0xde73, 0xe1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.546252896s ago: executing program 2 (id=4312): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x14, 0xfe, 0x100, 0x69, @dev={0xfe, 0x80, '\x00', 0x35}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x4, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x0, 0x82, 0x64, 0x1ac9ee85, 0x0, @mcast1, @empty, 0x0, 0x1, 0xd, 0xa174}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000000800"], 0x50) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0x2a00) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') lseek(r4, 0x80000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf17a3b296e660dc4, 0x6, 0x6, 0x7fff, 0x14012, r2, 0x87b, '\x00', r1, r3, 0x4, 0x0, 0x1, 0x0, @void, @value, @value=r4}, 0x50) 1.792224628s ago: executing program 9 (id=4313): socket$inet6(0xa, 0x800000000000002, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x4) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x3, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x18e) 1.724247468s ago: executing program 0 (id=4314): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x81101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r0], 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) io_submit(0x0, 0x0, 0x0) 1.171843091s ago: executing program 2 (id=4315): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 992.392159ms ago: executing program 9 (id=4316): r0 = userfaultfd(0x801) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 798.891431ms ago: executing program 5 (id=4317): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000777000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28040004) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xd, 0xf, 0x7, 0xd477, 0x2, 0x3e, 0x1, 0x2be, 0x40, 0x11f, 0x8, 0x2, 0x38, 0x1, 0x1, 0x3, 0x1}, [{0x0, 0x0, 0x3ff, 0xcf64, 0xfffffffffffffffe, 0x81, 0x3, 0x94c3}]}, 0x78) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 427.717175ms ago: executing program 6 (id=4318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) fcntl$setstatus(r0, 0x4, 0x42400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000040), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) 383.813028ms ago: executing program 0 (id=4319): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x1008}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 294.882952ms ago: executing program 2 (id=4320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x9, 0x3, 0x8000, 0xfffffff9}, 0x9, 0x0, 0xfffffff8, 0x3, 0xe, 0xc, 0x16, 0x9, 0x0, 0x7ff, {0x4, 0x7, 0xd141, 0x2, 0x0, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080d1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) 0s ago: executing program 5 (id=4321): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007d1000/0x1000)=nil, 0x1000, 0x2, 0x4000010, 0xffffffffffffffff, 0xf4754000) munlockall() mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) kernel console output (not intermixed with test programs): e team_slave_1 added [ 764.486099][T18634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.486139][T18634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.486189][T18634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.505925][T18634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.505953][T18634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.506001][T18634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.668775][T18634] hsr_slave_0: entered promiscuous mode [ 764.670007][T18634] hsr_slave_1: entered promiscuous mode [ 764.671036][T18634] debugfs: 'hsr0' already exists in 'hsr' [ 764.671066][T18634] Cannot create hsr debugfs directory [ 764.862930][T18826] loop5: detected capacity change from 0 to 512 [ 764.892946][T18826] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 764.920059][T18826] EXT4-fs (loop5): 1 truncate cleaned up [ 764.932181][T18826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.019825][ T31] audit: type=1800 audit(1788549298.958:254): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3664" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 765.098295][T16801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.604442][T12503] Bluetooth: hci2: command tx timeout [ 765.627676][ T414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.647708][ T414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.658055][ T414] bond0 (unregistering): Released all slaves [ 765.670351][ T414] bond1 (unregistering): (slave veth3): Releasing backup interface [ 765.679807][ T414] bond1 (unregistering): Released all slaves [ 765.831094][T18754] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.831315][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.831485][T18754] bridge_slave_0: entered allmulticast mode [ 765.834336][T18754] bridge_slave_0: entered promiscuous mode [ 765.837585][T18754] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.837740][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.838209][T18754] bridge_slave_1: entered allmulticast mode [ 765.844349][T18754] bridge_slave_1: entered promiscuous mode [ 765.991694][T18754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.004136][T18754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.140638][T18634] netdevsim netdevsim4 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.176689][T18754] team0: Port device team_slave_0 added [ 766.220416][T18754] team0: Port device team_slave_1 added [ 766.268964][T18808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.352245][T18634] netdevsim netdevsim4 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.451706][ T414] hsr_slave_0: left promiscuous mode [ 766.459174][ T414] hsr_slave_1: left promiscuous mode [ 766.460641][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.460672][ T414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.480349][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.480395][ T414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.507353][ T414] veth1_macvtap: left promiscuous mode [ 766.507414][ T414] veth0_macvtap: left promiscuous mode [ 766.507545][ T414] veth1_vlan: left promiscuous mode [ 766.507636][ T414] veth0_vlan: left promiscuous mode [ 766.805198][ T414] team0 (unregistering): Port device team_slave_1 removed [ 766.836470][ T414] team0 (unregistering): Port device team_slave_0 removed [ 766.989765][T18754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.989820][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.989882][T18754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.993543][T18754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.993567][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.993614][T18754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.064946][ T6356] netdevsim netdevsim3 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.065017][ T6356] netdevsim netdevsim3 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.172925][T18634] netdevsim netdevsim4 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.227442][T18754] hsr_slave_0: entered promiscuous mode [ 767.229009][T18754] hsr_slave_1: entered promiscuous mode [ 767.229846][T18754] debugfs: 'hsr0' already exists in 'hsr' [ 767.229875][T18754] Cannot create hsr debugfs directory [ 767.382634][T18634] netdevsim netdevsim4 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.552270][ T6356] netdevsim netdevsim3 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.552823][ T6356] netdevsim netdevsim3 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.684166][T12503] Bluetooth: hci2: command tx timeout [ 767.791235][T18634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 767.812700][T18634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.821805][T18634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 767.836914][T18634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.860794][T18634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 767.876291][T18634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.877450][T18634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 767.886833][T18634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.961869][T18754] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.125094][T18754] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.172720][T18634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.205628][T18634] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.220938][T15539] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.221073][T15539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.288718][T18754] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.311697][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.311843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.430254][T18754] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.821313][T18754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 768.846145][T18754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.864804][T18754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 768.876646][T18754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.885324][T18754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 768.900377][T18754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.911768][T18754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 768.926150][T18754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.093495][T18754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.139028][T18754] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.160823][T15535] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.160967][T15535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.187497][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.187643][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.668048][T18634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.764294][T12503] Bluetooth: hci2: command tx timeout [ 770.182956][T18754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.309885][T18754] veth0_vlan: entered promiscuous mode [ 770.348646][T18754] veth1_vlan: entered promiscuous mode [ 770.382652][T18634] veth0_vlan: entered promiscuous mode [ 770.410623][T18634] veth1_vlan: entered promiscuous mode [ 770.450881][T18754] veth0_macvtap: entered promiscuous mode [ 770.461825][T18754] veth1_macvtap: entered promiscuous mode [ 770.509321][T18754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.539442][T18634] veth0_macvtap: entered promiscuous mode [ 770.548871][T18754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.579254][T18634] veth1_macvtap: entered promiscuous mode [ 770.626049][T15539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.628737][ T6356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.628933][ T6356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.628998][ T6356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.763292][T18634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.831651][T18634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.010560][ T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.020265][ T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.024330][ T7476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.024732][ T7476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.024795][ T7476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.024854][ T7476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.211696][T15539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.211772][T15539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.322099][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.322152][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.492185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.510807][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.637013][T18916] netlink: 'syz.2.3678': attribute type 10 has an invalid length. [ 771.680817][T18916] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.712419][T18916] bond0: (slave team0): Enslaving as an active interface with an up link [ 772.943333][T18961] loop6: detected capacity change from 0 to 512 [ 772.988267][T18961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 773.056360][T18961] EXT4-fs (loop6): orphan cleanup on readonly fs [ 773.068384][T18961] EXT4-fs warning (device loop6): ext4_enable_quotas:7300: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 773.074021][T18961] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 773.074054][T18961] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.3676: bad orphan inode 768 [ 773.074095][T18961] loop6: lost filesystem error report for type 5 error -117 [ 773.121220][T18961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 773.170217][T18973] netlink: 3528 bytes leftover after parsing attributes in process `syz.4.3681'. [ 773.199042][T18973] netlink: 3736 bytes leftover after parsing attributes in process `syz.4.3681'. [ 773.431784][T17514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.055034][T19002] netlink: 'syz.6.3690': attribute type 1 has an invalid length. [ 774.542976][T19004] bond1: (slave gretap1): making interface the new active one [ 774.560527][T19004] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 774.714863][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3692'. [ 774.756110][T19017] erspan0: entered promiscuous mode [ 774.823247][T19017] macvtap1: entered promiscuous mode [ 774.827151][T19017] macvtap1: entered allmulticast mode [ 774.827181][T19017] erspan0: entered allmulticast mode [ 775.060182][T19018] erspan0: left allmulticast mode [ 775.060408][T19018] erspan0: left promiscuous mode [ 775.068796][T19024] loop6: detected capacity change from 0 to 512 [ 775.082183][T19018] macvtap1: left promiscuous mode [ 775.082242][T19018] macvtap1: left allmulticast mode [ 775.113478][T19024] EXT4-fs error (device loop6): ext4_validate_block_bitmap:435: comm syz.6.3694: bg 0: block 5: invalid block bitmap [ 775.113561][T19024] loop6: lost filesystem error report for type 5 error -117 [ 775.113854][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 775.113885][ C0] EXT4-fs (loop6): initial error at time 1788549309: ext4_validate_block_bitmap:435 [ 775.113927][ C0] EXT4-fs (loop6): last error at time 1788549309: ext4_validate_block_bitmap:435 [ 775.140156][T19024] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 775.140194][T19024] loop6: lost filesystem error report for type 5 error -117 [ 775.140617][T19024] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.3694: invalid indirect mapped block 3 (level 2) [ 775.140672][T19024] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 775.141234][T19024] EXT4-fs (loop6): 1 orphan inode deleted [ 775.141266][T19024] EXT4-fs (loop6): 1 truncate cleaned up [ 775.252372][T19024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.264100][ T5754] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 775.385749][ T31] audit: type=1804 audit(1788549309.318:255): pid=19024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3694" name="/newroot/52/file0/file0" dev="loop6" ino=11 res=1 errno=0 [ 775.411128][T19024] EXT4-fs (loop6): shut down requested (0) [ 775.429162][ T5754] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 775.432935][ T5754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 775.433002][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.698893][T17514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.983086][ T5754] lg-g15 0003:046D:C222.0039: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 776.072654][T19043] loop6: detected capacity change from 0 to 512 [ 776.123846][T19043] EXT4-fs (loop6): 1 truncate cleaned up [ 776.139824][T19043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.162601][ T5754] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C222.0039/input/input52 [ 776.508423][T17514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.687751][ T5754] lg-g15 0003:046D:C222.0039: Error getting LED brightness: -71 [ 776.722742][ T5754] lg-g15 0003:046D:C222.0039: Error getting LED brightness: -71 [ 776.925749][ T5754] lg-g15 0003:046D:C222.0039: Error getting LED brightness: -71 [ 776.991226][ T5754] lg-g15 0003:046D:C222.0039: Error getting LED brightness: -71 [ 777.061043][ T5754] lg-g15 0003:046D:C222.0039: Error getting LED brightness: -71 [ 777.080884][ T5754] lg-g15 0003:046D:C222.0039: Error getting LED brightness: -71 [ 777.128949][ T5754] usb 3-1: USB disconnect, device number 34 [ 777.475174][T19073] loop4: detected capacity change from 0 to 128 [ 777.490354][T19073] FAT-fs (loop4): bogus number of FAT structure [ 777.490412][T19073] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 777.490442][T19073] FAT-fs (loop4): Can't find a valid FAT filesystem [ 777.630213][T19073] xt_hashlimit: size too large, truncated to 1048576 [ 778.123338][T19094] use of bytesused == 0 is deprecated and will be removed in the future, [ 778.181020][T19094] use the actual size instead. [ 778.220603][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3715'. [ 778.964048][T19111] loop0: detected capacity change from 0 to 131072 [ 778.977347][T19111] F2FS-fs (loop0): invalid crc value [ 779.133075][T19111] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 779.157739][T19111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 779.240286][ T31] audit: type=1804 audit(1788549313.178:256): pid=19111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3719" name="/newroot/8/file1/file1" dev="loop0" ino=7 res=1 errno=0 [ 779.980349][T19138] loop6: detected capacity change from 0 to 131072 [ 779.990126][T19138] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 779.990161][T19138] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 779.990986][T19138] F2FS-fs (loop6): invalid crc value [ 780.167446][T19154] FAULT_INJECTION: forcing a failure. [ 780.167446][T19154] name failslab, interval 1, probability 0, space 0, times 0 [ 780.180538][T19154] CPU: 1 UID: 0 PID: 19154 Comm: syz.2.3724 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.180605][T19154] Tainted: [L]=SOFTLOCKUP [ 780.180621][T19154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 780.180646][T19154] Call Trace: [ 780.180659][T19154] [ 780.180675][T19154] dump_stack_lvl+0x100/0x190 [ 780.180736][T19154] should_fail_ex.cold+0x5/0xa [ 780.180781][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.180837][T19154] should_failslab+0xc2/0x120 [ 780.180902][T19154] __kmalloc_cache_noprof+0x91/0x6d0 [ 780.180949][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.180998][T19154] ? lockdep_hardirqs_on+0x7d/0x110 [ 780.181051][T19154] ? pkcs8_key_preparse+0x128/0x480 [ 780.181106][T19154] pkcs8_key_preparse+0x128/0x480 [ 780.181152][T19154] ? __pfx_pkcs8_key_preparse+0x10/0x10 [ 780.181195][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.181251][T19154] ? x509_cert_parse+0x6a5/0x910 [ 780.181294][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.181342][T19154] ? x509_key_preparse+0x655/0x9c0 [ 780.181385][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.181441][T19154] asymmetric_key_preparse+0xce/0x1d0 [ 780.181501][T19154] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 780.181564][T19154] __key_create_or_update+0x463/0xe30 [ 780.181632][T19154] ? __pfx___key_create_or_update+0x10/0x10 [ 780.181697][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.181745][T19154] ? lookup_user_key+0x3f3/0x1300 [ 780.181819][T19154] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 780.181884][T19154] key_create_or_update+0x42/0x60 [ 780.181949][T19154] __do_sys_add_key+0x2e8/0x460 [ 780.181989][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.182041][T19154] ? __pfx___do_sys_add_key+0x10/0x10 [ 780.182090][T19154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 780.182148][T19154] do_syscall_64+0x123/0x790 [ 780.182208][T19154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.182255][T19154] RIP: 0033:0x7f2320f9e159 [ 780.182286][T19154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.182327][T19154] RSP: 002b:00007f2321dc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 780.182367][T19154] RAX: ffffffffffffffda RBX: 00007f2321225fa0 RCX: 00007f2320f9e159 [ 780.182395][T19154] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 780.182421][T19154] RBP: 00007f2321035024 R08: ffffffffffffffff R09: 0000000000000000 [ 780.182448][T19154] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 780.182474][T19154] R13: 00007f2321226038 R14: 00007f2321225fa0 R15: 00007ffc4b6f8fd8 [ 780.182527][T19154] [ 780.213075][T19138] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 780.260657][T19138] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 780.260696][T19138] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 780.322084][ T31] audit: type=1800 audit(1788549314.258:257): pid=19138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3722" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 782.057567][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3733'. [ 782.057641][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3733'. [ 782.057999][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3733'. [ 782.058045][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3733'. [ 783.060827][T19219] input: syz0 as /devices/virtual/input/input53 [ 783.610293][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3745'. [ 783.954179][T19242] syz_tun: entered allmulticast mode [ 784.005397][T19245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3748'. [ 784.005468][T19245] netlink: 'syz.4.3748': attribute type 8 has an invalid length. [ 784.005516][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3748'. [ 784.115186][T19250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3748'. [ 784.115267][T19250] netlink: 'syz.4.3748': attribute type 8 has an invalid length. [ 784.115314][T19250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3748'. [ 784.463281][T19264] FAULT_INJECTION: forcing a failure. [ 784.463281][T19264] name failslab, interval 1, probability 0, space 0, times 0 [ 784.463359][T19264] CPU: 0 UID: 0 PID: 19264 Comm: syz.2.3755 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.463413][T19264] Tainted: [L]=SOFTLOCKUP [ 784.463427][T19264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 784.463449][T19264] Call Trace: [ 784.463460][T19264] [ 784.463473][T19264] dump_stack_lvl+0x100/0x190 [ 784.463525][T19264] should_fail_ex.cold+0x5/0xa [ 784.463561][T19264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.463607][T19264] should_failslab+0xc2/0x120 [ 784.463663][T19264] __kmalloc_noprof+0xfc/0x840 [ 784.463715][T19264] ? bpf_prepare_filter+0x77c/0x11e0 [ 784.463772][T19264] bpf_prepare_filter+0x77c/0x11e0 [ 784.463819][T19264] ? __pfx_seccomp_check_filter+0x10/0x10 [ 784.463874][T19264] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 784.463933][T19264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.463982][T19264] ? __asan_memcpy+0x3c/0x60 [ 784.464035][T19264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.464084][T19264] ? kmemdup_noprof+0x49/0x60 [ 784.464126][T19264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.464182][T19264] bpf_prog_create_from_user+0x1df/0x2e0 [ 784.464247][T19264] ? __pfx_seccomp_check_filter+0x10/0x10 [ 784.464301][T19264] do_seccomp+0x870/0x27c0 [ 784.464365][T19264] ? __pfx_do_seccomp+0x10/0x10 [ 784.464418][T19264] ? fd_install+0x223/0x580 [ 784.464480][T19264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.464527][T19264] ? xfd_validate_state+0x129/0x190 [ 784.464601][T19264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.464658][T19264] do_syscall_64+0x123/0x790 [ 784.464719][T19264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.464761][T19264] RIP: 0033:0x7f2320f9e159 [ 784.464792][T19264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.464831][T19264] RSP: 002b:00007f2321dc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 784.464870][T19264] RAX: ffffffffffffffda RBX: 00007f2321225fa0 RCX: 00007f2320f9e159 [ 784.464898][T19264] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 784.464924][T19264] RBP: 00007f2321035024 R08: 0000000000000000 R09: 0000000000000000 [ 784.464949][T19264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.464974][T19264] R13: 00007f2321226038 R14: 00007f2321225fa0 R15: 00007ffc4b6f8fd8 [ 784.465027][T19264] [ 784.859089][T19267] FAULT_INJECTION: forcing a failure. [ 784.859089][T19267] name failslab, interval 1, probability 0, space 0, times 0 [ 784.873262][T19267] CPU: 1 UID: 0 PID: 19267 Comm: syz.0.3757 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.873328][T19267] Tainted: [L]=SOFTLOCKUP [ 784.873344][T19267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 784.873368][T19267] Call Trace: [ 784.873382][T19267] [ 784.873397][T19267] dump_stack_lvl+0x100/0x190 [ 784.873456][T19267] should_fail_ex.cold+0x5/0xa [ 784.873499][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.873557][T19267] should_failslab+0xc2/0x120 [ 784.873623][T19267] __kmalloc_noprof+0xfc/0x840 [ 784.873678][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.873726][T19267] ? rcu_is_watching+0x13/0xc0 [ 784.873785][T19267] ? iovec_from_user+0x8d/0x140 [ 784.873838][T19267] iovec_from_user+0x8d/0x140 [ 784.873887][T19267] __import_iovec+0x81/0x640 [ 784.873929][T19267] ? pti_set_user_pgtbl+0x50/0x50 [ 784.873974][T19267] ? __might_fault+0xc5/0x140 [ 784.874027][T19267] import_iovec+0x101/0x130 [ 784.874079][T19267] copy_msghdr_from_user+0x2c6/0x4c0 [ 784.874144][T19267] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 784.874216][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.874264][T19267] ? __lock_acquire+0x4c5/0x1ec0 [ 784.874340][T19267] ___sys_recvmsg+0xdd/0x1a0 [ 784.874402][T19267] ? __pfx____sys_recvmsg+0x10/0x10 [ 784.874464][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.874512][T19267] ? lock_acquire+0x1d1/0x380 [ 784.874578][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.874660][T19267] do_recvmmsg+0x2f3/0x740 [ 784.874730][T19267] ? __pfx_do_recvmmsg+0x10/0x10 [ 784.874804][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.874852][T19267] ? do_futex+0x190/0x440 [ 784.874920][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.874967][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.875019][T19267] __x64_sys_recvmmsg+0x22a/0x280 [ 784.875067][T19267] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 784.875118][T19267] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.875173][T19267] do_syscall_64+0x123/0x790 [ 784.875224][T19267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.875265][T19267] RIP: 0033:0x7f65c459e159 [ 784.875294][T19267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.875329][T19267] RSP: 002b:00007f65c53b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 784.875364][T19267] RAX: ffffffffffffffda RBX: 00007f65c4825fa0 RCX: 00007f65c459e159 [ 784.875387][T19267] RDX: 0000000000000001 RSI: 0000200000007880 RDI: 0000000000000003 [ 784.875409][T19267] RBP: 00007f65c4635024 R08: 0000000000000000 R09: 0000000000000000 [ 784.875430][T19267] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 784.875453][T19267] R13: 00007f65c4826038 R14: 00007f65c4825fa0 R15: 00007ffc486b7928 [ 784.875496][T19267] [ 785.425038][T19276] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 786.049071][ T5753] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 786.064665][T19306] FAULT_INJECTION: forcing a failure. [ 786.064665][T19306] name failslab, interval 1, probability 0, space 0, times 0 [ 786.077673][T19306] CPU: 1 UID: 0 PID: 19306 Comm: syz.4.3768 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.077766][T19306] Tainted: [L]=SOFTLOCKUP [ 786.077782][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 786.077807][T19306] Call Trace: [ 786.077822][T19306] [ 786.077838][T19306] dump_stack_lvl+0x100/0x190 [ 786.077900][T19306] should_fail_ex.cold+0x5/0xa [ 786.077940][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.077993][T19306] should_failslab+0xc2/0x120 [ 786.078058][T19306] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 786.078116][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.078165][T19306] ? __d_alloc+0x35/0xa50 [ 786.078215][T19306] __d_alloc+0x35/0xa50 [ 786.078252][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.078299][T19306] ? set_nlink+0xb4/0x190 [ 786.078342][T19306] d_make_root+0x3e/0x90 [ 786.078378][T19306] proc_fill_super+0x57f/0x870 [ 786.078423][T19306] ? __pfx_proc_fill_super+0x10/0x10 [ 786.078467][T19306] get_tree_nodev+0xdd/0x190 [ 786.078517][T19306] vfs_get_tree+0x92/0x320 [ 786.078553][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.078594][T19306] path_mount+0x7d0/0x24c0 [ 786.078641][T19306] ? __pfx_path_mount+0x10/0x10 [ 786.078675][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.078718][T19306] ? lockdep_hardirqs_on+0x7d/0x110 [ 786.078780][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.078827][T19306] ? kmem_cache_free+0x127/0x6c0 [ 786.078884][T19306] ? __x64_sys_mount+0x293/0x310 [ 786.078918][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.078955][T19306] __x64_sys_mount+0x293/0x310 [ 786.078992][T19306] ? __pfx___x64_sys_mount+0x10/0x10 [ 786.079032][T19306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.079076][T19306] do_syscall_64+0x123/0x790 [ 786.079123][T19306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.079155][T19306] RIP: 0033:0x7f5bc6f9e159 [ 786.079182][T19306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.079213][T19306] RSP: 002b:00007f5bc7e6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 786.079244][T19306] RAX: ffffffffffffffda RBX: 00007f5bc7225fa0 RCX: 00007f5bc6f9e159 [ 786.079267][T19306] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 786.079288][T19306] RBP: 00007f5bc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 786.079309][T19306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.079329][T19306] R13: 00007f5bc7226038 R14: 00007f5bc7225fa0 R15: 00007ffcc6b6db28 [ 786.079371][T19306] [ 786.091802][T19306] proc_fill_super: allocate dentry failed [ 786.161967][T19307] input: syz0 as /devices/virtual/input/input54 [ 786.207289][ T5753] usb 7-1: Using ep0 maxpacket: 8 [ 786.211564][ T5753] usb 7-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice= 0.00 [ 786.216854][ T5753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.282707][ T5753] em28xx 7-1:1.0: New device @ 480 Mbps (eb1a:2800, interface 0, class 0) [ 786.282763][ T5753] em28xx 7-1:1.0: Audio interface 0 found (Vendor Class) [ 786.647691][ T5753] em28xx 7-1:1.0: unknown em28xx chip ID (39) [ 786.850324][ T5753] em28xx 7-1:1.0: Config register raw data: 0x27 [ 786.850385][ T5753] em28xx 7-1:1.0: I2S Audio (3 sample rate(s)) [ 786.850441][ T5753] em28xx 7-1:1.0: No AC97 audio processor [ 788.684703][ T5753] usb 7-1: USB disconnect, device number 16 [ 788.902506][T19380] loop0: detected capacity change from 0 to 3904 [ 788.990851][T19380] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 788.990908][T19380] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 788.991002][T19380] loop0: [ 789.466113][T19390] FAULT_INJECTION: forcing a failure. [ 789.466113][T19390] name failslab, interval 1, probability 0, space 0, times 0 [ 789.479038][T19390] CPU: 1 UID: 0 PID: 19390 Comm: syz.5.3790 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.479095][T19390] Tainted: [L]=SOFTLOCKUP [ 789.479109][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 789.479129][T19390] Call Trace: [ 789.479142][T19390] [ 789.479156][T19390] dump_stack_lvl+0x100/0x190 [ 789.479211][T19390] should_fail_ex.cold+0x5/0xa [ 789.479251][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.479304][T19390] should_failslab+0xc2/0x120 [ 789.479371][T19390] kmem_cache_alloc_noprof+0x92/0x6a0 [ 789.479425][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.479476][T19390] ? vm_area_dup+0x27/0x9d0 [ 789.479526][T19390] vm_area_dup+0x27/0x9d0 [ 789.479570][T19390] __split_vma+0x19c/0x1de0 [ 789.479614][T19390] ? mas_prev_slot+0x768/0x11b0 [ 789.479687][T19390] ? __pfx___split_vma+0x10/0x10 [ 789.479759][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.479817][T19390] vma_modify+0x1ef4/0x29b0 [ 789.479867][T19390] ? __entry_text_end+0x102035/0x102039 [ 789.479927][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.479980][T19390] ? __pfx_vma_modify+0x10/0x10 [ 789.480031][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.480080][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.480132][T19390] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 789.480176][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.480241][T19390] vma_modify_flags+0x2c3/0x460 [ 789.480291][T19390] ? __pfx_vma_modify_flags+0x10/0x10 [ 789.480358][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.480409][T19390] ? __resched_curr+0x42e/0x500 [ 789.480446][T19390] ? enqueue_task+0x1dc/0x4f0 [ 789.480497][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.480559][T19390] mlock_fixup+0x4a8/0xc60 [ 789.480614][T19390] ? __pfx_mlock_fixup+0x10/0x10 [ 789.480665][T19390] ? srso_alias_safe_ret+0x4/0x7 [ 789.480737][T19390] apply_vma_lock_flags+0x390/0x500 [ 789.480796][T19390] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 789.480848][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.480921][T19390] ? down_write_killable+0x152/0x240 [ 789.480987][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.481047][T19390] do_mlock+0x261/0x800 [ 789.481100][T19390] ? __pfx_do_mlock+0x10/0x10 [ 789.481143][T19390] ? do_futex+0x190/0x440 [ 789.481196][T19390] ? __pfx_do_futex+0x10/0x10 [ 789.481248][T19390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 789.481320][T19390] __x64_sys_mlock2+0x169/0x1f0 [ 789.481372][T19390] ? __pfx___x64_sys_mlock2+0x10/0x10 [ 789.481433][T19390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 789.481490][T19390] do_syscall_64+0x123/0x790 [ 789.481550][T19390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.481593][T19390] RIP: 0033:0x7f7a8df9e159 [ 789.481625][T19390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.481665][T19390] RSP: 002b:00007f7a8edc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 789.481706][T19390] RAX: ffffffffffffffda RBX: 00007f7a8e225fa0 RCX: 00007f7a8df9e159 [ 789.481742][T19390] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000200000ffe000 [ 789.481770][T19390] RBP: 00007f7a8e035024 R08: 0000000000000000 R09: 0000000000000000 [ 789.481797][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.481823][T19390] R13: 00007f7a8e226038 R14: 00007f7a8e225fa0 R15: 00007ffe63718838 [ 789.481878][T19390] [ 790.731961][T19420] printk: legacy console [ttyGS0] disabled [ 790.831184][T19430] FAULT_INJECTION: forcing a failure. [ 790.831184][T19430] name failslab, interval 1, probability 0, space 0, times 0 [ 790.831279][T19430] CPU: 0 UID: 0 PID: 19430 Comm: syz.2.3802 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.831331][T19430] Tainted: [L]=SOFTLOCKUP [ 790.831344][T19430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 790.831371][T19430] Call Trace: [ 790.831386][T19430] [ 790.831402][T19430] dump_stack_lvl+0x100/0x190 [ 790.831464][T19430] should_fail_ex.cold+0x5/0xa [ 790.831509][T19430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.831566][T19430] should_failslab+0xc2/0x120 [ 790.831631][T19430] __kmalloc_noprof+0xfc/0x840 [ 790.831685][T19430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.831734][T19430] ? trace_kmalloc+0xeb/0x110 [ 790.831796][T19430] ? lsm_blob_alloc+0x68/0x90 [ 790.831871][T19430] lsm_blob_alloc+0x68/0x90 [ 790.831937][T19430] security_sk_alloc+0x2d/0x290 [ 790.831988][T19430] sk_prot_alloc+0x12a/0x2a0 [ 790.832049][T19430] sk_alloc+0x36/0xe80 [ 790.832094][T19430] llc_sk_alloc+0x32/0x4c0 [ 790.832143][T19430] llc_ui_create+0xeb/0x440 [ 790.832203][T19430] __sock_create+0x339/0x860 [ 790.832279][T19430] __sys_socket+0x14d/0x260 [ 790.832341][T19430] ? __pfx___sys_socket+0x10/0x10 [ 790.832418][T19430] __x64_sys_socket+0x72/0xb0 [ 790.832479][T19430] ? lockdep_hardirqs_on+0x7d/0x110 [ 790.832534][T19430] do_syscall_64+0x123/0x790 [ 790.832593][T19430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.832636][T19430] RIP: 0033:0x7f2320f9e159 [ 790.832667][T19430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.832705][T19430] RSP: 002b:00007f2321dc8fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 790.832743][T19430] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2320f9e159 [ 790.832770][T19430] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001a [ 790.832795][T19430] RBP: 00007f2321035024 R08: 0000000000000000 R09: 0000000000000000 [ 790.832820][T19430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.832847][T19430] R13: 00007f2321226038 R14: 00007f2321225fa0 R15: 00007ffc4b6f8fd8 [ 790.832899][T19430] [ 791.159797][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3808'. [ 791.170308][T19439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.230636][T19439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.417845][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3811'. [ 791.993461][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3816'. [ 792.613038][T19457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.721400][T19457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.045427][ T985] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 793.228159][ T985] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 793.240361][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.240452][ T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.268162][ T985] usb 6-1: config 0 descriptor?? [ 793.355526][ T61] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.355609][ T61] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.355674][ T61] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.355733][ T61] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.520471][ T985] usbhid 6-1:0.0: can't add hid device: -71 [ 793.528921][ T985] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 793.554214][ T985] usb 6-1: USB disconnect, device number 31 [ 793.933889][T13377] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 794.053852][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 794.124082][T13377] usb 5-1: Using ep0 maxpacket: 16 [ 794.130739][T13377] usb 5-1: New USB device found, idVendor=10b8, idProduct=0bc7, bcdDevice=86.0d [ 794.146425][T13377] usb 5-1: config 1 has an invalid interface number: 237 but max is 0 [ 794.146491][T13377] usb 5-1: config 1 has no interface number 0 [ 794.173803][T13377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.173867][T13377] usb 5-1: Product: syz [ 794.173915][T13377] usb 5-1: Manufacturer: syz [ 794.173952][T13377] usb 5-1: SerialNumber: syz [ 794.211148][T13377] dvb-usb: found a 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' in warm state. [ 794.220900][T13377] dvb-usb: bulk message failed: -22 (3/0) [ 794.236568][T13377] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 794.238028][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 794.242456][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.242527][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.275925][ T10] usb 6-1: config 0 descriptor?? [ 794.281857][T13377] dvbdev: DVB: registering new adapter (DiBcom USB2.0 DVB-T reference design (MOD3000P)) [ 794.291963][T13377] usb 5-1: media controller created [ 794.317579][T13377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.352088][T13377] dvb-usb: bulk message failed: -22 (6/0) [ 794.356085][T13377] dvb-usb: bulk message failed: -22 (6/0) [ 794.356201][T13377] dvb-usb: no frontend was attached by 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' [ 794.359878][T13377] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 794.391512][T13377] dvb-usb: schedule remote query interval to 150 msecs. [ 794.391566][T13377] dvb-usb: DiBcom USB2.0 DVB-T reference design (MOD3000P) successfully initialized and connected. [ 794.508078][ T8281] usb 5-1: USB disconnect, device number 27 [ 794.625124][ T8281] dvb-usb: DiBcom USB2.0 DVB-T reference design (M successfully deinitialized and disconnected. [ 794.723874][T12503] Bluetooth: hci4: command 0x0406 tx timeout [ 794.896472][T19521] binder: 19520:19521 ioctl c0306201 200000000040 returned -14 [ 795.095919][ T10] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 795.109577][ T10] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input55 [ 795.490998][T13377] usb 6-1: USB disconnect, device number 32 [ 795.491019][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 796.330012][T19557] netlink: 'syz.7.3842': attribute type 1 has an invalid length. [ 796.330068][T19557] netlink: 'syz.7.3842': attribute type 4 has an invalid length. [ 796.330112][T19557] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3842'. [ 796.338520][T19557] netlink: 'syz.7.3842': attribute type 1 has an invalid length. [ 796.338547][T19557] netlink: 'syz.7.3842': attribute type 4 has an invalid length. [ 796.338571][T19557] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3842'. [ 796.413025][T19558] syzkaller0: entered promiscuous mode [ 796.413096][T19558] syzkaller0: entered allmulticast mode [ 796.933147][T19565] xt_hashlimit: size too large, truncated to 1048576 [ 797.726630][T19569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 797.883437][T19571] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 798.069043][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 798.624056][ T8281] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 798.776464][ T8281] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 798.787635][ T8281] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 798.787694][ T8281] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 798.787749][ T8281] usb 5-1: config 4 has no interface number 0 [ 798.787811][ T8281] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 798.830888][ T8281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.830947][ T8281] usb 5-1: Product: syz [ 798.830994][ T8281] usb 5-1: Manufacturer: syz [ 798.831030][ T8281] usb 5-1: SerialNumber: syz [ 799.008351][T19618] FAULT_INJECTION: forcing a failure. [ 799.008351][T19618] name failslab, interval 1, probability 0, space 0, times 0 [ 799.008424][T19618] CPU: 1 UID: 0 PID: 19618 Comm: syz.5.3860 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.008476][T19618] Tainted: [L]=SOFTLOCKUP [ 799.008494][T19618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 799.008516][T19618] Call Trace: [ 799.008531][T19618] [ 799.008547][T19618] dump_stack_lvl+0x100/0x190 [ 799.008607][T19618] should_fail_ex.cold+0x5/0xa [ 799.008650][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.008705][T19618] should_failslab+0xc2/0x120 [ 799.008774][T19618] __kmalloc_noprof+0xfc/0x840 [ 799.008831][T19618] ? __list_lru_init+0xd9/0x4b0 [ 799.008883][T19618] __list_lru_init+0xd9/0x4b0 [ 799.008929][T19618] sget_fc+0xac6/0x1f20 [ 799.008986][T19618] ? __pfx_super_s_dev_test+0x10/0x10 [ 799.009033][T19618] ? __pfx_super_s_dev_set+0x10/0x10 [ 799.009081][T19618] ? __pfx_sget_fc+0x10/0x10 [ 799.009129][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.009177][T19618] ? __mutex_unlock_slowpath+0x35d/0x930 [ 799.009236][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.009283][T19618] ? _kstrtoull+0x144/0x200 [ 799.009338][T19618] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 799.009406][T19618] sget_dev+0x9b/0xe0 [ 799.009457][T19618] ? __pfx_sget_dev+0x10/0x10 [ 799.009508][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.009556][T19618] ? get_mtd_device+0xde/0x1f0 [ 799.009601][T19618] ? __pfx_get_mtd_device+0x10/0x10 [ 799.009644][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.009695][T19618] ? __pfx_jffs2_fill_super+0x10/0x10 [ 799.009751][T19618] mtd_get_sb+0x53/0x4c0 [ 799.009808][T19618] ? __pfx_jffs2_fill_super+0x10/0x10 [ 799.009866][T19618] get_tree_mtd+0x6f9/0x8a0 [ 799.009917][T19618] ? __pfx_get_tree_mtd+0x10/0x10 [ 799.009970][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010025][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010072][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010120][T19618] ? security_capable+0x80/0x260 [ 799.010169][T19618] vfs_get_tree+0x92/0x320 [ 799.010212][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010264][T19618] path_mount+0x7d0/0x24c0 [ 799.010318][T19618] ? __pfx_path_mount+0x10/0x10 [ 799.010360][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010408][T19618] ? lockdep_hardirqs_on+0x7d/0x110 [ 799.010468][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010515][T19618] ? kmem_cache_free+0x127/0x6c0 [ 799.010581][T19618] ? __x64_sys_mount+0x293/0x310 [ 799.010624][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010672][T19618] __x64_sys_mount+0x293/0x310 [ 799.010719][T19618] ? __pfx___x64_sys_mount+0x10/0x10 [ 799.010775][T19618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.010833][T19618] do_syscall_64+0x123/0x790 [ 799.010892][T19618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.010934][T19618] RIP: 0033:0x7f7a8df9e159 [ 799.010966][T19618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.011007][T19618] RSP: 002b:00007f7a8edc1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 799.011045][T19618] RAX: ffffffffffffffda RBX: 00007f7a8e225fa0 RCX: 00007f7a8df9e159 [ 799.011074][T19618] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 799.011101][T19618] RBP: 00007f7a8e035024 R08: 0000000000000000 R09: 0000000000000000 [ 799.011127][T19618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.011153][T19618] R13: 00007f7a8e226038 R14: 00007f7a8e225fa0 R15: 00007ffe63718838 [ 799.011207][T19618] [ 799.381259][ T8281] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 799.425885][ T8281] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 799.431667][ T8281] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 799.431740][ T8281] usb 5-1: media controller created [ 799.447124][ T8281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 799.678052][ T8281] DVB: Unable to find symbol dib7000p_attach() [ 799.678104][ T8281] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 799.947607][T19639] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 799.975493][ T8281] rc_core: IR keymap rc-dib0700-rc5 not found [ 799.975552][ T8281] Registered IR keymap rc-empty [ 799.976214][ T8281] dvb-usb: could not initialize remote control. [ 799.977148][ T8281] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 800.038830][ T8281] usb 5-1: USB disconnect, device number 28 [ 800.141887][ T8281] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 801.024435][ T30] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 801.184816][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 801.191172][ T30] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 801.203919][ T30] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 801.203981][ T30] usb 6-1: config 0 has no interface number 0 [ 801.204045][ T30] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 801.204099][ T30] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 801.249318][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.249383][ T30] usb 6-1: Product: syz [ 801.249432][ T30] usb 6-1: Manufacturer: syz [ 801.249467][ T30] usb 6-1: SerialNumber: syz [ 801.281470][ T30] usb 6-1: config 0 descriptor?? [ 801.292475][T19664] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 801.292645][T19664] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 801.439564][T19676] loop0: detected capacity change from 0 to 40427 [ 801.460984][T19676] F2FS-fs (loop0): invalid crc value [ 801.551669][T19676] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 801.562081][T19676] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 801.562120][T19676] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 801.562163][T19676] F2FS-fs (loop0): Start checkpoint disabled! [ 801.587016][T19676] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 801.587409][T19676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 801.623125][T19664] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 801.623315][T19664] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 801.782219][T19676] syz.0.3875: attempt to access beyond end of device [ 801.782219][T19676] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 801.808588][T19676] syz.0.3875: attempt to access beyond end of device [ 801.808588][T19676] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 801.813901][T19676] syz.0.3875: attempt to access beyond end of device [ 801.813901][T19676] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 801.814820][T19676] syz.0.3875: attempt to access beyond end of device [ 801.814820][T19676] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 801.815294][T19676] syz.0.3875: attempt to access beyond end of device [ 801.815294][T19676] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 801.817792][T19676] syz.0.3875: attempt to access beyond end of device [ 801.817792][T19676] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 801.818786][T19676] syz.0.3875: attempt to access beyond end of device [ 801.818786][T19676] loop0: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 801.819464][T19676] syz.0.3875: attempt to access beyond end of device [ 801.819464][T19676] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 801.819871][T19676] syz.0.3875: attempt to access beyond end of device [ 801.819871][T19676] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 801.820272][T19676] syz.0.3875: attempt to access beyond end of device [ 801.820272][T19676] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 802.168790][ T1516] CPU: 1 UID: 0 PID: 1516 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.168862][ T1516] Tainted: [L]=SOFTLOCKUP [ 802.168878][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 802.168905][ T1516] Workqueue: writeback wb_workfn (flush-7:0) [ 802.168979][ T1516] Call Trace: [ 802.168993][ T1516] [ 802.169009][ T1516] dump_stack_lvl+0x100/0x190 [ 802.169069][ T1516] f2fs_stop_checkpoint+0x5e6/0xb30 [ 802.169137][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.169187][ T1516] ? errseq_set+0xe3/0x150 [ 802.169232][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.169298][ T1516] f2fs_write_end_bio+0xef9/0x12d0 [ 802.169347][ T1516] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 802.169390][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.169446][ T1516] ? find_held_lock+0x2b/0x80 [ 802.169499][ T1516] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 802.169556][ T1516] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 802.169611][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.169671][ T1516] f2fs_write_end_io+0xc8/0x240 [ 802.169711][ T1516] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 802.169750][ T1516] bio_endio+0x7ba/0x9c0 [ 802.169802][ T1516] submit_bio_noacct+0x22a/0x2130 [ 802.169862][ T1516] f2fs_submit_write_bio+0x133/0x330 [ 802.169932][ T1516] __submit_merged_bio+0x330/0x7b0 [ 802.169974][ T1516] ? rcu_is_watching+0x13/0xc0 [ 802.170023][ T1516] __submit_merged_write_cond+0x3fe/0x510 [ 802.170066][ T1516] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 802.170109][ T1516] ? __pfx___might_resched+0x10/0x10 [ 802.170154][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170189][ T1516] ? folio_clear_dirty_for_io+0x178/0x960 [ 802.170241][ T1516] f2fs_write_cache_pages+0x20e9/0x2630 [ 802.170303][ T1516] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 802.170347][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170387][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170424][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170459][ T1516] ? find_held_lock+0x2b/0x80 [ 802.170497][ T1516] ? nr_blockdev_pages+0xde/0x120 [ 802.170526][ T1516] ? nr_blockdev_pages+0xde/0x120 [ 802.170554][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170610][ T1516] ? si_meminfo+0x118/0x230 [ 802.170655][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170692][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170792][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170828][ T1516] ? rcu_is_watching+0x13/0xc0 [ 802.170869][ T1516] f2fs_write_data_pages+0x799/0x16d0 [ 802.170908][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.170956][ T1516] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 802.171007][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.171043][ T1516] ? __lock_acquire+0x4c5/0x1ec0 [ 802.171092][ T1516] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 802.171135][ T1516] do_writepages+0x278/0x600 [ 802.171179][ T1516] ? __pfx_do_writepages+0x10/0x10 [ 802.171216][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.171256][ T1516] ? reacquire_held_locks+0xdd/0x1f0 [ 802.171304][ T1516] ? writeback_sb_inodes+0x3e1/0x1c50 [ 802.171353][ T1516] __writeback_single_inode+0x164/0x1560 [ 802.171397][ T1516] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 802.171440][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.171479][ T1516] ? __pfx___writeback_single_inode+0x10/0x10 [ 802.171523][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.171558][ T1516] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.171594][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.171636][ T1516] writeback_sb_inodes+0x766/0x1c50 [ 802.171701][ T1516] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 802.171744][ T1516] ? do_raw_spin_lock+0x128/0x260 [ 802.171837][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.171872][ T1516] ? rcu_is_watching+0x13/0xc0 [ 802.171908][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.171943][ T1516] ? queue_io+0x287/0x530 [ 802.171985][ T1516] wb_writeback+0x1c0/0xb50 [ 802.172041][ T1516] ? __pfx_wb_writeback+0x10/0x10 [ 802.172082][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.172131][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.172166][ T1516] ? mark_held_locks+0x40/0x70 [ 802.172214][ T1516] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.172259][ T1516] wb_workfn+0x143/0xc80 [ 802.172312][ T1516] ? __pfx_wb_workfn+0x10/0x10 [ 802.172359][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.172395][ T1516] ? lock_acquire+0x1d1/0x380 [ 802.172441][ T1516] ? process_one_work+0xa2c/0x1b10 [ 802.172485][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.172522][ T1516] ? process_one_work+0x906/0x1b10 [ 802.172564][ T1516] ? process_one_work+0x906/0x1b10 [ 802.172604][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.172650][ T1516] process_one_work+0xac7/0x1b10 [ 802.172712][ T1516] ? __pfx_process_one_work+0x10/0x10 [ 802.172757][ T1516] ? lock_acquire+0x1d1/0x380 [ 802.172817][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.172860][ T1516] worker_thread+0x5ef/0xe50 [ 802.172916][ T1516] ? __pfx_worker_thread+0x10/0x10 [ 802.172960][ T1516] ? kthread+0x13a/0x450 [ 802.172997][ T1516] ? __pfx_worker_thread+0x10/0x10 [ 802.173037][ T1516] kthread+0x373/0x450 [ 802.173074][ T1516] ? __pfx_kthread+0x10/0x10 [ 802.173116][ T1516] ret_from_fork+0x730/0xd60 [ 802.173148][ T1516] ? __pfx_ret_from_fork+0x10/0x10 [ 802.173180][ T1516] ? srso_alias_return_thunk+0x5/0xfbef5 [ 802.173216][ T1516] ? __switch_to+0x800/0x10f0 [ 802.173257][ T1516] ? __switch_to_asm+0x39/0x70 [ 802.173285][ T1516] ? __pfx_kthread+0x10/0x10 [ 802.173327][ T1516] ret_from_fork_asm+0x1a/0x30 [ 802.173378][ T1516] [ 802.295297][T19684] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 802.316546][ T1516] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 802.449103][T19684] usb 5-1: Using ep0 maxpacket: 8 [ 802.466423][T19684] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 802.586646][T19684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.587065][T19684] usb 5-1: Product: syz [ 802.587096][T19684] usb 5-1: Manufacturer: syz [ 802.587125][T19684] usb 5-1: SerialNumber: syz [ 802.805705][T19684] usb 5-1: config 0 descriptor?? [ 802.835924][T19684] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 803.228616][ T30] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 803.228718][ T30] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 803.229061][ T30] asix 6-1:0.34: probe with driver asix failed with error -71 [ 803.276576][ T30] usb 6-1: USB disconnect, device number 33 [ 803.882175][T19711] loop0: detected capacity change from 0 to 16 [ 803.958411][T19711] erofs (device loop0): mounted with root inode @ nid 36. [ 804.514273][T19684] gspca_sonixj: i2c_w8 err -71 [ 804.544935][T19684] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 804.559520][T19684] usb 5-1: USB disconnect, device number 29 [ 804.576487][ T6303] udevd[6303]: setting mode of /dev/bus/usb/005/029 to 020664 failed: No such file or directory [ 804.576662][ T6303] udevd[6303]: setting owner of /dev/bus/usb/005/029 to uid=0, gid=0 failed: No such file or directory [ 804.697901][ T5753] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 804.856658][ T5753] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 804.860889][ T5753] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 804.860931][ T5753] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.860965][ T5753] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 804.861030][ T5753] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.874147][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 804.874190][ T5753] usb 3-1: Product: syz [ 804.874217][ T5753] usb 3-1: Manufacturer: syz [ 804.923320][ T5753] cdc_wdm 3-1:1.0: skipping garbage [ 804.923352][ T5753] cdc_wdm 3-1:1.0: skipping garbage [ 804.945234][ T5753] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 804.945277][ T5753] cdc_wdm 3-1:1.0: Unknown control protocol [ 805.443747][ C0] tipc: RX(1000001): key[1] is activated [ 805.448501][ T5753] usb 3-1: USB disconnect, device number 35 [ 806.834101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 808.197440][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.302621][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 808.834044][T13377] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 808.970464][T19800] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.3909'. [ 808.970522][T19800] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3909'. [ 809.004027][T13377] usb 6-1: Using ep0 maxpacket: 32 [ 809.013287][T13377] usb 6-1: unable to get BOS descriptor or descriptor too short [ 809.013381][T13377] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 809.037440][T13377] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 809.037503][T13377] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 809.037563][T13377] usb 6-1: config 14 has no interface number 0 [ 809.037601][T13377] usb 6-1: config 14 has no interface number 1 [ 809.037684][T13377] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 809.037756][T13377] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 809.037816][T13377] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 809.037871][T13377] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 809.037932][T13377] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 809.037992][T13377] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.038052][T13377] usb 6-1: config 14 interface 57 has no altsetting 0 [ 809.038096][T13377] usb 6-1: config 14 interface 228 has no altsetting 0 [ 809.159563][T13377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.159619][T13377] usb 6-1: Product: syz [ 809.159647][T13377] usb 6-1: Manufacturer: syz [ 809.159675][T13377] usb 6-1: SerialNumber: syz [ 809.661554][T19814] overlayfs: failed to clone upperpath [ 809.689864][T13377] legousbtower 6-1:14.57: interrupt endpoints not found [ 810.096810][T13377] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 810.112900][T13377] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 810.357364][T19831] tipc: Enabling of bearer rejected, failed to enable media [ 810.478874][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 810.716640][T18967] IPVS: starting estimator thread 0... [ 810.778975][T13377] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 810.813925][T19841] IPVS: using max 22 ests per chain, 52800 per kthread [ 810.962190][T13377] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 810.973407][T13377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.012632][ T5753] usb 6-1: USB disconnect, device number 34 [ 811.250817][ T5753] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 811.262620][T13377] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 811.940977][T19871] loop5: detected capacity change from 0 to 512 [ 811.942292][T19871] EXT4-fs: Invalid want_extra_isize 1969 [ 811.975653][T19684] usb 3-1: USB disconnect, device number 36 [ 812.381873][T19883] loop5: detected capacity change from 0 to 512 [ 812.399107][T19883] EXT4-fs: Ignoring removed nobh option [ 812.407661][T19883] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 812.446213][T19883] EXT4-fs (loop5): 1 truncate cleaned up [ 812.472963][T19883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.509743][ T31] audit: type=1800 audit(1788549349.455:258): pid=19883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3932" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 813.644753][T16801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.803446][T19904] sctp: [Deprecated]: syz.7.3949 (pid 19904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 813.803446][T19904] Use struct sctp_sack_info instead [ 814.272060][T19917] netlink: 'syz.4.3939': attribute type 18 has an invalid length. [ 814.272126][T19917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 814.366987][T19917] netlink: 'syz.4.3939': attribute type 18 has an invalid length. [ 814.375167][T19917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 814.377520][T18967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.377700][T18967] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.377781][T18967] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.377841][T18967] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.633857][T19928] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 817.420578][T15535] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 817.625379][T19998] loop0: detected capacity change from 0 to 128 [ 817.719112][T19998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 817.719266][T19998] System zones: 1-3, 19-19, 35-36 [ 817.734105][T19998] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 817.751457][T19998] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 818.057219][T18754] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 818.847036][T20020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3970'. [ 819.016534][T20021] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 819.529091][T20035] pimreg: entered allmulticast mode [ 819.658056][T20035] syz_tun: entered allmulticast mode [ 819.665667][T20035] syz_tun: left allmulticast mode [ 819.678459][T20032] pimreg: left allmulticast mode [ 820.170043][ T5278] 8021q: adding VLAN 0 to HW filter on device eth21 [ 821.461681][ T37] IPVS: starting estimator thread 0... [ 821.614647][T20095] IPVS: using max 23 ests per chain, 55200 per kthread [ 822.060634][T20113] ip_tables: iptables: counters copy to user failed while replacing table [ 822.086509][T13377] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 822.244058][T13377] usb 3-1: Using ep0 maxpacket: 32 [ 822.245764][T13377] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 822.273487][T13377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.273563][T13377] usb 3-1: Product: syz [ 822.273613][T13377] usb 3-1: Manufacturer: syz [ 822.273638][T13377] usb 3-1: SerialNumber: syz [ 822.315533][T13377] usb 3-1: config 0 descriptor?? [ 822.369081][T13377] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 822.477927][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3999'. [ 822.513196][T20121] erspan0: entered promiscuous mode [ 822.520610][T20121] macvtap1: entered promiscuous mode [ 822.530558][T20121] macvtap1: entered allmulticast mode [ 822.530621][T20121] erspan0: entered allmulticast mode [ 822.691296][T20129] loop5: detected capacity change from 0 to 128 [ 822.839371][T20124] erspan0: left allmulticast mode [ 822.839674][T20124] erspan0: left promiscuous mode [ 822.978991][T20124] macvtap1: left promiscuous mode [ 822.979052][T20124] macvtap1: left allmulticast mode [ 823.026577][T20129] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 823.032170][T20129] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 823.134197][T20129] EXT4-fs (loop5): shut down requested (2) [ 823.316065][T16801] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 823.351679][ T5278] 8021q: adding VLAN 0 to HW filter on device eth22 [ 823.957115][ T9498] syz_tun (unregistering): left allmulticast mode [ 823.962925][T13377] gspca_topro: Sensor cx0342 [ 823.976496][ T9498] bond0: (slave syz_tun): Releasing backup interface [ 824.259677][T13377] usb 3-1: USB disconnect, device number 37 [ 824.698034][T19684] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 824.854037][T19684] usb 6-1: Using ep0 maxpacket: 32 [ 825.444239][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 825.468041][T19684] usb 6-1: unable to get BOS descriptor or descriptor too short [ 825.468127][T19684] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 825.471521][T19684] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 825.471571][T19684] usb 6-1: can't read configurations, error -71 [ 825.959424][T15535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.959519][T15535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.638540][T20187] loop5: detected capacity change from 0 to 32768 [ 826.640002][T20187] xfs: Deprecated parameter 'noikeep' [ 826.640031][T20187] XFS: noikeep mount option is deprecated. [ 826.695129][T20187] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 826.778703][T20187] XFS (loop5): Ending clean mount [ 826.788200][T20187] XFS (loop5): Quotacheck needed: Please wait. [ 826.981538][T20187] XFS (loop5): Quotacheck: Done. [ 827.601107][T16801] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 827.656098][T15535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.684219][T15535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.713887][T20205] lo: Caught tx_queue_len zero misconfig [ 827.960446][T15535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.960572][T15535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.075592][ T5278] 8021q: adding VLAN 0 to HW filter on device eth23 [ 828.427176][T15535] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.427272][T15535] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.465977][T20214] netlink: 'syz.4.4022': attribute type 10 has an invalid length. [ 828.689391][T20216] netlink: 3528 bytes leftover after parsing attributes in process `syz.2.4033'. [ 828.761795][T20214] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.822680][T20226] netlink: 3736 bytes leftover after parsing attributes in process `syz.2.4033'. [ 828.867600][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 828.879511][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 828.882330][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 828.884736][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 828.885497][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 829.004396][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4025'. [ 829.113607][T20230] macvtap1: entered promiscuous mode [ 829.113667][T20230] erspan0: entered promiscuous mode [ 829.113969][T20230] macvtap1: entered allmulticast mode [ 829.113995][T20230] erspan0: entered allmulticast mode [ 829.197659][T20233] erspan0: left allmulticast mode [ 829.197745][T20233] erspan0: left promiscuous mode [ 829.294054][T20233] macvtap1: left promiscuous mode [ 829.294109][T20233] macvtap1: left allmulticast mode [ 829.624245][ T1516] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.943900][ T1516] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.063898][ T1516] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.169075][T20253] FAULT_INJECTION: forcing a failure. [ 830.169075][T20253] name failslab, interval 1, probability 0, space 0, times 0 [ 830.169159][T20253] CPU: 1 UID: 0 PID: 20253 Comm: syz.0.4029 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.169211][T20253] Tainted: [L]=SOFTLOCKUP [ 830.169230][T20253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 830.169253][T20253] Call Trace: [ 830.169267][T20253] [ 830.169283][T20253] dump_stack_lvl+0x100/0x190 [ 830.169343][T20253] should_fail_ex.cold+0x5/0xa [ 830.169383][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.169437][T20253] should_failslab+0xc2/0x120 [ 830.169502][T20253] __kmalloc_cache_noprof+0x91/0x6d0 [ 830.169550][T20253] ? sctp_auth_shkey_create+0x9e/0x210 [ 830.169622][T20253] sctp_auth_shkey_create+0x9e/0x210 [ 830.169687][T20253] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 830.169753][T20253] sctp_association_new+0x19ab/0x2990 [ 830.169801][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.169856][T20253] sctp_connect_new_asoc+0x1a8/0x770 [ 830.169904][T20253] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 830.169956][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170006][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170052][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170108][T20253] sctp_sendmsg+0x1743/0x22e0 [ 830.170164][T20253] ? __pfx_sctp_sendmsg+0x10/0x10 [ 830.170211][T20253] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 830.170263][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170318][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170364][T20253] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 830.170442][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170489][T20253] ? aa_sock_msg_perm+0x11e/0x200 [ 830.170534][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170583][T20253] ? __pfx_sctp_sendmsg+0x10/0x10 [ 830.170630][T20253] inet_sendmsg+0x11c/0x140 [ 830.170692][T20253] ____sys_sendmsg+0x9c9/0xbe0 [ 830.170749][T20253] ? __pfx_inet_sendmsg+0x10/0x10 [ 830.170813][T20253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.170880][T20253] ? futex_unqueue+0x133/0x2c0 [ 830.170925][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.170987][T20253] ___sys_sendmsg+0x190/0x1e0 [ 830.171052][T20253] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.171112][T20253] ? __pfx___futex_wait+0x10/0x10 [ 830.171169][T20253] ? __pfx_try_to_wake_up+0x10/0x10 [ 830.171209][T20253] ? futex_hash+0x311/0x400 [ 830.171275][T20253] ? __fget_files+0x34/0x3d0 [ 830.171336][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.171421][T20253] __sys_sendmmsg+0x20c/0x440 [ 830.171476][T20253] ? __pfx___sys_sendmmsg+0x10/0x10 [ 830.171524][T20253] ? file_init_path+0x48e/0x670 [ 830.171577][T20253] ? __pfx_do_futex+0x10/0x10 [ 830.171647][T20253] ? __sys_socket+0xac/0x260 [ 830.171708][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.171756][T20253] ? xfd_validate_state+0x129/0x190 [ 830.171835][T20253] __x64_sys_sendmmsg+0x9c/0x100 [ 830.171880][T20253] ? srso_alias_return_thunk+0x5/0xfbef5 [ 830.171928][T20253] ? lockdep_hardirqs_on+0x7d/0x110 [ 830.171983][T20253] do_syscall_64+0x123/0x790 [ 830.172042][T20253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.172084][T20253] RIP: 0033:0x7f65c459e159 [ 830.172116][T20253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.172157][T20253] RSP: 002b:00007f65c53b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 830.172196][T20253] RAX: ffffffffffffffda RBX: 00007f65c4825fa0 RCX: 00007f65c459e159 [ 830.172230][T20253] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000005 [ 830.172256][T20253] RBP: 00007f65c4635024 R08: 0000000000000000 R09: 0000000000000000 [ 830.172283][T20253] R10: 0000000020004801 R11: 0000000000000246 R12: 0000000000000000 [ 830.172308][T20253] R13: 00007f65c4826038 R14: 00007f65c4825fa0 R15: 00007ffc486b7928 [ 830.172363][T20253] [ 830.288280][T20241] loop4: detected capacity change from 0 to 32768 [ 830.355883][ T1516] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.730901][T15535] batman_adv: batadv0: Interface deactivated: gretap1 [ 831.047084][T12503] Bluetooth: hci0: command tx timeout [ 831.278634][T20262] FAULT_INJECTION: forcing a failure. [ 831.278634][T20262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 831.278716][T20262] CPU: 1 UID: 0 PID: 20262 Comm: syz.2.4034 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.278778][T20262] Tainted: [L]=SOFTLOCKUP [ 831.278794][T20262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 831.278819][T20262] Call Trace: [ 831.278834][T20262] [ 831.278850][T20262] dump_stack_lvl+0x100/0x190 [ 831.278910][T20262] should_fail_ex.cold+0x5/0xa [ 831.278955][T20262] ? prepare_alloc_pages+0x16d/0x5b0 [ 831.279025][T20262] should_fail_alloc_page+0xeb/0x140 [ 831.279093][T20262] prepare_alloc_pages+0x1f0/0x5b0 [ 831.279167][T20262] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 831.279228][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279275][T20262] ? bpf_ksym_find+0x124/0x1c0 [ 831.279330][T20262] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 831.279391][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279439][T20262] ? is_bpf_text_address+0x94/0x1a0 [ 831.279483][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279530][T20262] ? __lock_acquire+0x4c5/0x1ec0 [ 831.279593][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279640][T20262] ? __css_rstat_updated+0x1ce/0x590 [ 831.279684][T20262] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 831.279742][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279796][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279847][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279895][T20262] ? rcu_is_watching+0x13/0xc0 [ 831.279942][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.279989][T20262] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 831.280054][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.280101][T20262] ? find_held_lock+0x2b/0x80 [ 831.280165][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.280212][T20262] ? __lock_acquire+0x4c5/0x1ec0 [ 831.280281][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.280327][T20262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 831.280397][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.280444][T20262] ? policy_nodemask+0xed/0x4f0 [ 831.280513][T20262] alloc_pages_mpol+0x201/0x550 [ 831.280581][T20262] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 831.280642][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.280693][T20262] ? filemap_get_entry+0x22d/0x450 [ 831.280734][T20262] ? filemap_get_entry+0x22d/0x450 [ 831.280773][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.280831][T20262] folio_alloc_noprof+0x22/0x250 [ 831.280881][T20262] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 831.280936][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.280991][T20262] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 831.281049][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.281097][T20262] ? rcu_is_watching+0x13/0xc0 [ 831.281145][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.281193][T20262] ? trace_kmalloc+0xeb/0x110 [ 831.281267][T20262] __filemap_get_folio_mpol+0x653/0x1320 [ 831.281324][T20262] ioctx_alloc+0x7e1/0x21a0 [ 831.281378][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.281439][T20262] ? __pfx_ioctx_alloc+0x10/0x10 [ 831.281480][T20262] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.281545][T20262] __x64_sys_io_setup+0xc9/0x220 [ 831.281596][T20262] do_syscall_64+0x123/0x790 [ 831.281657][T20262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.281699][T20262] RIP: 0033:0x7f2320f9e159 [ 831.281730][T20262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.281771][T20262] RSP: 002b:00007f2321dc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 831.281809][T20262] RAX: ffffffffffffffda RBX: 00007f2321225fa0 RCX: 00007f2320f9e159 [ 831.281837][T20262] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000400 [ 831.281864][T20262] RBP: 00007f2321035024 R08: 0000000000000000 R09: 0000000000000000 [ 831.281889][T20262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.281913][T20262] R13: 00007f2321226038 R14: 00007f2321225fa0 R15: 00007ffc4b6f8fd8 [ 831.281968][T20262] [ 832.172193][T15535] batman_adv: batadv0: Removing interface: gretap1 [ 832.233898][ T8281] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 832.309988][T15535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.334963][T15535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.347877][T15535] bond0 (unregistering): Released all slaves [ 832.375173][T15535] bond1 (unregistering): Released all slaves [ 832.385907][ T8281] usb 3-1: Using ep0 maxpacket: 32 [ 832.394827][ T8281] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 832.408116][ T8281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.408190][ T8281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.408267][ T8281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.457282][ T8281] usb 3-1: config 0 descriptor?? [ 832.816781][ T5278] 8021q: adding VLAN 0 to HW filter on device eth24 [ 832.971813][ T8281] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 833.006199][T20294] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 833.060610][T20294] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 833.103629][ T8281] kernel write not supported for file /uhid (pid: 8281 comm: kworker/0:8) [ 833.127979][T12503] Bluetooth: hci0: command tx timeout [ 833.464021][T19684] usb 3-1: USB disconnect, device number 38 [ 833.544488][T20301] fido_id[20301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 833.880660][T20320] ip_tables: iptables: counters copy to user failed while replacing table [ 834.126344][T15535] hsr_slave_0: left promiscuous mode [ 834.131941][T15535] hsr_slave_1: left promiscuous mode [ 834.133092][T15535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.133122][T15535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.200532][T15535] veth1_macvtap: left promiscuous mode [ 834.208224][T15535] veth0_macvtap: left promiscuous mode [ 834.220573][T15535] veth1_vlan: left promiscuous mode [ 834.220695][T15535] veth0_vlan: left promiscuous mode [ 834.798324][T20331] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 834.806468][T20331] lpc_ich 0000:00:05.0: No MFD cells added [ 834.813202][T20331] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 834.827336][T20331] lpc_ich 0000:00:00.0: No MFD cells added [ 835.029770][T15535] team0 (unregistering): Port device team_slave_1 removed [ 835.059351][T15535] team0 (unregistering): Port device team_slave_0 removed [ 835.204232][T12503] Bluetooth: hci0: command tx timeout [ 836.780686][T15535] IPVS: stop unused estimator thread 0... [ 837.182456][T20228] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.190189][T20228] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.201837][T20228] bridge_slave_0: entered allmulticast mode [ 837.215839][T20228] bridge_slave_0: entered promiscuous mode [ 837.228017][T20228] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.235528][T20228] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.242879][T20228] bridge_slave_1: entered allmulticast mode [ 837.254544][T20228] bridge_slave_1: entered promiscuous mode [ 837.283962][T12503] Bluetooth: hci0: command tx timeout [ 837.316657][T20228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.329839][T20228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.410106][T20228] team0: Port device team_slave_0 added [ 837.420412][T20228] team0: Port device team_slave_1 added [ 837.466105][T20228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.475423][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.501547][T20228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.517900][T20228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.536148][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.536236][T20228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.639400][T20401] fuse: root generation should be zero [ 837.676581][T20228] hsr_slave_0: entered promiscuous mode [ 837.686415][T20228] hsr_slave_1: entered promiscuous mode [ 837.694638][T20228] debugfs: 'hsr0' already exists in 'hsr' [ 837.701942][T20228] Cannot create hsr debugfs directory [ 838.393134][T20228] netdevsim netdevsim9 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.760196][T20228] netdevsim netdevsim9 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.131134][T20433] FAULT_INJECTION: forcing a failure. [ 839.131134][T20433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.146322][ T8281] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 839.182296][T20433] CPU: 1 UID: 0 PID: 20433 Comm: syz.4.4079 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.182364][T20433] Tainted: [L]=SOFTLOCKUP [ 839.182380][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 839.182405][T20433] Call Trace: [ 839.182419][T20433] [ 839.182435][T20433] dump_stack_lvl+0x100/0x190 [ 839.182497][T20433] should_fail_ex.cold+0x5/0xa [ 839.182551][T20433] _copy_from_iter+0x1f4/0x1690 [ 839.182602][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.182652][T20433] ? kmalloc_reserve+0xf9/0x350 [ 839.182714][T20433] ? __pfx__copy_from_iter+0x10/0x10 [ 839.182759][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.182809][T20433] ? alloc_pages_noprof+0xf9/0x160 [ 839.182856][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.182906][T20433] ? skb_page_frag_refill+0x309/0x4b0 [ 839.182979][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.183027][T20433] ? sk_page_frag_refill+0x6c/0x340 [ 839.183099][T20433] kcm_sendmsg+0x1447/0x3120 [ 839.183157][T20433] ? srso_alias_safe_ret+0x3/0x7 [ 839.183239][T20433] ? __pfx_kcm_sendmsg+0x10/0x10 [ 839.183298][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.183351][T20433] ? apparmor_socket_sendmsg+0x165/0x280 [ 839.183409][T20433] sock_write_iter+0x53a/0x5b0 [ 839.183468][T20433] ? __pfx_kcm_sendmsg+0x10/0x10 [ 839.183523][T20433] ? __pfx_sock_write_iter+0x10/0x10 [ 839.183596][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.183645][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.183695][T20433] ? security_file_permission+0x76/0x210 [ 839.183756][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.183807][T20433] ? rw_verify_area+0xce/0x6d0 [ 839.183860][T20433] vfs_write+0x6af/0x1050 [ 839.183915][T20433] ? __pfx_sock_write_iter+0x10/0x10 [ 839.183979][T20433] ? __pfx_vfs_write+0x10/0x10 [ 839.184029][T20433] ? find_held_lock+0x2b/0x80 [ 839.184114][T20433] ksys_write+0x1f8/0x250 [ 839.184163][T20433] ? __pfx_ksys_write+0x10/0x10 [ 839.184210][T20433] ? srso_alias_return_thunk+0x5/0xfbef5 [ 839.184263][T20433] do_syscall_64+0x123/0x790 [ 839.184315][T20433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.184351][T20433] RIP: 0033:0x7f5bc6f9e159 [ 839.184380][T20433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.184416][T20433] RSP: 002b:00007f5bc7e6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.184451][T20433] RAX: ffffffffffffffda RBX: 00007f5bc7225fa0 RCX: 00007f5bc6f9e159 [ 839.184476][T20433] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 839.184500][T20433] RBP: 00007f5bc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 839.184523][T20433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.184545][T20433] R13: 00007f5bc7226038 R14: 00007f5bc7225fa0 R15: 00007ffcc6b6db28 [ 839.184590][T20433] [ 839.405187][ T8281] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 839.437794][T20432] ceph: No mds server is up or the cluster is laggy [ 839.627625][T20228] netdevsim netdevsim9 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.100458][T20453] loop0: detected capacity change from 0 to 256 [ 840.170364][T20453] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 840.199787][T20228] netdevsim netdevsim9 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.613866][T13377] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 840.776458][T13377] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 840.789443][T13377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.789534][T13377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.813531][T13377] usb 5-1: config 0 descriptor?? [ 841.068120][T13377] usbhid 5-1:0.0: can't add hid device: -71 [ 841.068277][T13377] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 841.103910][T13377] usb 5-1: USB disconnect, device number 30 [ 841.293056][T20228] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 841.603988][T13377] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 841.641936][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.653179][T20228] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 841.729651][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.774731][T13377] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 841.776279][T20228] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 841.792381][T13377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.792477][T13377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.824791][T13377] usb 5-1: config 0 descriptor?? [ 841.843645][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.880682][T20228] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 841.922018][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.378784][T20228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.454723][T20503] overlayfs: failed to clone upperpath [ 842.459565][T20228] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.475049][ T1516] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.475198][ T1516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.490268][ T1516] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.494808][ T1516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.649107][T13377] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 842.659454][T13377] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 842.901846][T13377] usb 5-1: USB disconnect, device number 31 [ 842.901961][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 843.945418][T20544] FAULT_INJECTION: forcing a failure. [ 843.945418][T20544] name failslab, interval 1, probability 0, space 0, times 0 [ 843.945500][T20544] CPU: 0 UID: 0 PID: 20544 Comm: syz.4.4105 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.945559][T20544] Tainted: [L]=SOFTLOCKUP [ 843.945574][T20544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 843.945599][T20544] Call Trace: [ 843.945612][T20544] [ 843.945628][T20544] dump_stack_lvl+0x100/0x190 [ 843.945688][T20544] should_fail_ex.cold+0x5/0xa [ 843.945737][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.945793][T20544] should_failslab+0xc2/0x120 [ 843.945860][T20544] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 843.945920][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.945968][T20544] ? __kasan_kmalloc+0xaa/0xb0 [ 843.946028][T20544] ? snd_timer_instance_new+0x65/0x350 [ 843.946094][T20544] kstrdup+0x51/0xe0 [ 843.946145][T20544] snd_timer_instance_new+0x65/0x350 [ 843.946202][T20544] snd_seq_timer_open+0x1d4/0x5c0 [ 843.946248][T20544] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 843.946293][T20544] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 843.946343][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.946400][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.946449][T20544] ? mark_held_locks+0x40/0x70 [ 843.946513][T20544] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 843.946571][T20544] queue_use+0xdc/0x1f0 [ 843.946631][T20544] snd_seq_queue_alloc+0x2e5/0x540 [ 843.946701][T20544] snd_seq_ioctl_create_queue+0xa9/0x370 [ 843.946757][T20544] call_seq_client_ctl+0xa3/0x130 [ 843.946809][T20544] snd_seq_kernel_client_ctl+0x35/0x50 [ 843.946861][T20544] alloc_seq_queue+0xdb/0x180 [ 843.946912][T20544] ? __pfx_alloc_seq_queue+0x10/0x10 [ 843.946987][T20544] ? find_held_lock+0x2b/0x80 [ 843.947044][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.947093][T20544] ? mark_held_locks+0x40/0x70 [ 843.947166][T20544] snd_seq_oss_open+0x2b2/0xa10 [ 843.947228][T20544] odev_open+0x6f/0x90 [ 843.947272][T20544] ? __pfx_odev_open+0x10/0x10 [ 843.947318][T20544] soundcore_open+0x2e3/0x5a0 [ 843.947373][T20544] ? __pfx_soundcore_open+0x10/0x10 [ 843.947422][T20544] chrdev_open+0x234/0x6a0 [ 843.947483][T20544] ? __pfx_apparmor_file_open+0x10/0x10 [ 843.947545][T20544] ? __pfx_chrdev_open+0x10/0x10 [ 843.947609][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.947658][T20544] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 843.947716][T20544] do_dentry_open+0x6ab/0x14d0 [ 843.947778][T20544] ? __pfx_chrdev_open+0x10/0x10 [ 843.947845][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.947900][T20544] vfs_open+0x82/0x3f0 [ 843.947937][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.947993][T20544] path_openat+0x19fa/0x2440 [ 843.948067][T20544] ? __pfx_path_openat+0x10/0x10 [ 843.948146][T20544] do_file_open+0x20e/0x430 [ 843.948215][T20544] ? __pfx_do_file_open+0x10/0x10 [ 843.948315][T20544] ? _raw_spin_unlock+0x28/0x50 [ 843.948360][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.948409][T20544] ? alloc_fd+0x471/0x7a0 [ 843.948490][T20544] do_sys_openat2+0x10f/0x1e0 [ 843.948532][T20544] ? __pfx_do_sys_openat2+0x10/0x10 [ 843.948576][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.948624][T20544] ? find_held_lock+0x2b/0x80 [ 843.948674][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.948735][T20544] __x64_sys_openat+0x12d/0x210 [ 843.948780][T20544] ? __pfx___x64_sys_openat+0x10/0x10 [ 843.948832][T20544] ? srso_alias_return_thunk+0x5/0xfbef5 [ 843.948889][T20544] do_syscall_64+0x123/0x790 [ 843.948948][T20544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.948990][T20544] RIP: 0033:0x7f5bc6f9e159 [ 843.949021][T20544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.949060][T20544] RSP: 002b:00007f5bc7e6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 843.949098][T20544] RAX: ffffffffffffffda RBX: 00007f5bc7225fa0 RCX: 00007f5bc6f9e159 [ 843.949127][T20544] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 843.949153][T20544] RBP: 00007f5bc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 843.949179][T20544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.949205][T20544] R13: 00007f5bc7226038 R14: 00007f5bc7225fa0 R15: 00007ffcc6b6db28 [ 843.949259][T20544] [ 844.921362][T20562] syzkaller0: entered promiscuous mode [ 844.921420][T20562] syzkaller0: entered allmulticast mode [ 845.797858][T20228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.338685][T20600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'. [ 846.660306][T20612] fuse: Bad value for 'fd' [ 847.068229][T20228] veth0_vlan: entered promiscuous mode [ 847.110313][T20228] veth1_vlan: entered promiscuous mode [ 847.261143][T20228] veth0_macvtap: entered promiscuous mode [ 847.290940][T20228] veth1_macvtap: entered promiscuous mode [ 847.433221][T20228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.480706][T20228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.626900][T15535] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.626996][T15535] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.627084][T15535] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.737609][ T7266] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.452349][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.452407][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.118178][ T7266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.118243][ T7266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.202465][T20687] syz_tun: entered promiscuous mode [ 850.480584][T20693] netlink: 'syz.2.4139': attribute type 11 has an invalid length. [ 850.857007][T20687] vlan0: entered promiscuous mode [ 851.771280][T20729] input: syz0 as /devices/virtual/input/input59 [ 852.851472][T20757] loop4: detected capacity change from 0 to 8192 [ 854.152100][T20787] fuse: Bad value for 'fd' [ 854.157599][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.158427][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.176982][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.177925][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.221672][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.298127][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.298987][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.328326][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.344790][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.358806][T20783] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 854.547660][T20790] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 856.987091][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4186'. [ 856.987258][T20856] bridge_slave_1: left allmulticast mode [ 856.987292][T20856] bridge_slave_1: left promiscuous mode [ 856.987584][T20856] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.057983][T20856] bridge_slave_0: left allmulticast mode [ 857.058047][T20856] bridge_slave_0: left promiscuous mode [ 857.058316][T20856] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.309825][T20862] netlink: 'syz.4.4188': attribute type 1 has an invalid length. [ 857.479128][T20862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.689367][T20866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.689992][T20866] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 857.725033][T20866] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 857.920015][T20869] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 857.959683][T20869] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 858.122794][T20881] ip6gre1: entered promiscuous mode [ 858.129177][T20881] ip6gre1: entered allmulticast mode [ 858.148611][T15537] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.148997][T15537] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.182041][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.294659][T19684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.305135][T19684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.674242][T20898] Bluetooth: MGMT ver 1.23 [ 859.022166][T20904] printk: legacy console [ttyGS0] disabled [ 859.242274][T20917] FAULT_INJECTION: forcing a failure. [ 859.242274][T20917] name failslab, interval 1, probability 0, space 0, times 0 [ 859.259291][T20917] CPU: 0 UID: 0 PID: 20917 Comm: syz.5.4203 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.259356][T20917] Tainted: [L]=SOFTLOCKUP [ 859.259372][T20917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 859.259397][T20917] Call Trace: [ 859.259411][T20917] [ 859.259427][T20917] dump_stack_lvl+0x100/0x190 [ 859.259487][T20917] should_fail_ex.cold+0x5/0xa [ 859.259531][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.259588][T20917] should_failslab+0xc2/0x120 [ 859.259654][T20917] kmem_cache_alloc_noprof+0x92/0x6a0 [ 859.259713][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.259763][T20917] ? __asan_memcpy+0x3c/0x60 [ 859.259814][T20917] ? __kernfs_new_node+0xd2/0xa10 [ 859.259871][T20917] __kernfs_new_node+0xd2/0xa10 [ 859.259926][T20917] ? __pfx___kernfs_new_node+0x10/0x10 [ 859.259979][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.260029][T20917] ? lock_acquire+0x1d1/0x380 [ 859.260094][T20917] ? kernfs_root+0x23/0x2a0 [ 859.260134][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.260185][T20917] ? find_held_lock+0x2b/0x80 [ 859.260239][T20917] ? kernfs_root+0xee/0x2a0 [ 859.260284][T20917] ? kernfs_root+0xee/0x2a0 [ 859.260323][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.260386][T20917] kernfs_create_dir_ns+0xa6/0x2b0 [ 859.260447][T20917] sysfs_create_dir_ns+0x13a/0x2b0 [ 859.260488][T20917] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 859.260555][T20917] ? find_held_lock+0x2b/0x80 [ 859.260606][T20917] ? kobject_add_internal+0x25f/0x930 [ 859.260676][T20917] ? kobject_add_internal+0x25f/0x930 [ 859.260748][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.260798][T20917] ? do_raw_spin_unlock+0x145/0x1e0 [ 859.260848][T20917] kobject_add_internal+0x2c8/0x930 [ 859.260926][T20917] kobject_init_and_add+0x121/0x180 [ 859.260970][T20917] ? __pfx_kobject_init_and_add+0x10/0x10 [ 859.261020][T20917] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 859.261065][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.261112][T20917] ? lockdep_init_map_type+0x5c/0x250 [ 859.261161][T20917] swnode_register+0x5c9/0x750 [ 859.261211][T20917] fwnode_create_software_node+0x1c8/0x3f0 [ 859.261271][T20917] device_create_managed_software_node+0x103/0x270 [ 859.261328][T20917] iommufd_test+0x3007/0x6600 [ 859.261380][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.261430][T20917] ? __lock_acquire+0x4c5/0x1ec0 [ 859.261497][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.261547][T20917] ? __lock_acquire+0x4c5/0x1ec0 [ 859.261612][T20917] ? __pfx_iommufd_test+0x10/0x10 [ 859.261659][T20917] ? tomoyo_path_number_perm+0x188/0x580 [ 859.261722][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.261766][T20917] ? lock_acquire+0x1d1/0x380 [ 859.261829][T20917] ? __might_fault+0xc5/0x140 [ 859.261879][T20917] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.261928][T20917] ? find_held_lock+0x2b/0x80 [ 859.261979][T20917] ? __might_fault+0xc5/0x140 [ 859.262044][T20917] iommufd_fops_ioctl+0x358/0x520 [ 859.262096][T20917] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 859.262147][T20917] ? __fget_files+0x34/0x3d0 [ 859.262214][T20917] ? hook_file_ioctl_common+0x140/0x440 [ 859.262299][T20917] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 859.262357][T20917] __x64_sys_ioctl+0x18e/0x210 [ 859.262416][T20917] do_syscall_64+0x123/0x790 [ 859.262476][T20917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.262518][T20917] RIP: 0033:0x7f7a8df9e159 [ 859.262550][T20917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.262591][T20917] RSP: 002b:00007f7a8edc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.262631][T20917] RAX: ffffffffffffffda RBX: 00007f7a8e225fa0 RCX: 00007f7a8df9e159 [ 859.262660][T20917] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 859.262687][T20917] RBP: 00007f7a8e035024 R08: 0000000000000000 R09: 0000000000000000 [ 859.262713][T20917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.262739][T20917] R13: 00007f7a8e226038 R14: 00007f7a8e225fa0 R15: 00007ffe63718838 [ 859.262792][T20917] [ 859.413240][T20917] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 859.413364][T20917] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 860.436188][T20946] FAULT_INJECTION: forcing a failure. [ 860.436188][T20946] name failslab, interval 1, probability 0, space 0, times 0 [ 860.436278][T20946] CPU: 0 UID: 0 PID: 20946 Comm: syz.4.4212 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.436340][T20946] Tainted: [L]=SOFTLOCKUP [ 860.436356][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 860.436381][T20946] Call Trace: [ 860.436395][T20946] [ 860.436411][T20946] dump_stack_lvl+0x100/0x190 [ 860.436475][T20946] should_fail_ex.cold+0x5/0xa [ 860.436520][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.436575][T20946] should_failslab+0xc2/0x120 [ 860.436639][T20946] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 860.436697][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.436746][T20946] ? __d_alloc+0x35/0xa50 [ 860.436794][T20946] __d_alloc+0x35/0xa50 [ 860.436831][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.436879][T20946] ? lockdep_init_map_type+0x5c/0x250 [ 860.436925][T20946] d_make_root+0x3e/0x90 [ 860.436968][T20946] shmem_fill_super+0xc16/0x13e0 [ 860.437029][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.437085][T20946] ? __pfx_shmem_fill_super+0x10/0x10 [ 860.437144][T20946] ? shmem_next_opt+0xbc/0x120 [ 860.437203][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.437254][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.437312][T20946] ? apparmor_capable+0x1d7/0x4d0 [ 860.437365][T20946] ? __pfx_shmem_fill_super+0x10/0x10 [ 860.437428][T20946] get_tree_nodev+0xdd/0x190 [ 860.437486][T20946] vfs_get_tree+0x92/0x320 [ 860.437530][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.437582][T20946] path_mount+0x7d0/0x24c0 [ 860.437635][T20946] ? __pfx_path_mount+0x10/0x10 [ 860.437677][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.437750][T20946] ? lockdep_hardirqs_on+0x7d/0x110 [ 860.437810][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.437858][T20946] ? kmem_cache_free+0x127/0x6c0 [ 860.437923][T20946] ? __x64_sys_mount+0x293/0x310 [ 860.437967][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.438015][T20946] __x64_sys_mount+0x293/0x310 [ 860.438061][T20946] ? __pfx___x64_sys_mount+0x10/0x10 [ 860.438110][T20946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.438168][T20946] do_syscall_64+0x123/0x790 [ 860.438228][T20946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.438277][T20946] RIP: 0033:0x7f5bc6f9e159 [ 860.438309][T20946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.438348][T20946] RSP: 002b:00007f5bc7e6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 860.438386][T20946] RAX: ffffffffffffffda RBX: 00007f5bc7225fa0 RCX: 00007f5bc6f9e159 [ 860.438413][T20946] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 860.438440][T20946] RBP: 00007f5bc7035024 R08: 0000200000000200 R09: 0000000000000000 [ 860.438466][T20946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.438492][T20946] R13: 00007f5bc7226038 R14: 00007f5bc7225fa0 R15: 00007ffcc6b6db28 [ 860.438546][T20946] [ 860.718848][T20953] fuse: Bad value for 'fd' [ 861.207142][T20966] overlayfs: failed to clone upperpath [ 862.163995][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 862.729823][T21013] loop5: detected capacity change from 0 to 40427 [ 862.733243][T21013] F2FS-fs (loop5): invalid crc value [ 862.836547][T21013] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 862.848255][T21013] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 862.848294][T21013] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 862.848337][T21013] F2FS-fs (loop5): Start checkpoint disabled! [ 862.886186][T21013] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 862.886937][T21013] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 862.995329][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4230'. [ 862.995497][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.010914][T21013] bio_check_eod: 72 callbacks suppressed [ 863.010939][T21013] syz.5.4231: attempt to access beyond end of device [ 863.010939][T21013] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 863.021988][T21013] syz.5.4231: attempt to access beyond end of device [ 863.021988][T21013] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 863.022654][T21013] syz.5.4231: attempt to access beyond end of device [ 863.022654][T21013] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 863.023415][T21013] syz.5.4231: attempt to access beyond end of device [ 863.023415][T21013] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 863.027275][T21013] syz.5.4231: attempt to access beyond end of device [ 863.027275][T21013] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 863.027679][T21013] syz.5.4231: attempt to access beyond end of device [ 863.027679][T21013] loop5: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 863.028709][T21013] syz.5.4231: attempt to access beyond end of device [ 863.028709][T21013] loop5: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 863.029149][T21013] syz.5.4231: attempt to access beyond end of device [ 863.029149][T21013] loop5: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 863.029556][T21013] syz.5.4231: attempt to access beyond end of device [ 863.029556][T21013] loop5: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 863.029955][T21013] syz.5.4231: attempt to access beyond end of device [ 863.029955][T21013] loop5: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 863.174095][T21017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.344007][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.344075][ T50] Tainted: [L]=SOFTLOCKUP [ 863.344090][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 863.344117][ T50] Workqueue: writeback wb_workfn (flush-7:5) [ 863.344190][ T50] Call Trace: [ 863.344203][ T50] [ 863.344218][ T50] dump_stack_lvl+0x100/0x190 [ 863.344274][ T50] f2fs_stop_checkpoint+0x5e6/0xb30 [ 863.344342][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.344390][ T50] ? errseq_set+0xe3/0x150 [ 863.344432][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.344487][ T50] f2fs_write_end_bio+0xef9/0x12d0 [ 863.344533][ T50] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 863.344576][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.344624][ T50] ? find_held_lock+0x2b/0x80 [ 863.344671][ T50] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 863.344734][ T50] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 863.344781][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.344832][ T50] f2fs_write_end_io+0xc8/0x240 [ 863.344866][ T50] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 863.344903][ T50] bio_endio+0x7ba/0x9c0 [ 863.344955][ T50] submit_bio_noacct+0x22a/0x2130 [ 863.345005][ T50] f2fs_submit_write_bio+0x133/0x330 [ 863.345064][ T50] __submit_merged_bio+0x330/0x7b0 [ 863.345101][ T50] ? rcu_is_watching+0x13/0xc0 [ 863.345151][ T50] __submit_merged_write_cond+0x3fe/0x510 [ 863.345202][ T50] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 863.345251][ T50] ? __pfx___might_resched+0x10/0x10 [ 863.345305][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.345348][ T50] ? folio_clear_dirty_for_io+0x178/0x960 [ 863.345400][ T50] f2fs_write_cache_pages+0x20e9/0x2630 [ 863.345468][ T50] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 863.345518][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.345564][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.345607][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.345650][ T50] ? find_held_lock+0x2b/0x80 [ 863.345694][ T50] ? nr_blockdev_pages+0xde/0x120 [ 863.345735][ T50] ? nr_blockdev_pages+0xde/0x120 [ 863.345769][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.345832][ T50] ? si_meminfo+0x118/0x230 [ 863.345886][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.345930][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.346040][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.346088][ T50] ? rcu_is_watching+0x13/0xc0 [ 863.346141][ T50] f2fs_write_data_pages+0x799/0x16d0 [ 863.346191][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.346251][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 863.346316][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.346362][ T50] ? __lock_acquire+0x4c5/0x1ec0 [ 863.346426][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 863.346479][ T50] do_writepages+0x278/0x600 [ 863.346536][ T50] ? __pfx_do_writepages+0x10/0x10 [ 863.346585][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.346631][ T50] ? reacquire_held_locks+0xdd/0x1f0 [ 863.346694][ T50] ? writeback_sb_inodes+0x3e1/0x1c50 [ 863.346762][ T50] __writeback_single_inode+0x164/0x1560 [ 863.346820][ T50] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 863.346875][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.346925][ T50] ? __pfx___writeback_single_inode+0x10/0x10 [ 863.346982][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.347028][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 863.347073][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.347126][ T50] writeback_sb_inodes+0x766/0x1c50 [ 863.347207][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 863.347264][ T50] ? do_raw_spin_lock+0x128/0x260 [ 863.347369][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.347418][ T50] ? rcu_is_watching+0x13/0xc0 [ 863.347465][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.347512][ T50] ? queue_io+0x287/0x530 [ 863.347564][ T50] wb_writeback+0x1c0/0xb50 [ 863.347622][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.347680][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 863.347773][ T50] wb_workfn+0x143/0xc80 [ 863.347841][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 863.347901][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.347948][ T50] ? lock_acquire+0x1d1/0x380 [ 863.348010][ T50] ? process_one_work+0xa2c/0x1b10 [ 863.348066][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.348115][ T50] ? process_one_work+0x906/0x1b10 [ 863.348170][ T50] ? process_one_work+0x906/0x1b10 [ 863.348223][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.348280][ T50] process_one_work+0xac7/0x1b10 [ 863.348356][ T50] ? __pfx_process_one_work+0x10/0x10 [ 863.348415][ T50] ? lock_acquire+0x1d1/0x380 [ 863.348492][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.348547][ T50] worker_thread+0x5ef/0xe50 [ 863.348621][ T50] ? kthread+0x13a/0x450 [ 863.348667][ T50] ? __pfx_worker_thread+0x10/0x10 [ 863.348727][ T50] kthread+0x373/0x450 [ 863.348775][ T50] ? __pfx_kthread+0x10/0x10 [ 863.348828][ T50] ret_from_fork+0x730/0xd60 [ 863.348869][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 863.348908][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 863.348955][ T50] ? __switch_to+0x800/0x10f0 [ 863.349004][ T50] ? __switch_to_asm+0x39/0x70 [ 863.349040][ T50] ? __pfx_kthread+0x10/0x10 [ 863.349093][ T50] ret_from_fork_asm+0x1a/0x30 [ 863.349155][ T50] [ 863.510055][ T50] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 864.660854][T21053] xt_hashlimit: size too large, truncated to 1048576 [ 866.373448][T21099] FAULT_INJECTION: forcing a failure. [ 866.373448][T21099] name failslab, interval 1, probability 0, space 0, times 0 [ 866.373526][T21099] CPU: 0 UID: 0 PID: 21099 Comm: syz.5.4255 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.373586][T21099] Tainted: [L]=SOFTLOCKUP [ 866.373601][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 866.373627][T21099] Call Trace: [ 866.373640][T21099] [ 866.373656][T21099] dump_stack_lvl+0x100/0x190 [ 866.373723][T21099] should_fail_ex.cold+0x5/0xa [ 866.373768][T21099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.373826][T21099] should_failslab+0xc2/0x120 [ 866.373894][T21099] __kmalloc_noprof+0xfc/0x840 [ 866.373953][T21099] ? group_cpus_evenly+0xec/0x660 [ 866.374005][T21099] group_cpus_evenly+0xec/0x660 [ 866.374052][T21099] ? __pfx_group_cpus_evenly+0x10/0x10 [ 866.374114][T21099] blk_mq_map_queues+0x9d/0x430 [ 866.374160][T21099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.374212][T21099] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 866.374251][T21099] ? trace_kmalloc+0xeb/0x110 [ 866.374313][T21099] ? __kasan_kmalloc+0xaa/0xb0 [ 866.374371][T21099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.374420][T21099] ? __kmalloc_node_noprof+0x360/0x880 [ 866.374482][T21099] blk_mq_update_queue_map+0x305/0x3a0 [ 866.374550][T21099] blk_mq_alloc_tag_set+0x660/0x1330 [ 866.374602][T21099] ? idr_alloc+0x77/0x130 [ 866.374676][T21099] loop_add+0x3b7/0xb60 [ 866.374749][T21099] ? __pfx_loop_add+0x10/0x10 [ 866.374841][T21099] ? __fget_files+0x34/0x3d0 [ 866.374904][T21099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.374953][T21099] ? find_held_lock+0x2b/0x80 [ 866.375003][T21099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.375053][T21099] ? hook_file_ioctl_common+0x140/0x440 [ 866.375118][T21099] loop_control_ioctl+0xae/0x620 [ 866.375162][T21099] ? __pfx_loop_control_ioctl+0x10/0x10 [ 866.375210][T21099] ? __pfx_loop_control_ioctl+0x10/0x10 [ 866.375256][T21099] __x64_sys_ioctl+0x18e/0x210 [ 866.375317][T21099] do_syscall_64+0x123/0x790 [ 866.375379][T21099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.375422][T21099] RIP: 0033:0x7f7a8df9e159 [ 866.375456][T21099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.375497][T21099] RSP: 002b:00007f7a8edc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.375538][T21099] RAX: ffffffffffffffda RBX: 00007f7a8e225fa0 RCX: 00007f7a8df9e159 [ 866.375567][T21099] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 866.375594][T21099] RBP: 00007f7a8e035024 R08: 0000000000000000 R09: 0000000000000000 [ 866.375622][T21099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.375649][T21099] R13: 00007f7a8e226038 R14: 00007f7a8e225fa0 R15: 00007ffe63718838 [ 866.375703][T21099] [ 866.643890][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 867.691524][T21130] loop4: detected capacity change from 0 to 512 [ 867.757446][T21130] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.4267: iget: bad i_size value: 38620345925642 [ 867.757526][T21130] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 867.758322][T21130] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.4267: couldn't read orphan inode 15 (err -117) [ 867.758373][T21130] loop4: lost filesystem error report for type 5 error -117 [ 867.793634][T21130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.929948][T21126] loop5: detected capacity change from 0 to 32768 [ 867.932775][T21138] syz_tun: entered allmulticast mode [ 868.025628][T21136] syz_tun: left allmulticast mode [ 868.122190][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4270'. [ 868.202709][T21130] EXT4-fs error (device loop4): ext4_validate_block_bitmap:435: comm syz.4.4267: bg 0: block 5: invalid block bitmap [ 868.211802][T21130] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 316 with error 28 [ 868.211884][T21130] EXT4-fs (loop4): This should not happen!! Data will be lost [ 868.211884][T21130] [ 868.211912][T21130] EXT4-fs (loop4): Total free blocks count 0 [ 868.211937][T21130] EXT4-fs (loop4): Free/Dirty block details [ 868.211962][T21130] EXT4-fs (loop4): free_blocks=0 [ 868.211988][T21130] EXT4-fs (loop4): dirty_blocks=316 [ 868.212012][T21130] EXT4-fs (loop4): Block reservation details [ 868.212036][T21130] EXT4-fs (loop4): i_reserved_data_blocks=316 [ 868.257182][T21142] EXT4-fs (loop4): shut down requested (0) [ 869.448124][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.083927][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 877.381766][T21303] FAULT_INJECTION: forcing a failure. [ 877.381766][T21303] name failslab, interval 1, probability 0, space 0, times 0 [ 877.381853][T21303] CPU: 1 UID: 0 PID: 21303 Comm: syz.6.4308 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.381916][T21303] Tainted: [L]=SOFTLOCKUP [ 877.381932][T21303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 877.381959][T21303] Call Trace: [ 877.381972][T21303] [ 877.381989][T21303] dump_stack_lvl+0x100/0x190 [ 877.382055][T21303] should_fail_ex.cold+0x5/0xa [ 877.382105][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.382162][T21303] should_failslab+0xc2/0x120 [ 877.382237][T21303] __kmalloc_noprof+0xfc/0x840 [ 877.382296][T21303] ? bpf_test_init.isra.0+0x88/0x100 [ 877.382369][T21303] bpf_test_init.isra.0+0x88/0x100 [ 877.382438][T21303] bpf_prog_test_run_xdp+0x587/0x1670 [ 877.382491][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.382547][T21303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 877.382618][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.382681][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.382731][T21303] ? fput+0x7c/0x100 [ 877.382767][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.382817][T21303] ? __bpf_prog_get+0x97/0x290 [ 877.382887][T21303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 877.382958][T21303] __sys_bpf+0x2265/0x4a30 [ 877.383026][T21303] ? __pfx___sys_bpf+0x10/0x10 [ 877.383078][T21303] ? find_held_lock+0x2b/0x80 [ 877.383131][T21303] ? futex_wake+0x4ea/0x5e0 [ 877.383192][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.383252][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.383340][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.383399][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.383474][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.383524][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.383573][T21303] ? __x64_sys_futex+0x358/0x4d0 [ 877.383630][T21303] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.383679][T21303] ? xfd_validate_state+0x129/0x190 [ 877.383754][T21303] ? __x64_sys_bpf+0xce/0x140 [ 877.383809][T21303] __x64_sys_bpf+0xce/0x140 [ 877.383866][T21303] ? do_syscall_64+0xae/0x790 [ 877.383926][T21303] do_syscall_64+0x123/0x790 [ 877.383986][T21303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.384029][T21303] RIP: 0033:0x7f327b99e159 [ 877.384061][T21303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.384101][T21303] RSP: 002b:00007f3279bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 877.384142][T21303] RAX: ffffffffffffffda RBX: 00007f327bc25fa0 RCX: 00007f327b99e159 [ 877.384170][T21303] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 877.384196][T21303] RBP: 00007f327ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 877.384229][T21303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.384255][T21303] R13: 00007f327bc26038 R14: 00007f327bc25fa0 R15: 00007ffc1b70c628 [ 877.384312][T21303] [ 881.275593][T21339] BUG: unable to handle page fault for address: fffffffffffffc10 [ 881.283359][T21339] #PF: supervisor read access in kernel mode [ 881.289350][T21339] #PF: error_code(0x0000) - not-present page [ 881.295339][T21339] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 [ 881.301379][T21339] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 881.306952][T21339] CPU: 1 UID: 0 PID: 21339 Comm: syz.2.4320 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.317921][T21339] Tainted: [L]=SOFTLOCKUP [ 881.322255][T21339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 881.332327][T21339] RIP: 0010:strnlen+0x4b/0x80 [ 881.337049][T21339] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 cb 94 45 f5 48 [ 881.356695][T21339] RSP: 0018:ffffc900066bf030 EFLAGS: 00010246 [ 881.362795][T21339] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 881.370786][T21339] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 881.378777][T21339] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 881.386766][T21339] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 881.394758][T21339] R13: ffff88801c68de00 R14: 0000000000000006 R15: 0000000000000010 [ 881.402750][T21339] FS: 00007f2321dc96c0(0000) GS:ffff888123c5d000(0000) knlGS:0000000000000000 [ 881.411703][T21339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.418310][T21339] CR2: fffffffffffffc10 CR3: 0000000067cd0000 CR4: 0000000000350ef0 [ 881.426306][T21339] Call Trace: [ 881.429600][T21339] [ 881.432545][T21339] trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0 [ 881.439369][T21339] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 881.446717][T21339] ? __pfx___might_resched+0x10/0x10 [ 881.452057][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.457750][T21339] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 881.463413][T21339] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 881.469600][T21339] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 881.475567][T21339] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 881.482053][T21339] ? __pfx_down_write+0x10/0x10 [ 881.486959][T21339] tcf_block_get_ext+0x7ed/0x1950 [ 881.492047][T21339] tcf_block_get+0xa8/0x100 [ 881.496601][T21339] ? __pfx_tcf_block_get+0x10/0x10 [ 881.501766][T21339] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 881.508045][T21339] ? lockdep_init_map_type+0x5c/0x250 [ 881.513446][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.519115][T21339] ? timer_init_key+0x150/0x310 [ 881.523994][T21339] sfq_init+0xed/0x2520 [ 881.528187][T21339] ? rtnetlink_rcv_msg+0x3c9/0xe90 [ 881.533512][T21339] ? netlink_rcv_skb+0x159/0x420 [ 881.538561][T21339] ? netlink_unicast+0x585/0x850 [ 881.543524][T21339] ? ____sys_sendmsg+0xa4d/0xbe0 [ 881.548589][T21339] ? ___sys_sendmsg+0x190/0x1e0 [ 881.553485][T21339] ? __sys_sendmsg+0x160/0x210 [ 881.558276][T21339] ? do_syscall_64+0x123/0x790 [ 881.563087][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.568755][T21339] ? lockdep_init_map_type+0x5c/0x250 [ 881.574245][T21339] ? __pfx_sfq_init+0x10/0x10 [ 881.578961][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.584628][T21339] ? qdisc_alloc+0x81b/0xb30 [ 881.589265][T21339] ? __pfx_sfq_init+0x10/0x10 [ 881.593982][T21339] qdisc_create+0x47b/0x1060 [ 881.598695][T21339] tc_modify_qdisc+0xdcf/0x2120 [ 881.603586][T21339] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 881.608901][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.614592][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.620269][T21339] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 881.625593][T21339] rtnetlink_rcv_msg+0x3c9/0xe90 [ 881.630574][T21339] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 881.636075][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.641745][T21339] ? ref_tracker_free+0x37e/0x6c0 [ 881.646817][T21339] netlink_rcv_skb+0x159/0x420 [ 881.651616][T21339] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 881.657115][T21339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 881.662435][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.668107][T21339] ? netlink_deliver_tap+0x1ae/0xcc0 [ 881.673450][T21339] netlink_unicast+0x585/0x850 [ 881.678246][T21339] ? __pfx_netlink_unicast+0x10/0x10 [ 881.683565][T21339] netlink_sendmsg+0x8b0/0xda0 [ 881.688364][T21339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.693681][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.699351][T21339] ? apparmor_socket_sendmsg+0x165/0x280 [ 881.705025][T21339] ____sys_sendmsg+0xa4d/0xbe0 [ 881.709922][T21339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.715242][T21339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.720585][T21339] ___sys_sendmsg+0x190/0x1e0 [ 881.725309][T21339] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.730557][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.736231][T21339] ? futex_wait+0x11e/0x370 [ 881.740791][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.746457][T21339] ? find_held_lock+0x2b/0x80 [ 881.751189][T21339] __sys_sendmsg+0x160/0x210 [ 881.755821][T21339] ? __pfx___sys_sendmsg+0x10/0x10 [ 881.760973][T21339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 881.766648][T21339] do_syscall_64+0x123/0x790 [ 881.771284][T21339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.777206][T21339] RIP: 0033:0x7f2320f9e159 [ 881.781646][T21339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.801287][T21339] RSP: 002b:00007f2321dc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.809735][T21339] RAX: ffffffffffffffda RBX: 00007f2321225fa0 RCX: 00007f2320f9e159 [ 881.817750][T21339] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 881.825742][T21339] RBP: 00007f2321035024 R08: 0000000000000000 R09: 0000000000000000 [ 881.833732][T21339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.841719][T21339] R13: 00007f2321226038 R14: 00007f2321225fa0 R15: 00007ffc4b6f8fd8 [ 881.849727][T21339] [ 881.852754][T21339] Modules linked in: [ 881.856661][T21339] CR2: fffffffffffffc10 [ 881.860824][T21339] ---[ end trace 0000000000000000 ]--- [ 881.866292][T21339] RIP: 0010:strnlen+0x4b/0x80 [ 881.866360][T21339] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 cb 94 45 f5 48 [ 881.866402][T21339] RSP: 0018:ffffc900066bf030 EFLAGS: 00010246 [ 881.866436][T21339] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 881.866464][T21339] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 881.866492][T21339] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 881.866518][T21339] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 881.866545][T21339] R13: ffff88801c68de00 R14: 0000000000000006 R15: 0000000000000010 [ 881.866575][T21339] FS: 00007f2321dc96c0(0000) GS:ffff888123c5d000(0000) knlGS:0000000000000000 [ 881.866611][T21339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.866639][T21339] CR2: fffffffffffffc10 CR3: 0000000067cd0000 CR4: 0000000000350ef0 [ 881.866670][T21339] Kernel panic - not syncing: Fatal exception [ 881.966441][T21339] Kernel Offset: disabled [ 881.970759][T21339] Rebooting in 86400 seconds..