last executing test programs: 11.388530813s ago: executing program 0 (id=186): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a"], 0xa8}}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10.621085911s ago: executing program 0 (id=191): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[], 0x1, 0x553c, &(0x7f0000007a00)="$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") symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpriority(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x22000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) 9.255032113s ago: executing program 1 (id=198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x610000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='4', 0x1) 9.099771509s ago: executing program 3 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = epoll_create1(0x0) epoll_pwait(r1, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, 0x0, 0x64000ba5) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) write(r0, &(0x7f0000000200)='3', 0x1) 8.738164917s ago: executing program 3 (id=201): socket$kcm(0x21, 0x2, 0xa) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x4, 0x10}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x202, 0xfff, 0xf, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x8, 0x5, 0x40, 0x4, 0x6, 0xe, 0x9ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x4, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x0, 0x10000, 0x8, 0x10000, 0x2, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x6, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x6, 0x7, 0x3, 0x4004000, 0x200, 0xfec6, 0x0, 0x3, 0x800, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x24, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x7, 0x5, 0x4aa0, 0x3217, 0x1, 0x0, 0x4, 0x4, 0x8, 0x8a3c, 0x6, 0x5, 0xb005, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x5, 0x1, 0x1, 0x82, 0x8, 0x5, 0xc4e, 0x4, 0x9, 0x3ff, 0x7, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff364, 0x2, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd2, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x3cbf, 0x4, 0x3, 0x4, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0x2, 0x8000, 0xff, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x1ab, 0x1ff, 0x2d0, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x8, 0x40000001, 0xa9ef, 0x7, 0x100, 0x3, 0x1, 0x5, 0x101, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 7.972253723s ago: executing program 0 (id=203): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.968640768s ago: executing program 2 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001fa"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_setup(0xeff, &(0x7f0000000280)={0x0, 0x407b, 0x1018, 0x0, 0x51}, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 7.885097407s ago: executing program 3 (id=205): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @private=0xa010101}}}, 0x108) 5.769808384s ago: executing program 2 (id=208): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b2740000000197efe42b91ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 5.153661028s ago: executing program 2 (id=209): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r3, 0x4) write(r1, &(0x7f0000000100)="060000000300010000", 0x9) write(r1, &(0x7f0000000300)="060000000300000000", 0x9) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.073843207s ago: executing program 1 (id=210): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3ffff, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x4, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.071942048s ago: executing program 4 (id=211): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) r2 = epoll_create(0x9346) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20002000}) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x4, 0x4, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xe, 0x9, 0x7, 0x1, 0x0, "3755b60000000000e4a5eb00", 0x0, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r3 = syz_open_pts(r0, 0x80) r4 = dup3(r3, r0, 0x80000) read(r4, &(0x7f00000003c0)=""/211, 0xd3) 4.985474143s ago: executing program 0 (id=212): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r3, 0x4) write(r1, &(0x7f0000000100)="060000000300010000", 0x9) write(r1, &(0x7f0000000300)="060000000300000000", 0x9) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.610587491s ago: executing program 3 (id=213): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r3, 0x4) write(r1, &(0x7f0000000100)="060000000300010000", 0x9) write(r1, &(0x7f0000000300)="0600000003000000", 0x8) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.230235885s ago: executing program 4 (id=214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.225386489s ago: executing program 1 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x2, 0x9, 0x0, 0xaba}, 0x4, 0x0, 0x3ff, 0x1, 0x9, 0x19, 0x6, 0x1f, 0x5, 0x9, {0x8, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x0, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeb9, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x9, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x2, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0xffff, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x1, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0x8, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a8, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 3.223835685s ago: executing program 2 (id=215): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)="0e", 0xfec3, 0x8000c61) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 2.048992645s ago: executing program 0 (id=216): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x5d, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1691, 0x80, 0x334, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x5, 0x2}}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.938110068s ago: executing program 3 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.858890103s ago: executing program 1 (id=218): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) sendmmsg(r1, &(0x7f000000c040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 1.70953336s ago: executing program 2 (id=219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.687574056s ago: executing program 1 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.572078411s ago: executing program 3 (id=221): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, 0x0, 0x0) 1.327345163s ago: executing program 2 (id=222): socket(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x8000001, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9139, 0x800, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8da, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) 1.306374475s ago: executing program 0 (id=223): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.234236155s ago: executing program 4 (id=225): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04", 0x1}], 0x1}}], 0x1, 0x4000001) r2 = dup(r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 978.842468ms ago: executing program 4 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) writev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4004044) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x40000000, 0x3, 0x30, r0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000200)={0x100000001, 0x100000001, 0x2, 0x4000000000000, 0x3, 0x10, 0x4, 0x9}, 0x0, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f0000000040)={[0x6]}, 0x8}) 477.559306ms ago: executing program 4 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r6, 0x3000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9, r5}) 450.205139ms ago: executing program 1 (id=228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x97, 0xfd, 0x8, 0xfb, 0x5, 0x2, 0x0, 0x8, 0x5, 0x1, 0xd, 0xfd, 0x0, 0xac}, 0xe) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 0s ago: executing program 4 (id=229): syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) inotify_init1(0x80000) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1ffffffffffffcb5, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000b80), 0x1, 0x600, 0x0, 0x20000}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 84.175756][ T5596] cgroup: Unknown subsys name 'net' [ 84.280735][ T5596] cgroup: Unknown subsys name 'cpuset' [ 84.293821][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.203584][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.802404][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.804731][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.817596][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.827014][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.830211][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.830548][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.830689][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.831829][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.841526][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.848943][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.852573][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.859369][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.863013][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.891584][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.895006][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.901315][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.908549][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.908748][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.908949][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.920193][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.927379][ T4924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.928259][ T4924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.928473][ T4924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.929264][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.929607][ T4924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.130981][ T1222] cfg80211: failed to load regulatory.db [ 94.007227][ T5612] Bluetooth: hci0: command tx timeout [ 94.007534][ T5617] Bluetooth: hci1: command tx timeout [ 94.088619][ T5612] Bluetooth: hci3: command tx timeout [ 94.088879][ T5612] Bluetooth: hci2: command tx timeout [ 94.089939][ T5617] Bluetooth: hci4: command tx timeout [ 94.385396][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.385613][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.385782][ T5610] bridge_slave_0: entered allmulticast mode [ 94.394351][ T5610] bridge_slave_0: entered promiscuous mode [ 94.472681][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.472798][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.473133][ T5610] bridge_slave_1: entered allmulticast mode [ 94.474383][ T5610] bridge_slave_1: entered promiscuous mode [ 94.575576][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.575722][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.577859][ T5609] bridge_slave_0: entered allmulticast mode [ 94.583716][ T5609] bridge_slave_0: entered promiscuous mode [ 94.601970][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.602437][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.602942][ T5609] bridge_slave_1: entered allmulticast mode [ 94.609071][ T5609] bridge_slave_1: entered promiscuous mode [ 94.725103][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.761491][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.761780][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.761943][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.762108][ T5608] bridge_slave_0: entered allmulticast mode [ 94.764375][ T5608] bridge_slave_0: entered promiscuous mode [ 94.784509][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.855408][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.855657][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.855831][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.855976][ T5608] bridge_slave_1: entered allmulticast mode [ 94.868043][ T5608] bridge_slave_1: entered promiscuous mode [ 94.910951][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.911049][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.911168][ T5611] bridge_slave_0: entered allmulticast mode [ 94.913152][ T5611] bridge_slave_0: entered promiscuous mode [ 95.008020][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.008157][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.008295][ T5611] bridge_slave_1: entered allmulticast mode [ 95.010264][ T5611] bridge_slave_1: entered promiscuous mode [ 95.013773][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.013878][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.014009][ T5607] bridge_slave_0: entered allmulticast mode [ 95.020358][ T5607] bridge_slave_0: entered promiscuous mode [ 95.033948][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.035011][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.038511][ T5607] bridge_slave_1: entered allmulticast mode [ 95.050359][ T5607] bridge_slave_1: entered promiscuous mode [ 95.087261][ T5609] team0: Port device team_slave_0 added [ 95.140018][ T5610] team0: Port device team_slave_0 added [ 95.189425][ T5609] team0: Port device team_slave_1 added [ 95.192158][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.194918][ T5610] team0: Port device team_slave_1 added [ 95.229452][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.232573][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.290698][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.327517][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.329984][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.330000][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.330029][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.334597][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.454242][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.454262][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.454286][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.531315][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.531337][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.531364][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.534299][ T5611] team0: Port device team_slave_0 added [ 95.611817][ T5607] team0: Port device team_slave_0 added [ 95.615465][ T5608] team0: Port device team_slave_0 added [ 95.622407][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.622427][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.622455][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.654523][ T5608] team0: Port device team_slave_1 added [ 95.719822][ T5611] team0: Port device team_slave_1 added [ 95.768999][ T5607] team0: Port device team_slave_1 added [ 95.800002][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.800020][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.800043][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.801793][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.801809][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.801833][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.803322][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.803336][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.803360][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.003752][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.003770][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.003794][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.087675][ T5627] Bluetooth: hci0: command tx timeout [ 96.087754][ T5617] Bluetooth: hci1: command tx timeout [ 96.139181][ T5609] hsr_slave_0: entered promiscuous mode [ 96.140186][ T5609] hsr_slave_1: entered promiscuous mode [ 96.143026][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.143044][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.143070][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.178664][ T5627] Bluetooth: hci2: command tx timeout [ 96.178785][ T5627] Bluetooth: hci3: command tx timeout [ 96.179225][ T5617] Bluetooth: hci4: command tx timeout [ 96.243111][ T5610] hsr_slave_0: entered promiscuous mode [ 96.244281][ T5610] hsr_slave_1: entered promiscuous mode [ 96.244982][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 96.245052][ T5610] Cannot create hsr debugfs directory [ 96.300315][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.300330][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.300361][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.359736][ T5608] hsr_slave_0: entered promiscuous mode [ 96.360807][ T5608] hsr_slave_1: entered promiscuous mode [ 96.361434][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 96.361461][ T5608] Cannot create hsr debugfs directory [ 96.469533][ T5611] hsr_slave_0: entered promiscuous mode [ 96.470359][ T5611] hsr_slave_1: entered promiscuous mode [ 96.472273][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 96.472297][ T5611] Cannot create hsr debugfs directory [ 96.553940][ T5607] hsr_slave_0: entered promiscuous mode [ 96.555593][ T5607] hsr_slave_1: entered promiscuous mode [ 96.561419][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 96.561486][ T5607] Cannot create hsr debugfs directory [ 97.221046][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.242116][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.243227][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.265715][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.278786][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.284681][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.314833][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.328103][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.408951][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.426253][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.428654][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.434453][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.470865][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.488768][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.506765][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.510123][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.655680][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.680260][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.696286][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.704848][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.716829][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.739311][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.742714][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.768290][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.911601][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.927016][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.949412][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.970201][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.985909][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.999670][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.004578][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.005733][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.035362][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.122168][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.166450][ T5612] Bluetooth: hci0: command tx timeout [ 98.166550][ T5617] Bluetooth: hci1: command tx timeout [ 98.195751][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.195869][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.219796][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.223546][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.224806][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.246177][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.246416][ T5612] Bluetooth: hci3: command tx timeout [ 98.246447][ T5612] Bluetooth: hci2: command tx timeout [ 98.246576][ T5617] Bluetooth: hci4: command tx timeout [ 98.297407][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.299822][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.303233][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.305050][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.349756][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.368532][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.368627][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.442263][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.498197][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.498314][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.539260][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.539349][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.638502][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.721226][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.752627][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.812337][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.812445][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.827613][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.827905][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.925075][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.003462][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.003662][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.063713][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.063830][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.180372][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.314762][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.424568][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.424684][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.501234][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.501388][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.246302][ T5627] Bluetooth: hci0: command tx timeout [ 100.246360][ T5617] Bluetooth: hci1: command tx timeout [ 100.326622][ T5627] Bluetooth: hci2: command tx timeout [ 100.326661][ T5627] Bluetooth: hci3: command tx timeout [ 100.326720][ T5617] Bluetooth: hci4: command tx timeout [ 100.376656][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.423477][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.661797][ T5608] veth0_vlan: entered promiscuous mode [ 100.714852][ T5608] veth1_vlan: entered promiscuous mode [ 100.885855][ T5608] veth0_macvtap: entered promiscuous mode [ 100.949801][ T5608] veth1_macvtap: entered promiscuous mode [ 101.042263][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.073563][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.116534][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.172176][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.249569][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.249753][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.249795][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.357211][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.430373][ T5610] veth0_vlan: entered promiscuous mode [ 101.455953][ T5611] veth0_vlan: entered promiscuous mode [ 101.477845][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.512830][ T5610] veth1_vlan: entered promiscuous mode [ 101.574243][ T5611] veth1_vlan: entered promiscuous mode [ 101.587606][ T5609] veth0_vlan: entered promiscuous mode [ 101.654804][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.654830][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.695648][ T5609] veth1_vlan: entered promiscuous mode [ 101.790605][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.790630][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.849338][ T5607] veth0_vlan: entered promiscuous mode [ 101.885194][ T5611] veth0_macvtap: entered promiscuous mode [ 101.917815][ T5610] veth0_macvtap: entered promiscuous mode [ 101.924136][ T5611] veth1_macvtap: entered promiscuous mode [ 101.976635][ T5610] veth1_macvtap: entered promiscuous mode [ 102.001909][ T5607] veth1_vlan: entered promiscuous mode [ 102.035684][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.041186][ T5609] veth0_macvtap: entered promiscuous mode [ 102.102042][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.126923][ T5609] veth1_macvtap: entered promiscuous mode [ 102.171652][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.184243][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.233965][ T5607] veth0_macvtap: entered promiscuous mode [ 102.249429][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.265230][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.274883][ T1034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.274935][ T1034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.274973][ T1034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.275010][ T1034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.342505][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.344859][ T5607] veth1_macvtap: entered promiscuous mode [ 102.574072][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.588028][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.589284][ T5805] loop1: detected capacity change from 0 to 32768 [ 102.638835][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.638902][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.638941][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.638979][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.639016][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.639059][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.755378][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.880610][ T2133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.899084][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.901952][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.901973][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.938640][ T1034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.012908][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.012930][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.135887][ T5807] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.234325][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.234352][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.257826][ T101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.258508][ T101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.412235][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.412259][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.503843][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.503870][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.695171][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.695203][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.791217][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.791238][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.965628][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.965651][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.433588][ T5820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.530675][ T5827] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 104.532571][ T5827] 8021q: VLANs not supported on gre0 [ 104.895911][ T5839] FAULT_INJECTION: forcing a failure. [ 104.895911][ T5839] name failslab, interval 1, probability 0, space 0, times 1 [ 104.896467][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 104.896507][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.896529][ T5839] Call Trace: [ 104.896538][ T5839] [ 104.896548][ T5839] dump_stack_lvl+0xe8/0x150 [ 104.896587][ T5839] should_fail_ex+0x3eb/0x540 [ 104.896616][ T5839] should_failslab+0xa8/0x100 [ 104.896642][ T5839] __kmalloc_cache_noprof+0x9e/0x600 [ 104.896666][ T5839] ? shrinker_alloc+0x59/0xbc0 [ 104.896686][ T5839] ? shrinker_alloc+0x59/0xbc0 [ 104.896716][ T5839] shrinker_alloc+0x59/0xbc0 [ 104.896739][ T5839] ? __raw_spin_lock_init+0x45/0x100 [ 104.896767][ T5839] ? __raw_spin_lock_init+0x45/0x100 [ 104.896797][ T5839] sget_fc+0xe75/0x1a60 [ 104.896819][ T5839] ? __pfx_kernfs_test_super+0x10/0x10 [ 104.896856][ T5839] ? __pfx_kernfs_set_super+0x10/0x10 [ 104.896881][ T5839] ? __pfx_sget_fc+0x10/0x10 [ 104.896902][ T5839] ? __kasan_kmalloc+0x93/0xb0 [ 104.896925][ T5839] ? __kmalloc_cache_noprof+0x31c/0x600 [ 104.896948][ T5839] ? __kmalloc_cache_noprof+0x148/0x600 [ 104.896968][ T5839] ? kernfs_get_tree+0xc4/0x980 [ 104.896987][ T5839] ? kernfs_get_tree+0xc4/0x980 [ 104.897012][ T5839] kernfs_get_tree+0x1e9/0x980 [ 104.897034][ T5839] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 104.897059][ T5839] ? __pfx_kernfs_get_tree+0x10/0x10 [ 104.897081][ T5839] ? apparmor_capable+0x126/0x170 [ 104.897107][ T5839] ? bpf_lsm_capable+0x9/0x20 [ 104.897132][ T5839] vfs_get_tree+0x92/0x2a0 [ 104.897156][ T5839] do_new_mount+0x319/0xdc0 [ 104.897186][ T5839] ? __pfx_do_new_mount+0x10/0x10 [ 104.897212][ T5839] ? ns_capable+0x84/0xe0 [ 104.897235][ T5839] ? path_mount+0x647/0x1050 [ 104.897262][ T5839] ? user_path_at+0xd4/0x160 [ 104.897286][ T5839] __se_sys_mount+0x31d/0x420 [ 104.897315][ T5839] ? __pfx___se_sys_mount+0x10/0x10 [ 104.897344][ T5839] ? __x64_sys_mount+0x20/0xc0 [ 104.897369][ T5839] do_syscall_64+0x166/0x520 [ 104.897389][ T5839] ? trace_irq_disable+0x3b/0x140 [ 104.897408][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.897432][ T5839] ? clear_bhb_loop+0x70/0xc0 [ 104.897551][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.897578][ T5839] RIP: 0033:0x7f468a39e159 [ 104.897611][ T5839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.897632][ T5839] RSP: 002b:00007f468b33f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.897656][ T5839] RAX: ffffffffffffffda RBX: 00007f468a625fa0 RCX: 00007f468a39e159 [ 104.897674][ T5839] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 104.897690][ T5839] RBP: 00007f468a43506b R08: 0000000000000000 R09: 0000000000000000 [ 104.897703][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.897716][ T5839] R13: 00007f468a626038 R14: 00007f468a625fa0 R15: 00007ffe27f66468 [ 104.897752][ T5839] [ 106.135288][ T5856] loop3: detected capacity change from 0 to 4096 [ 106.343306][ T5856] ntfs3(loop3): ino=19, mi_enum_attr [ 106.343487][ T5856] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 106.727162][ T5877] Bluetooth: MGMT ver 1.23 [ 107.844429][ T5879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.844639][ T5879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.936202][ T5879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.944537][ T5617] Bluetooth: hci0: Opcode 0x0c3a failed: -112 [ 107.965076][ T5879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.965170][ T5879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.991999][ T5879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.056642][ T5879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.056791][ T5879] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.135646][ T5879] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.160043][ T5879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.160164][ T5879] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.207260][ T5879] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.214297][ T5879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.214360][ T5879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.259905][ T5879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.693359][ T5904] loop4: detected capacity change from 0 to 2048 [ 108.760681][ T5904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.909578][ T5729] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 108.912226][ T5789] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.991776][ T5906] loop4: detected capacity change from 0 to 128 [ 109.068917][ T5906] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.069588][ T5906] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.076884][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 109.132760][ T5729] usb 3-1: New USB device found: idVendor=0c70, idProduct=f0b6, bcdDevice=0.00 [ 109.161273][ T5789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.161372][ T5789] usb 4-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 109.183556][ T5789] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 109.192595][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.192695][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.192810][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.212786][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.212906][ T5789] usb 4-1: Product: syz [ 109.212951][ T5789] usb 4-1: Manufacturer: syz [ 109.213000][ T5789] usb 4-1: SerialNumber: syz [ 109.302282][ T5729] usb 3-1: config 0 descriptor?? [ 109.547681][ T5872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.660626][ T5789] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 109.668876][ T5789] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 109.780908][ T5789] usb 4-1: 2:1 : can't get High Capability descriptor [ 109.846806][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.904676][ T5609] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.909856][ T5913] loop1: detected capacity change from 0 to 512 [ 109.992502][ T5729] aquacomputer_d5next 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 110.016692][ T5617] Bluetooth: hci0: command 0x0c3a tx timeout [ 110.087220][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.169502][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.235887][ T5913] xt_hashlimit: size too large, truncated to 1048576 [ 110.257490][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.273757][ T5911] loop0: detected capacity change from 0 to 32768 [ 110.491351][ T5729] usb 3-1: USB disconnect, device number 2 [ 110.554047][ T5919] loop4: detected capacity change from 0 to 2048 [ 110.555313][ T5919] ======================================================= [ 110.555313][ T5919] WARNING: The mand mount option has been deprecated and [ 110.555313][ T5919] and is ignored by this kernel. Remove the mand [ 110.555313][ T5919] option from the mount to silence this warning. [ 110.555313][ T5919] ======================================================= [ 110.678826][ T5919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.706330][ T5911] loop0: detected capacity change from 0 to 128 [ 110.719296][ T5789] usb 4-1: USB disconnect, device number 2 [ 110.740890][ T5911] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.741277][ T5911] hpfs: filesystem error: improperly stopped [ 110.741297][ T5911] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.741313][ T5911] hpfs: You really don't want any checks? You are crazy... [ 110.741711][ T5911] hpfs: hpfs_map_sector(): read error [ 110.741723][ T5911] hpfs: code page support is disabled [ 110.830631][ T5911] hpfs: hpfs_map_4sectors(): unaligned read [ 110.830808][ T5911] hpfs: hpfs_map_4sectors(): unaligned read [ 110.830823][ T5911] hpfs: filesystem error: unable to find root dir [ 110.832956][ T5911] hpfs: hpfs_map_4sectors(): unaligned read [ 111.076967][ T5922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.495754][ T5935] FAULT_INJECTION: forcing a failure. [ 111.495754][ T5935] name failslab, interval 1, probability 0, space 0, times 0 [ 111.495795][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz.1.42 Not tainted syzkaller #0 PREEMPT(full) [ 111.495823][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.495847][ T5935] Call Trace: [ 111.495856][ T5935] [ 111.495874][ T5935] dump_stack_lvl+0xe8/0x150 [ 111.495906][ T5935] should_fail_ex+0x3eb/0x540 [ 111.495943][ T5935] should_failslab+0xa8/0x100 [ 111.495972][ T5935] __kmalloc_noprof+0xf9/0x710 [ 111.495992][ T5935] ? d_path+0x3f8/0x530 [ 111.496021][ T5935] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 111.496042][ T5935] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 111.496080][ T5935] landlock_init_hierarchy_log+0x16c/0x5f0 [ 111.496108][ T5935] landlock_merge_ruleset+0x7cd/0xbc0 [ 111.496143][ T5935] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 111.496178][ T5935] do_syscall_64+0x166/0x520 [ 111.496198][ T5935] ? trace_irq_disable+0x3b/0x140 [ 111.496219][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.496243][ T5935] ? clear_bhb_loop+0x70/0xc0 [ 111.496268][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.496291][ T5935] RIP: 0033:0x7f468a39e159 [ 111.496311][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.496330][ T5935] RSP: 002b:00007f468b33f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 111.496361][ T5935] RAX: ffffffffffffffda RBX: 00007f468a625fa0 RCX: 00007f468a39e159 [ 111.496387][ T5935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 111.496410][ T5935] RBP: 00007f468a43506b R08: 0000000000000000 R09: 0000000000000000 [ 111.496425][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.496445][ T5935] R13: 00007f468a626038 R14: 00007f468a625fa0 R15: 00007ffe27f66468 [ 111.496486][ T5935] [ 111.815614][ T5940] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 111.929210][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.086145][ T5617] Bluetooth: hci0: command 0x0c3a tx timeout [ 112.166593][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.257774][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.326362][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.861795][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 113.249900][ T5955] loop0: detected capacity change from 0 to 32768 [ 113.372869][ T5955] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.418497][ T5789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.566202][ T5744] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 113.576417][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 113.594237][ T5789] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 113.618108][ T5789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.618162][ T5789] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.619641][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.619667][ T5789] usb 5-1: SerialNumber: syz [ 113.684508][ T5789] cdc_acm 5-1:1.0: skipping garbage [ 113.737490][ T5744] usb 3-1: New USB device found: idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 113.743824][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.743854][ T5744] usb 3-1: Product: syz [ 113.743869][ T5744] usb 3-1: Manufacturer: syz [ 113.743884][ T5744] usb 3-1: SerialNumber: syz [ 113.796156][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.802466][ T5744] usb 3-1: config 0 descriptor?? [ 113.823750][ T5744] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 113.915385][ T5976] loop4: detected capacity change from 0 to 1024 [ 113.955021][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 113.969080][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 113.969837][ T27] usb 4-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.971193][ T27] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 113.971233][ T27] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 113.971297][ T27] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 113.971331][ T27] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 113.971364][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.019745][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.069770][ T27] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 114.069802][ T27] usb 4-1: Product: syz [ 114.069846][ T27] usb 4-1: Manufacturer: syz [ 114.069862][ T27] usb 4-1: SerialNumber: syz [ 114.107086][ T27] usb 4-1: config 0 descriptor?? [ 114.134788][ T27] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.177359][ T5617] Bluetooth: hci0: command 0x0c3a tx timeout [ 114.184180][ T5985] xt_hashlimit: size too large, truncated to 1048576 [ 114.185060][ T27] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.208185][ T5976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.208349][ T5976] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.258915][ T5617] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.336962][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.375174][ T5976] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.59: Freeing blocks not in datazone - block = 0, count = 16 [ 114.406141][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.410969][ T27] usb 5-1: USB disconnect, device number 2 [ 114.449484][ T5989] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 114.518740][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.539204][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.685823][ T5729] usb 4-1: USB disconnect, device number 3 [ 114.685935][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 114.698554][ T5983] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 114.711468][ T5992] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 114.752190][ T5729] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 114.800809][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 114.828257][ T5744] gspca_m5602: Failed to find a sensor [ 114.828275][ T5744] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 114.833380][ T5744] usb 3-1: USB disconnect, device number 3 [ 115.070215][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 115.070260][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.070260][ T12] [ 115.072105][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 115.072764][ T12] EXT4-fs (loop4): Free/Dirty block details [ 115.073218][ T12] EXT4-fs (loop4): free_blocks=16 [ 115.073254][ T12] EXT4-fs (loop4): dirty_blocks=16 [ 115.073268][ T12] EXT4-fs (loop4): Block reservation details [ 115.073280][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 115.195357][ T9] libceph: connect (1)[c::]:6789 error -101 [ 115.195931][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 115.225084][ T5609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.246827][ T5999] ceph: No mds server is up or the cluster is laggy [ 115.250866][ T5617] Bluetooth: hci0: unexpected event for opcode 0x200a [ 115.257272][ T6000] overlayfs: failed to resolve './bus': -2 [ 115.304241][ T5729] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.507533][ T5729] usb 4-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 115.510865][ T5729] usb 4-1: config index 0 descriptor too short (expected 36, got 27) [ 115.510925][ T5729] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.510954][ T5729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.510992][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.514054][ T5729] usb 4-1: config 0 descriptor?? [ 115.632796][ T5729] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 115.729130][ T5729] usb 4-1: USB disconnect, device number 4 [ 116.498518][ T5995] Zero length message leads to an empty skb [ 116.622473][ T6023] FAULT_INJECTION: forcing a failure. [ 116.622473][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 116.622517][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(full) [ 116.622550][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.622564][ T6023] Call Trace: [ 116.622573][ T6023] [ 116.622582][ T6023] dump_stack_lvl+0xe8/0x150 [ 116.622631][ T6023] should_fail_ex+0x3eb/0x540 [ 116.622669][ T6023] should_failslab+0xa8/0x100 [ 116.622696][ T6023] __kmalloc_cache_noprof+0x9e/0x600 [ 116.622719][ T6023] ? tcf_block_get_ext+0x2b4/0x17d0 [ 116.622740][ T6023] ? tcf_block_get_ext+0x2b4/0x17d0 [ 116.622770][ T6023] tcf_block_get_ext+0x2b4/0x17d0 [ 116.622804][ T6023] tcf_block_get+0x67/0xa0 [ 116.622823][ T6023] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 116.622855][ T6023] drr_init_qdisc+0x2e/0xd0 [ 116.622875][ T6023] ? __pfx_drr_init_qdisc+0x10/0x10 [ 116.622897][ T6023] qdisc_create+0xc23/0x1450 [ 116.622922][ T6023] ? lockdep_rtnl_is_held+0x26/0x40 [ 116.622943][ T6023] ? qdisc_lookup+0x364/0x6c0 [ 116.622967][ T6023] tc_modify_qdisc+0x17af/0x2390 [ 116.623002][ T6023] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 116.623056][ T6023] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 116.623077][ T6023] rtnetlink_rcv_msg+0x7b9/0xc00 [ 116.623103][ T6023] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 116.623124][ T6023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.623148][ T6023] ? __copy_skb_header+0xa3/0x4a0 [ 116.623183][ T6023] netlink_rcv_skb+0x226/0x4a0 [ 116.623206][ T6023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.623229][ T6023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.623276][ T6023] netlink_unicast+0x7bd/0x940 [ 116.623309][ T6023] netlink_sendmsg+0x7c3/0xae0 [ 116.623335][ T6023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.623364][ T6023] ? apparmor_socket_sendmsg+0x18b/0x360 [ 116.623390][ T6023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.623410][ T6023] sock_sendmsg_nosec+0x14e/0x190 [ 116.623436][ T6023] ____sys_sendmsg+0x54e/0x850 [ 116.623465][ T6023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.623495][ T6023] ? import_iovec+0x73/0xa0 [ 116.623520][ T6023] ___sys_sendmsg+0x2a5/0x360 [ 116.623539][ T6023] ? __lock_acquire+0x747/0x2de0 [ 116.623566][ T6023] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.623591][ T6023] ? futex_wait+0x2a2/0x390 [ 116.623644][ T6023] ? __fget_files+0x3a2/0x420 [ 116.623675][ T6023] ? __fget_files+0x2a/0x420 [ 116.623706][ T6023] __x64_sys_sendmsg+0x1b1/0x290 [ 116.623731][ T6023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.623775][ T6023] do_syscall_64+0x166/0x520 [ 116.623796][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.623820][ T6023] ? clear_bhb_loop+0x70/0xc0 [ 116.623843][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.623866][ T6023] RIP: 0033:0x7fbc8e59e159 [ 116.623896][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.623915][ T6023] RSP: 002b:00007fbc8c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.623940][ T6023] RAX: ffffffffffffffda RBX: 00007fbc8e825fa0 RCX: 00007fbc8e59e159 [ 116.623956][ T6023] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000004 [ 116.623972][ T6023] RBP: 00007fbc8e63506b R08: 0000000000000000 R09: 0000000000000000 [ 116.623986][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.623999][ T6023] R13: 00007fbc8e826038 R14: 00007fbc8e825fa0 R15: 00007ffd081b8a18 [ 116.624034][ T6023] [ 116.694880][ T5729] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 117.158824][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.158884][ T5729] usb 4-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 117.161273][ T5729] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 117.161301][ T5729] usb 4-1: config 142 has no interface number 0 [ 117.161361][ T5729] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 117.161390][ T5729] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 117.161415][ T5729] usb 4-1: config 142 interface 251 has no altsetting 0 [ 117.199783][ T5729] usb 4-1: string descriptor 0 read error: -22 [ 117.200163][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.275544][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.324209][ T5729] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 117.350643][ T5617] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10 [ 117.424925][ T5729] cyphidcom ttyUSB0: required endpoint is missing [ 117.580139][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.580802][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.610825][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.611311][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.765887][ T5729] usb 4-1: USB disconnect, device number 5 [ 117.791866][ T6025] loop1: detected capacity change from 0 to 32768 [ 117.854109][ T5729] cypress_m8 4-1:142.251: device disconnected [ 117.892264][ T6025] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 118.039287][ T6025] syz.1.73 (6025) used greatest stack depth: 19272 bytes left [ 118.092996][ T5608] ocfs2: Unmounting device (7,1) on (node local) [ 118.438224][ T6037] 0: reclassify loop, rule prio 0, protocol 03 [ 118.555188][ T6045] loop0: detected capacity change from 0 to 512 [ 118.708008][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.708124][ T6045] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.814072][ T6045] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 118.842058][ T6045] Quota error (device loop0): write_blk: dquota write failed [ 118.842199][ T6045] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 118.842238][ T6045] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.80: Failed to acquire dquot type 1 [ 119.058633][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.334887][ T6061] IPVS: Scheduler module ip_vs_sip not found [ 119.413487][ T6070] veth1_macvtap: left promiscuous mode [ 120.265703][ T6090] loop2: detected capacity change from 0 to 512 [ 120.320591][ T6090] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.90: iget: bad extended attribute block 134217728 [ 120.320800][ T6090] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.322991][ T6090] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.90: couldn't read orphan inode 15 (err -117) [ 120.323621][ T6090] loop2: lost filesystem error report for type 5 error -117 [ 120.346441][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 120.346516][ C0] EXT4-fs (loop2): initial error at time 1790964766: ext4_orphan_get:1403: inode 15 [ 120.346604][ C0] EXT4-fs (loop2): last error at time 1790964766: ext4_orphan_get:1408 [ 120.427216][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.675537][ T6077] loop3: detected capacity change from 0 to 32768 [ 120.864158][ T6077] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 121.401615][ T5610] ocfs2: Unmounting device (7,3) on (node local) [ 121.439037][ T5789] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.518863][ T6090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.90: bg 0: block 465: padding at end of block bitmap is not set [ 121.527251][ T6090] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 121.530321][ T6090] EXT4-fs (loop2): This should not happen!! Data will be lost [ 121.530321][ T6090] [ 121.530402][ T6090] EXT4-fs (loop2): Total free blocks count 0 [ 121.530454][ T6090] EXT4-fs (loop2): Free/Dirty block details [ 121.530526][ T6090] EXT4-fs (loop2): free_blocks=0 [ 121.530571][ T6090] EXT4-fs (loop2): dirty_blocks=16384 [ 121.530611][ T6090] EXT4-fs (loop2): Block reservation details [ 121.530644][ T6090] EXT4-fs (loop2): i_reserved_data_blocks=16384 [ 121.716106][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 121.717006][ T5789] usb 5-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 121.720607][ T5789] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.720635][ T5789] usb 5-1: config 0 has no interface number 0 [ 121.767749][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.767782][ T5789] usb 5-1: Product: syz [ 121.767798][ T5789] usb 5-1: Manufacturer: syz [ 121.767814][ T5789] usb 5-1: SerialNumber: syz [ 121.809787][ T5789] usb 5-1: config 0 descriptor?? [ 121.846600][ T6102] input: syz1 as /devices/virtual/input/input6 [ 121.898112][ T6103] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 122.001828][ T5789] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 122.001858][ T5789] usb 5-1: selecting invalid altsetting 1 [ 122.001870][ T5789] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 122.174214][ T5789] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.174669][ T5789] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 122.197690][ T5789] usb 5-1: media controller created [ 122.323692][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.340809][ T5270] veth1_macvtap: entered promiscuous mode [ 122.376178][ T5744] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.670645][ T5607] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 122.805278][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.844187][ T5744] usb 1-1: New USB device found: idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 122.882517][ T5744] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 122.882547][ T5744] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 122.882597][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.989340][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.443891][ T5744] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 123.671045][ T5789] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 123.757351][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.901173][ T5789] usb 5-1: USB disconnect, device number 3 [ 123.912213][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 123.930053][ T27] usb 2-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.934247][ T27] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.934276][ T27] usb 2-1: config 0 has no interface number 0 [ 123.934310][ T27] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.934331][ T27] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 123.934375][ T27] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.934399][ T27] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.934436][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.952117][ T5744] gspca_sn9c2028: read1 error -110 [ 123.960472][ T5744] gspca_sn9c2028: read1 error -32 [ 123.961226][ T5744] gspca_sn9c2028: read1 error -32 [ 123.961312][ T5744] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -32 [ 124.155091][ T27] usb 2-1: config 0 descriptor?? [ 124.170085][ T6123] FAULT_INJECTION: forcing a failure. [ 124.170085][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 124.170150][ T6123] CPU: 1 UID: 0 PID: 6123 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT(full) [ 124.170177][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.170192][ T6123] Call Trace: [ 124.170200][ T6123] [ 124.170218][ T6123] dump_stack_lvl+0xe8/0x150 [ 124.170250][ T6123] should_fail_ex+0x3eb/0x540 [ 124.170284][ T6123] should_failslab+0xa8/0x100 [ 124.170314][ T6123] __kmalloc_cache_noprof+0x9e/0x600 [ 124.170331][ T6123] ? bpf_xdp_link_attach+0x19c/0x990 [ 124.170357][ T6123] ? bpf_xdp_link_attach+0x19c/0x990 [ 124.170377][ T6123] bpf_xdp_link_attach+0x19c/0x990 [ 124.170400][ T6123] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 124.170434][ T6123] ? __fget_files+0x2a/0x420 [ 124.170452][ T6123] ? attach_type_to_prog_type+0x52/0x4d0 [ 124.170467][ T6123] ? bpf_prog_attach_check_attach_type+0x3b3/0x570 [ 124.170486][ T6123] link_create+0x4cb/0x850 [ 124.170505][ T6123] __sys_bpf+0xcba/0xe00 [ 124.170526][ T6123] ? __pfx___sys_bpf+0x10/0x10 [ 124.170544][ T6123] ? do_futex+0x3e7/0x4e0 [ 124.170582][ T6123] ? rcu_is_watching+0x16/0xb0 [ 124.170602][ T6123] __x64_sys_bpf+0xba/0xd0 [ 124.170620][ T6123] do_syscall_64+0x166/0x520 [ 124.170635][ T6123] ? trace_irq_disable+0x3b/0x140 [ 124.170649][ T6123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.170665][ T6123] ? clear_bhb_loop+0x70/0xc0 [ 124.170682][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.170698][ T6123] RIP: 0033:0x7fd9cfb9e159 [ 124.170716][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.170729][ T6123] RSP: 002b:00007fd9d0a9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.170746][ T6123] RAX: ffffffffffffffda RBX: 00007fd9cfe25fa0 RCX: 00007fd9cfb9e159 [ 124.170758][ T6123] RDX: 000000000000001c RSI: 0000200000000080 RDI: 000000000000001c [ 124.170768][ T6123] RBP: 00007fd9cfc3506b R08: 0000000000000000 R09: 0000000000000000 [ 124.170778][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.170787][ T6123] R13: 00007fd9cfe26038 R14: 00007fd9cfe25fa0 R15: 00007ffc3bfb5638 [ 124.170812][ T6123] [ 124.229860][ T5744] usb 1-1: USB disconnect, device number 2 [ 124.518526][ T27] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 124.560091][ T27] usb 2-1: USB disconnect, device number 2 [ 124.648917][ T27] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 125.219556][ T6135] loop1: detected capacity change from 0 to 32768 [ 125.236164][ T6135] (syz.1.99,6135,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.243251][ T6135] (syz.1.99,6135,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.311821][ T6135] JBD2: Ignoring recovery information on journal [ 125.363758][ T6135] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 125.812004][ T6157] FAULT_INJECTION: forcing a failure. [ 125.812004][ T6157] name fail_futex, interval 1, probability 0, space 0, times 1 [ 125.812042][ T6157] CPU: 0 UID: 0 PID: 6157 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(full) [ 125.812069][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.812082][ T6157] Call Trace: [ 125.812092][ T6157] [ 125.812102][ T6157] dump_stack_lvl+0xe8/0x150 [ 125.812135][ T6157] should_fail_ex+0x3eb/0x540 [ 125.812165][ T6157] get_futex_key+0x1b4/0x1580 [ 125.812188][ T6157] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 125.812238][ T6157] ? __pfx_get_futex_key+0x10/0x10 [ 125.812261][ T6157] ? finish_task_switch+0x40e/0xc60 [ 125.812283][ T6157] ? lockdep_hardirqs_on+0x7b/0x110 [ 125.812316][ T6157] futex_wake+0x119/0x5f0 [ 125.812345][ T6157] ? __pfx_futex_wake+0x10/0x10 [ 125.812385][ T6157] do_futex+0x458/0x4e0 [ 125.812412][ T6157] ? __pfx_do_futex+0x10/0x10 [ 125.812444][ T6157] __se_sys_futex+0x3a8/0x450 [ 125.812473][ T6157] ? __pfx___se_sys_futex+0x10/0x10 [ 125.812505][ T6157] ? __x64_sys_futex+0x21/0xf0 [ 125.812530][ T6157] do_syscall_64+0x166/0x520 [ 125.812551][ T6157] ? trace_irq_disable+0x3b/0x140 [ 125.812571][ T6157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.812594][ T6157] ? clear_bhb_loop+0x70/0xc0 [ 125.812619][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.812642][ T6157] RIP: 0033:0x7fd9cfb9e159 [ 125.812664][ T6157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.812683][ T6157] RSP: 002b:00007fd9d0a9e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.812707][ T6157] RAX: ffffffffffffffda RBX: 00007fd9cfe25fa8 RCX: 00007fd9cfb9e159 [ 125.812724][ T6157] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd9cfe25fac [ 125.812739][ T6157] RBP: 00007fd9cfe25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 125.812835][ T6157] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.812870][ T6157] R13: 00007fd9cfe26038 R14: 00007ffc3bfb5550 R15: 00007ffc3bfb5638 [ 125.812912][ T6157] [ 126.107952][ T5608] ocfs2: Unmounting device (7,1) on (node local) [ 126.744136][ T6174] loop1: detected capacity change from 0 to 1024 [ 127.108692][ T6179] FAULT_INJECTION: forcing a failure. [ 127.108692][ T6179] name failslab, interval 1, probability 0, space 0, times 0 [ 127.108733][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) [ 127.108762][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.108776][ T6179] Call Trace: [ 127.108785][ T6179] [ 127.108795][ T6179] dump_stack_lvl+0xe8/0x150 [ 127.108829][ T6179] should_fail_ex+0x3eb/0x540 [ 127.108860][ T6179] should_failslab+0xa8/0x100 [ 127.108887][ T6179] __kmalloc_cache_noprof+0x9e/0x600 [ 127.108912][ T6179] ? landlock_init_hierarchy_log+0x9e/0x5f0 [ 127.108935][ T6179] ? landlock_init_hierarchy_log+0x9e/0x5f0 [ 127.108967][ T6179] landlock_init_hierarchy_log+0x9e/0x5f0 [ 127.108995][ T6179] landlock_merge_ruleset+0x7cd/0xbc0 [ 127.109032][ T6179] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 127.109066][ T6179] do_syscall_64+0x166/0x520 [ 127.109087][ T6179] ? trace_irq_disable+0x3b/0x140 [ 127.109108][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.109133][ T6179] ? clear_bhb_loop+0x70/0xc0 [ 127.109158][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.109182][ T6179] RIP: 0033:0x7fe70899e159 [ 127.109205][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.109235][ T6179] RSP: 002b:00007fe70991f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 127.109261][ T6179] RAX: ffffffffffffffda RBX: 00007fe708c25fa0 RCX: 00007fe70899e159 [ 127.109279][ T6179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 127.109293][ T6179] RBP: 00007fe708a3506b R08: 0000000000000000 R09: 0000000000000000 [ 127.109308][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.109321][ T6179] R13: 00007fe708c26038 R14: 00007fe708c25fa0 R15: 00007ffe825d4888 [ 127.109359][ T6179] [ 127.811612][ T6186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.838678][ T6187] loop2: detected capacity change from 0 to 512 [ 127.916639][ T6168] loop3: detected capacity change from 0 to 32768 [ 128.047019][ T6187] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.108: Unimplemented hash flags: 0x0001 [ 128.047071][ T6187] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.108: Corrupt directory, running e2fsck is recommended [ 128.172290][ T6187] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 128.172410][ T6187] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.108: corrupted in-inode xattr: invalid ea_ino [ 128.172438][ T6187] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.176028][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.176054][ C1] EXT4-fs (loop2): initial error at time 1790964774: ext4_iget_extra_inode:5210: inode 15 [ 128.176089][ C1] EXT4-fs (loop2): last error at time 1790964774: ext4_iget_extra_inode:5210: inode 15 [ 128.277517][ T6187] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.108: couldn't read orphan inode 15 (err -117) [ 128.277565][ T6187] loop2: lost filesystem error report for type 5 error -117 [ 128.307603][ T6187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.328325][ T6168] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.104 (6168) [ 128.404773][ T6187] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.108: Unimplemented hash flags: 0x0001 [ 128.404807][ T6187] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.108: Corrupt directory, running e2fsck is recommended [ 128.442316][ T6187] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.108: Unimplemented hash flags: 0x0001 [ 128.442353][ T6187] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.108: Corrupt directory, running e2fsck is recommended [ 128.446258][ T6187] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.108: Unimplemented hash flags: 0x0001 [ 128.446288][ T6187] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.108: Corrupt directory, running e2fsck is recommended [ 128.448027][ T6187] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.108: Unimplemented hash flags: 0x0001 [ 128.448100][ T6187] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.108: Corrupt directory, running e2fsck is recommended [ 128.535237][ T6187] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.108: Unimplemented hash flags: 0x0001 [ 128.535280][ T6187] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.108: Corrupt directory, running e2fsck is recommended [ 128.554878][ T6190] EXT4-fs error (device loop2): ext4_empty_dir:3093: inode #2: block 3: comm syz.2.108: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 128.824210][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.879976][ T6168] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 128.880032][ T6168] BTRFS info (device loop3): using blake2b checksum algorithm [ 129.039390][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.256719][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 129.259739][ T27] usb 5-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 129.345864][ T27] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 129.489031][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.489077][ T27] usb 5-1: Product: syz [ 129.489133][ T27] usb 5-1: Manufacturer: syz [ 129.489188][ T27] usb 5-1: SerialNumber: syz [ 130.310851][ T27] r8152-cfgselector 5-1: Unknown version 0x0000 [ 130.311019][ T27] r8152-cfgselector 5-1: config 0 descriptor?? [ 130.813195][ T6192] loop4: detected capacity change from 0 to 1024 [ 130.849916][ T6192] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 130.850017][ T6192] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.861250][ T6192] EXT4-fs (loop4): invalid journal inode [ 130.861574][ T6192] EXT4-fs (loop4): can't get journal size [ 130.932063][ T6192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.075494][ T6192] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 64: comm syz.4.110: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 131.146317][ T6168] BTRFS error (device loop3): open_ctree failed: -EINTR [ 131.221100][ T6192] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 73: comm syz.4.110: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=83886080, rec_len=1024, size=1024 fake=0 [ 131.258075][ T27] r8152-cfgselector 5-1: Unknown version 0x0000 [ 131.258804][ T27] r8152-cfgselector 5-1: No union descriptors [ 131.282502][ T27] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 131.424368][ T6231] Illegal XDP return value 4294967294 on prog (id 9) dev syz_tun, expect packet loss! [ 131.685384][ T6233] FAULT_INJECTION: forcing a failure. [ 131.685384][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 131.693554][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 131.693587][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.693601][ T6233] Call Trace: [ 131.693611][ T6233] [ 131.693621][ T6233] dump_stack_lvl+0xe8/0x150 [ 131.693659][ T6233] should_fail_ex+0x3eb/0x540 [ 131.693691][ T6233] should_failslab+0xa8/0x100 [ 131.693718][ T6233] __kmalloc_cache_noprof+0x9e/0x600 [ 131.693742][ T6233] ? rcu_is_watching+0x16/0xb0 [ 131.693763][ T6233] ? md_alloc+0x9c/0xf20 [ 131.693783][ T6233] ? md_alloc+0x9c/0xf20 [ 131.693812][ T6233] md_alloc+0x9c/0xf20 [ 131.693848][ T6233] md_alloc_and_put+0x1a/0x1f0 [ 131.693882][ T6233] add_named_array+0x240/0x350 [ 131.693906][ T6233] ? __pfx___mutex_lock+0x10/0x10 [ 131.693932][ T6233] ? __pfx_add_named_array+0x10/0x10 [ 131.693958][ T6233] ? sysfs_file_kobj+0x1a/0x230 [ 131.693995][ T6233] param_attr_store+0x214/0x310 [ 131.694021][ T6233] ? __pfx_param_attr_store+0x10/0x10 [ 131.694043][ T6233] ? __pfx_sysfs_kf_write+0x10/0x10 [ 131.694064][ T6233] module_attr_store+0x65/0x90 [ 131.694089][ T6233] kernfs_fop_write_iter+0x3a4/0x540 [ 131.694144][ T6233] vfs_write+0x612/0xba0 [ 131.694179][ T6233] ? __pfx_vfs_write+0x10/0x10 [ 131.694208][ T6233] ? __fget_files+0x3a2/0x420 [ 131.694230][ T6233] ? __fget_files+0x2a/0x420 [ 131.694256][ T6233] ? fdget+0x1ac/0x250 [ 131.694285][ T6233] ksys_write+0x150/0x270 [ 131.694310][ T6233] ? __pfx_ksys_write+0x10/0x10 [ 131.694349][ T6233] do_syscall_64+0x166/0x520 [ 131.694371][ T6233] ? trace_irq_disable+0x3b/0x140 [ 131.694392][ T6233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.694417][ T6233] ? clear_bhb_loop+0x70/0xc0 [ 131.694446][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.694470][ T6233] RIP: 0033:0x7fd9cfb9e159 [ 131.694494][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.694513][ T6233] RSP: 002b:00007fd9d0a9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.694538][ T6233] RAX: ffffffffffffffda RBX: 00007fd9cfe25fa0 RCX: 00007fd9cfb9e159 [ 131.694555][ T6233] RDX: 0000000000000003 RSI: 0000200000000280 RDI: 0000000000000003 [ 131.694570][ T6233] RBP: 00007fd9cfc3506b R08: 0000000000000000 R09: 0000000000000000 [ 131.694584][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.694598][ T6233] R13: 00007fd9cfe26038 R14: 00007fd9cfe25fa0 R15: 00007ffc3bfb5638 [ 131.694638][ T6233] [ 132.031791][ T6233] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.205661][ T5729] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.287493][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.375361][ T5729] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.449931][ T9] usb 2-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 132.453481][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.453519][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.489829][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.489913][ T9] usb 2-1: Product: syz [ 132.489954][ T9] usb 2-1: Manufacturer: syz [ 132.559299][ T9] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 132.836612][ T5736] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.987253][ T5736] usb 3-1: New USB device found: idVendor=0af0, idProduct=6711, bcdDevice=0.00 [ 132.990194][ T5736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.990250][ T5736] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.992360][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.992389][ T5736] usb 3-1: Product: syz [ 132.992406][ T5736] usb 3-1: Manufacturer: syz [ 133.073933][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.076676][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.129037][ T5736] hso 3-1:1.0: Can't find INT IN endpoint [ 133.147549][ T6263] FAULT_INJECTION: forcing a failure. [ 133.147549][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 133.147583][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.4.128 Not tainted syzkaller #0 PREEMPT(full) [ 133.147609][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.147627][ T6263] Call Trace: [ 133.147636][ T6263] [ 133.147645][ T6263] dump_stack_lvl+0xe8/0x150 [ 133.147677][ T6263] should_fail_ex+0x3eb/0x540 [ 133.147708][ T6263] should_failslab+0xa8/0x100 [ 133.147734][ T6263] __kmalloc_noprof+0xf9/0x710 [ 133.147758][ T6263] ? __kmalloc_noprof+0x1a6/0x710 [ 133.147779][ T6263] ? vhost_dev_set_owner+0x316/0xb00 [ 133.147800][ T6263] ? vhost_dev_set_owner+0x316/0xb00 [ 133.147830][ T6263] vhost_dev_set_owner+0x316/0xb00 [ 133.147870][ T6263] vhost_dev_ioctl+0xcf/0x11f0 [ 133.147895][ T6263] ? vhost_vsock_dev_ioctl+0x245/0xfc0 [ 133.147923][ T6263] ? __pfx___mutex_lock+0x10/0x10 [ 133.147950][ T6263] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 133.147988][ T6263] vhost_vsock_dev_ioctl+0x253/0xfc0 [ 133.148016][ T6263] ? __fget_files+0x2a/0x420 [ 133.148039][ T6263] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 133.148064][ T6263] ? __fget_files+0x2a/0x420 [ 133.148085][ T6263] ? __fget_files+0x2a/0x420 [ 133.148123][ T6263] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.148147][ T6263] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 133.148172][ T6263] __se_sys_ioctl+0xfc/0x170 [ 133.148199][ T6263] do_syscall_64+0x166/0x520 [ 133.148221][ T6263] ? trace_irq_disable+0x3b/0x140 [ 133.148242][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.148274][ T6263] ? clear_bhb_loop+0x70/0xc0 [ 133.148300][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.148323][ T6263] RIP: 0033:0x7ff4bed9e159 [ 133.148346][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.148373][ T6263] RSP: 002b:00007ff4bfced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.148399][ T6263] RAX: ffffffffffffffda RBX: 00007ff4bf025fa0 RCX: 00007ff4bed9e159 [ 133.148417][ T6263] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 133.148431][ T6263] RBP: 00007ff4bee3506b R08: 0000000000000000 R09: 0000000000000000 [ 133.148445][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.148459][ T6263] R13: 00007ff4bf026038 R14: 00007ff4bf025fa0 R15: 00007ffe68555628 [ 133.148497][ T6263] [ 133.197978][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.439529][ T27] usb 4-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 133.460544][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.460589][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.460637][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.502322][ T27] usb 4-1: config 0 descriptor?? [ 133.638455][ T5736] usb 3-1: USB disconnect, device number 4 [ 133.930819][ T27] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 133.930861][ T27] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 133.930890][ T27] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 133.930918][ T27] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 133.930947][ T27] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 133.930976][ T27] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 133.931005][ T27] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 134.002035][ T27] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 134.127187][ T27] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 134.492367][ T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 134.556319][ T9] usb 2-1: USB disconnect, device number 3 [ 134.621037][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 134.676138][ T9] mos7840 2-1:1.0: device disconnected [ 134.960250][ T27] cp2112 0003:10C4:EA90.0003: error reading lock byte: -32 [ 134.961109][ T6261] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 134.996079][ T9] usb 4-1: USB disconnect, device number 6 [ 135.323571][ T6283] FAULT_INJECTION: forcing a failure. [ 135.323571][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 135.323600][ T6283] CPU: 0 UID: 0 PID: 6283 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT(full) [ 135.323618][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.323627][ T6283] Call Trace: [ 135.323633][ T6283] [ 135.323640][ T6283] dump_stack_lvl+0xe8/0x150 [ 135.323662][ T6283] should_fail_ex+0x3eb/0x540 [ 135.323683][ T6283] should_failslab+0xa8/0x100 [ 135.323701][ T6283] __kmalloc_noprof+0xf9/0x710 [ 135.323716][ T6283] ? d_path+0x3f8/0x530 [ 135.323731][ T6283] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 135.323746][ T6283] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 135.323768][ T6283] landlock_init_hierarchy_log+0x16c/0x5f0 [ 135.323787][ T6283] landlock_merge_ruleset+0x7cd/0xbc0 [ 135.323812][ T6283] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 135.323836][ T6283] do_syscall_64+0x166/0x520 [ 135.323850][ T6283] ? trace_irq_disable+0x3b/0x140 [ 135.323865][ T6283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.323881][ T6283] ? clear_bhb_loop+0x70/0xc0 [ 135.323899][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.323915][ T6283] RIP: 0033:0x7fbc8e59e159 [ 135.323930][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.323944][ T6283] RSP: 002b:00007fbc8c7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 135.323962][ T6283] RAX: ffffffffffffffda RBX: 00007fbc8e825fa0 RCX: 00007fbc8e59e159 [ 135.323974][ T6283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 135.323983][ T6283] RBP: 00007fbc8e63506b R08: 0000000000000000 R09: 0000000000000000 [ 135.323993][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.324003][ T6283] R13: 00007fbc8e826038 R14: 00007fbc8e825fa0 R15: 00007ffd081b8a18 [ 135.324061][ T6283] [ 135.539085][ T5616] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.698433][ T5616] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 135.705874][ T5616] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.705912][ T5616] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.705932][ T5616] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.706140][ T5616] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.755277][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.755367][ T5616] usb 2-1: Product: syz [ 135.755396][ T5616] usb 2-1: Manufacturer: syz [ 135.814204][ T5616] cdc_wdm 2-1:1.0: skipping garbage [ 135.814222][ T5616] cdc_wdm 2-1:1.0: skipping garbage [ 135.834476][ T27] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.915778][ T27] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.927193][ T5616] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 135.927227][ T5616] cdc_wdm 2-1:1.0: Unknown control protocol [ 136.121435][ T5616] usb 2-1: USB disconnect, device number 4 [ 136.546454][ T6295] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 136.637641][ T5616] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.788884][ T5616] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 136.791564][ T5616] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.791801][ T5616] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.791973][ T5616] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.793071][ T5616] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.949739][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.043033][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.043085][ T5616] usb 2-1: Product: syz [ 137.043142][ T5616] usb 2-1: Manufacturer: syz [ 137.189064][ T27] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 137.260542][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.261130][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.450427][ T5616] cdc_wdm 2-1:1.0: skipping garbage [ 137.450445][ T5616] cdc_wdm 2-1:1.0: skipping garbage [ 137.622869][ T27] usb 4-1: config 0 descriptor?? [ 137.931638][ T5616] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 137.988272][ T5616] cdc_wdm 2-1:1.0: Unknown control protocol [ 138.323070][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 138.323199][ T27] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 138.690895][ T27] usb 4-1: USB disconnect, device number 7 [ 139.047285][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.196809][ T27] usb 4-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 139.198190][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.198250][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.250063][ T27] usb 4-1: config 0 descriptor?? [ 139.901392][ T5789] usb 2-1: USB disconnect, device number 5 [ 139.940747][ T6337] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 140.070517][ T27] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 140.105326][ T27] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 140.117911][ T6321] loop2: detected capacity change from 0 to 32768 [ 140.269309][ T6321] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 140.269335][ T6321] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 140.589460][ T5743] usb 4-1: USB disconnect, device number 8 [ 140.589520][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 140.710000][ T6321] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 140.799005][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 140.799030][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 141.338275][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 539ms [ 141.422874][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 141.435324][ T6321] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 141.543407][ T6365] loop3: detected capacity change from 0 to 512 [ 141.651259][ T6365] EXT4-fs (loop3): 1 truncate cleaned up [ 141.722921][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.920867][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.559464][ T6390] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 144.559545][ T6390] bond1: entered allmulticast mode [ 144.669470][ T6392] bridge1: entered promiscuous mode [ 144.688769][ T6392] bridge1: entered allmulticast mode [ 144.691389][ T6392] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 145.748198][ T6412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.756075][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.908852][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 145.913340][ T27] usb 1-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 145.915057][ T27] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.915092][ T27] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.915120][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.915155][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.017162][ T6421] syzkaller0: entered promiscuous mode [ 146.017190][ T6421] syzkaller0: entered allmulticast mode [ 146.034724][ T27] usb 1-1: config 0 descriptor?? [ 146.304438][ T6408] loop0: detected capacity change from 0 to 164 [ 146.423663][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 146.423884][ T27] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 146.442343][ T27] usb 1-1: USB disconnect, device number 3 [ 146.457738][ T6423] kvm [6422]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x60000000800 [ 146.457905][ T6423] kvm [6422]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x60000000800 [ 146.523448][ T6423] kvm [6422]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x60000001800 [ 146.574671][ T6423] kvm [6422]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x60000002000 [ 146.574810][ T6423] kvm [6422]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x60000004800 [ 146.719266][ T6427] lo: entered promiscuous mode [ 146.887387][ T6427] tunl0: entered promiscuous mode [ 146.895189][ T6427] gre0: entered promiscuous mode [ 146.979990][ T6427] gretap0: entered promiscuous mode [ 147.038092][ T6427] erspan0: entered promiscuous mode [ 147.085368][ T6427] ip_vti0: entered promiscuous mode [ 147.104100][ T6427] ip6_vti0: entered promiscuous mode [ 147.133386][ T6427] sit0: entered promiscuous mode [ 147.163098][ T6427] ip6tnl0: entered promiscuous mode [ 147.248736][ T6427] ip6gre0: entered promiscuous mode [ 147.321041][ T6427] syz_tun: entered promiscuous mode [ 147.363537][ T6427] ip6gretap0: entered promiscuous mode [ 147.384012][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.385247][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.405040][ T6427] bridge0: entered promiscuous mode [ 147.426459][ T6427] vcan0: entered promiscuous mode [ 147.442442][ T6427] bond0: entered promiscuous mode [ 147.442471][ T6427] bond_slave_0: entered promiscuous mode [ 147.442801][ T6427] bond_slave_1: entered promiscuous mode [ 147.474320][ T6427] team0: entered promiscuous mode [ 147.474347][ T6427] team_slave_0: entered promiscuous mode [ 147.474703][ T6427] team_slave_1: entered promiscuous mode [ 147.500232][ T6427] dummy0: entered promiscuous mode [ 147.505906][ T6427] nlmon0: entered promiscuous mode [ 147.530064][ T6427] batadv0: entered promiscuous mode [ 147.535835][ T6427] vxcan0: entered promiscuous mode [ 147.552718][ T6427] vxcan1: entered promiscuous mode [ 147.563045][ T6427] veth0: entered promiscuous mode [ 147.580995][ T6427] veth1: entered promiscuous mode [ 147.621848][ T6427] wg0: entered promiscuous mode [ 147.621943][ T6418] loop1: detected capacity change from 0 to 32768 [ 147.708496][ T6427] wg1: entered promiscuous mode [ 147.716708][ T6427] wg2: entered promiscuous mode [ 147.738263][ T6427] veth0_to_bridge: entered promiscuous mode [ 147.780824][ T6418] BTRFS warning: excessive commit interval 3911, use with care [ 147.805884][ T6427] veth1_to_bridge: entered promiscuous mode [ 147.813766][ T6418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.169 (6418) [ 147.890426][ T6427] veth0_to_bond: entered promiscuous mode [ 147.937002][ T6427] veth1_to_bond: entered promiscuous mode [ 147.940615][ T6427] veth0_to_team: entered promiscuous mode [ 147.945804][ T6427] veth1_to_team: entered promiscuous mode [ 147.976487][ T6427] veth0_to_batadv: entered promiscuous mode [ 147.979394][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.979459][ T6427] batadv_slave_0: entered promiscuous mode [ 148.019064][ T6427] veth1_to_batadv: entered promiscuous mode [ 148.046754][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.046820][ T6427] batadv_slave_1: entered promiscuous mode [ 148.056818][ T6427] xfrm0: entered promiscuous mode [ 148.460746][ T6427] veth0_to_hsr: entered promiscuous mode [ 148.749502][ T6427] veth1_to_hsr: entered promiscuous mode [ 149.230183][ T6427] hsr0: entered promiscuous mode [ 149.256641][ T6418] BTRFS error (device loop1): open_ctree failed: -EINTR [ 149.384404][ T6427] veth1_virt_wifi: entered promiscuous mode [ 149.561265][ T6427] veth0_virt_wifi: entered promiscuous mode [ 149.606467][ T6427] virt_wifi0: entered promiscuous mode [ 149.672108][ T6427] vlan0: entered promiscuous mode [ 149.692386][ T6427] vlan1: entered promiscuous mode [ 149.741798][ T6427] macvlan0: entered promiscuous mode [ 149.807707][ T6427] macvlan1: entered promiscuous mode [ 149.809920][ T6459] FAULT_INJECTION: forcing a failure. [ 149.809920][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 149.809958][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 149.809985][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.810000][ T6459] Call Trace: [ 149.810009][ T6459] [ 149.810019][ T6459] dump_stack_lvl+0xe8/0x150 [ 149.810053][ T6459] should_fail_ex+0x3eb/0x540 [ 149.810084][ T6459] should_failslab+0xa8/0x100 [ 149.810111][ T6459] __kmalloc_cache_noprof+0x9e/0x600 [ 149.810133][ T6459] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.810158][ T6459] ? wakeup_source_register+0x57/0x380 [ 149.810179][ T6459] ? wakeup_source_register+0x57/0x380 [ 149.810210][ T6459] wakeup_source_register+0x57/0x380 [ 149.810236][ T6459] ep_insert+0xfaf/0x1af0 [ 149.810273][ T6459] ? __pfx_ep_insert+0x10/0x10 [ 149.810309][ T6459] ? bpf_lsm_capable+0x9/0x20 [ 149.810330][ T6459] ? security_capable+0x7e/0x2c0 [ 149.810360][ T6459] do_epoll_ctl_file+0x8c2/0xee0 [ 149.810393][ T6459] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 149.810421][ T6459] ? __fget_files+0x3a2/0x420 [ 149.810441][ T6459] ? __fget_files+0x2a/0x420 [ 149.810467][ T6459] ? fdget+0x1ac/0x250 [ 149.810504][ T6459] __se_sys_epoll_ctl+0x162/0x230 [ 149.810531][ T6459] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 149.810568][ T6459] do_syscall_64+0x166/0x520 [ 149.810590][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.810614][ T6459] ? clear_bhb_loop+0x70/0xc0 [ 149.810638][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.810661][ T6459] RIP: 0033:0x7fd9cfb9e159 [ 149.810683][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.810705][ T6459] RSP: 002b:00007fd9d0a9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 149.810731][ T6459] RAX: ffffffffffffffda RBX: 00007fd9cfe25fa0 RCX: 00007fd9cfb9e159 [ 149.810748][ T6459] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 149.810762][ T6459] RBP: 00007fd9cfc3506b R08: 0000000000000000 R09: 0000000000000000 [ 149.810777][ T6459] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 149.810792][ T6459] R13: 00007fd9cfe26038 R14: 00007fd9cfe25fa0 R15: 00007ffc3bfb5638 [ 149.810828][ T6459] [ 149.909022][ T6427] ipvlan0: entered promiscuous mode [ 149.925609][ T6427] ipvlan1: entered promiscuous mode [ 150.173944][ T6427] macvtap0: entered promiscuous mode [ 150.201602][ T6427] macsec0: entered promiscuous mode [ 150.222793][ T6427] geneve0: entered promiscuous mode [ 150.260298][ T6427] geneve1: entered promiscuous mode [ 150.301713][ T6427] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 150.374259][ T6427] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 150.393961][ T6427] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 150.412615][ T6427] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 150.473539][ T6427] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 150.548836][ T6427] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 150.611778][ T39] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.618756][ T6146] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.618923][ T6146] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.619043][ T6146] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.837536][ T6476] loop3: detected capacity change from 0 to 128 [ 150.883352][ T6478] syz.4.182 uses obsolete (PF_INET,SOCK_PACKET) [ 150.912434][ T6476] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.912496][ T6476] hpfs: filesystem error: improperly stopped [ 150.912512][ T6476] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.912527][ T6476] hpfs: You really don't want any checks? You are crazy... [ 150.912539][ T6476] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 150.912552][ T6476] hpfs: code page support is disabled [ 150.912690][ T6476] hpfs: hpfs_map_4sectors(): unaligned read [ 150.949846][ T6476] hpfs: hpfs_map_4sectors(): unaligned read [ 150.949906][ T6476] hpfs: filesystem error: unable to find root dir [ 152.428527][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 152.704255][ T6529] loop2: detected capacity change from 0 to 128 [ 152.757793][ T6529] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.784250][ T6529] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.953855][ T6529] syz.2.192 (pid 6529) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 153.305074][ T6529] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 153.443495][ T6542] syzkaller1: entered promiscuous mode [ 153.443523][ T6542] syzkaller1: entered allmulticast mode [ 153.527806][ T5607] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.115320][ T6526] loop0: detected capacity change from 0 to 40427 [ 154.217133][ T6526] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 154.217164][ T6526] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 154.218240][ T6565] 0: reclassify loop, rule prio 0, protocol 03 [ 154.934403][ T6526] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.003414][ T6526] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 155.025124][ T6526] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.096207][ T6526] syz.0.191: attempt to access beyond end of device [ 155.096207][ T6526] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.597357][ T6462] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 155.749668][ T6462] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.751832][ T6462] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.751860][ T6462] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.751879][ T6462] usb 3-1: config 0 has no interface number 0 [ 155.751916][ T6462] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.751956][ T6462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.831789][ T6462] usb 3-1: config 0 descriptor?? [ 155.873385][ T6462] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 156.258688][ T6462] usb 3-1: USB disconnect, device number 5 [ 157.717730][ T6598] syz_tun: entered allmulticast mode [ 159.990064][ T6618] loop2: detected capacity change from 0 to 1024 [ 160.895021][ T6618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.343238][ T6635] kvm: pic: non byte read [ 161.343555][ T6635] kvm: pic: level sensitive irq not supported [ 161.343632][ T6635] kvm: pic: non byte read [ 161.343800][ T6635] kvm: pic: level sensitive irq not supported [ 161.343866][ T6635] kvm: pic: non byte read [ 161.453782][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.595412][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 161.595566][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.640092][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.876057][ T6431] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.026842][ T6431] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 162.030987][ T6431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.168565][ T5617] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 162.168901][ T5617] Bluetooth: hci0: command 0x0c3a tx timeout [ 162.308945][ T6658] FAULT_INJECTION: forcing a failure. [ 162.308945][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.308990][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.4.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.309022][ T6658] Tainted: [L]=SOFTLOCKUP [ 162.309032][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.309044][ T6658] Call Trace: [ 162.309054][ T6658] [ 162.309066][ T6658] dump_stack_lvl+0xe8/0x150 [ 162.309099][ T6658] should_fail_ex+0x3eb/0x540 [ 162.309130][ T6658] set_fd_set+0x3a/0xa0 [ 162.309155][ T6658] core_sys_select+0x9c1/0xb40 [ 162.309195][ T6658] ? __pfx_core_sys_select+0x10/0x10 [ 162.309244][ T6658] ? __pfx_set_user_sigmask+0x10/0x10 [ 162.309280][ T6658] __se_sys_pselect6+0x267/0x320 [ 162.309310][ T6658] ? __pfx___se_sys_pselect6+0x10/0x10 [ 162.309342][ T6658] ? __x64_sys_pselect6+0x21/0xf0 [ 162.309368][ T6658] do_syscall_64+0x166/0x520 [ 162.309390][ T6658] ? trace_irq_disable+0x3b/0x140 [ 162.309410][ T6658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.309433][ T6658] ? clear_bhb_loop+0x70/0xc0 [ 162.309459][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.309482][ T6658] RIP: 0033:0x7ff4bed9e159 [ 162.309504][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.309525][ T6658] RSP: 002b:00007ff4bfced028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 162.309560][ T6658] RAX: ffffffffffffffda RBX: 00007ff4bf025fa0 RCX: 00007ff4bed9e159 [ 162.309578][ T6658] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.309593][ T6658] RBP: 00007ff4bee3506b R08: 0000200000000280 R09: 0000200000000300 [ 162.309613][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.309627][ T6658] R13: 00007ff4bf026038 R14: 00007ff4bf025fa0 R15: 00007ffe68555628 [ 162.309664][ T6658] [ 163.164723][ T6431] usb 4-1: ATUSB: AT86RF231 version 1 [ 163.352729][ T6668] [ 163.355686][ T6668] ====================================================== [ 163.365363][ T6668] WARNING: possible circular locking dependency detected [ 163.374377][ T6668] syzkaller #0 Tainted: G L [ 163.381509][ T6668] ------------------------------------------------------ [ 163.389761][ T6668] syz.4.229/6668 is trying to acquire lock: [ 163.397542][ T6668] ffff8880338dcba8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 163.409502][ T6668] [ 163.409502][ T6668] but task is already holding lock: [ 163.419720][ T6668] ffff888023a16920 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 163.432330][ T6668] [ 163.432330][ T6668] which lock already depends on the new lock. [ 163.432330][ T6668] [ 163.447643][ T6668] [ 163.447643][ T6668] the existing dependency chain (in reverse order) is: [ 163.458412][ T6668] [ 163.458412][ T6668] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 163.470964][ T6668] __d_alloc_parallel+0xc32/0x1700 [ 163.477349][ T6668] __lookup_slow+0x82/0x2f0 [ 163.483756][ T6668] lookup_slow+0x59/0x80 [ 163.489667][ T6668] link_path_walk+0xd22/0x1910 [ 163.497983][ T6668] path_openat+0x1c4/0x1da0 [ 163.505681][ T6668] do_file_open+0x23e/0x4a0 [ 163.512845][ T6668] do_sys_openat2+0x115/0x200 [ 163.520881][ T6668] __x64_sys_openat+0x138/0x170 [ 163.527110][ T6668] do_syscall_64+0x166/0x520 [ 163.534822][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.542739][ T6668] [ 163.542739][ T6668] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 163.553307][ T6668] __lock_acquire+0x164c/0x2de0 [ 163.560699][ T6668] lock_acquire+0x115/0x350 [ 163.571113][ T6668] down_read+0x45/0x320 [ 163.577379][ T6668] lookup_slow+0x46/0x80 [ 163.582809][ T6668] ovl_lookup_single+0x323/0xe90 [ 163.590268][ T6668] ovl_lookup_layer+0x377/0x440 [ 163.597840][ T6668] ovl_lookup+0x5e5/0x1c80 [ 163.605616][ T6668] lookup_open+0x94b/0x1970 [ 163.612716][ T6668] path_openat+0x673/0x1da0 [ 163.620180][ T6668] do_file_open+0x23e/0x4a0 [ 163.627126][ T6668] do_sys_openat2+0x115/0x200 [ 163.632827][ T6668] __x64_sys_openat+0x138/0x170 [ 163.639700][ T6668] do_syscall_64+0x166/0x520 [ 163.645747][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.654464][ T6668] [ 163.654464][ T6668] other info that might help us debug this: [ 163.654464][ T6668] [ 163.671906][ T6668] Possible unsafe locking scenario: [ 163.671906][ T6668] [ 163.681719][ T6668] CPU0 CPU1 [ 163.688693][ T6668] ---- ---- [ 163.695788][ T6668] lock(DCACHE_PAR_LOOKUP); [ 163.701845][ T6668] lock(&type->i_mutex_dir_key#5); [ 163.713959][ T6668] lock(DCACHE_PAR_LOOKUP); [ 163.722814][ T6668] rlock(&type->i_mutex_dir_key#5); [ 163.733614][ T6668] [ 163.733614][ T6668] *** DEADLOCK *** [ 163.733614][ T6668] [ 163.743899][ T6668] locks held by syz.4.229/6668: 3, last CPU#1: [ 163.750370][ T6668] #0: ffff88801d3f8460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 163.761952][ T6668] #1: ffff888058df2d20 (&ovl_i_mutex_dir_key[depth]#2){+.+.}-{4:4}, at: lookup_open+0x246/0x1970 [ 163.775149][ T6668] #2: ffff888023a16920 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 163.790062][ T6668] [ 163.790062][ T6668] stack backtrace: [ 163.796306][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.4.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.810582][ T6668] Tainted: [L]=SOFTLOCKUP [ 163.815928][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.829224][ T6668] Call Trace: [ 163.833416][ T6668] [ 163.836761][ T6668] dump_stack_lvl+0xe8/0x150 [ 163.843558][ T6668] print_circular_bug+0x2e2/0x300 [ 163.849745][ T6668] check_noncircular+0x12f/0x150 [ 163.856513][ T6668] __lock_acquire+0x164c/0x2de0 [ 163.863949][ T6668] ? lock_acquire+0x115/0x350 [ 163.869469][ T6668] lock_acquire+0x115/0x350 [ 163.875156][ T6668] ? lookup_slow+0x46/0x80 [ 163.882037][ T6668] down_read+0x45/0x320 [ 163.886483][ T6668] ? lookup_slow+0x46/0x80 [ 163.893288][ T6668] ? d_lookup+0x8a/0xa0 [ 163.898546][ T6668] lookup_slow+0x46/0x80 [ 163.903787][ T6668] ovl_lookup_single+0x323/0xe90 [ 163.910723][ T6668] ? __pfx_ovl_lookup_single+0x10/0x10 [ 163.917949][ T6668] ? tomoyo_path_number_perm+0x219/0x5f0 [ 163.925801][ T6668] ? tomoyo_path_number_perm+0x219/0x5f0 [ 163.931783][ T6668] ovl_lookup_layer+0x377/0x440 [ 163.938060][ T6668] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.945526][ T6668] ovl_lookup+0x5e5/0x1c80 [ 163.951512][ T6668] ? make_vfsuid+0x49/0xa0 [ 163.956625][ T6668] ? __pfx_ovl_lookup+0x10/0x10 [ 163.963602][ T6668] ? ovl_permission+0x187/0x300 [ 163.968792][ T6668] ? __pfx_ovl_permission+0x10/0x10 [ 163.974849][ T6668] ? from_kgid+0x1c6/0x660 [ 163.980525][ T6668] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 163.986494][ T6668] ? __pfx_from_kgid+0x10/0x10 [ 163.991928][ T6668] ? inode_permission+0x2b8/0x600 [ 163.998819][ T6668] ? bpf_lsm_inode_create+0x9/0x20 [ 164.004256][ T6668] ? security_inode_create+0xc3/0x340 [ 164.010409][ T6668] lookup_open+0x94b/0x1970 [ 164.015228][ T6668] path_openat+0x673/0x1da0 [ 164.019897][ T6668] do_file_open+0x23e/0x4a0 [ 164.026901][ T6668] ? __pfx_do_file_open+0x10/0x10 [ 164.032992][ T6668] ? _raw_spin_unlock+0x28/0x50 [ 164.038840][ T6668] ? alloc_fd+0x6af/0x760 [ 164.044391][ T6668] do_sys_openat2+0x115/0x200 [ 164.050661][ T6668] ? __se_sys_futex+0x3a8/0x450 [ 164.056281][ T6668] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.064017][ T6668] ? rcu_is_watching+0x16/0xb0 [ 164.070427][ T6668] __x64_sys_openat+0x138/0x170 [ 164.075835][ T6668] do_syscall_64+0x166/0x520 [ 164.085012][ T6668] ? trace_irq_disable+0x3b/0x140 [ 164.091747][ T6668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.100167][ T6668] ? clear_bhb_loop+0x70/0xc0 [ 164.105391][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.112765][ T6668] RIP: 0033:0x7ff4bed9e159 [ 164.118642][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.141615][ T6668] RSP: 002b:00007ff4bfced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.150831][ T6668] RAX: ffffffffffffffda RBX: 00007ff4bf025fa0 RCX: 00007ff4bed9e159 [ 164.159757][ T6668] RDX: 00000000001cb842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 164.168951][ T6668] RBP: 00007ff4bee3506b R08: 0000000000000000 R09: 0000000000000000 [ 164.177793][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.187993][ T6668] R13: 00007ff4bf026038 R14: 00007ff4bf025fa0 R15: 00007ffe68555628 [ 164.198134][ T6668] [ 164.207777][ T6431] usb 4-1: Firmware version (0.0) predates our first public release. [ 164.207805][ T6431] usb 4-1: Please update to version 0.2 or newer [ 164.299960][ T6431] usb 4-1: USB disconnect, device number 9