last executing test programs: 12.437805585s ago: executing program 1 (id=26): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xfffffffa, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0x2) 11.859534262s ago: executing program 1 (id=29): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) read$char_usb(r2, &(0x7f0000000180)=""/4096, 0x1000) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x103) 11.441110079s ago: executing program 1 (id=32): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 9.4128809s ago: executing program 1 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x58000, 0x41000, 0x8, 0x9, 0x3, 0x5, 0x40, 0x3, 0x0, 0x30, 0x19, 0xfd}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x8, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xddde6000, 0xf000, 0x3, 0xa, 0x4, 0x43, 0x9, 0x10, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf, 0x82}, {0x0, 0xeeee8000, 0xa, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x2, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x5000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) 8.218413448s ago: executing program 1 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x8400, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8.07098097s ago: executing program 1 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', &(0x7f0000000300)=@raw={0x80, 0x0, {'\x00'}}, &(0x7f0000000400), 0x0) 4.67904811s ago: executing program 2 (id=77): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400), 0x8) 4.644078934s ago: executing program 0 (id=78): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r1, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x10}}], 0x10, 0x20000000}}], 0x1, 0x4018080) 4.513041901s ago: executing program 2 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x3, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 4.220410295s ago: executing program 2 (id=81): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000e00)=0x0) write$binfmt_misc(r0, &(0x7f0000000100)='>', 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 3.713350247s ago: executing program 3 (id=83): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xfe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 3.691741449s ago: executing program 4 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) timer_settime(0x0, 0x0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@generic={0x13, 0x12, "d5226ece9085b75ccf4bf7b00aa21f73"}]}}}}}}}}, 0x0) 3.632594988s ago: executing program 2 (id=85): io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, 0x0, 0x1) socket(0x28, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) close(0xffffffffffffffff) 3.388509199s ago: executing program 3 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x19c) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7, 0x1}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 3.387916092s ago: executing program 4 (id=87): r0 = socket$inet6(0xa, 0x80002, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80802, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 3.350799446s ago: executing program 0 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 3.234656719s ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.174811599s ago: executing program 4 (id=90): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 3.048046224s ago: executing program 0 (id=91): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2.798180001s ago: executing program 3 (id=92): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='.\x00', 0x129583b, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32, @ANYRESDEC=r1, @ANYRESHEX], 0x4, 0x0, &(0x7f0000000000)) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x20960b1, 0x0) 2.736459986s ago: executing program 4 (id=93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="4182aa3d71291629373dd3fe0a0c84d8749982e09860b6496c3b2a2c0a62f12873b7f0", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002140)="e51e84d5ae769a5d88e1d9381c4754096bacfa1e43bdbf5059c898647bbeab8a44963d", 0x23}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 2.537997871s ago: executing program 0 (id=94): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)) 2.277325214s ago: executing program 3 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x10000, 0x7fffffff, 0x8, 0x400, 0x0, [{0x2, 0xe6, 0xe, '\x00', 0xe0}, {0xfa, 0x5, 0x40, '\x00', 0x7}, {0x8, 0x1, 0x81, '\x00', 0xb1}, {0x1, 0xa, 0x9, '\x00', 0x8}, {0x8, 0xf3, 0x1, '\x00', 0x2}, {0x0, 0x3, 0x7, '\x00', 0x1}, {0xe, 0xf9, 0xb, '\x00', 0xb}, {0x40, 0x2, 0x3, '\x00', 0x3}, {0x2, 0x6d, 0xf, '\x00', 0x3}, {0x0, 0x0, 0x3, '\x00', 0x4}, {0x9, 0x6, 0x9, '\x00', 0x4}, {0xfe, 0x5, 0xe1, '\x00', 0x7}, {0x3, 0x4, 0x5f, '\x00', 0x5f}, {0x17, 0xec, 0x1, '\x00', 0xf7}, {0xf2, 0xf7, 0x7, '\x00', 0xfc}, {0x9, 0x4, 0x6, '\x00', 0x1}, {0x2, 0x4, 0x3, '\x00', 0x81}, {0xc0, 0xfc, 0x5, '\x00', 0x3}, {0x4, 0x4, 0x1, '\x00', 0x4d}, {0x7, 0x5, 0x10, '\x00', 0x7}, {0xc3, 0x3, 0x1, '\x00', 0x1}, {0x1, 0x0, 0xbd}, {0x7f, 0x7f, 0x81, '\x00', 0x37}, {0x5, 0xe6, 0x0, '\x00', 0xf2}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x6, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.958413758s ago: executing program 3 (id=96): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x8}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="1a7d", 0x2, 0x20044084, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) shutdown(r0, 0x1) 1.211898212s ago: executing program 0 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xfffb, 0xffff, 0x1, "8003e3ffff072000"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x200) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x34, 0x1, 0x1000, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r4, 0x22, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159", 0xa4}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r8, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}, {&(0x7f0000002240)="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", 0x641}], 0x2}}], 0x2, 0x0) 1.211465386s ago: executing program 2 (id=98): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7ffffffd, 0x4) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x57, &(0x7f0000000140)={0x0, 0x18}}, 0x20000040) write(r0, &(0x7f0000000000)="01", 0x1) 1.211151859s ago: executing program 4 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x1, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, &(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 148.523503ms ago: executing program 0 (id=100): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001042dbd700003000000000000", @ANYRES32=0x0, @ANYBLOB="2b8b"], 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x1, 0x2}, {0x44, 0x1, 0x9, 0x8016}, {0x1, 0x9, 0x7, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x7, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 144.152397ms ago: executing program 2 (id=101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2}, 0x71) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 0s ago: executing program 4 (id=102): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0xe) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 78.416978][ T5598] cgroup: Unknown subsys name 'net' [ 78.534886][ T5598] cgroup: Unknown subsys name 'cpuset' [ 78.544687][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.149766][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.411251][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.413747][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.416125][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.417281][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.418223][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.419758][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.419983][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.431072][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.431446][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.432820][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.434270][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.436392][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.446194][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.447050][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.447290][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.448433][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.449131][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.449496][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.452108][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.452346][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.453187][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.459079][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.462172][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.470610][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.514689][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.531510][ T5616] Bluetooth: hci3: command tx timeout [ 86.531694][ T5616] Bluetooth: hci2: command tx timeout [ 86.531788][ T5616] Bluetooth: hci4: command tx timeout [ 86.531873][ T5616] Bluetooth: hci0: command tx timeout [ 86.612118][ T5616] Bluetooth: hci1: command tx timeout [ 86.751312][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.751509][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.751658][ T5609] bridge_slave_0: entered allmulticast mode [ 86.754880][ T5609] bridge_slave_0: entered promiscuous mode [ 86.832115][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.832239][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.832347][ T5609] bridge_slave_1: entered allmulticast mode [ 86.834206][ T5609] bridge_slave_1: entered promiscuous mode [ 86.928597][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.928706][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.928845][ T5610] bridge_slave_0: entered allmulticast mode [ 86.930838][ T5610] bridge_slave_0: entered promiscuous mode [ 86.935167][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.935273][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.935669][ T5610] bridge_slave_1: entered allmulticast mode [ 86.937570][ T5610] bridge_slave_1: entered promiscuous mode [ 86.995963][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.996074][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.996236][ T5612] bridge_slave_0: entered allmulticast mode [ 86.998407][ T5612] bridge_slave_0: entered promiscuous mode [ 87.021056][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.069433][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.069748][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.069885][ T5612] bridge_slave_1: entered allmulticast mode [ 87.073855][ T5612] bridge_slave_1: entered promiscuous mode [ 87.108759][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.141392][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.167159][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.167272][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.167359][ T5613] bridge_slave_0: entered allmulticast mode [ 87.168963][ T5613] bridge_slave_0: entered promiscuous mode [ 87.172907][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.173107][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.174283][ T5613] bridge_slave_1: entered allmulticast mode [ 87.176216][ T5613] bridge_slave_1: entered promiscuous mode [ 87.234948][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.235264][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.235367][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.235495][ T5611] bridge_slave_0: entered allmulticast mode [ 87.237822][ T5611] bridge_slave_0: entered promiscuous mode [ 87.301684][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.314371][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.314807][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.315308][ T5611] bridge_slave_1: entered allmulticast mode [ 87.317220][ T5611] bridge_slave_1: entered promiscuous mode [ 87.323192][ T5609] team0: Port device team_slave_0 added [ 87.328536][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.336928][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.395014][ T5609] team0: Port device team_slave_1 added [ 87.398575][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.417853][ T5610] team0: Port device team_slave_0 added [ 87.449875][ T5612] team0: Port device team_slave_0 added [ 87.456680][ T5610] team0: Port device team_slave_1 added [ 87.483918][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.503132][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.503144][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.503159][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.522556][ T5612] team0: Port device team_slave_1 added [ 87.542629][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.543501][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.543516][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.543539][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.559734][ T5613] team0: Port device team_slave_0 added [ 87.587553][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.587570][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.587591][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.632315][ T5613] team0: Port device team_slave_1 added [ 87.688208][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.688226][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.688248][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.697221][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.697238][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.697261][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.703777][ T5611] team0: Port device team_slave_0 added [ 87.707225][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.707242][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.707264][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.773229][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.773248][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.773271][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.777235][ T5611] team0: Port device team_slave_1 added [ 87.778103][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.778116][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.778139][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.895408][ T5609] hsr_slave_0: entered promiscuous mode [ 87.902745][ T5609] hsr_slave_1: entered promiscuous mode [ 87.936327][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.936345][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.936367][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.050221][ T10] cfg80211: failed to load regulatory.db [ 88.077765][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.077783][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.077804][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.103265][ T5610] hsr_slave_0: entered promiscuous mode [ 88.104507][ T5610] hsr_slave_1: entered promiscuous mode [ 88.105356][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 88.105441][ T5610] Cannot create hsr debugfs directory [ 88.192399][ T5613] hsr_slave_0: entered promiscuous mode [ 88.193808][ T5613] hsr_slave_1: entered promiscuous mode [ 88.195142][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 88.195167][ T5613] Cannot create hsr debugfs directory [ 88.214986][ T5612] hsr_slave_0: entered promiscuous mode [ 88.216665][ T5612] hsr_slave_1: entered promiscuous mode [ 88.217674][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 88.217695][ T5612] Cannot create hsr debugfs directory [ 88.365855][ T5611] hsr_slave_0: entered promiscuous mode [ 88.367039][ T5611] hsr_slave_1: entered promiscuous mode [ 88.367737][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 88.367760][ T5611] Cannot create hsr debugfs directory [ 88.603146][ T5616] Bluetooth: hci2: command tx timeout [ 88.603181][ T5630] Bluetooth: hci3: command tx timeout [ 88.603188][ T5616] Bluetooth: hci0: command tx timeout [ 88.603211][ T5630] Bluetooth: hci4: command tx timeout [ 88.682535][ T5616] Bluetooth: hci1: command tx timeout [ 88.891016][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.903059][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.904087][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.913412][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.918180][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.929098][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.930125][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.938141][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.036677][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.055772][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.061759][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.085471][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.088739][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.094932][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.105544][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.119224][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.240984][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.247288][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.248772][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.264749][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.280023][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.301149][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.319829][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.325998][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.433612][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.484457][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.503029][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.517946][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.528812][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.545843][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.563356][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.572388][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.603069][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.607387][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.649150][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.649484][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.677232][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.722112][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.722371][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.774333][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.777336][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.778202][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.791708][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.812141][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.813996][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.831120][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.847466][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.853826][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.869936][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.870026][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.906720][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.906842][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.045738][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.203612][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.237939][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.275052][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.275213][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.330638][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.330758][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.401764][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.479928][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.480048][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.558782][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.564870][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.565031][ T3317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.680894][ T5616] Bluetooth: hci2: command tx timeout [ 90.681214][ T5616] Bluetooth: hci4: command tx timeout [ 90.681242][ T5616] Bluetooth: hci0: command tx timeout [ 90.681264][ T5616] Bluetooth: hci3: command tx timeout [ 90.761263][ T5630] Bluetooth: hci1: command tx timeout [ 90.766897][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.865853][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.865989][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.949168][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.949282][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.240150][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.686361][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.899955][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.060058][ T5610] veth0_vlan: entered promiscuous mode [ 92.138396][ T5610] veth1_vlan: entered promiscuous mode [ 92.298226][ T5613] veth0_vlan: entered promiscuous mode [ 92.329257][ T5609] veth0_vlan: entered promiscuous mode [ 92.395395][ T5610] veth0_macvtap: entered promiscuous mode [ 92.400542][ T5613] veth1_vlan: entered promiscuous mode [ 92.408323][ T5609] veth1_vlan: entered promiscuous mode [ 92.438756][ T5610] veth1_macvtap: entered promiscuous mode [ 92.478073][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.509621][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.542651][ T5613] veth0_macvtap: entered promiscuous mode [ 92.548272][ T5613] veth1_macvtap: entered promiscuous mode [ 92.573124][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.604557][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.648506][ T5609] veth0_macvtap: entered promiscuous mode [ 92.675257][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.685783][ T170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.685964][ T170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.686015][ T170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.686061][ T170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.744331][ T5611] veth0_vlan: entered promiscuous mode [ 92.747307][ T5609] veth1_macvtap: entered promiscuous mode [ 92.763087][ T5630] Bluetooth: hci3: command tx timeout [ 92.763947][ T5630] Bluetooth: hci4: command tx timeout [ 92.763978][ T5630] Bluetooth: hci2: command tx timeout [ 92.765789][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.770847][ T5616] Bluetooth: hci0: command tx timeout [ 92.836457][ T5611] veth1_vlan: entered promiscuous mode [ 92.841149][ T5616] Bluetooth: hci1: command tx timeout [ 92.899677][ T5612] veth0_vlan: entered promiscuous mode [ 92.931402][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.980589][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.981103][ T45] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.981149][ T45] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.981184][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.981218][ T45] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.993079][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.993100][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.039142][ T5612] veth1_vlan: entered promiscuous mode [ 93.120607][ T45] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.120658][ T45] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.120694][ T45] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.120825][ T3317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.151066][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.151089][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.221885][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.221909][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.232998][ T5611] veth0_macvtap: entered promiscuous mode [ 93.315967][ T5611] veth1_macvtap: entered promiscuous mode [ 93.355501][ T5612] veth0_macvtap: entered promiscuous mode [ 93.422580][ T5612] veth1_macvtap: entered promiscuous mode [ 93.448161][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.448186][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.527472][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.536332][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.583597][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.598240][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.620030][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.625947][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.626144][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.840676][ T3317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.840700][ T3317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.840766][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840929][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.902067][ T170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.902691][ T170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.015616][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.017384][ T170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.017435][ T170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.017470][ T170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093569][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.093593][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.146238][ T5815] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.171883][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.197799][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.197823][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.257124][ T3317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.257146][ T3317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.334203][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.334224][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354668][ T9] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 94.371669][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 94.371747][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.377540][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 94.377568][ T9] usb 1-1: Manufacturer: syz [ 94.439461][ T9] usb 1-1: config 0 descriptor?? [ 94.791234][ T9] rc_core: IR keymap rc-hauppauge not found [ 94.791257][ T9] Registered IR keymap rc-empty [ 94.860315][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 94.870972][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 94.977829][ T9] usb 1-1: USB disconnect, device number 2 [ 95.727777][ T5847] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input6 [ 96.034578][ T5861] CIFS: Attempting to mount //127.0.0.1/share [ 96.182126][ T5866] FAULT_INJECTION: forcing a failure. [ 96.182126][ T5866] name failslab, interval 1, probability 0, space 0, times 1 [ 96.182157][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT(full) [ 96.182179][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.182190][ T5866] Call Trace: [ 96.182198][ T5866] [ 96.182206][ T5866] dump_stack_lvl+0xe8/0x150 [ 96.182236][ T5866] should_fail_ex+0x3eb/0x540 [ 96.182276][ T5866] should_failslab+0xa8/0x100 [ 96.182298][ T5866] ? radix_tree_node_alloc+0x82/0x3a0 [ 96.182318][ T5866] kmem_cache_alloc_noprof+0x9c/0x600 [ 96.182337][ T5866] ? radix_tree_node_alloc+0x82/0x3a0 [ 96.182354][ T5866] ? kmem_cache_alloc_noprof+0x151/0x600 [ 96.182373][ T5866] ? radix_tree_node_alloc+0x82/0x3a0 [ 96.182399][ T5866] radix_tree_node_alloc+0x82/0x3a0 [ 96.182424][ T5866] idr_get_free+0x28f/0xa10 [ 96.182460][ T5866] idr_alloc_u32+0x18a/0x330 [ 96.182484][ T5866] ? __pfx_idr_alloc_u32+0x10/0x10 [ 96.182508][ T5866] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 96.182536][ T5866] idr_alloc+0x6e/0xd0 [ 96.182556][ T5866] loop_add+0x2ac/0xb40 [ 96.182576][ T5866] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.182597][ T5866] ? __pfx_loop_add+0x10/0x10 [ 96.182650][ T5866] loop_control_ioctl+0x12b/0x5a0 [ 96.182668][ T5866] ? __fget_files+0x2a/0x420 [ 96.182687][ T5866] ? __pfx_loop_control_ioctl+0x10/0x10 [ 96.182709][ T5866] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.182732][ T5866] ? __pfx_loop_control_ioctl+0x10/0x10 [ 96.182750][ T5866] __se_sys_ioctl+0xfc/0x170 [ 96.182769][ T5866] do_syscall_64+0x166/0x520 [ 96.182784][ T5866] ? trace_irq_disable+0x3b/0x140 [ 96.182799][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.182818][ T5866] ? clear_bhb_loop+0x70/0xc0 [ 96.182838][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.182856][ T5866] RIP: 0033:0x7f760ab9e1d9 [ 96.182876][ T5866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.182893][ T5866] RSP: 002b:00007f760b99b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.182917][ T5866] RAX: ffffffffffffffda RBX: 00007f760ae25fa0 RCX: 00007f760ab9e1d9 [ 96.182931][ T5866] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 96.182945][ T5866] RBP: 00007f760ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 96.182956][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.182967][ T5866] R13: 00007f760ae26038 R14: 00007f760ae25fa0 R15: 00007ffdd25824d8 [ 96.182998][ T5866] [ 96.331369][ T5865] CIFS: VFS: Invalid response size 0 for command 0 [ 96.357654][ T5861] CIFS: VFS: cifs_mount failed w/return code = -5 [ 96.539164][ T5872] FAULT_INJECTION: forcing a failure. [ 96.539164][ T5872] name failslab, interval 1, probability 0, space 0, times 0 [ 96.539197][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 96.539219][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.539230][ T5872] Call Trace: [ 96.539239][ T5872] [ 96.539247][ T5872] dump_stack_lvl+0xe8/0x150 [ 96.539275][ T5872] should_fail_ex+0x3eb/0x540 [ 96.539301][ T5872] should_failslab+0xa8/0x100 [ 96.539325][ T5872] __kmalloc_cache_noprof+0x9e/0x600 [ 96.539347][ T5872] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 96.539367][ T5872] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 96.539398][ T5872] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 96.539435][ T5872] tcp_sendmsg_locked+0x4a3b/0x5320 [ 96.539454][ T5872] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 96.539488][ T5872] ? tcp_sendmsg_locked+0x351/0x5320 [ 96.539509][ T5872] ? __lock_acquire+0x747/0x2de0 [ 96.539545][ T5872] ? __pfx_futex_wake_mark+0x10/0x10 [ 96.539578][ T5872] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 96.539605][ T5872] ? tcp_sendmsg+0x21/0x50 [ 96.539626][ T5872] ? __local_bh_enable_ip+0xd6/0x140 [ 96.539651][ T5872] tcp_sendmsg+0x2f/0x50 [ 96.539670][ T5872] ? __pfx_inet6_sendmsg+0x10/0x10 [ 96.539686][ T5872] sock_sendmsg_nosec+0x90/0x190 [ 96.539710][ T5872] __sys_sendto+0x408/0x5a0 [ 96.539736][ T5872] ? __pfx___sys_sendto+0x10/0x10 [ 96.539802][ T5872] ? rcu_is_watching+0x16/0xb0 [ 96.539830][ T5872] __x64_sys_sendto+0xde/0x100 [ 96.539854][ T5872] do_syscall_64+0x166/0x520 [ 96.539873][ T5872] ? trace_irq_disable+0x3b/0x140 [ 96.539890][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.539910][ T5872] ? clear_bhb_loop+0x70/0xc0 [ 96.539931][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.539951][ T5872] RIP: 0033:0x7f760ab9e1d9 [ 96.539971][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.539987][ T5872] RSP: 002b:00007f760b99b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.540010][ T5872] RAX: ffffffffffffffda RBX: 00007f760ae25fa0 RCX: 00007f760ab9e1d9 [ 96.540024][ T5872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.540036][ T5872] RBP: 00007f760ac35888 R08: 00002000000001c0 R09: 000000000000001c [ 96.540049][ T5872] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 96.540062][ T5872] R13: 00007f760ae26038 R14: 00007f760ae25fa0 R15: 00007ffdd25824d8 [ 96.540096][ T5872] [ 96.821073][ T5880] loop3: detected capacity change from 0 to 16 [ 96.878527][ T5880] erofs (device loop3): mounted with root inode @ nid 36. [ 96.907669][ T5875] FAULT_INJECTION: forcing a failure. [ 96.907669][ T5875] name failslab, interval 1, probability 0, space 0, times 0 [ 96.907705][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.4.17 Not tainted syzkaller #0 PREEMPT(full) [ 96.907728][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.907739][ T5875] Call Trace: [ 96.907747][ T5875] [ 96.907756][ T5875] dump_stack_lvl+0xe8/0x150 [ 96.907785][ T5875] should_fail_ex+0x3eb/0x540 [ 96.907811][ T5875] should_failslab+0xa8/0x100 [ 96.907832][ T5875] __kmalloc_cache_noprof+0x9e/0x600 [ 96.907851][ T5875] ? __kmalloc_cache_noprof+0x148/0x600 [ 96.907869][ T5875] ? slip_open+0x724/0xe60 [ 96.907887][ T5875] ? slip_open+0x724/0xe60 [ 96.907913][ T5875] slip_open+0x724/0xe60 [ 96.907946][ T5875] ? __pfx_slip_open+0x10/0x10 [ 96.907968][ T5875] ? up_write+0x19d/0x4a0 [ 96.907994][ T5875] tty_ldisc_open+0xa1/0x100 [ 96.908016][ T5875] tty_set_ldisc+0x365/0x540 [ 96.908042][ T5875] tty_ioctl+0xc30/0xde0 [ 96.908063][ T5875] ? __pfx_tty_ioctl+0x10/0x10 [ 96.908083][ T5875] __se_sys_ioctl+0xfc/0x170 [ 96.908107][ T5875] do_syscall_64+0x166/0x520 [ 96.908126][ T5875] ? trace_irq_disable+0x3b/0x140 [ 96.908145][ T5875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.908166][ T5875] ? clear_bhb_loop+0x70/0xc0 [ 96.908189][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.908208][ T5875] RIP: 0033:0x7fc4ac19e1d9 [ 96.908229][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.908245][ T5875] RSP: 002b:00007fc4ad091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.908269][ T5875] RAX: ffffffffffffffda RBX: 00007fc4ac425fa0 RCX: 00007fc4ac19e1d9 [ 96.908288][ T5875] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 96.908300][ T5875] RBP: 00007fc4ac235888 R08: 0000000000000000 R09: 0000000000000000 [ 96.908312][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.908323][ T5875] R13: 00007fc4ac426038 R14: 00007fc4ac425fa0 R15: 00007ffde2fad628 [ 96.908393][ T5875] [ 96.954213][ T5738] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.141102][ T5738] usb 1-1: Using ep0 maxpacket: 16 [ 97.142370][ T5738] usb 1-1: New USB device found: idVendor=17ef, idProduct=60a4, bcdDevice=0.00 [ 97.162117][ T5738] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 255, using maximum allowed: 30 [ 97.162160][ T5738] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 97.162183][ T5738] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 97.162205][ T5738] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.162236][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.209013][ T5738] usb 1-1: config 0 descriptor?? [ 97.219629][ T5886] loop1: detected capacity change from 0 to 512 [ 97.417829][ T5886] EXT4-fs (loop1): 1 truncate cleaned up [ 97.452618][ T5886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.457693][ T5738] usbhid 1-1:0.0: can't add hid device: -71 [ 97.457811][ T5738] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 97.500294][ T5738] usb 1-1: USB disconnect, device number 3 [ 97.614957][ T5805] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.630606][ T5890] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 97.676349][ T5805] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.901897][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.130578][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 98.163024][ T5907] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 98.206638][ T5907] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 98.223566][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 98.274628][ T5910] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 98.277873][ T5910] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 98.308979][ T5915] loop0: detected capacity change from 0 to 128 [ 99.207548][ T5934] loop4: detected capacity change from 0 to 512 [ 99.300367][ T5934] EXT4-fs (loop4): 1 truncate cleaned up [ 99.344677][ T5934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.451350][ T5934] EXT4-fs (loop4): shut down requested (1) [ 99.707777][ T5609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.867439][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 100.187855][ T5953] xt_hashlimit: size too large, truncated to 1048576 [ 100.196413][ T5930] loop1: detected capacity change from 0 to 40427 [ 100.265429][ T5930] F2FS-fs (loop1): invalid crc value [ 100.477844][ T5961] Zero length message leads to an empty skb [ 100.594720][ T5930] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 100.611096][ T5930] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 100.611124][ T5930] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 100.611989][ T5930] F2FS-fs (loop1): Start checkpoint disabled! [ 100.651526][ T5930] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 100.658313][ T5930] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 100.748149][ T5930] syz.1.32: attempt to access beyond end of device [ 100.748149][ T5930] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.774564][ T5930] syz.1.32: attempt to access beyond end of device [ 100.774564][ T5930] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.819823][ T5970] xt_hashlimit: size too large, truncated to 1048576 [ 100.856483][ T170] kworker/u8:6: attempt to access beyond end of device [ 100.856483][ T170] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 100.864582][ T170] CPU: 0 UID: 0 PID: 170 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 100.864610][ T170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.864622][ T170] Workqueue: writeback wb_workfn (flush-7:1) [ 100.864651][ T170] Call Trace: [ 100.864669][ T170] [ 100.864677][ T170] dump_stack_lvl+0xe8/0x150 [ 100.864699][ T170] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 100.864726][ T170] f2fs_write_end_bio+0xda7/0x11c0 [ 100.864762][ T170] __submit_merged_bio+0x258/0x6a0 [ 100.864780][ T170] ? rcu_is_watching+0x16/0xb0 [ 100.864804][ T170] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 100.864826][ T170] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 100.864870][ T170] f2fs_write_data_pages+0x2a13/0x36e0 [ 100.864925][ T170] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.864958][ T170] ? stack_trace_save+0xa9/0x100 [ 100.865002][ T170] ? __pfx_read_node_cache+0x10/0x10 [ 100.865044][ T170] ? __lock_acquire+0x747/0x2de0 [ 100.865078][ T170] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 100.865099][ T170] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.865118][ T170] do_writepages+0x338/0x560 [ 100.865139][ T170] ? __lock_acquire+0x747/0x2de0 [ 100.865159][ T170] ? reacquire_held_locks+0x117/0x1a0 [ 100.865176][ T170] ? writeback_sb_inodes+0x450/0x1af0 [ 100.865200][ T170] __writeback_single_inode+0x136/0x1220 [ 100.865220][ T170] ? do_raw_spin_unlock+0xf5/0x200 [ 100.865242][ T170] writeback_sb_inodes+0x9de/0x1af0 [ 100.865264][ T170] ? __lock_acquire+0x747/0x2de0 [ 100.865306][ T170] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 100.865367][ T170] ? rcu_is_watching+0x16/0xb0 [ 100.865384][ T170] ? queue_io+0x2d3/0x470 [ 100.865405][ T170] wb_writeback+0x41c/0xad0 [ 100.865425][ T170] ? queue_io+0x261/0x470 [ 100.865448][ T170] ? __pfx_wb_writeback+0x10/0x10 [ 100.865463][ T170] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.865497][ T170] wb_workfn+0x431/0x10f0 [ 100.865534][ T170] ? __pfx_wb_workfn+0x10/0x10 [ 100.865557][ T170] ? trace_hrtimer_start+0x82/0x200 [ 100.865581][ T170] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.865607][ T170] ? lock_acquire+0x115/0x350 [ 100.865634][ T170] ? rcu_is_watching+0x16/0xb0 [ 100.865653][ T170] ? process_scheduled_works+0x97a/0x1630 [ 100.865679][ T170] process_scheduled_works+0xc3d/0x1630 [ 100.865731][ T170] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.865757][ T170] ? assign_work+0x3cf/0x5d0 [ 100.865781][ T170] worker_thread+0xa47/0xfb0 [ 100.865828][ T170] kthread+0x38b/0x480 [ 100.865847][ T170] ? __pfx_worker_thread+0x10/0x10 [ 100.865861][ T170] ? __pfx_kthread+0x10/0x10 [ 100.865880][ T170] ret_from_fork+0x514/0xb70 [ 100.865901][ T170] ? __pfx_ret_from_fork+0x10/0x10 [ 100.865918][ T170] ? __switch_to+0xc78/0x1410 [ 100.865938][ T170] ? __pfx_kthread+0x10/0x10 [ 100.865957][ T170] ret_from_fork_asm+0x1a/0x30 [ 100.865992][ T170] [ 100.871191][ T170] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 100.878748][ T5738] loop1: lost filesystem error report for type 5 error -108 [ 101.472585][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 101.640065][ T5981] loop0: detected capacity change from 0 to 64 [ 101.905727][ T5989] coredump: 26(syz.0.50): Core dump to core aborted: cannot preserve file permissions [ 102.016467][ T5975] loop3: detected capacity change from 0 to 32768 [ 102.094782][ T5975] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 102.233471][ T5975] XFS (loop3): Ending clean mount [ 102.354019][ T33] audit: type=1800 audit(1791563308.325:2): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="file1" dev="loop3" ino=4422 res=0 errno=-22 [ 102.483009][ T33] audit: type=1800 audit(1791563308.455:3): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="file1" dev="loop3" ino=4422 res=0 errno=-22 [ 102.653794][ T6014] FAULT_INJECTION: forcing a failure. [ 102.653794][ T6014] name failslab, interval 1, probability 0, space 0, times 0 [ 102.653829][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 102.653852][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.653864][ T6014] Call Trace: [ 102.653882][ T6014] [ 102.653892][ T6014] dump_stack_lvl+0xe8/0x150 [ 102.653921][ T6014] should_fail_ex+0x3eb/0x540 [ 102.653950][ T6014] should_failslab+0xa8/0x100 [ 102.653974][ T6014] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 102.653997][ T6014] ? kasprintf+0xe2/0x140 [ 102.654014][ T6014] ? kasprintf+0xe2/0x140 [ 102.654054][ T6014] kvasprintf+0xeb/0x1a0 [ 102.654078][ T6014] ? __pfx_kvasprintf+0x10/0x10 [ 102.654104][ T6014] ? futex_unqueue+0x22/0x240 [ 102.654133][ T6014] kasprintf+0xe2/0x140 [ 102.654162][ T6014] ? __pfx_kasprintf+0x10/0x10 [ 102.654186][ T6014] ? __pfx___futex_wait+0x10/0x10 [ 102.654216][ T6014] logfc+0x15b/0x520 [ 102.654248][ T6014] ? __pfx_logfc+0x10/0x10 [ 102.654277][ T6014] ? hook_capable+0x24b/0x7b0 [ 102.654296][ T6014] ? trace_contention_end+0x3d/0x140 [ 102.654324][ T6014] orangefs_get_tree+0x5be/0xeb0 [ 102.654348][ T6014] ? lock_acquire+0x115/0x350 [ 102.654370][ T6014] ? __pfx_orangefs_get_tree+0x10/0x10 [ 102.654396][ T6014] ? apparmor_capable+0x126/0x170 [ 102.654425][ T6014] vfs_get_tree+0x92/0x2a0 [ 102.654449][ T6014] vfs_cmd_create+0xa2/0x200 [ 102.654474][ T6014] __se_sys_fsconfig+0x6b9/0x810 [ 102.654502][ T6014] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 102.654526][ T6014] ? rcu_is_watching+0x16/0xb0 [ 102.654555][ T6014] ? __x64_sys_fsconfig+0x20/0xc0 [ 102.654578][ T6014] do_syscall_64+0x166/0x520 [ 102.654598][ T6014] ? trace_irq_disable+0x3b/0x140 [ 102.654616][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.654634][ T6014] ? clear_bhb_loop+0x70/0xc0 [ 102.654656][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.654675][ T6014] RIP: 0033:0x7f760ab9e1d9 [ 102.654695][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.654708][ T6014] RSP: 002b:00007f760b99b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 102.654730][ T6014] RAX: ffffffffffffffda RBX: 00007f760ae25fa0 RCX: 00007f760ab9e1d9 [ 102.654744][ T6014] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 102.654755][ T6014] RBP: 00007f760ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 102.654767][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.654778][ T6014] R13: 00007f760ae26038 R14: 00007f760ae25fa0 R15: 00007ffdd25824d8 [ 102.654811][ T6014] [ 102.786984][ T5612] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 103.274448][ T6023] FAULT_INJECTION: forcing a failure. [ 103.274448][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 103.274486][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT(full) [ 103.274509][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.274520][ T6023] Call Trace: [ 103.274529][ T6023] [ 103.274537][ T6023] dump_stack_lvl+0xe8/0x150 [ 103.274566][ T6023] should_fail_ex+0x3eb/0x540 [ 103.274594][ T6023] should_failslab+0xa8/0x100 [ 103.274618][ T6023] __kmalloc_cache_noprof+0x9e/0x600 [ 103.274639][ T6023] ? xa_load+0x1db/0x210 [ 103.274657][ T6023] ? snd_mixer_oss_put_volume1_sw+0x116/0x400 [ 103.274678][ T6023] ? snd_mixer_oss_put_volume1_sw+0x116/0x400 [ 103.274718][ T6023] snd_mixer_oss_put_volume1_sw+0x116/0x400 [ 103.274749][ T6023] ? snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 103.274779][ T6023] snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 103.274801][ T6023] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 103.274822][ T6023] snd_mixer_oss_set_recsrc+0x275/0x420 [ 103.274852][ T6023] ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10 [ 103.274910][ T6023] snd_mixer_oss_ioctl1+0xf00/0x1960 [ 103.274936][ T6023] ? do_futex+0x458/0x4e0 [ 103.274956][ T6023] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 103.274997][ T6023] ? __fget_files+0x2a/0x420 [ 103.275021][ T6023] ? __fget_files+0x2a/0x420 [ 103.275040][ T6023] ? __fget_files+0x2a/0x420 [ 103.275063][ T6023] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 103.275084][ T6023] snd_mixer_oss_ioctl+0x45/0x60 [ 103.275110][ T6023] __se_sys_ioctl+0xfc/0x170 [ 103.275134][ T6023] do_syscall_64+0x166/0x520 [ 103.275153][ T6023] ? trace_irq_disable+0x3b/0x140 [ 103.275170][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.275190][ T6023] ? clear_bhb_loop+0x70/0xc0 [ 103.275213][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.275233][ T6023] RIP: 0033:0x7f760ab9e1d9 [ 103.275254][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.275271][ T6023] RSP: 002b:00007f760b99b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.275295][ T6023] RAX: ffffffffffffffda RBX: 00007f760ae25fa0 RCX: 00007f760ab9e1d9 [ 103.275311][ T6023] RDX: 0000200000004000 RSI: 00000000c0044dff RDI: 0000000000000005 [ 103.275324][ T6023] RBP: 00007f760ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 103.275338][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.275351][ T6023] R13: 00007f760ae26038 R14: 00007f760ae25fa0 R15: 00007ffdd25824d8 [ 103.275387][ T6023] [ 104.096349][ T6045] FAULT_INJECTION: forcing a failure. [ 104.096349][ T6045] name failslab, interval 1, probability 0, space 0, times 0 [ 104.096385][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full) [ 104.096407][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.096418][ T6045] Call Trace: [ 104.096427][ T6045] [ 104.096436][ T6045] dump_stack_lvl+0xe8/0x150 [ 104.096463][ T6045] should_fail_ex+0x3eb/0x540 [ 104.096488][ T6045] should_failslab+0xa8/0x100 [ 104.096511][ T6045] __kmalloc_cache_noprof+0x9e/0x600 [ 104.096530][ T6045] ? vcs_write+0x11f/0x1300 [ 104.096548][ T6045] ? vcs_write+0x11f/0x1300 [ 104.096565][ T6045] ? __pfx_futex_wake_mark+0x10/0x10 [ 104.096588][ T6045] vcs_write+0x11f/0x1300 [ 104.096616][ T6045] ? try_to_wake_up+0x8ce/0x14e0 [ 104.096640][ T6045] ? __lock_acquire+0x747/0x2de0 [ 104.096667][ T6045] ? apparmor_file_permission+0x1fb/0x2b0 [ 104.096688][ T6045] ? __pfx_vcs_write+0x10/0x10 [ 104.096703][ T6045] ? bpf_lsm_file_permission+0x9/0x20 [ 104.096720][ T6045] ? security_file_permission+0x75/0x260 [ 104.096740][ T6045] ? rw_verify_area+0x203/0x4c0 [ 104.096761][ T6045] ? __pfx_vcs_write+0x10/0x10 [ 104.096778][ T6045] vfs_write+0x296/0xba0 [ 104.096805][ T6045] ? __pfx_vfs_write+0x10/0x10 [ 104.096825][ T6045] ? __fget_files+0x2a/0x420 [ 104.096842][ T6045] ? __fget_files+0x3a2/0x420 [ 104.096857][ T6045] ? __fget_files+0x2a/0x420 [ 104.096878][ T6045] ? fdget+0x1ac/0x250 [ 104.096902][ T6045] ksys_write+0x150/0x270 [ 104.096922][ T6045] ? __pfx_ksys_write+0x10/0x10 [ 104.096953][ T6045] do_syscall_64+0x166/0x520 [ 104.096972][ T6045] ? trace_irq_disable+0x3b/0x140 [ 104.096990][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.097009][ T6045] ? clear_bhb_loop+0x70/0xc0 [ 104.097031][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.097049][ T6045] RIP: 0033:0x7f760ab9e1d9 [ 104.097068][ T6045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.097083][ T6045] RSP: 002b:00007f760b99b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.097103][ T6045] RAX: ffffffffffffffda RBX: 00007f760ae25fa0 RCX: 00007f760ab9e1d9 [ 104.097117][ T6045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.097128][ T6045] RBP: 00007f760ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 104.097138][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.097148][ T6045] R13: 00007f760ae26038 R14: 00007f760ae25fa0 R15: 00007ffdd25824d8 [ 104.097181][ T6045] [ 104.469541][ T6048] FAULT_INJECTION: forcing a failure. [ 104.469541][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.469575][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 104.469598][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.469610][ T6048] Call Trace: [ 104.469618][ T6048] [ 104.469627][ T6048] dump_stack_lvl+0xe8/0x150 [ 104.469655][ T6048] should_fail_ex+0x3eb/0x540 [ 104.469683][ T6048] _copy_from_iter+0x1d3/0x1890 [ 104.469707][ T6048] ? __alloc_skb+0x27a/0x7a0 [ 104.469728][ T6048] ? __alloc_skb+0x27a/0x7a0 [ 104.469764][ T6048] ? __alloc_skb+0x27a/0x7a0 [ 104.469783][ T6048] ? __pfx__copy_from_iter+0x10/0x10 [ 104.469801][ T6048] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 104.469822][ T6048] ? __alloc_skb+0x27a/0x7a0 [ 104.469838][ T6048] ? __alloc_skb+0x27a/0x7a0 [ 104.469862][ T6048] ? netlink_sendmsg+0x5fa/0xae0 [ 104.469882][ T6048] ? skb_put+0x112/0x210 [ 104.469905][ T6048] netlink_sendmsg+0x667/0xae0 [ 104.469932][ T6048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.469960][ T6048] ? apparmor_socket_sendmsg+0x98/0x360 [ 104.469984][ T6048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.470002][ T6048] sock_sendmsg_nosec+0x14e/0x190 [ 104.470026][ T6048] ____sys_sendmsg+0x54e/0x850 [ 104.470053][ T6048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.470083][ T6048] ? import_iovec+0x73/0xa0 [ 104.470107][ T6048] ___sys_sendmsg+0x2a5/0x360 [ 104.470124][ T6048] ? __lock_acquire+0x747/0x2de0 [ 104.470149][ T6048] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.470173][ T6048] ? futex_wait+0x2a2/0x390 [ 104.470225][ T6048] ? __fget_files+0x3a2/0x420 [ 104.470242][ T6048] ? __fget_files+0x2a/0x420 [ 104.470271][ T6048] __x64_sys_sendmsg+0x1b1/0x290 [ 104.470293][ T6048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.470337][ T6048] do_syscall_64+0x166/0x520 [ 104.470357][ T6048] ? trace_irq_disable+0x3b/0x140 [ 104.470374][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.470397][ T6048] ? clear_bhb_loop+0x70/0xc0 [ 104.470417][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.470434][ T6048] RIP: 0033:0x7f760ab9e1d9 [ 104.470453][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.470467][ T6048] RSP: 002b:00007f760b99b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.470489][ T6048] RAX: ffffffffffffffda RBX: 00007f760ae25fa0 RCX: 00007f760ab9e1d9 [ 104.470503][ T6048] RDX: 5821c98b097a09f2 RSI: 0000200000000080 RDI: 0000000000000005 [ 104.470515][ T6048] RBP: 00007f760ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 104.470527][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.470538][ T6048] R13: 00007f760ae26038 R14: 00007f760ae25fa0 R15: 00007ffdd25824d8 [ 104.470570][ T6048] [ 104.651789][ T6039] loop4: detected capacity change from 0 to 32768 [ 104.947243][ T6052] netlink: 'syz.2.72': attribute type 5 has an invalid length. [ 105.103379][ T6057] loop0: detected capacity change from 0 to 128 [ 105.191753][ T6057] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 105.333513][ T6057] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.363097][ T6057] ext2 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.421238][ T6041] loop3: detected capacity change from 0 to 32768 [ 105.493657][ T33] audit: type=1800 audit(1791563311.465:4): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.68" name="file1" dev="loop3" ino=4 res=0 errno=-22 [ 105.579992][ T33] audit: type=1800 audit(1791563311.545:5): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.68" name="file1" dev="loop3" ino=4 res=0 errno=-22 [ 105.658116][ T5610] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.835330][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 106.102828][ T6076] loop2: detected capacity change from 0 to 512 [ 106.198489][ T6080] loop3: detected capacity change from 0 to 128 [ 106.219850][ T6076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 106.219967][ T6076] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.222629][ T6080] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 106.266700][ T6080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.392499][ T6082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 106.477781][ T6081] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 106.652576][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.944520][ T6093] overlayfs: upper fs does not support file handles, falling back to index=off. [ 107.070732][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.220546][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 107.228592][ T32] usb 3-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 107.239564][ T6103] loop0: detected capacity change from 0 to 512 [ 107.257396][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.274099][ T32] usb 3-1: config 0 descriptor?? [ 107.308318][ T32] gspca_main: sunplus-2.14.0 probing 041e:400b [ 107.318801][ T33] audit: type=1326 audit(1791563313.275:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.319083][ T33] audit: type=1326 audit(1791563313.285:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.397989][ T33] audit: type=1326 audit(1791563313.365:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.398046][ T33] audit: type=1326 audit(1791563313.365:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.398089][ T33] audit: type=1326 audit(1791563313.365:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.401172][ T33] audit: type=1326 audit(1791563313.365:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.401219][ T33] audit: type=1326 audit(1791563313.365:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.401254][ T33] audit: type=1326 audit(1791563313.375:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.404444][ T33] audit: type=1326 audit(1791563313.375:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.406319][ T33] audit: type=1326 audit(1791563313.375:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.407221][ T33] audit: type=1326 audit(1791563313.375:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.407544][ T33] audit: type=1326 audit(1791563313.375:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4ac19e1d9 code=0x7ffc0000 [ 107.411539][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.413592][ T6103] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.672848][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.325638][ T32] gspca_sunplus: reg_w_riv err -71 [ 108.325738][ T32] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 108.345003][ T32] usb 3-1: USB disconnect, device number 2 [ 108.559275][ T170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.779718][ T170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.882840][ T170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.991100][ T170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.287014][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.295914][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.299822][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.302555][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.304006][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.342658][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 110.346277][ T170] bridge_slave_1: left allmulticast mode [ 110.346331][ T170] bridge_slave_1: left promiscuous mode [ 110.348358][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.348621][ T6137] xt_hashlimit: size too large, truncated to 1048576 [ 110.395453][ T170] bridge_slave_0: left allmulticast mode [ 110.395482][ T170] bridge_slave_0: left promiscuous mode [ 110.400198][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.462679][ T6141] ------------[ cut here ]------------ [ 110.462696][ T6141] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 110.462714][ T6141] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#1: syz.4.102/6141 [ 110.488675][ T6141] Modules linked in: [ 110.493847][ T6141] CPU: 1 UID: 0 PID: 6141 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(full) [ 110.503946][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.515187][ T6141] RIP: 0010:__fortify_report+0x89/0xa0 [ 110.522437][ T6141] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 110.542744][ T6141] RSP: 0018:ffffc900051afdc8 EFLAGS: 00010246 [ 110.548858][ T6141] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 110.557612][ T6141] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 110.567096][ T6141] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100eb6f1d1 [ 110.576455][ T6141] R10: dffffc0000000000 R11: ffffed100eb6f1d2 R12: 0000000000000000 [ 110.585183][ T6141] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 110.592094][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057fbe400: rx timeout, send abort [ 110.603669][ T6141] FS: 00007fc4ad0916c0(0000) GS:ffff888123bb6000(0000) knlGS:0000000000000000 [ 110.612733][ T6141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.619450][ T6141] CR2: 0000560778cb5008 CR3: 0000000078540000 CR4: 00000000003526f0 [ 110.628101][ T6141] Call Trace: [ 110.631717][ T6141] [ 110.634868][ T6141] __fortify_panic+0x9/0x10 [ 110.639411][ T6141] landlock_merge_ruleset+0xc46/0xc90 [ 110.645165][ T6141] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 110.651545][ T6141] do_syscall_64+0x166/0x520 [ 110.656277][ T6141] ? trace_irq_disable+0x3b/0x140 [ 110.662225][ T6141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.668916][ T6141] ? clear_bhb_loop+0x70/0xc0 [ 110.673744][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.679850][ T6141] RIP: 0033:0x7fc4ac19e1d9 [ 110.684455][ T6141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.705045][ T6141] RSP: 002b:00007fc4ad091028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 110.713584][ T6141] RAX: ffffffffffffffda RBX: 00007fc4ac425fa0 RCX: 00007fc4ac19e1d9 [ 110.722114][ T6141] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 110.730213][ T6141] RBP: 00007fc4ac235888 R08: 0000000000000000 R09: 0000000000000000 [ 110.738489][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.746757][ T6141] R13: 00007fc4ac426038 R14: 00007fc4ac425fa0 R15: 00007ffde2fad628 [ 110.754960][ T6141] [ 110.758015][ T6141] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.765364][ T6141] CPU: 1 UID: 0 PID: 6141 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(full) [ 110.775619][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.785889][ T6141] Call Trace: [ 110.789303][ T6141] [ 110.792282][ T6141] vpanic+0x26f/0x710 [ 110.796312][ T6141] panic+0xc5/0xd0 [ 110.800173][ T6141] ? __pfx_panic+0x10/0x10 [ 110.804654][ T6141] __warn+0x315/0x4c0 [ 110.808676][ T6141] ? __fortify_report+0x6b/0xa0 [ 110.813579][ T6141] ? __fortify_report+0x6b/0xa0 [ 110.818653][ T6141] __report_bug+0x276/0x570 [ 110.823551][ T6141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.829938][ T6141] ? __fortify_report+0x6b/0xa0 [ 110.834914][ T6141] ? __pfx___report_bug+0x10/0x10 [ 110.840025][ T6141] report_bug_entry+0x19b/0x290 [ 110.845096][ T6141] ? __fortify_report+0x89/0xa0 [ 110.850146][ T6141] ? __fortify_report+0x8e/0xa0 [ 110.855113][ T6141] handle_bug+0xce/0x200 [ 110.859500][ T6141] exc_invalid_op+0x1a/0x50 [ 110.864035][ T6141] asm_exc_invalid_op+0x1a/0x20 [ 110.868925][ T6141] RIP: 0010:__fortify_report+0x89/0xa0 [ 110.874528][ T6141] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 110.894619][ T6141] RSP: 0018:ffffc900051afdc8 EFLAGS: 00010246 [ 110.900816][ T6141] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 110.909027][ T6141] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 110.917204][ T6141] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100eb6f1d1 [ 110.925869][ T6141] R10: dffffc0000000000 R11: ffffed100eb6f1d2 R12: 0000000000000000 [ 110.934840][ T6141] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 110.943256][ T6141] ? __fortify_report+0x2c/0xa0 [ 110.948437][ T6141] __fortify_panic+0x9/0x10 [ 110.953428][ T6141] landlock_merge_ruleset+0xc46/0xc90 [ 110.958874][ T6141] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 110.965353][ T6141] do_syscall_64+0x166/0x520 [ 110.970021][ T6141] ? trace_irq_disable+0x3b/0x140 [ 110.975447][ T6141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.981819][ T6141] ? clear_bhb_loop+0x70/0xc0 [ 110.986774][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.992789][ T6141] RIP: 0033:0x7fc4ac19e1d9 [ 110.997513][ T6141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.018141][ T6141] RSP: 002b:00007fc4ad091028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 111.027472][ T6141] RAX: ffffffffffffffda RBX: 00007fc4ac425fa0 RCX: 00007fc4ac19e1d9 [ 111.035918][ T6141] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 111.043906][ T6141] RBP: 00007fc4ac235888 R08: 0000000000000000 R09: 0000000000000000 [ 111.051905][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.060003][ T6141] R13: 00007fc4ac426038 R14: 00007fc4ac425fa0 R15: 00007ffde2fad628 [ 111.068042][ T6141] [ 111.071292][ T6141] Kernel Offset: disabled [ 111.075802][ T6141] Rebooting in 86400 seconds..