last executing test programs: 6m25.386733839s ago: executing program 4 (id=65): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x67) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x38, 0x20000800, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 6m24.216872311s ago: executing program 4 (id=76): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./proc\x00', &(0x7f0000001200)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000001280)='27', 0x2) write$P9_RGETLOCK(r0, &(0x7f00000012c0)=ANY=[], 0x200002e6) 6m23.75649805s ago: executing program 4 (id=79): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000300)=0x8001, 0x8000, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, &(0x7f00000001c0)) 6m23.5310339s ago: executing program 4 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 6m23.274664205s ago: executing program 4 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3c0200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 6m21.664903209s ago: executing program 4 (id=99): sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000180)={[{@uni_xlate}, {@fat=@gid}, {@shortname_win95}, {@rodir}, {@utf8no}]}, 0x1, 0x305, &(0x7f0000000680)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) 6m21.25117641s ago: executing program 32 (id=99): sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000180)={[{@uni_xlate}, {@fat=@gid}, {@shortname_win95}, {@rodir}, {@utf8no}]}, 0x1, 0x305, &(0x7f0000000680)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) 6m17.949989262s ago: executing program 2 (id=127): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002780)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000140)="5969b576688f07d0c9a40492833d21e37648a8f1a750f755b7ebabc84a10599b5a760560ae35b70a449be35a5bd515e7267014e883902a3c71d777415d5b41bedd00dce4886e", 0x46}, {&(0x7f0000000380)="ff5a2b9c9b3742da31c452cc8106031a8789d79fc753d2f534be21d1c16aba2e34a07185505fd83be04d3b1a510da32d614de317a044679df9a4b3b10b6b27df08df3870c5d33be3c4209427f49830f04c333361770e6b92865d10ac491e8017882f219aacc181aa3f448e4826f6b75afbc311c34740adc2b28387a3ca1e4c6ef6dce0e759f066f90da1a3e2854de92129e86c59829c35265c927f3c41b762a58cf10820825c7596b55b9846700f74b57247637963491e1224da93b2c60d4711cb653137f9e3768f5703414e8a3aac2c32bb2bb557845ee34b7dc8208b797dffee103545f79946feef1974df1e085258f784ecb4007793b01b11e0d95b48a26b3f1d3b2d16ab2199d58880011fd36811ef88f941aa64deda387872bd03f01ceb439f1b1e20dd20305df39d4aae2908334a76b5693c0efdcf158f6e14d37908368c716ef0bdd2498ff68cf5c6d865a02b96fbc2ce064b6b1e4436e69435d8da0cebe38bf5cd04cc61ed4ea9c04e24ab14faa0e69e2844b33853b494b4bfa6ba5d5d20ab3f440e5b781a25b912a9103d1ed14bfd824e284c1b445c67474be6e038547aa350f0faa494e5d3867ac27c06395bedb166ddcf70654e63bcd814a6fb0fbb3036dae3f9e0137fbc3035215467b1c642cec03fc9ad1b93ea867f706db1f5d423637bacad3b498f14c8d97a26d3f3054fbe6bfc02dde1e14a744af4052fc26cdf077dde3ce96b275d6f3b1a1a26a34724a5aada93baa037e341fc582015269da2d380984369ef33bd95d17743587aa932e8317059a86f9a24f4826ae094e9f58247ebe50f8851b20ea5401c3f096ff4aa7d2c955b763c8ce2e2664716779f86c2985d0548269de39702689a39f36196c28252489ff900200f1f6a2a0853dfb56b2536fe017f94868ecfe6c162d31cab40374c84abab551ccdd7c57dd1f046fe09bbc3568a0b113bd9845bdf7cd72c6b88db1a5f5b8d2af1f57fcf9942938e697c875d275f7ab0a9dcace2cecb00f7d3cdf47d1a90bb9296075ffa536ec35d8ea62928b1a5c2babc37cc0bcd5a8edade417de518e2d397dc0e510991dccc60e50d6f40c87198933d7990e55969baa20ad0596bc6fd4e0e46bb0f3549622bf108795b9f8e512211a37831cb36044d48e1c9572b04f626b46dfcde214af443468adf78e0cab65798890e03128bbc398b6de237476279bfa46292e70189bfaa498c30d893d8b7f44bc50de40239af276628800443c1e4225e1555540559b6243601b1e1a23068d057f4bd59ce94333c9d556ad46244fcd09523f4a3a25fca995f8e1931f41ecd3aa1e21294af2b1dfd8742c0d7c10ec1a85047226dba33ba88c210f67da81f2bbd7b789bb6cef444578e2f4f1bb0a2db97ce653e906b8989295e177e0c398c7609d6b85019090b918c94a98b297850fdc10717237e17f2ad92e35581926ddfbc76b86a638913869716274d96744d1039d7e6f6f952a58b557976d340aa3c64a710ceca76f0318ab113f233d7399a683b6cb5fc2af7a239e7fa216b454503d93f40b6c935d559471ee74896494b74e2a89838e2fe58f818bb7fa66a745f16844ce4e701d1ce011baf62f26d32dab22792582c2e06093c234ed5c409fb009c862bd3561cab26cb49b131ce69e9e251fbd8d86a7be840c4af281c31209c55ba72cd4d82a3c935c0e169398e0a0c46c750940ac784c578dbc6a2bd844ada1ddd0a355f8be74a8b07f4271c1e859249c548182bdd8a9805e1d747230cfa55851ab1226f1d5c342452ce5da5d49e4fca90e437cb25a38f1597dbfbd78a9e654e7f025c0efce09c7e5e93c9dafe6c309bf1c96de668aeea3322551a2680a4d4f49bad8be980c3a2dc20718c4c4c43c8bec5cd203aa7d62a70449f4e0fa2995cffeb402bf528ecc835c5fcc7c2d862e92a5de5acd71dc51a3e6736147ecd56058a13e67b3bd5b273e3b261d35d8976c4e02613d35a2aa31107186446a06b6cc8d1680349a4fba560d240417097b78d60270593ade04152fbcc71c08df8bcade1c9ad08537162797ffbcc81e8b3891357e4b8333271af148acabe7f8cb2c6bee29f1f7e45dfcfd469c7b28bed09e5044e1edfc22c9374e13c50e4be185e1ed06735792e1870209be466991413e47976cfb8ca1682b7931200d7841d67bd34eed044e95e1fd9ae38373f40b5d883194a76265d40abad561f4e56b2191c8ceaf5e9d9ba1c86e85e0364b82767ada855cfc085967745594ebf530e66a99aea64cb50014a3cd6f7f2f7ef337bd52ce3b82dc2d550e901320d4b6be028728fab1759f45609195c6542804e2dc4fe4c3ccc63ca539a4cbd6231cf04186f08db4931c9210045cd23a124a0944291c97739d342a6633aa370ffa0259c020c283b9103fcd3640045d364a97628541490a8d58e05f856ac55a08b5360d1781388008e1efe736d6804171a7381e38ce56de17f20f89995c6b2d6710ed6dea5eb0161b212e105eba50a9582b02008089995efe7c707b3b831520683eb08dca815c231450516cc892a9763045a5d47c0b8ee56f5c7403497947d68e75e73b11305e3725ccdf468543092a03695a0ab564ad9363a127c3eaf21d3486472f608468f6e8ab9a2ab55da36b9e763b682e4a6dcc34f6e89b395e1e58208fc9a820d870e77adb6811d7c41d7adf7fe13a9caca74f14c8d1748f5e5207600c4142db37183de25cde0a058660026363e25d4ac2589fb54278df988e7cd6607ca784e11d8e2dfd819d2304291a4659998ec695b62fed4ea13f4ec27304aad1df129c3b58f8a280f752c938f0c3c2791763ec64483dae6e58905e2df99803c5f42bd8489fbf02c0d4debe8c901981057d2166ea81ee65b98194073090a7e53ead7d5abec79c8278dac94", 0x800}, {&(0x7f0000001380)="f11c14009fd0904e", 0x8}, {&(0x7f0000001440)="f0cbe5b0395d052a71329a1ab71d570ce1ab383caaeb0b4179cd57ae9a2f937ca61bb93288878629a57504a66715efe763bbe837d2aef0598bc4bb0c2a6ac664d59b5a99264790fb152caa6fa08a87c5278fa5de742db02d0c269942531d1f2faa8e4e984f39de3d58037625464d97bf206923d3cf5b88ca88185aab76f5723487f4ed4440678ec524308f64a3dd86ec5a4f2b595afcbca360b093f4fd13e46cdfab229119c29fb2778560dba2e46133b7bdf49e33276e65bf62e990", 0xbc}, {&(0x7f0000001500)="dae898842c9b02726fa9342e573ca3eebca854e1ca00a6573f68afe403d4c28e9d3ba8c6f36275c425b5addeceeb9d137bbb4e5b71e12b87cc9ab23a27020c02e813af8ac3261803c1f27a7068d33378fd0628c87d800b4d00755dba6eec319b5ae65483661a2baf0125f671527a385def583f12f507b27b4770cab92919b4b6db747a628a2215f8fa803569c6dd8e3981c9197eab621c48af2f72535ca96e24c09d3010b019e16f3ee8c014c8ebaa4d47a8ffa8416eed4751976ec5f0fffa190fab93b53529d622aef6f3546c4434cf74d85c3cd37f7e897f776e519b78096f4fcb2aea4b58242ac25361bc321d4325575344f44a40e62081d806fa0895202b155137af0d06341d15e75a9b9c07a4843c8f82b388509d9e22259da18faa21b4084fe1bc89c2e3ac82fbb0b1a6ebd89c85557cfad6591b635a3ff3563e9e34d31e8a93cb02ff727ea666f55a73884d7f22fc3e3b44aeef6ea8f3b9fa81f5207359212dc9ce6f587cb22cb5a461e6cddfb1340021792e5d89ab6d25b7b647e38196e3d9ee7329f655d3b58b755933c9eafab028e8e127ac4a8442251429b6a874e9bb261fa81d95b762674dc95f3e54a7606a893b522ae6391dd91853906e06647fcf2f86d2e6e4f2eeb8ad5dac54bbe250e259840fc1ed912fd861bab842df8e689a20ed37e9ab29f92001f617c307af4ec4f9da18587fbd6d157080ecddab92bda68d2231a3445d45c8259eba28ff43ffe5adc07a951f8fc98cdccdcf23fb91c97df61079ac802c03c502238eeaf94c0e634c9e5fe97276a0800e941d8696fb2e9e181cac4ddf7b3ffd235589f55b297151b20230c2625b0fc06c081311cf2868ba806ad747205e17dd22113624e3dc1cae02f8ca74c697e46211b87923746a1b5afbf483eef2833f584bf4a2535a5f3ce53e4bd09fb0c3f086f0b2776536b1fea93beb0ffa2b6e3cfeb38de75c2fa57a1183a49fb36b952dc021bbb691daaf8db5eeef557ddae75e144a6bcdc9ccf5bdbfe1258e84622b62b872d676610b9757cb44e4a624b9e71264422798467b61588219cc4f54315b596b735d9f85e7c74d7ed4a9f4fac7bea62d29396b972af33abd4fce911feb95f4b38d169db4410eef929ae2e950b8cd85bce0491104f2706925b9ca8ff83600a471179d9b97594918384d97f6841334ca023d40b261abee4f7293625d936e605345f82beaa920707aa901bf0965e07743695c080fb7950cb7ea6d09bb75e64383b47eb1bb57d9ec2bfd6b8cbbad2149929513b8a352c0f9bf9755d14e9e524dc232af8a92d72678e9d0b0404b431d5729e5e1633bc5e558ad3de5809afe68d361f5f9348308d089c6a8da5113f82f1dc2e26583a183708be38ed6671eb207855584cb00b2b14a62d997ae554e84d936e1ed2ecb0a3f4b054780b4260c536e3e2a38786bde41ba641c7fa1c1e9e50c94c2a635d39bf42c4732d6b927d4da33e597be81baa871fcaac36a4421b57611d94ea110396b599791f04816a9a4d6e2e7a6e677988cf1935b0b8a12f1b33b212f21a5682e61a347a70d111366ef7541814a3b822a1d5ef46895dd95c406a1f0b32879e3b353e9ed1f5527697b5529f4a90320362c2c0a485e89adfbe7b63ca2e90986d80c9bb5a4e84f779bca752e24c2caa12a313e3a4eee98d8b4011f2d1a914ae687387fee0098ca9cd3e003ad9f2c1895edf4740bed4d122ea8bdc7bb5d7fb183062f5866e5ec37c9a0a4c6d98f1480d49adea616ed8be6de835a55103646dea0786e540d10874817e27ef5ff48c9bcd1a0a53140f14aaf826cc32037c1ab3cddc660c80ee63476a0234075547b3954e462eb6476a4bafd20c60fa5aec292f9e12a4e847467b96aa58fd2a517a17492c078879b76f0ef5d352dbdcd5dbef54be80e0fde0752ebdd24566245e4977a9b940308b3486a9426e2ba0760b733e7ae7474eec248512f26e4ab26e3f136e467b690816794f8dcb2f00a52cc0df67a66e46a47301f7ab28442778bdfec3c465b202474a4f4febc219d0f914e8962efc407e2dc93e9289d612b3a11948d8e6ed6431172e2a05f7b41cb5bdd46e325e296749efcac0a17a43880376332adfee1342f35c287325211eaa2555c52e82322a9938c3e306710ad233bafd1f9a75ef8798e2b0b457a85fa58f8582ec1125671ae9d34dc6a16989f87940206c2880a23a1351149699897addc50f13738a4723e1bb967046fd5018748d388e4c2ac341816c5e1dcffced7405018fade577f4d8261c08c82c7e67b3870115b39103c9ce82dc454ec51986c6f6b7ee63f4752795921d1689ffde0909c6adf098fe2949dcaa62f2f1c60bef314996a06619cf5ca848677f0fbdaff26e825c899ae29aef49d61de7cf639c37a853c96332ac6011c5debc34e8517eb9c0ccd3403ff07900aad2a4732003a8752bd7af6f041b28440b7e7baf6655bcfbfb5a2ab47b0063a8c2903cca0ca07f569a0513367ed9fd49707670c3bd1772b1aa289856dcb8a77aaedc3d3c4ca797e56a985d83dcefe1339a9de00c6aaf9451350962cd95cdb603f6e079b92a9e85863abcd2f52cac21f08bba7a8656ab04e85cf777df5b811c8b9f212b6970e1a5c61e866cb2edef5f8f213b98f3335e910551f583397efdd9f4809530265bdc2b8312abbdcd47b70d2e8d8c5f3241cfa37cde20f8fbf5b94c38bcd3e83bdcc15a19a8dbd30efae3da52796acd07eb391c7775db9283dac783e695d45fffe8b72cbef831e5286670ce7a340856fee5bfe8caf57aa93f9790f5d7cb8f2efcc01ce827fc2ee883c64b73a78b9219f35f4488cb679a2261cd332e969a76d783b5efa53ab71a5adfe13befdb5f30d6d14d0e982a7ede3c9be47dadc1bf2278b80e0c576e83c3f9917bc55ed666ef5a6b058b4a11cb7d4c0e9d15c8d8110ecf072a84a58c0551cf2091f3f0143d5e2a5983eb4fffd9c2b05928478c0003cebdc6aec9c02606f71cdd948a034eb62869ef4c8762a098423169d278553f16ba1e49a79b06f0aae17b16159023311f7a788dfd0d35b57b8bfbde396047bf5890ed63c8eb592e5aa3301c6f7000701a787a6872ca21729e3614515b15b71bd3d5c8dad7e816808c876b406942bc6c0cb1dd181c572ee035f94798b97a4a8d0d004da5c3ff46bfb1ad590d341cb88b79d895a8ec9e25e1feaa2f8181ff954051fe850bb96b33ba050e3a987b9c9fd6ef01f5e74165e203cd13a3f5c27c1", 0x8f5}], 0x5, 0x0, 0x0, 0x4040}], 0x1, 0x8010) sendmsg$NFT_BATCH(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4002) 6m16.180901454s ago: executing program 2 (id=137): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) 6m15.947254718s ago: executing program 2 (id=140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6m12.973281347s ago: executing program 2 (id=154): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000340)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x84000, 0x0) 6m12.714762603s ago: executing program 2 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x2) 6m12.006531419s ago: executing program 2 (id=159): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x84880) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0xc6) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000cc0)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x230a0424, &(0x7f0000000680)={[{@dax_inode}], [], 0x2c}, 0x1, 0x4b6, &(0x7f0000001940)="$eJzs3M1vFOUfAPDvTN94b+HHTwVRqmgkoi0tqBw8oNGEi4mJHvBYy0qQAobWBAiRagwejX+BejQx8eTFkybGqCdfrno3JsRwAT2YmtmdaWfptuxuX1bZzyfZ7fPMPLPP852ZZ+fl6WwAXWs4e0sitkTELxExWMvWFxiu/bl5/fLkn9cvTyYxN/fSH0m13I3rlyeLosVym/PMT5ci0neTuLdBvdMXL52emJqqnM/zozNn3hidvnjp8VNnJk5WTlbOjh85cvjQ2FNPjj+xKnFmcd3Y/da5PbuOvfLBC5Nz8ep3n2bt3ZLPL8dRM7TiOodjOOZyC1P7q+8Pr/jT/122ltJJbwcbQkt6IiLbXH3V/j8YPbGw8Qbj+XfmM193qIHAmsmOTdvz9IX5qT3533T++AXciRJ9HLpUccTPrn+L13qfg3TStWey90o1/pv5qzanN9LsWnaodsXes8TyR1dY/5aIOD7714fZKxrehwAAWF1fZuc/jzU6/0vjrlK5bfkYylBEHIiIHRHxv4jYGRH/j6iWvTsi7mmx/uFb8ovPf37c2FZgTcrO/57Ox7bqz//SvEQyn9tajb8vee3UVOVgvk72R99Alh9bpo6vnvv5/aXmDZfO/7JXVn9xLpi34/fegfplTkzMTKwg5DrX3o7Y3dso/mR+JCBbA7siYncbn5+ts1OPfrInS2/bvHj+7eNfxiqMM819HPFIbfvPxi3xF5JaTUuNT45uiKnKwdFir1js+x+uvljO95XSdfFvaC6mDe0G20C2/Tc13P/z+ItuUIzXTrdex9Vf31vymmbx9k/i+Gy5RL7/l74Fsv2/P3m5mu7Pp12YmJk5PxbRn0+omz6+sGyRL8pn8e/f17j/74j4+6PSysh24vsi4v6I2Ju3/YGIeDAi9i0T/7fPPvT68muozf1/FWTxn1hu+0cMJeXx+jYSPae/+eLWeovdqrnvv8PV1P58SjPff802cKXrDwAAAP4L0uoYdJKOFOnSzamdsSmdOjc9c2A43jx7ojZWPRR9aXGna7B0P3Qsvzdc5MfL+YGoHIqI7dX/NNpYnT8yeW5qaycDB6rP6tT1/0jTkZHavN+W+qcX4M7R0jha+enAzz5f/cYA68rzmtC99H/oXq32/3SN2gGsP8d/6F6N+v+ViJsdaAqwzhz/oXvp/9C99H/oXvo/dKXFj8QXP7TQzpP+C4kdx1a0+Jon5gbX5JNnW1+qZ40ijfKPdiyZSCKivSoiXb5MfxO1dyyR3rbM0TZXSwuJvXliICKaXerKuq3Vzn4vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArJZ/AgAA//8U592x") 6m11.515459939s ago: executing program 33 (id=159): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x84880) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0xc6) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000cc0)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x230a0424, &(0x7f0000000680)={[{@dax_inode}], [], 0x2c}, 0x1, 0x4b6, &(0x7f0000001940)="$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") 4m3.468462137s ago: executing program 0 (id=679): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x30000, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) flock(r1, 0x1) flock(r0, 0x5) 4m2.142116872s ago: executing program 0 (id=681): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='tmpfs\x00', 0x2200cd0, 0x0) 4m0.224094906s ago: executing program 0 (id=685): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ea2000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00004a5000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 3m55.072750377s ago: executing program 0 (id=708): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$eJzs3ctrG9sdAODfyA/ZTlq7UGiTlaHQGkLkOnWTFrpI6aIUGgi06yZGVkxq2QqWHGJjiLModFNoSxeFdpN1H+mi0G0f2/afKHdxSQj3Oubmri66zEjyU1L8loO/D8ZzzsyZOefMOTNzrBmkAC6s8fRPLuJKRPw6iRhtLk8iYiAL9UfcbqR7u7FWTKck6vWffJRkaf5+aXtfSXN+qRn5akT8+xcR13J7cx1uzsulpWZosrbwaLK6snr94cLMXGmutHhzanr6xq1v37q5f6uj+uR/q5df/eaH3/jr7f74yotf/SeJ23G5uW5zY614zN3vMx7jzWMykB7CXX5w0pn1WNLrAnAk6anZ1zjL40qMRl8W6uC4JyAAcC48jYg6AHDBJO7/AHDBtD4H2NxYK7am3n4icbZefz8ihhr1bz3fbKzpbz6zG8qeg45sJruejCQRMXYC+Y9HxB//8bM/p1Mc8jlk4qkbcAzrzyLi/tj45kZ+z/U/Sa9/g+/eQ77jmm9226ze2G58z+KLdv+BXvpnOv75zv7x39WtocVQ9nfP+Gco3+bcPYp3n/+5lx02PcC16d3S8d/3drzbtj3+23ppbayvGftCNuYbSB48LJfSa9sXI2IiBvJpfCpL2n48NvHmszed8t85/vv4tz//U5p/Ot9OkXvZn4964728RlvMztRmTqLuqdfPIq72t6t/sjX+TTqMf+923OvupvnRd3/5h04p0/qn9W1N++t/uurPI77etv232zLp+n7iZNYdJludoo2/ffD7kU75b7d/Ppun+bf+FzgLafuPdK//WBqqrqzOz5TLpaXq4fP47/PRf3Vat7P/t69/1v93Sfv/YPLTLNzqaU9marWlqYjB5Mf7l9/Y3rYVb6VP6z/xtfbnf6f+n2u+G3t/K9Zd/6vBvzR31bb+mfVO9e82wjq+tP6zh2r/VqB1NLaXVOvNbfYkfvF2vq9T/gdr/+ksNNFccpDr386Sdgsc6aABAAAAAAAAAAAAAAAAAAAAAAAAwCHlIuJyJLnCVjiXKxQav+H95RjJlSvV2rUHleXF2ch+K3ssBnKtr7oc3fF9qFPN78NvxW/siX8rIr4UEb/LD2fxQrFSnu115QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dLu3/9/ms4Khca6D/O9Lh0AcGqGel0AAODMuf8DwMVzuPv/8KmVAwA4O4f+/7+enE5BAIAzc+D7//3TLQcAcHY8/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCU3b1zJ53qn26sFdP47OOV5fnK4+uzpep8YWG5WChWlh4V5iqVuXKpUKwsdNzRemNWrlQeTcfi8pPJWqlam6yurN5bqCwv1u49XJiZK90rDZxZzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg4Korq/Mz5XJpSaBLYLg0fB6KcY4C/XEuirEvsP7/gaxfd00cY+9N5x/skiY5ybyG9y7ZeZUY7sm1CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB98HkAAAD//yofFO0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f00000000c0)=0x8, 0x12) pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c) 3m51.059567273s ago: executing program 0 (id=716): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x0, 0x1}, 0x30, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1/file2\x00', 0x2) 3m43.242253999s ago: executing program 0 (id=737): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4, 0x0, 0x2, 0x1, 0x0, @broadcast, @local}, @info_reply={0x10, 0x0, 0x0, 0x5, 0xc}}}}}, 0x0) 3m41.750379347s ago: executing program 34 (id=737): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4, 0x0, 0x2, 0x1, 0x0, @broadcast, @local}, @info_reply={0x10, 0x0, 0x0, 0x5, 0xc}}}}}, 0x0) 2m16.64646929s ago: executing program 6 (id=968): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000001100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000011c0)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000001280)=0x84) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2m15.764464627s ago: executing program 6 (id=972): fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0xf9) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='27', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$llc(0x1a, 0x802, 0x0) 2m14.506483821s ago: executing program 6 (id=975): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fa, 0x40000, 0x0, 0x111}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m11.43834148s ago: executing program 6 (id=984): syz_mount_image$ext4(&(0x7f0000006440)='ext4\x00', &(0x7f0000006480)='./bus\x00', 0x21081e, &(0x7f00000064c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000006500)="$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") open(&(0x7f0000006a00)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000006a40)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f0000006a80)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000006ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000006b00)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000006b40)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffdf2e500000f0000000e000200", [0x40000000004]}) 2m9.909000929s ago: executing program 6 (id=986): syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2m8.018030788s ago: executing program 6 (id=991): r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000000140)=""/162, 0xa2) 2m4.983157152s ago: executing program 35 (id=991): r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000000140)=""/162, 0xa2) 10.679920881s ago: executing program 8 (id=1277): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.047691566s ago: executing program 8 (id=1279): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x40, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x4, 0x101000) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.801707988s ago: executing program 8 (id=1281): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 7.214281073s ago: executing program 8 (id=1294): r0 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x40}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x80000, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 6.265862092s ago: executing program 5 (id=1300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x58, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 6.246247271s ago: executing program 1 (id=1301): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) 6.196269985s ago: executing program 7 (id=1302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x384, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) shutdown(r0, 0x0) 5.829977866s ago: executing program 7 (id=1304): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.671822377s ago: executing program 9 (id=1305): ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) 5.538616551s ago: executing program 5 (id=1306): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="b7fe4b9aac6c6af1cebbce71222572cc", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x3, 0x0, &(0x7f0000044000)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x204800, &(0x7f0000000000)=ANY=[@ANYBLOB='map=off,unhide\x00check=strict,block=0x0000000000000800,utf8,check=strictAgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f636f6d70726573732c6d61703d61636f726e2c636865636b3d72656c617865742c6d61703d6f66662c6d6170396e6f726d616c2c73686f77611ba626a1fe0e"], 0x0, 0x6d8, &(0x7f00000002c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) 4.170208872s ago: executing program 9 (id=1308): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.863912012s ago: executing program 5 (id=1309): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x8) 3.741227156s ago: executing program 9 (id=1310): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) 3.659001954s ago: executing program 3 (id=1311): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40) accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.573548493s ago: executing program 8 (id=1312): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 3.27942s ago: executing program 3 (id=1313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 3.001785665s ago: executing program 1 (id=1314): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.920188563s ago: executing program 7 (id=1315): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000b40)='asymmetric\x00', 0x0, &(0x7f0000000b80)="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", 0x1d8, r0) socket(0xa, 0x3, 0xff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 2.843304877s ago: executing program 3 (id=1316): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2.659670697s ago: executing program 7 (id=1318): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.590003215s ago: executing program 1 (id=1319): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r1, 0x0) 2.523330381s ago: executing program 8 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2.410853174s ago: executing program 7 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000480)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x42, 0x105) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000600)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x20, 0x0) openat(r0, &(0x7f0000000700)='./file1\x00', 0x365443, 0x2f) 1.992732688s ago: executing program 1 (id=1322): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r1 = io_uring_setup(0x2a8d, &(0x7f0000000000)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32) getdents64(0xffffffffffffffff, 0x0, 0x43) close_range(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 1.937502704s ago: executing program 7 (id=1323): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, 0x0, 0xffe) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x220b80, 0x102, 0x34}, 0x18) 1.925265158s ago: executing program 5 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x4}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) 1.878610637s ago: executing program 9 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 1.808717058s ago: executing program 3 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd28, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.708586596s ago: executing program 1 (id=1327): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)='=', 0x1}], 0x1, 0x1) recvmmsg(r3, &(0x7f0000000240)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/1}, {&(0x7f0000000380)=""/102}, {&(0x7f0000000400)=""/4096}, {&(0x7f0000001400)=""/111}]}}], 0x700, 0x40002002, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000014c0)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 1.581177598s ago: executing program 5 (id=1328): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1.153139843s ago: executing program 1 (id=1329): syz_emit_vhci(0x0, 0x7) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001280)="$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") open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x2000) 1.032181202s ago: executing program 9 (id=1330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.016579853s ago: executing program 3 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='27', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(r0, 0x0, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000080)=0x10) 855.867175ms ago: executing program 5 (id=1332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000001a80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000001ac0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000001e80)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000001ec0)) timer_settime(0x0, 0x0, &(0x7f0000001f00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvfrom$inet(r0, &(0x7f0000001bc0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 39.630947ms ago: executing program 9 (id=1333): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) 0s ago: executing program 3 (id=1334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='scalable', 0x8) sendto$inet(r0, &(0x7f0000000300), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): [ 415.713159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.713384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.713598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.713809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.714024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.714245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.714504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.169193][ T9753] ovs-system: entered promiscuous mode [ 416.196064][ T9466] team0: Port device team_slave_0 added [ 416.851036][ T9466] team0: Port device team_slave_1 added [ 417.670954][ T9424] hsr_slave_0: entered promiscuous mode [ 417.689244][ T9424] hsr_slave_1: entered promiscuous mode [ 417.690106][ T9424] debugfs: 'hsr0' already exists in 'hsr' [ 417.690137][ T9424] Cannot create hsr debugfs directory [ 417.929892][ T9466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.929921][ T9466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.929970][ T9466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.930964][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.931085][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.931246][ T9558] bridge_slave_0: entered allmulticast mode [ 418.009757][ T9558] bridge_slave_0: entered promiscuous mode [ 418.041167][ T9466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.041197][ T9466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.041247][ T9466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.139283][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.139529][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.139713][ T9558] bridge_slave_1: entered allmulticast mode [ 418.178460][ T9558] bridge_slave_1: entered promiscuous mode [ 418.601331][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.632666][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.724175][ T9466] hsr_slave_0: entered promiscuous mode [ 418.728388][ T9466] hsr_slave_1: entered promiscuous mode [ 418.754511][ T9466] debugfs: 'hsr0' already exists in 'hsr' [ 418.754545][ T9466] Cannot create hsr debugfs directory [ 418.908018][ T9779] loop8: detected capacity change from 0 to 512 [ 419.000312][ T9779] FAULT_INJECTION: forcing a failure. [ 419.000312][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 419.000366][ T9779] CPU: 0 UID: 0 PID: 9779 Comm: syz.8.1054 Not tainted syzkaller #0 PREEMPT(full) [ 419.000414][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 419.000438][ T9779] Call Trace: [ 419.000452][ T9779] [ 419.000468][ T9779] dump_stack_lvl+0x100/0x190 [ 419.000531][ T9779] should_fail_ex.cold+0x5/0xa [ 419.000577][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.000634][ T9779] should_failslab+0xc2/0x120 [ 419.000684][ T9779] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 419.000727][ T9779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.000807][ T9779] ? alloc_pwq+0x3ff/0xdd0 [ 419.000862][ T9779] alloc_pwq+0x3ff/0xdd0 [ 419.000914][ T9779] apply_wqattrs_prepare+0x847/0xbb0 [ 419.000978][ T9779] apply_workqueue_attrs_locked+0x64/0xe0 [ 419.001025][ T9779] __alloc_workqueue+0xd7b/0x1950 [ 419.001092][ T9779] alloc_workqueue_noprof+0xc7/0x130 [ 419.001144][ T9779] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 419.001195][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.001247][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.001296][ T9779] ? __init_swait_queue_head+0xca/0x150 [ 419.001367][ T9779] ext4_fill_super+0x7fbe/0xae80 [ 419.001450][ T9779] ? __pfx_ext4_fill_super+0x10/0x10 [ 419.001492][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.001550][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.001598][ T9779] ? sb_set_blocksize+0x1f6/0x290 [ 419.001661][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.001711][ T9779] ? setup_bdev_super+0x4e8/0x770 [ 419.001780][ T9779] get_tree_bdev_flags+0x38c/0x620 [ 419.001819][ T9779] ? __pfx_ext4_fill_super+0x10/0x10 [ 419.001870][ T9779] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 419.001910][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.001966][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.002014][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.002063][ T9779] ? security_capable+0x80/0x260 [ 419.002135][ T9779] vfs_get_tree+0x92/0x320 [ 419.002189][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.002240][ T9779] path_mount+0x7d0/0x2850 [ 419.002308][ T9779] ? __pfx_path_mount+0x10/0x10 [ 419.002364][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.002412][ T9779] ? lockdep_hardirqs_on+0x7d/0x110 [ 419.002460][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.002509][ T9779] ? kmem_cache_free+0x127/0x6c0 [ 419.002588][ T9779] ? __x64_sys_mount+0x293/0x310 [ 419.002645][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.002694][ T9779] __x64_sys_mount+0x293/0x310 [ 419.002754][ T9779] ? __pfx___x64_sys_mount+0x10/0x10 [ 419.002819][ T9779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.002882][ T9779] do_syscall_64+0x123/0x790 [ 419.002930][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.002972][ T9779] RIP: 0033:0x7f24a899f7ca [ 419.003003][ T9779] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.003043][ T9779] RSP: 002b:00007f24a6bf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 419.003082][ T9779] RAX: ffffffffffffffda RBX: 00007f24a6bf5ee0 RCX: 00007f24a899f7ca [ 419.003110][ T9779] RDX: 0000200000000440 RSI: 0000200000000480 RDI: 00007f24a6bf5ea0 [ 419.003137][ T9779] RBP: 0000200000000440 R08: 00007f24a6bf5ee0 R09: 0000000000000000 [ 419.003164][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000480 [ 419.003191][ T9779] R13: 00007f24a6bf5ea0 R14: 000000000000044b R15: 00002000000004c0 [ 419.003245][ T9779] [ 419.461760][ T9783] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1057'. [ 419.562961][ T9785] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1057'. [ 419.583996][ T9779] EXT4-fs: failed to create workqueue [ 419.584016][ T9779] EXT4-fs (loop8): mount failed [ 419.934773][ T9783] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 419.975201][ T9558] team0: Port device team_slave_0 added [ 419.980627][ T9558] team0: Port device team_slave_1 added [ 419.981468][ T9785] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 420.722430][ C1] net_ratelimit: 33056 callbacks suppressed [ 420.722464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.722619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.722751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.722889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.723047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.723186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.723319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.723456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.723587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.723717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.752279][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.776280][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.776342][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.024516][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.024545][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.024595][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.732478][ C1] net_ratelimit: 41443 callbacks suppressed [ 425.732508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.732667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.732836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.733029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.733194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.733357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.733526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.733688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.733855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.734024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.946083][ T9806] syz_tun: entered allmulticast mode [ 426.766226][ T9804] syz_tun: left allmulticast mode [ 426.835278][ T9558] hsr_slave_0: entered promiscuous mode [ 426.852095][ T9558] hsr_slave_1: entered promiscuous mode [ 426.873015][ T9558] debugfs: 'hsr0' already exists in 'hsr' [ 426.873070][ T9558] Cannot create hsr debugfs directory [ 428.931527][ T9424] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 429.008694][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.010002][ T9424] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 430.416568][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.418308][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 430.419461][ T9424] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 430.742402][ C1] net_ratelimit: 31962 callbacks suppressed [ 430.742434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.742595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.742749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.742906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.743054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.743215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.743570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.743793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.744001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.744202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.915789][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.140044][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 433.151272][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 433.152286][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 433.172632][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 433.173398][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.274469][ T9883] FAULT_INJECTION: forcing a failure. [ 434.274469][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 434.274525][ T9883] CPU: 0 UID: 0 PID: 9883 Comm: syz.8.1083 Not tainted syzkaller #0 PREEMPT(full) [ 434.274572][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 434.274602][ T9883] Call Trace: [ 434.274615][ T9883] [ 434.274631][ T9883] dump_stack_lvl+0x100/0x190 [ 434.274695][ T9883] should_fail_ex.cold+0x5/0xa [ 434.274740][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.274797][ T9883] should_failslab+0xc2/0x120 [ 434.274855][ T9883] kmem_cache_alloc_noprof+0x92/0x6a0 [ 434.274899][ T9883] ? __anon_vma_prepare+0x35a/0x690 [ 434.274967][ T9883] __anon_vma_prepare+0x35a/0x690 [ 434.275022][ T9883] ? rcu_read_unlock+0x2d/0xb0 [ 434.275080][ T9883] ? rcu_read_unlock+0x2d/0xb0 [ 434.275142][ T9883] __vmf_anon_prepare+0x11f/0x250 [ 434.275192][ T9883] do_wp_page+0xd14/0x45c0 [ 434.275251][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.275305][ T9883] ? lock_acquire+0x1d1/0x380 [ 434.275350][ T9883] ? __pfx_do_wp_page+0x10/0x10 [ 434.275402][ T9883] ? do_raw_spin_lock+0x128/0x260 [ 434.275455][ T9883] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.275511][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.275571][ T9883] __handle_mm_fault+0x1cd2/0x2f60 [ 434.275640][ T9883] ? __pfx___handle_mm_fault+0x10/0x10 [ 434.275694][ T9883] ? __pfx_mt_find+0x10/0x10 [ 434.275769][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.275819][ T9883] ? find_vma+0xbf/0x140 [ 434.275866][ T9883] ? __pfx_find_vma+0x10/0x10 [ 434.275913][ T9883] handle_mm_fault+0x363/0xa20 [ 434.275980][ T9883] do_user_addr_fault+0x745/0x12f0 [ 434.276040][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.276096][ T9883] exc_page_fault+0x6f/0xd0 [ 434.276137][ T9883] asm_exc_page_fault+0x26/0x30 [ 434.276176][ T9883] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 434.276217][ T9883] Code: 89 ee 48 89 ef e8 71 5b e0 fc 4d 85 ff 75 26 e8 87 61 e0 fc 89 de 4c 89 e7 e8 fd b0 53 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 61 61 e0 fc 48 89 d8 5b 5d 41 [ 434.276258][ T9883] RSP: 0018:ffffc9000581f838 EFLAGS: 00050297 [ 434.276291][ T9883] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 434.276317][ T9883] RDX: 0000000000000001 RSI: ffffc9000581f8e0 RDI: 0000000000000000 [ 434.276343][ T9883] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000b03f1c [ 434.276369][ T9883] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc9000581f8e0 [ 434.276396][ T9883] R13: 0000000000000004 R14: 00007ffffffff000 R15: 0000000000000000 [ 434.276448][ T9883] ? _copy_to_user+0x93/0xd0 [ 434.276491][ T9883] do_ipv6_getsockopt+0xcb7/0x3340 [ 434.276555][ T9883] ? __entry_text_end+0x102035/0x102039 [ 434.276607][ T9883] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 434.276662][ T9883] ? lockdep_hardirqs_on+0x7d/0x110 [ 434.276701][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.276751][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.276804][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.276863][ T9883] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 434.276920][ T9883] ? trace_sched_exit_tp+0x120/0x160 [ 434.276987][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.277036][ T9883] ? aa_inet_opt_perm+0x30d/0x970 [ 434.277106][ T9883] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 434.277165][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.277230][ T9883] ? ipv6_getsockopt+0x12f/0x2a0 [ 434.277285][ T9883] ipv6_getsockopt+0x12f/0x2a0 [ 434.277345][ T9883] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 434.277402][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.277451][ T9883] ? lock_acquire+0x1d1/0x380 [ 434.277493][ T9883] ? __might_fault+0xc5/0x140 [ 434.277559][ T9883] rawv6_getsockopt+0x119/0x580 [ 434.277608][ T9883] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 434.277669][ T9883] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 434.277736][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.277790][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.277845][ T9883] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 434.277908][ T9883] do_sock_getsockopt+0x50a/0x6e0 [ 434.277978][ T9883] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 434.278046][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.278097][ T9883] ? __fget_files+0x34/0x3d0 [ 434.278147][ T9883] ? find_held_lock+0x2b/0x80 [ 434.278219][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.278267][ T9883] ? __fget_files+0x21f/0x3d0 [ 434.278327][ T9883] __sys_getsockopt+0x148/0x260 [ 434.278376][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.278438][ T9883] ? __x64_sys_getsockopt+0xbd/0x160 [ 434.278486][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.278535][ T9883] __x64_sys_getsockopt+0xbd/0x160 [ 434.278582][ T9883] ? do_syscall_64+0xae/0x790 [ 434.278622][ T9883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.278670][ T9883] ? lockdep_hardirqs_on+0x7d/0x110 [ 434.278710][ T9883] do_syscall_64+0x123/0x790 [ 434.278757][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.278797][ T9883] RIP: 0033:0x7f24a899e559 [ 434.278837][ T9883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.278876][ T9883] RSP: 002b:00007f24a6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 434.278914][ T9883] RAX: ffffffffffffffda RBX: 00007f24a8c25fa0 RCX: 00007f24a899e559 [ 434.278942][ T9883] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 434.278968][ T9883] RBP: 00007f24a8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 434.278993][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.279019][ T9883] R13: 00007f24a8c26038 R14: 00007f24a8c25fa0 R15: 00007ffc565bfc48 [ 434.279074][ T9883] [ 435.077675][ T9424] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 435.099328][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.613416][ T5614] Bluetooth: hci4: command tx timeout [ 435.752398][ C1] net_ratelimit: 33015 callbacks suppressed [ 435.752428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.752600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.752774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.752944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.753122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.753291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.753470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.753641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.753842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.754027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.591015][ T31] bridge_slave_1: left allmulticast mode [ 437.591055][ T31] bridge_slave_1: left promiscuous mode [ 437.591308][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.656893][ T31] bridge_slave_0: left allmulticast mode [ 437.656935][ T31] bridge_slave_0: left promiscuous mode [ 437.661301][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.742474][ T5614] Bluetooth: hci4: command tx timeout [ 437.771000][ T31] bridge_slave_1: left allmulticast mode [ 437.771039][ T31] bridge_slave_1: left promiscuous mode [ 437.771265][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.851327][ T31] bridge_slave_0: left allmulticast mode [ 437.851379][ T31] bridge_slave_0: left promiscuous mode [ 437.851594][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.635581][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.687842][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.741118][ T31] bond0 (unregistering): Released all slaves [ 439.359645][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.359726][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.413283][ T9917] trusted_key: encrypted_key: insufficient parameters specified [ 439.550620][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.605851][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.640969][ T31] bond0 (unregistering): Released all slaves [ 439.765524][ T5614] Bluetooth: hci4: command tx timeout [ 439.971599][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 440.762397][ C1] net_ratelimit: 32783 callbacks suppressed [ 440.762430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.762599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.762764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.762961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.763129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.763293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.763456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.763615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.763773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.763948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.908994][ T9868] rxe_eth0 speed is unknown, defaulting to 1000 [ 441.832465][ T5614] Bluetooth: hci4: command tx timeout [ 442.458522][ T5614] Bluetooth: hci3: unexpected cc 0x2006 length: 2 > 1 [ 442.458567][ T5614] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 442.710891][ T9966] syzkaller1: entered promiscuous mode [ 442.710927][ T9966] syzkaller1: entered allmulticast mode [ 442.957328][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 443.044650][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 443.124825][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.124901][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.124962][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.125022][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.252474][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.260556][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.282674][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.283624][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.284453][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.218352][ T9944] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 445.349469][ T9944] usb 6-1: unable to get BOS descriptor or descriptor too short [ 445.349565][ T9944] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 445.350473][ T9944] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 445.350522][ T9944] usb 6-1: can't read configurations, error -71 [ 445.357474][ T52] Bluetooth: hci1: command tx timeout [ 445.519001][ T31] hsr_slave_0: left promiscuous mode [ 445.531900][ T31] hsr_slave_1: left promiscuous mode [ 445.534844][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.551094][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.607878][ T31] hsr_slave_0: left promiscuous mode [ 445.609797][ T31] hsr_slave_1: left promiscuous mode [ 445.610923][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.615025][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.021914][ T31] team0 (unregistering): Port device team_slave_1 removed [ 446.062679][ T31] team0 (unregistering): Port device team_slave_0 removed [ 446.325148][T10032] net_ratelimit: 3561 callbacks suppressed [ 446.325180][T10032] ip_tables: iptables: counters copy to user failed while replacing table [ 446.535473][ T31] team0 (unregistering): Port device team_slave_1 removed [ 446.570523][ T31] team0 (unregistering): Port device team_slave_0 removed [ 446.900431][ T9979] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.114650][T10041] loop5: detected capacity change from 0 to 128 [ 447.196085][ T9558] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.227304][T10041] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.229009][T10041] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 447.285841][ T9558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.286943][ T9558] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.326759][ T9558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.350841][ T9558] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.382495][ T9940] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 447.394461][ T9558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.432971][ T52] Bluetooth: hci1: command tx timeout [ 447.435082][ T5621] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.478597][ T9558] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 447.525993][ T9558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.546515][ T9940] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 447.561744][ T9940] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 447.561788][ T9940] usb 9-1: config 0 has no interface number 0 [ 447.561852][ T9940] usb 9-1: config 0 interface 41 has no altsetting 0 [ 447.597677][ T9940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.597723][ T9940] usb 9-1: Product: syz [ 447.597751][ T9940] usb 9-1: Manufacturer: syz [ 447.597778][ T9940] usb 9-1: SerialNumber: syz [ 447.655751][ T9940] usb 9-1: config 0 descriptor?? [ 448.174654][ T9941] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 448.333751][ T9941] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 448.335328][ T9941] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.335366][ T9941] usb 6-1: config 0 has no interface number 0 [ 448.335451][ T9941] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 448.335500][ T9941] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 448.335592][ T9941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.340865][ T9941] usb 6-1: config 0 descriptor?? [ 448.343757][T10058] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 448.353576][ T9941] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 448.481721][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.481925][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.482080][ T9868] bridge_slave_0: entered allmulticast mode [ 448.506641][ T9868] bridge_slave_0: entered promiscuous mode [ 448.516902][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.517096][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.517250][ T9868] bridge_slave_1: entered allmulticast mode [ 448.547840][ T9868] bridge_slave_1: entered promiscuous mode [ 448.724643][ T9940] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 448.735321][ T9941] usb 6-1: USB disconnect, device number 8 [ 449.059774][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.113572][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.382104][ T9868] team0: Port device team_slave_0 added [ 449.428634][ T9558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.444583][ T9868] team0: Port device team_slave_1 added [ 449.512571][ T52] Bluetooth: hci1: command tx timeout [ 449.755072][ T9940] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 449.755122][ T9940] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 449.755375][ T9940] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 449.780274][ T9940] usb 9-1: USB disconnect, device number 6 [ 449.804940][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.804967][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.805016][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.834585][ T9891] udevd[9891]: setting mode of /dev/bus/usb/009/006 to 020664 failed: No such file or directory [ 449.834765][ T9891] udevd[9891]: setting owner of /dev/bus/usb/009/006 to uid=0, gid=0 failed: No such file or directory [ 449.902137][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.902165][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.902212][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.135914][ T9558] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.448300][ T7682] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.448436][ T7682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.465409][ T9868] hsr_slave_0: entered promiscuous mode [ 450.466710][ T9868] hsr_slave_1: entered promiscuous mode [ 450.467612][ T9868] debugfs: 'hsr0' already exists in 'hsr' [ 450.467641][ T9868] Cannot create hsr debugfs directory [ 450.731523][T10105] ip_tables: iptables: counters copy to user failed while replacing table [ 450.756184][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.756310][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.779068][T10105] ip_tables: iptables: counters copy to user failed while replacing table [ 451.054002][T10118] loop8: detected capacity change from 0 to 128 [ 451.275074][T10118] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.280709][T10118] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 451.429717][ T52] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 451.612590][ T52] Bluetooth: hci1: command tx timeout [ 451.816590][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1123'. [ 451.824765][T10118] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 451.870818][ T31] bridge_slave_1: left allmulticast mode [ 451.870863][ T31] bridge_slave_1: left promiscuous mode [ 451.871148][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.890666][ T31] bridge_slave_0: left allmulticast mode [ 451.890698][ T31] bridge_slave_0: left promiscuous mode [ 451.899976][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.931636][ T31] bridge_slave_1: left allmulticast mode [ 451.931670][ T31] bridge_slave_1: left promiscuous mode [ 451.931951][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.973269][ T31] bridge_slave_0: left allmulticast mode [ 451.973307][ T31] bridge_slave_0: left promiscuous mode [ 451.983317][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.993635][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 452.000521][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 452.001486][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 452.006546][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.007335][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 452.248914][ T8418] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.429610][T10150] netlink: 'syz.8.1126': attribute type 11 has an invalid length. [ 452.462147][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.477333][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.478837][ T31] bond0 (unregistering): Released all slaves [ 452.580171][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.585275][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.602031][ T31] bond0 (unregistering): Released all slaves [ 454.056360][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.056499][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.056750][ T9979] bridge_slave_0: entered allmulticast mode [ 454.067675][ T9979] bridge_slave_0: entered promiscuous mode [ 454.081315][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.082087][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.082258][ T9979] bridge_slave_1: entered allmulticast mode [ 454.085309][ T5614] Bluetooth: hci6: command tx timeout [ 454.103975][ T9979] bridge_slave_1: entered promiscuous mode [ 455.000650][ T9979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.200480][ T9979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.391879][ T9979] team0: Port device team_slave_0 added [ 455.466867][T10228] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 455.481033][ T9979] team0: Port device team_slave_1 added [ 455.655331][T10227] fuse: root generation should be zero [ 455.672529][ T9955] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 455.794419][T10223] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 455.830817][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.830856][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.830905][ T9979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.873303][T10141] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.884074][ T9955] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 455.890991][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.891014][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.891059][ T9979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.891884][ T9955] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 455.891926][ T9955] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 455.972793][ T9955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.972846][ T9955] usb 9-1: Product: syz [ 455.972874][ T9955] usb 9-1: Manufacturer: syz [ 455.972902][ T9955] usb 9-1: SerialNumber: syz [ 456.012015][ T9955] usb 9-1: config 0 descriptor?? [ 456.069959][ T9955] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 456.153636][ T5614] Bluetooth: hci6: command tx timeout [ 456.263135][ T9955] gspca_sunplus: reg_r err -32 [ 456.263233][ T9955] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 456.403374][ T9979] hsr_slave_0: entered promiscuous mode [ 456.406692][ T9979] hsr_slave_1: entered promiscuous mode [ 456.409524][ T9979] debugfs: 'hsr0' already exists in 'hsr' [ 456.409559][ T9979] Cannot create hsr debugfs directory [ 456.553512][ T31] hsr_slave_0: left promiscuous mode [ 456.567952][ T31] hsr_slave_1: left promiscuous mode [ 456.570764][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.579135][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.695548][ T31] hsr_slave_0: left promiscuous mode [ 456.701835][ T31] hsr_slave_1: left promiscuous mode [ 456.708571][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.726856][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.448331][ T31] team0 (unregistering): Port device team_slave_1 removed [ 457.498816][ T31] team0 (unregistering): Port device team_slave_0 removed [ 458.034977][ T31] team0 (unregistering): Port device team_slave_1 removed [ 458.069085][ T31] team0 (unregistering): Port device team_slave_0 removed [ 458.232595][ T5614] Bluetooth: hci6: command tx timeout [ 458.360214][T10243] vlan2: entered promiscuous mode [ 458.360249][T10243] bridge0: entered promiscuous mode [ 458.515450][T10279] Bluetooth: ISO socket layer initialized [ 458.521469][ T5614] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 459.289364][ T9868] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 459.321023][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.323926][ T9868] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 459.347566][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.388385][ T9868] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 459.439149][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.460133][ T5746] usb 9-1: USB disconnect, device number 7 [ 459.486460][ T9868] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 459.520948][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.537476][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1146'. [ 459.633537][ T30] audit: type=1800 audit(1792323689.167:76): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1145" name="cgroup.freeze" dev="ramfs" ino=22259 res=0 errno=0 [ 459.720044][T10291] loop8: detected capacity change from 0 to 4096 [ 459.896620][T10291] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.312596][ T5614] Bluetooth: hci6: command tx timeout [ 460.403456][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.540345][ T9979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.562446][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.565279][ T9979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.591084][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.631603][ T9979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.661322][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.681111][ T9979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 460.711481][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.883491][ T9944] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 461.047608][ T9944] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 461.063104][ T9944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.063148][ T9944] usb 6-1: Product: syz [ 461.063176][ T9944] usb 6-1: Manufacturer: syz [ 461.063204][ T9944] usb 6-1: SerialNumber: syz [ 461.327781][T10334] overlayfs: failed to clone upperpath [ 461.518905][T10337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 461.571774][ T9944] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 461.807677][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.854022][T10141] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.854223][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.854675][T10141] bridge_slave_0: entered allmulticast mode [ 461.864512][T10141] bridge_slave_0: entered promiscuous mode [ 461.894438][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.894609][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.894776][T10141] bridge_slave_1: entered allmulticast mode [ 461.906607][T10141] bridge_slave_1: entered promiscuous mode [ 461.954489][T10357] loop8: detected capacity change from 0 to 512 [ 462.009646][T10357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 462.009803][T10357] System zones: 1-12 [ 462.036657][T10357] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.1157: missing EA_INODE flag [ 462.036734][T10357] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 462.053637][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 462.053671][ C0] EXT4-fs (loop8): initial error at time 1792323691: ext4_xattr_inode_iget:437: inode 12 [ 462.053724][ C0] EXT4-fs (loop8): last error at time 1792323691: ext4_xattr_inode_iget:437: inode 12 [ 462.142148][T10357] EXT4-fs error (device loop8): ext4_xattr_inode_iget:440: comm syz.8.1157: error while reading EA inode 12 err=-117 [ 462.142235][T10357] loop8: lost filesystem error report for type 5 error -117 [ 462.147731][T10357] EXT4-fs (loop8): 1 orphan inode deleted [ 462.209502][T10357] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.243755][T10141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.272947][T10141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.346212][ T9868] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.412285][T10141] team0: Port device team_slave_0 added [ 462.419578][T10141] team0: Port device team_slave_1 added [ 462.496433][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.496563][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.550378][T10141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.550407][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.550486][T10141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.608466][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.608626][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.624123][T10141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.624149][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.624197][T10141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.890673][T10141] hsr_slave_0: entered promiscuous mode [ 462.895150][T10141] hsr_slave_1: entered promiscuous mode [ 462.897644][T10141] debugfs: 'hsr0' already exists in 'hsr' [ 462.897673][T10141] Cannot create hsr debugfs directory [ 462.914492][ T9979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.058727][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.404147][ T9979] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.410027][ T31] bridge_slave_1: left allmulticast mode [ 463.414726][ T31] bridge_slave_1: left promiscuous mode [ 463.414977][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.455231][ T31] bridge_slave_0: left allmulticast mode [ 463.455271][ T31] bridge_slave_0: left promiscuous mode [ 463.455586][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.668472][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'. [ 463.864900][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.883236][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.887281][ T31] bond0 (unregistering): Released all slaves [ 464.240393][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.240527][ T7724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.545679][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.545809][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.259669][T10430] overlayfs: failed to clone upperpath [ 465.596722][T10438] overlayfs: failed to clone upperpath [ 465.747346][ T31] hsr_slave_0: left promiscuous mode [ 465.749878][ T31] hsr_slave_1: left promiscuous mode [ 465.750821][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.773307][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.102887][ T31] team0 (unregistering): Port device team_slave_1 removed [ 466.119568][ T31] team0 (unregistering): Port device team_slave_0 removed [ 466.935332][T10141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.980054][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.982623][T10141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.054824][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.055875][T10141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.103666][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.124176][ T9868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.128464][T10141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.155361][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.221288][T10460] loop8: detected capacity change from 0 to 2048 [ 467.413918][T10141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.418657][T10460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 467.576096][T10141] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.608010][ T9979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.658961][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.659091][ T7740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.729540][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.729669][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.830569][ T8418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 468.115631][ T9979] veth0_vlan: entered promiscuous mode [ 468.187363][ T9979] veth1_vlan: entered promiscuous mode [ 468.316647][ T9868] veth0_vlan: entered promiscuous mode [ 468.350739][ T9868] veth1_vlan: entered promiscuous mode [ 468.397515][ T9979] veth0_macvtap: entered promiscuous mode [ 468.440667][ T9979] veth1_macvtap: entered promiscuous mode [ 468.527135][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.537205][ T9868] veth0_macvtap: entered promiscuous mode [ 468.570561][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.594170][ T9868] veth1_macvtap: entered promiscuous mode [ 468.668251][ T9955] usb 6-1: USB disconnect, device number 9 [ 468.677975][ T9955] usblp0: removed [ 468.950426][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.018385][T10509] FAULT_INJECTION: forcing a failure. [ 469.018385][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 469.018437][T10509] CPU: 0 UID: 0 PID: 10509 Comm: syz.5.1186 Not tainted syzkaller #0 PREEMPT(full) [ 469.018484][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 469.018509][T10509] Call Trace: [ 469.018522][T10509] [ 469.018538][T10509] dump_stack_lvl+0x100/0x190 [ 469.018592][T10509] should_fail_ex.cold+0x5/0xa [ 469.018631][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.018682][T10509] should_failslab+0xc2/0x120 [ 469.018729][T10509] __kvmalloc_node_noprof+0x113/0x9b0 [ 469.018769][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.018813][T10509] ? lockdep_init_map_type+0x5c/0x250 [ 469.018860][T10509] ? alloc_netdev_mqs+0xd40/0x15c0 [ 469.018915][T10509] alloc_netdev_mqs+0xd40/0x15c0 [ 469.018972][T10509] rtnl_create_link+0xc13/0xf80 [ 469.019029][T10509] rtnl_newlink+0x15bc/0x2620 [ 469.019097][T10509] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.019149][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.019192][T10509] ? rcu_is_watching+0x13/0xc0 [ 469.019270][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.019323][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.019372][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.019415][T10509] ? find_held_lock+0x2b/0x80 [ 469.019474][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.019517][T10509] ? lock_acquire+0x1d1/0x380 [ 469.019564][T10509] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 469.019620][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.019667][T10509] ? find_held_lock+0x2b/0x80 [ 469.019724][T10509] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 469.019780][T10509] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 469.019832][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.019885][T10509] ? __pfx_rtnl_newlink+0x10/0x10 [ 469.019941][T10509] rtnetlink_rcv_msg+0x95e/0xe90 [ 469.020003][T10509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.020071][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.020117][T10509] ? ref_tracker_free+0x37e/0x6c0 [ 469.020179][T10509] netlink_rcv_skb+0x159/0x420 [ 469.020227][T10509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.020289][T10509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.020363][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.020404][T10509] ? netlink_deliver_tap+0x1ae/0xcc0 [ 469.020453][T10509] netlink_unicast+0x65f/0x950 [ 469.020503][T10509] ? __pfx_netlink_unicast+0x10/0x10 [ 469.020559][T10509] netlink_sendmsg+0x8b0/0xda0 [ 469.020609][T10509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.020656][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.020698][T10509] ? apparmor_socket_sendmsg+0x165/0x280 [ 469.020744][T10509] ____sys_sendmsg+0xa4d/0xbe0 [ 469.020813][T10509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.020858][T10509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.020934][T10509] ___sys_sendmsg+0x190/0x1e0 [ 469.020996][T10509] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.021056][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.021099][T10509] ? futex_wait+0x11e/0x370 [ 469.021151][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.021194][T10509] ? find_held_lock+0x2b/0x80 [ 469.021273][T10509] __sys_sendmsg+0x160/0x210 [ 469.021322][T10509] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.021389][T10509] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.021443][T10509] do_syscall_64+0x123/0x790 [ 469.021486][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.021522][T10509] RIP: 0033:0x7f35ff79e559 [ 469.021550][T10509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.021585][T10509] RSP: 002b:00007f360068f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.021624][T10509] RAX: ffffffffffffffda RBX: 00007f35ffa25fa0 RCX: 00007f35ff79e559 [ 469.021652][T10509] RDX: 0000000020048004 RSI: 0000200000000040 RDI: 0000000000000004 [ 469.021678][T10509] RBP: 00007f35ff835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 469.021704][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.021729][T10509] R13: 00007f35ffa26038 R14: 00007f35ffa25fa0 R15: 00007ffc7c1476c8 [ 469.021785][T10509] [ 469.072626][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.296498][ T7724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.296531][ T7724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.473372][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.479907][ T161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.480364][ T161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.480670][ T161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.648507][T10518] FAULT_INJECTION: forcing a failure. [ 469.648507][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 469.648561][T10518] CPU: 1 UID: 0 PID: 10518 Comm: syz.8.1189 Not tainted syzkaller #0 PREEMPT(full) [ 469.648607][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 469.648632][T10518] Call Trace: [ 469.648646][T10518] [ 469.648662][T10518] dump_stack_lvl+0x100/0x190 [ 469.648724][T10518] should_fail_ex.cold+0x5/0xa [ 469.648769][T10518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.648825][T10518] should_failslab+0xc2/0x120 [ 469.648875][T10518] __kmalloc_cache_noprof+0x91/0x6d0 [ 469.648944][T10518] ? do_getname+0x238/0x390 [ 469.649012][T10518] do_getname+0x238/0x390 [ 469.649075][T10518] __x64_sys_symlinkat+0x7c/0xe0 [ 469.649132][T10518] do_syscall_64+0x123/0x790 [ 469.649183][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.649224][T10518] RIP: 0033:0x7f24a899e559 [ 469.649256][T10518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.649294][T10518] RSP: 002b:00007f24a6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 469.649332][T10518] RAX: ffffffffffffffda RBX: 00007f24a8c25fa0 RCX: 00007f24a899e559 [ 469.649341][ T7724] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.649359][T10518] RDX: 0000000000000000 RSI: ffffffffffffff9c RDI: 00002000000001c0 [ 469.649384][T10518] RBP: 00007f24a8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 469.649410][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.649434][T10518] R13: 00007f24a8c26038 R14: 00007f24a8c25fa0 R15: 00007ffc565bfc48 [ 469.649485][T10518] [ 469.662782][ T7724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.662815][ T7724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.726121][ T149] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.727841][ T1150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.728901][ T1150] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.777948][T10520] loop5: detected capacity change from 0 to 512 [ 470.020071][T10520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.113035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.113068][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.150081][T10527] xt_hashlimit: size too large, truncated to 1048576 [ 470.248540][T10141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.270508][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.450545][ T7724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.450579][ T7724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.295139][T10141] veth0_vlan: entered promiscuous mode [ 471.328835][T10141] veth1_vlan: entered promiscuous mode [ 471.501145][T10141] veth0_macvtap: entered promiscuous mode [ 471.526560][T10141] veth1_macvtap: entered promiscuous mode [ 471.612655][T10565] smc: net device ip6erspan0 applied user defined pnetid SYZ2 [ 471.624678][T10141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.658714][T10141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.733821][ T1150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.814630][ T149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.874414][ T149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.901142][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.080352][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.080389][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.283800][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.283834][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.848295][T10590] netlink: 'syz.1.1221': attribute type 22 has an invalid length. [ 472.848328][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 472.900146][ T7740] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.913501][T10590] netlink: 'syz.1.1221': attribute type 22 has an invalid length. [ 472.913529][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 472.985048][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.985174][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.985230][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.354697][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 473.430018][ T30] audit: type=1326 audit(1792323702.958:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.5.1215" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35ff79e559 code=0x0 [ 474.184650][T10616] Set syz1 is full, maxelem 6117 reached [ 474.487435][ T7740] IPVS: starting estimator thread 0... [ 474.570428][T10629] IPVS: using max 23 ests per chain, 55200 per kthread [ 474.666970][T10635] loop9: detected capacity change from 0 to 512 [ 474.755417][T10635] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.755554][T10635] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.761359][T10632] FAULT_INJECTION: forcing a failure. [ 474.761359][T10632] name failslab, interval 1, probability 0, space 0, times 0 [ 474.761408][T10632] CPU: 1 UID: 0 PID: 10632 Comm: syz.5.1223 Not tainted syzkaller #0 PREEMPT(full) [ 474.761455][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 474.761479][T10632] Call Trace: [ 474.761492][T10632] [ 474.761508][T10632] dump_stack_lvl+0x100/0x190 [ 474.761569][T10632] should_fail_ex.cold+0x5/0xa [ 474.761622][T10632] should_failslab+0xc2/0x120 [ 474.761672][T10632] kmem_cache_alloc_noprof+0x92/0x6a0 [ 474.761715][T10632] ? dst_alloc+0x99/0x1a0 [ 474.761768][T10632] dst_alloc+0x99/0x1a0 [ 474.761808][T10632] ? ip6_route_output_flags+0x238/0x650 [ 474.761871][T10632] ip6_blackhole_route+0x5f/0x4e0 [ 474.761936][T10632] xfrm_lookup_route+0x10e/0x200 [ 474.761981][T10632] vti6_tnl_xmit+0x5ac/0x1fe0 [ 474.762048][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.762095][T10632] ? __lock_acquire+0x5c0/0x1f40 [ 474.762139][T10632] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 474.762204][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.762265][T10632] dev_hard_start_xmit+0x121/0x760 [ 474.762317][T10632] __dev_queue_xmit+0x1c25/0x4a40 [ 474.762371][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.762419][T10632] ? rcu_is_watching+0x13/0xc0 [ 474.762475][T10632] ? __pfx___dev_queue_xmit+0x10/0x10 [ 474.762512][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.762559][T10632] ? __kasan_kmalloc+0xaa/0xb0 [ 474.762604][T10632] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 474.762651][T10632] ? pskb_expand_head+0x249/0x10e0 [ 474.762703][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.762750][T10632] ? skb_release_data+0x65e/0x860 [ 474.762799][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.762851][T10632] ? kmalloc_reserve+0xf9/0x350 [ 474.762910][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.762957][T10632] ? skb_headers_offset_update+0x129/0x260 [ 474.763029][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.763078][T10632] ? do_csum+0x1e5/0x380 [ 474.763147][T10632] __bpf_redirect+0x989/0xf90 [ 474.763217][T10632] bpf_clone_redirect+0x37b/0x500 [ 474.763286][T10632] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 474.763324][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.763371][T10632] ? __schedule+0x126b/0x6920 [ 474.763443][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.763497][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.763552][T10632] ? __pfx___schedule+0x10/0x10 [ 474.763613][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.763659][T10632] ? find_held_lock+0x2b/0x80 [ 474.763715][T10632] ? bpf_test_timer_enter+0xf7/0x2c0 [ 474.763779][T10632] ? preempt_schedule_thunk+0x16/0x40 [ 474.763829][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.763881][T10632] ? preempt_schedule_common+0x3c/0xb0 [ 474.763945][T10632] ? preempt_schedule_thunk+0x16/0x40 [ 474.763992][T10632] ? __pfx___cant_migrate+0x10/0x10 [ 474.764043][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.764089][T10632] ? bpf_test_timer_continue+0x17b/0x5e0 [ 474.764156][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.764204][T10632] bpf_test_run+0x39c/0xa40 [ 474.764268][T10632] ? bpf_test_run+0x1c6/0xa40 [ 474.764340][T10632] ? __pfx_bpf_test_run+0x10/0x10 [ 474.764421][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.764468][T10632] ? do_csum+0x1e5/0x380 [ 474.764541][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.764602][T10632] bpf_prog_test_run_skb+0x15b3/0x3530 [ 474.764643][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.764697][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.764744][T10632] ? lock_acquire+0x1d1/0x380 [ 474.764794][T10632] ? __fget_files+0x131/0x3d0 [ 474.764859][T10632] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 474.764904][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.764954][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.765000][T10632] ? fput+0x7c/0x100 [ 474.765047][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.765098][T10632] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 474.765143][T10632] __sys_bpf+0x2265/0x4a30 [ 474.765217][T10632] ? __pfx___sys_bpf+0x10/0x10 [ 474.765273][T10632] ? find_held_lock+0x2b/0x80 [ 474.765332][T10632] ? futex_wake+0x4ea/0x5e0 [ 474.765396][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.765488][T10632] ? futex_wake+0x220/0x5e0 [ 474.765553][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.765625][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.765671][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.765717][T10632] ? __x64_sys_futex+0x358/0x4d0 [ 474.765778][T10632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.765824][T10632] ? xfd_validate_state+0x129/0x190 [ 474.765881][T10632] ? __x64_sys_bpf+0xce/0x140 [ 474.765941][T10632] __x64_sys_bpf+0xce/0x140 [ 474.766003][T10632] ? do_syscall_64+0xae/0x790 [ 474.766045][T10632] do_syscall_64+0x123/0x790 [ 474.766091][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.766131][T10632] RIP: 0033:0x7f35ff79e559 [ 474.766162][T10632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.766200][T10632] RSP: 002b:00007f360068f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.766237][T10632] RAX: ffffffffffffffda RBX: 00007f35ffa25fa0 RCX: 00007f35ff79e559 [ 474.766263][T10632] RDX: 0000000000000050 RSI: 0000200000001500 RDI: 000000000000000a [ 474.766288][T10632] RBP: 00007f35ff835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 474.766313][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.766338][T10632] R13: 00007f35ffa26038 R14: 00007f35ffa25fa0 R15: 00007ffc7c1476c8 [ 474.766397][T10632] [ 474.942493][T10635] EXT4-fs (loop9): shut down requested (0) [ 475.023525][T10642] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.1226: No space for directory leaf checksum. Please run e2fsck -D. [ 475.023635][T10642] EXT4-fs error (device loop9): ext4_readdir:224: inode #2: comm syz.9.1226: path /6/file0: directory fails checksum at offset 0 [ 475.192951][ T5614] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 475.920178][ T5760] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 476.072372][ T5760] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 476.075612][ T5760] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 476.075653][ T5760] usb 4-1: config 0 has no interface number 0 [ 476.075711][ T5760] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 476.075758][ T5760] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 476.088969][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 476.089010][ T5760] usb 4-1: Product: syz [ 476.089037][ T5760] usb 4-1: SerialNumber: syz [ 476.133453][ T5760] usb 4-1: config 0 descriptor?? [ 476.185598][ T5760] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 476.798610][T10653] loop3: detected capacity change from 0 to 40427 [ 476.828286][T10653] F2FS-fs (loop3): Image doesn't support compression [ 476.828323][T10653] F2FS-fs (loop3): build fault injection rate: 690 [ 476.829279][T10653] F2FS-fs (loop3): invalid crc value [ 476.907034][T10664] FAULT_INJECTION: forcing a failure. [ 476.907034][T10664] name failslab, interval 1, probability 0, space 0, times 0 [ 476.907086][T10664] CPU: 0 UID: 0 PID: 10664 Comm: syz.8.1234 Not tainted syzkaller #0 PREEMPT(full) [ 476.907133][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 476.907158][T10664] Call Trace: [ 476.907171][T10664] [ 476.907187][T10664] dump_stack_lvl+0x100/0x190 [ 476.907248][T10664] should_fail_ex.cold+0x5/0xa [ 476.907294][T10664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.907357][T10664] should_failslab+0xc2/0x120 [ 476.907407][T10664] __kmalloc_cache_noprof+0x91/0x6d0 [ 476.907467][T10664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.907517][T10664] ? alloc_mnt_ns+0xce/0x520 [ 476.907569][T10664] alloc_mnt_ns+0xce/0x520 [ 476.907615][T10664] __do_sys_fsmount+0x848/0xec0 [ 476.907676][T10664] ? __pfx___do_sys_fsmount+0x10/0x10 [ 476.907742][T10664] ? srso_alias_return_thunk+0x5/0xfbef5 [ 476.907799][T10664] do_syscall_64+0x123/0x790 [ 476.907846][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.907888][T10664] RIP: 0033:0x7f24a899e559 [ 476.907919][T10664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.907958][T10664] RSP: 002b:00007f24a6bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 476.907997][T10664] RAX: ffffffffffffffda RBX: 00007f24a8c25fa0 RCX: 00007f24a899e559 [ 476.908025][T10664] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000005 [ 476.908050][T10664] RBP: 00007f24a8a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 476.908076][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.908102][T10664] R13: 00007f24a8c26038 R14: 00007f24a8c25fa0 R15: 00007ffc565bfc48 [ 476.908156][T10664] [ 476.944604][T10653] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 476.972868][T10653] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 476.988386][ T9868] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.666527][ T5760] usb 4-1: USB disconnect, device number 5 [ 478.131903][T10684] FAULT_INJECTION: forcing a failure. [ 478.131903][T10684] name failslab, interval 1, probability 0, space 0, times 0 [ 478.131960][T10684] CPU: 1 UID: 0 PID: 10684 Comm: syz.5.1240 Not tainted syzkaller #0 PREEMPT(full) [ 478.132007][T10684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 478.132031][T10684] Call Trace: [ 478.132044][T10684] [ 478.132059][T10684] dump_stack_lvl+0x100/0x190 [ 478.132122][T10684] should_fail_ex.cold+0x5/0xa [ 478.132167][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.132224][T10684] should_failslab+0xc2/0x120 [ 478.132272][T10684] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 478.132320][T10684] ? copy_array.constprop.0+0x93/0x110 [ 478.132386][T10684] krealloc_node_align_noprof+0x321/0x3e0 [ 478.132435][T10684] copy_array.constprop.0+0x93/0x110 [ 478.132486][T10684] bpf_copy_verifier_state+0xc24/0x1250 [ 478.132559][T10684] bpf_is_state_visited+0x1ed5/0x36e0 [ 478.132658][T10684] do_check_common+0x3a1d/0xc710 [ 478.132750][T10684] ? kfree+0x22b/0x6d0 [ 478.132806][T10684] ? __pfx_do_check_common+0x10/0x10 [ 478.132862][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.132907][T10684] ? mark_fastcall_pattern_for_call+0x6aa/0x820 [ 478.132994][T10684] bpf_check+0xa1fa/0xac70 [ 478.133044][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.133092][T10684] ? __css_rstat_updated+0x1ce/0x590 [ 478.133146][T10684] ? __lock_acquire+0x5c0/0x1f40 [ 478.133192][T10684] ? __pfx___css_rstat_updated+0x10/0x10 [ 478.133279][T10684] ? __pfx_bpf_check+0x10/0x10 [ 478.133326][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.133380][T10684] ? lock_acquire+0x1d1/0x380 [ 478.133424][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.133472][T10684] ? find_held_lock+0x2b/0x80 [ 478.133530][T10684] ? bpf_prog_load+0x1a27/0x2ab0 [ 478.133580][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.133633][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.133681][T10684] ? __asan_memset+0x23/0x50 [ 478.133744][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.133801][T10684] ? bpf_prog_load+0x1ae1/0x2ab0 [ 478.133848][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.133896][T10684] bpf_prog_load+0x1ae1/0x2ab0 [ 478.133957][T10684] ? __pfx_bpf_prog_load+0x10/0x10 [ 478.134004][T10684] ? lock_acquire+0x1d1/0x380 [ 478.134053][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134138][T10684] __sys_bpf+0x1f46/0x4a30 [ 478.134213][T10684] ? __pfx___sys_bpf+0x10/0x10 [ 478.134270][T10684] ? find_held_lock+0x2b/0x80 [ 478.134326][T10684] ? futex_wake+0x4ea/0x5e0 [ 478.134396][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134448][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134526][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134575][T10684] ? kmem_cache_free+0x127/0x6c0 [ 478.134644][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134717][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134765][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134813][T10684] ? __x64_sys_futex+0x358/0x4d0 [ 478.134872][T10684] ? __x64_sys_openat+0x12d/0x210 [ 478.134929][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.134977][T10684] ? xfd_validate_state+0x129/0x190 [ 478.135026][T10684] ? __x64_sys_bpf+0xce/0x140 [ 478.135086][T10684] __x64_sys_bpf+0xce/0x140 [ 478.135150][T10684] ? do_syscall_64+0xae/0x790 [ 478.135194][T10684] do_syscall_64+0x123/0x790 [ 478.135240][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.135281][T10684] RIP: 0033:0x7f35ff79e559 [ 478.135313][T10684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.135353][T10684] RSP: 002b:00007f360068f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.135400][T10684] RAX: ffffffffffffffda RBX: 00007f35ffa25fa0 RCX: 00007f35ff79e559 [ 478.135428][T10684] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 478.135454][T10684] RBP: 00007f35ff835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 478.135479][T10684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.135504][T10684] R13: 00007f35ffa26038 R14: 00007f35ffa25fa0 R15: 00007ffc7c1476c8 [ 478.135559][T10684] [ 478.636677][T10674] loop7: detected capacity change from 0 to 32768 [ 478.650291][T10674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1238 (10674) [ 478.729286][T10674] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 478.729339][T10674] BTRFS info (device loop7): using sha256 checksum algorithm [ 478.776462][ T9979] syz-executor: attempt to access beyond end of device [ 478.776462][ T9979] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 478.838749][ T9979] CPU: 1 UID: 0 PID: 9979 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 478.838804][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 478.838829][ T9979] Call Trace: [ 478.838843][ T9979] [ 478.838859][ T9979] dump_stack_lvl+0x100/0x190 [ 478.838922][ T9979] f2fs_stop_checkpoint+0x5e6/0xb30 [ 478.838989][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.839037][ T9979] ? errseq_set+0xe3/0x150 [ 478.839078][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.839134][ T9979] f2fs_write_end_bio+0xef9/0x12d0 [ 478.839205][ T9979] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 478.839269][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.839323][ T9979] ? find_held_lock+0x2b/0x80 [ 478.839387][ T9979] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 478.839434][ T9979] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 478.839480][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.839535][ T9979] f2fs_write_end_io+0xc8/0x240 [ 478.839593][ T9979] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 478.839653][ T9979] bio_endio+0x7ba/0x9c0 [ 478.839705][ T9979] submit_bio_noacct+0x22a/0x2130 [ 478.839781][ T9979] f2fs_submit_write_bio+0x133/0x330 [ 478.839841][ T9979] __submit_merged_bio+0x330/0x7b0 [ 478.839902][ T9979] ? rcu_is_watching+0x13/0xc0 [ 478.839961][ T9979] __submit_merged_write_cond+0x3fe/0x510 [ 478.840038][ T9979] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 478.840114][ T9979] ? __pfx___might_resched+0x10/0x10 [ 478.840178][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.840223][ T9979] ? folio_clear_dirty_for_io+0x178/0x960 [ 478.840290][ T9979] f2fs_write_cache_pages+0x20e9/0x2630 [ 478.840357][ T9979] ? __lock_acquire+0x5c0/0x1f40 [ 478.840460][ T9979] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 478.840505][ T9979] ? __kasan_check_byte+0x13/0x50 [ 478.840552][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.840600][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.840645][ T9979] ? rcu_is_watching+0x13/0xc0 [ 478.840701][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.840746][ T9979] ? __kasan_check_byte+0x13/0x50 [ 478.840811][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.840858][ T9979] ? is_bpf_text_address+0x8a/0x1a0 [ 478.840903][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.840948][ T9979] ? rcu_is_watching+0x13/0xc0 [ 478.841015][ T9979] ? kernel_text_address+0x8d/0x100 [ 478.841073][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.841118][ T9979] ? __kernel_text_address+0xd/0x30 [ 478.841240][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.841289][ T9979] ? check_prev_add+0x354/0xe60 [ 478.841334][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.841387][ T9979] ? rcu_is_watching+0x13/0xc0 [ 478.841448][ T9979] f2fs_write_data_pages+0x799/0x16d0 [ 478.841511][ T9979] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 478.841556][ T9979] ? lock_acquire+0x1d1/0x380 [ 478.841607][ T9979] ? do_writepages+0x4b5/0x600 [ 478.841666][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.841720][ T9979] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 478.841772][ T9979] do_writepages+0x278/0x600 [ 478.841841][ T9979] ? __pfx_do_writepages+0x10/0x10 [ 478.841902][ T9979] ? do_raw_spin_unlock+0x145/0x1e0 [ 478.841955][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.842003][ T9979] ? _raw_spin_unlock+0x28/0x50 [ 478.842069][ T9979] filemap_writeback+0x22d/0x2e0 [ 478.842136][ T9979] ? __pfx_filemap_writeback+0x10/0x10 [ 478.842256][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.842303][ T9979] ? find_held_lock+0x2b/0x80 [ 478.842360][ T9979] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 478.842412][ T9979] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 478.842458][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.842519][ T9979] f2fs_sync_dirty_inodes+0x452/0x960 [ 478.842585][ T9979] block_operations+0x2a6/0xfc0 [ 478.842644][ T9979] ? __pfx_block_operations+0x10/0x10 [ 478.842749][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.842799][ T9979] ? ktime_get+0x22c/0x320 [ 478.842844][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.842891][ T9979] ? rcu_is_watching+0x13/0xc0 [ 478.842953][ T9979] f2fs_write_checkpoint+0x58b/0x53e0 [ 478.843033][ T9979] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 478.843094][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.843142][ T9979] ? rcu_is_watching+0x13/0xc0 [ 478.843196][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.843243][ T9979] ? kthread_stop+0x280/0x630 [ 478.843302][ T9979] kill_f2fs_super+0x3f1/0x4a0 [ 478.843351][ T9979] ? __pfx_kill_f2fs_super+0x10/0x10 [ 478.843425][ T9979] ? lockdep_hardirqs_on+0x7d/0x110 [ 478.843464][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.843512][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.843576][ T9979] deactivate_locked_super+0xbd/0x130 [ 478.843644][ T9979] deactivate_super+0xea/0x110 [ 478.843710][ T9979] cleanup_mnt+0xb7/0x160 [ 478.843772][ T9979] task_work_run+0x150/0x240 [ 478.843832][ T9979] ? __pfx_task_work_run+0x10/0x10 [ 478.843895][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.843952][ T9979] exit_to_user_mode_loop+0x1d8/0x700 [ 478.844000][ T9979] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.844048][ T9979] ? rcu_is_watching+0x13/0xc0 [ 478.844105][ T9979] do_syscall_64+0x661/0x790 [ 478.844149][ T9979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.844188][ T9979] RIP: 0033:0x7f070df9f797 [ 478.844219][ T9979] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 478.844255][ T9979] RSP: 002b:00007ffcb8fb2128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 478.844292][ T9979] RAX: 0000000000000000 RBX: 00007f070e034efb RCX: 00007f070df9f797 [ 478.844317][ T9979] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb8fb21e0 [ 478.844342][ T9979] RBP: 00007ffcb8fb21e0 R08: 00007ffcb8fb31e0 R09: 00000000ffffffff [ 478.844367][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb8fb3270 [ 478.844403][ T9979] R13: 00007f070e034efb R14: 0000000000074ab6 R15: 00007ffcb8fb32b0 [ 478.844455][ T9979] [ 478.858346][ T9979] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 479.519407][T10674] BTRFS info (device loop7): enabling ssd optimizations [ 479.519450][T10674] BTRFS info (device loop7): disabling tree log [ 479.519481][T10674] BTRFS info (device loop7): turning on async discard [ 479.519512][T10674] BTRFS info (device loop7): enabling free space tree [ 479.951383][ T9944] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 480.104511][ T9944] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 480.108685][ T9944] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 480.108735][ T9944] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 480.108782][ T9944] usb 9-1: config 1 interface 0 has no altsetting 0 [ 480.172937][ T9944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.172981][ T9944] usb 9-1: Product: syz [ 480.173009][ T9944] usb 9-1: Manufacturer: syz [ 480.173037][ T9944] usb 9-1: SerialNumber: syz [ 480.177563][T10141] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.227994][T10721] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 480.228142][T10721] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 480.447789][T10728] bond3: entered allmulticast mode [ 480.557619][T10731] wireguard0: entered promiscuous mode [ 480.557687][T10731] wireguard0: entered allmulticast mode [ 480.599610][T10731] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 480.600832][T10731] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 481.577695][T10763] FAULT_INJECTION: forcing a failure. [ 481.577695][T10763] name failslab, interval 1, probability 0, space 0, times 0 [ 481.577741][T10763] CPU: 1 UID: 0 PID: 10763 Comm: syz.9.1257 Not tainted syzkaller #0 PREEMPT(full) [ 481.577783][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 481.577805][T10763] Call Trace: [ 481.577817][T10763] [ 481.577832][T10763] dump_stack_lvl+0x100/0x190 [ 481.577889][T10763] should_fail_ex.cold+0x5/0xa [ 481.577930][T10763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.577987][T10763] should_failslab+0xc2/0x120 [ 481.578035][T10763] __kmalloc_cache_noprof+0x91/0x6d0 [ 481.578091][T10763] ? ptp_open+0xe3/0x510 [ 481.578161][T10763] ptp_open+0xe3/0x510 [ 481.578218][T10763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.578268][T10763] ? __pfx_ptp_open+0x10/0x10 [ 481.578337][T10763] ? kobject_get_unless_zero+0x156/0x200 [ 481.578398][T10763] ? posix_clock_open+0xc8/0x290 [ 481.578457][T10763] ? __pfx_ptp_open+0x10/0x10 [ 481.578532][T10763] posix_clock_open+0x17b/0x290 [ 481.578586][T10763] ? __pfx_posix_clock_open+0x10/0x10 [ 481.578651][T10763] chrdev_open+0x234/0x6a0 [ 481.578708][T10763] ? __pfx_apparmor_file_open+0x10/0x10 [ 481.578782][T10763] ? __pfx_chrdev_open+0x10/0x10 [ 481.578843][T10763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.578899][T10763] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 481.578980][T10763] do_dentry_open+0x6ab/0x14d0 [ 481.579020][T10763] ? __pfx_chrdev_open+0x10/0x10 [ 481.579070][T10763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.579132][T10763] vfs_open+0x82/0x3f0 [ 481.579185][T10763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.579243][T10763] path_openat+0x1a23/0x2450 [ 481.579304][T10763] ? __pfx_path_openat+0x10/0x10 [ 481.579375][T10763] do_file_open+0x20e/0x430 [ 481.579433][T10763] ? __pfx_do_file_open+0x10/0x10 [ 481.579520][T10763] ? _raw_spin_unlock+0x28/0x50 [ 481.579582][T10763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.579631][T10763] ? alloc_fd+0x471/0x7a0 [ 481.579698][T10763] do_sys_openat2+0x10f/0x1e0 [ 481.579752][T10763] ? __pfx_do_sys_openat2+0x10/0x10 [ 481.579821][T10763] __x64_sys_openat+0x12d/0x210 [ 481.579872][T10763] ? __pfx___x64_sys_openat+0x10/0x10 [ 481.579930][T10763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 481.579982][T10763] do_syscall_64+0x123/0x790 [ 481.580025][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.580063][T10763] RIP: 0033:0x7ff3d459e559 [ 481.580092][T10763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.580129][T10763] RSP: 002b:00007ff3d542a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 481.580164][T10763] RAX: ffffffffffffffda RBX: 00007ff3d4825fa0 RCX: 00007ff3d459e559 [ 481.580189][T10763] RDX: 0000000000000100 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 481.580214][T10763] RBP: 00007ff3d4635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 481.580235][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.580256][T10763] R13: 00007ff3d4826038 R14: 00007ff3d4825fa0 R15: 00007fffd4260b18 [ 481.580305][T10763] [ 481.937379][ T9944] rtl8150 9-1:1.0: eth13: rtl8150 is detected [ 481.955208][ T9944] usb 9-1: USB disconnect, device number 8 [ 482.340457][T10769] FAULT_INJECTION: forcing a failure. [ 482.340457][T10769] name failslab, interval 1, probability 0, space 0, times 0 [ 482.340510][T10769] CPU: 0 UID: 0 PID: 10769 Comm: syz.3.1243 Not tainted syzkaller #0 PREEMPT(full) [ 482.340557][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 482.340581][T10769] Call Trace: [ 482.340594][T10769] [ 482.340610][T10769] dump_stack_lvl+0x100/0x190 [ 482.340672][T10769] should_fail_ex.cold+0x5/0xa [ 482.340717][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.340774][T10769] should_failslab+0xc2/0x120 [ 482.340846][T10769] kmem_cache_alloc_noprof+0x92/0x6a0 [ 482.340887][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.340937][T10769] ? security_file_alloc+0x34/0x2c0 [ 482.341001][T10769] security_file_alloc+0x34/0x2c0 [ 482.341054][T10769] init_file+0x95/0x480 [ 482.341106][T10769] alloc_empty_file+0x79/0x1c0 [ 482.341162][T10769] alloc_file_pseudo+0x183/0x290 [ 482.341220][T10769] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 482.341273][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.341324][T10769] ? alloc_fd+0x471/0x7a0 [ 482.341387][T10769] sock_alloc_file+0x50/0x210 [ 482.341444][T10769] sctp_getsockopt_peeloff_common.constprop.0+0x378/0x640 [ 482.341505][T10769] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 482.341578][T10769] sctp_getsockopt+0x2fb2/0x7160 [ 482.341634][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.341683][T10769] ? aa_inet_opt_perm+0x30d/0x970 [ 482.341753][T10769] ? __pfx_sctp_getsockopt+0x10/0x10 [ 482.341806][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.341860][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.341922][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.341970][T10769] ? futex_unqueue+0x13d/0x2c0 [ 482.342029][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.342077][T10769] ? lock_acquire+0x1d1/0x380 [ 482.342120][T10769] ? __might_fault+0xc5/0x140 [ 482.342177][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.342225][T10769] ? find_held_lock+0x2b/0x80 [ 482.342283][T10769] ? __might_fault+0xc5/0x140 [ 482.342337][T10769] ? __might_fault+0xc5/0x140 [ 482.342397][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.342460][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.342509][T10769] ? _copy_from_user+0x59/0xd0 [ 482.342550][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.342597][T10769] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 482.342662][T10769] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 482.342726][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.342779][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.342828][T10769] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 482.342892][T10769] do_sock_getsockopt+0x50a/0x6e0 [ 482.342961][T10769] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 482.343027][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.343078][T10769] ? __fget_files+0x34/0x3d0 [ 482.343124][T10769] ? find_held_lock+0x2b/0x80 [ 482.343193][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.343241][T10769] ? __fget_files+0x21f/0x3d0 [ 482.343299][T10769] __sys_getsockopt+0x148/0x260 [ 482.343353][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.343414][T10769] ? __x64_sys_getsockopt+0xbd/0x160 [ 482.343461][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.343508][T10769] __x64_sys_getsockopt+0xbd/0x160 [ 482.343555][T10769] ? do_syscall_64+0xae/0x790 [ 482.343594][T10769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.343642][T10769] ? lockdep_hardirqs_on+0x7d/0x110 [ 482.343682][T10769] do_syscall_64+0x123/0x790 [ 482.343726][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.343768][T10769] RIP: 0033:0x7f070df9e559 [ 482.343799][T10769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.343838][T10769] RSP: 002b:00007f070ee35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 482.343877][T10769] RAX: ffffffffffffffda RBX: 00007f070e225fa0 RCX: 00007f070df9e559 [ 482.343904][T10769] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 482.343930][T10769] RBP: 00007f070e035ab8 R08: 0000200000000640 R09: 0000000000000000 [ 482.343956][T10769] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 482.343982][T10769] R13: 00007f070e226038 R14: 00007f070e225fa0 R15: 00007ffcb8fb2eb8 [ 482.344037][T10769] [ 483.237653][T10785] loop7: detected capacity change from 0 to 1024 [ 483.288392][T10785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.363738][T10802] FAULT_INJECTION: forcing a failure. [ 484.363738][T10802] name failslab, interval 1, probability 0, space 0, times 0 [ 484.363792][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz.7.1268 Not tainted syzkaller #0 PREEMPT(full) [ 484.363839][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 484.363864][T10802] Call Trace: [ 484.363878][T10802] [ 484.363895][T10802] dump_stack_lvl+0x100/0x190 [ 484.363961][T10802] should_fail_ex.cold+0x5/0xa [ 484.364009][T10802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.364070][T10802] should_failslab+0xc2/0x120 [ 484.364123][T10802] __kmalloc_flags_noprof+0x122/0x8e0 [ 484.364188][T10802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.364244][T10802] ? alloc_slab_obj_exts+0x6a/0x170 [ 484.364323][T10802] alloc_slab_obj_exts+0x6a/0x170 [ 484.364395][T10802] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 484.364477][T10802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.364529][T10802] ? kasan_save_track+0x14/0x30 [ 484.364580][T10802] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 484.364629][T10802] ? alloc_inode+0x183/0x250 [ 484.364705][T10802] alloc_inode+0x183/0x250 [ 484.364773][T10802] alloc_anon_inode+0x2a/0x3e0 [ 484.364830][T10802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.364888][T10802] anon_inode_make_secure_inode+0x2f/0x140 [ 484.364940][T10802] __anon_inode_getfile+0x1cf/0x280 [ 484.364983][T10802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.365042][T10802] io_uring_setup.cold+0x1982/0x1c7e [ 484.365122][T10802] ? __pfx_io_uring_setup+0x10/0x10 [ 484.365179][T10802] ? __pfx_do_futex+0x10/0x10 [ 484.365265][T10802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.365316][T10802] ? xfd_validate_state+0x129/0x190 [ 484.365378][T10802] __x64_sys_io_uring_setup+0xc2/0x170 [ 484.365427][T10802] do_syscall_64+0x123/0x790 [ 484.365475][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.365519][T10802] RIP: 0033:0x7fa7e939e559 [ 484.365550][T10802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.365591][T10802] RSP: 002b:00007fa7ea2cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 484.365630][T10802] RAX: ffffffffffffffda RBX: 00007fa7e9625fa0 RCX: 00007fa7e939e559 [ 484.365659][T10802] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00000000000067bf [ 484.365686][T10802] RBP: 00007fa7e9435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 484.365713][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.365739][T10802] R13: 00007fa7e9626038 R14: 00007fa7e9625fa0 R15: 00007ffe54e27a78 [ 484.365795][T10802] [ 484.999067][ T9944] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 485.152345][ T9944] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 485.154562][ T9944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.154616][ T9944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 485.154682][ T9944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.218469][ T9944] usb 4-1: config 0 descriptor?? [ 485.224574][T10809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.777581][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777632][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777669][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777705][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777742][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777777][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777812][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777849][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777884][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.777919][ T9944] cypress 0003:04B4:BCA1.0005: unknown main item tag 0x0 [ 485.886965][ T9944] cypress 0003:04B4:BCA1.0005: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 486.085392][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.129442][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.191757][ T5760] usb 4-1: USB disconnect, device number 6 [ 486.410128][T10837] fido_id[10837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 486.430511][T10839] FAULT_INJECTION: forcing a failure. [ 486.430511][T10839] name failslab, interval 1, probability 0, space 0, times 0 [ 486.430562][T10839] CPU: 1 UID: 0 PID: 10839 Comm: syz.9.1276 Not tainted syzkaller #0 PREEMPT(full) [ 486.430607][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 486.430632][T10839] Call Trace: [ 486.430645][T10839] [ 486.430661][T10839] dump_stack_lvl+0x100/0x190 [ 486.430724][T10839] should_fail_ex.cold+0x5/0xa [ 486.430777][T10839] should_failslab+0xc2/0x120 [ 486.430827][T10839] kmem_cache_alloc_noprof+0x92/0x6a0 [ 486.430871][T10839] ? dst_alloc+0x99/0x1a0 [ 486.430929][T10839] dst_alloc+0x99/0x1a0 [ 486.430970][T10839] ? ip6_route_output_flags+0x238/0x650 [ 486.431026][T10839] ip6_blackhole_route+0x5f/0x4e0 [ 486.431093][T10839] xfrm_lookup_route+0x10e/0x200 [ 486.431138][T10839] vti6_tnl_xmit+0x5ac/0x1fe0 [ 486.431202][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.431251][T10839] ? __lock_acquire+0x5c0/0x1f40 [ 486.431295][T10839] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 486.431361][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.431428][T10839] dev_hard_start_xmit+0x121/0x760 [ 486.431480][T10839] __dev_queue_xmit+0x1c25/0x4a40 [ 486.431536][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.431584][T10839] ? rcu_is_watching+0x13/0xc0 [ 486.431640][T10839] ? __pfx___dev_queue_xmit+0x10/0x10 [ 486.431678][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.431726][T10839] ? __kasan_kmalloc+0xaa/0xb0 [ 486.431772][T10839] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 486.431820][T10839] ? pskb_expand_head+0x249/0x10e0 [ 486.431872][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.431920][T10839] ? skb_release_data+0x65e/0x860 [ 486.431970][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.432018][T10839] ? kmalloc_reserve+0xf9/0x350 [ 486.432079][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.432126][T10839] ? skb_headers_offset_update+0x129/0x260 [ 486.432198][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.432246][T10839] ? do_csum+0x1e5/0x380 [ 486.432316][T10839] __bpf_redirect+0x989/0xf90 [ 486.432393][T10839] bpf_clone_redirect+0x37b/0x500 [ 486.432463][T10839] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 486.432502][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.432550][T10839] ? __schedule+0x126b/0x6920 [ 486.432623][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.432678][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.432734][T10839] ? __pfx___schedule+0x10/0x10 [ 486.432795][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.432843][T10839] ? find_held_lock+0x2b/0x80 [ 486.432900][T10839] ? bpf_test_timer_enter+0xf7/0x2c0 [ 486.432966][T10839] ? preempt_schedule_thunk+0x16/0x40 [ 486.433016][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.433063][T10839] ? preempt_schedule_common+0x3c/0xb0 [ 486.433127][T10839] ? preempt_schedule_thunk+0x16/0x40 [ 486.433175][T10839] ? __pfx___cant_migrate+0x10/0x10 [ 486.433228][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.433275][T10839] ? bpf_test_timer_continue+0x17b/0x5e0 [ 486.433343][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.433396][T10839] bpf_test_run+0x39c/0xa40 [ 486.433461][T10839] ? bpf_test_run+0x1c6/0xa40 [ 486.433533][T10839] ? __pfx_bpf_test_run+0x10/0x10 [ 486.433616][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.433664][T10839] ? do_csum+0x1e5/0x380 [ 486.433739][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.433801][T10839] bpf_prog_test_run_skb+0x15b3/0x3530 [ 486.433842][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.433897][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.433944][T10839] ? lock_acquire+0x1d1/0x380 [ 486.433995][T10839] ? __fget_files+0x131/0x3d0 [ 486.434056][T10839] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 486.434103][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434153][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434200][T10839] ? fput+0x7c/0x100 [ 486.434248][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434300][T10839] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 486.434346][T10839] __sys_bpf+0x2265/0x4a30 [ 486.434428][T10839] ? __pfx___sys_bpf+0x10/0x10 [ 486.434486][T10839] ? find_held_lock+0x2b/0x80 [ 486.434543][T10839] ? futex_wake+0x4ea/0x5e0 [ 486.434610][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434662][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434741][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434791][T10839] ? find_held_lock+0x2b/0x80 [ 486.434861][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434935][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.434984][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.435033][T10839] ? __x64_sys_futex+0x358/0x4d0 [ 486.435097][T10839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 486.435145][T10839] ? xfd_validate_state+0x129/0x190 [ 486.435194][T10839] ? __x64_sys_bpf+0xce/0x140 [ 486.435253][T10839] __x64_sys_bpf+0xce/0x140 [ 486.435316][T10839] ? do_syscall_64+0xae/0x790 [ 486.435359][T10839] do_syscall_64+0x123/0x790 [ 486.435411][T10839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.435453][T10839] RIP: 0033:0x7ff3d459e559 [ 486.435485][T10839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.435523][T10839] RSP: 002b:00007ff3d542a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.435561][T10839] RAX: ffffffffffffffda RBX: 00007ff3d4825fa0 RCX: 00007ff3d459e559 [ 486.435589][T10839] RDX: 0000000000000050 RSI: 0000200000001500 RDI: 000000000000000a [ 486.435614][T10839] RBP: 00007ff3d4635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 486.435640][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.435665][T10839] R13: 00007ff3d4826038 R14: 00007ff3d4825fa0 R15: 00007fffd4260b18 [ 486.435720][T10839] [ 487.069563][ T7724] IPVS: starting estimator thread 0... [ 487.158841][T10845] IPVS: using max 23 ests per chain, 55200 per kthread [ 487.387451][T10850] FAULT_INJECTION: forcing a failure. [ 487.387451][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 487.387502][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.7.1278 Not tainted syzkaller #0 PREEMPT(full) [ 487.387548][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 487.387573][T10850] Call Trace: [ 487.387586][T10850] [ 487.387602][T10850] dump_stack_lvl+0x100/0x190 [ 487.387664][T10850] should_fail_ex.cold+0x5/0xa [ 487.387709][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.387765][T10850] should_failslab+0xc2/0x120 [ 487.387815][T10850] kmem_cache_alloc_noprof+0x92/0x6a0 [ 487.387858][T10850] ? __kernfs_new_node+0xd2/0xa10 [ 487.387933][T10850] __kernfs_new_node+0xd2/0xa10 [ 487.388002][T10850] ? __pfx___kernfs_new_node+0x10/0x10 [ 487.388066][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.388111][T10850] ? lock_acquire+0x1d1/0x380 [ 487.388152][T10850] ? kernfs_root+0x23/0x2a0 [ 487.388204][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.388248][T10850] ? find_held_lock+0x2b/0x80 [ 487.388302][T10850] ? kernfs_root+0xee/0x2a0 [ 487.388353][T10850] ? kernfs_root+0xee/0x2a0 [ 487.388403][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.388462][T10850] kernfs_new_node+0x117/0x150 [ 487.388530][T10850] __kernfs_create_file+0x53/0x350 [ 487.388580][T10850] sysfs_add_file_mode_ns+0x207/0x3c0 [ 487.388643][T10850] sysfs_merge_group+0x194/0x340 [ 487.388703][T10850] ? __pfx_sysfs_merge_group+0x10/0x10 [ 487.388757][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.388803][T10850] ? bus_add_device+0x2e2/0x6c0 [ 487.388838][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.388891][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.388939][T10850] ? __pfx_bus_add_device+0x10/0x10 [ 487.388974][T10850] ? __pfx_dev_add_physical_location+0x10/0x10 [ 487.389041][T10850] dpm_sysfs_add+0x237/0x280 [ 487.389095][T10850] device_add+0x9f4/0x1970 [ 487.389152][T10850] ? __pfx_device_add+0x10/0x10 [ 487.389201][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.389247][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.389293][T10850] ? lockdep_init_map_type+0x5c/0x250 [ 487.389337][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.389383][T10850] ? __init_waitqueue_head+0xca/0x150 [ 487.389432][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.389488][T10850] netdev_register_kobject+0x1df/0x410 [ 487.389560][T10850] register_netdevice+0x15b6/0x25a0 [ 487.389625][T10850] ? __pfx_register_netdevice+0x10/0x10 [ 487.389683][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.389732][T10850] ? dev_addr_mod+0x14f/0x2c0 [ 487.389805][T10850] ipip6_tunnel_create+0x11d/0x1d0 [ 487.389874][T10850] ipip6_newlink+0x1ea/0x470 [ 487.389938][T10850] ? __pfx_ipip6_newlink+0x10/0x10 [ 487.389995][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390057][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390110][T10850] ? rtnl_create_link+0xa4b/0xf80 [ 487.390166][T10850] ? __pfx_ipip6_newlink+0x10/0x10 [ 487.390226][T10850] rtnl_newlink+0x1697/0x2620 [ 487.390299][T10850] ? __pfx_rtnl_newlink+0x10/0x10 [ 487.390357][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390405][T10850] ? rcu_is_watching+0x13/0xc0 [ 487.390488][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390545][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390594][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390641][T10850] ? find_held_lock+0x2b/0x80 [ 487.390707][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390755][T10850] ? lock_acquire+0x1d1/0x380 [ 487.390797][T10850] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 487.390852][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.390903][T10850] ? find_held_lock+0x2b/0x80 [ 487.390959][T10850] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 487.391013][T10850] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 487.391066][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.391119][T10850] ? __pfx_rtnl_newlink+0x10/0x10 [ 487.391177][T10850] rtnetlink_rcv_msg+0x95e/0xe90 [ 487.391237][T10850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 487.391306][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.391353][T10850] ? ref_tracker_free+0x37e/0x6c0 [ 487.391413][T10850] netlink_rcv_skb+0x159/0x420 [ 487.391459][T10850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 487.391519][T10850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.391582][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.391634][T10850] ? netlink_deliver_tap+0x1ae/0xcc0 [ 487.391687][T10850] netlink_unicast+0x65f/0x950 [ 487.391740][T10850] ? __pfx_netlink_unicast+0x10/0x10 [ 487.391801][T10850] netlink_sendmsg+0x8b0/0xda0 [ 487.391855][T10850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.391912][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.391959][T10850] ? apparmor_socket_sendmsg+0x165/0x280 [ 487.392010][T10850] ____sys_sendmsg+0xa4d/0xbe0 [ 487.392069][T10850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.392119][T10850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.392203][T10850] ___sys_sendmsg+0x190/0x1e0 [ 487.392272][T10850] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.392336][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.392383][T10850] ? futex_wait+0x11e/0x370 [ 487.392438][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.392486][T10850] ? find_held_lock+0x2b/0x80 [ 487.392575][T10850] __sys_sendmsg+0x160/0x210 [ 487.392626][T10850] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.392693][T10850] ? srso_alias_return_thunk+0x5/0xfbef5 [ 487.392750][T10850] do_syscall_64+0x123/0x790 [ 487.392797][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.392838][T10850] RIP: 0033:0x7fa7e939e559 [ 487.392875][T10850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.392914][T10850] RSP: 002b:00007fa7ea2cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.392953][T10850] RAX: ffffffffffffffda RBX: 00007fa7e9625fa0 RCX: 00007fa7e939e559 [ 487.392981][T10850] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 487.393007][T10850] RBP: 00007fa7e9435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 487.393032][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.393058][T10850] R13: 00007fa7e9626038 R14: 00007fa7e9625fa0 R15: 00007ffe54e27a78 [ 487.393112][T10850] [ 488.016418][T10856] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 488.621281][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.636186][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.653663][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.660901][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.725767][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.756650][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.757756][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.767907][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.811363][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.812571][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.827800][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.841390][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.907750][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.934144][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.944725][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.957427][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.962702][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 488.970313][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.000872][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.032041][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.092045][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.093228][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.110062][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.131567][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.142392][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.157593][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.177809][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.186552][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.187820][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.233772][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.253705][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.280413][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.300022][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.305851][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.341702][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.346990][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.361345][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.383522][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.427406][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.440031][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.450934][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.460619][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.476776][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.487499][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 489.505873][T10874] 9pnet_fd: p9_fd_create_tcp (10874): problem connecting socket to 127.0.0.1 [ 490.312844][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 490.457096][T10907] ip_tables: iptables: counters copy to user failed while replacing table [ 491.182412][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1300'. [ 491.696066][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.700514][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.703490][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.706393][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.713698][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.714991][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.716305][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.717633][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.719871][ T5746] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 491.723390][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.730381][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.734054][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.740436][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.752030][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.753368][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.769570][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.780006][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.790158][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.799381][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.810791][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.827932][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.868254][ T5746] usb 8-1: Using ep0 maxpacket: 32 [ 491.874405][ T5746] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 491.883988][ T5746] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 491.884051][ T5746] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 491.884097][ T5746] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.884146][ T5746] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 491.901367][ T5746] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.901412][ T5746] usb 8-1: Product: syz [ 491.901439][ T5746] usb 8-1: Manufacturer: syz [ 491.901466][ T5746] usb 8-1: SerialNumber: syz [ 491.912863][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.926017][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.945416][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.966325][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 491.991816][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.003831][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.017620][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.025037][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.029381][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 492.033786][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.044187][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.056226][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.073004][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.080152][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.101107][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.114892][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.146502][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.163038][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.169479][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.176756][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.192545][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.199586][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.207943][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.223964][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.234517][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.244076][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.258833][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.269469][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.289368][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.294805][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.304206][ T5746] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input12 [ 492.323153][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.325885][T10954] loop5: detected capacity change from 0 to 164 [ 492.334568][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.367934][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.379999][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.401812][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.403156][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.435609][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.447888][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.471606][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.485817][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.487299][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.504374][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.521318][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.540130][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.550675][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.552101][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.580843][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.598689][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.611407][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.622738][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.624173][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.631953][T10954] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 492.631998][T10954] isofs_fill_super: root inode is not a directory. Corrupted media? [ 492.636171][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.646791][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.649136][ T5746] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 492.649166][ T5746] (id 0x00) [ 492.663449][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.684780][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.705286][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.706651][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.724493][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.743405][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.755323][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.770489][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.784258][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.785603][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.802408][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.818842][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.836535][T10948] 9pnet_fd: p9_fd_create_tcp (10948): problem connecting socket to 127.0.0.1 [ 492.918522][ T30] audit: type=1326 audit(1792323722.461:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.5.1306" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35ff79e559 code=0x0 [ 493.069176][ T5746] rc_core: IR keymap rc-imon-pad not found [ 493.069203][ T5746] Registered IR keymap rc-empty [ 493.069288][ T5746] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 493.069321][ T5746] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 493.121128][ T5746] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 493.128859][ T5746] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input13 [ 493.184763][ T5746] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:6> initialized [ 493.453701][ T5760] usb 8-1: USB disconnect, device number 6 [ 493.455493][T10957] imon:send_packet: packet tx failed (-71) [ 493.473270][T10957] imon:vfd_write: send packet #1 failed [ 495.657582][T11008] smpboot: CPU 1 is now offline [ 495.920598][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1328'. [ 496.079756][T11022] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1328'. [ 496.438054][T11029] FAULT_INJECTION: forcing a failure. [ 496.438054][T11029] name failslab, interval 1, probability 0, space 0, times 0 [ 496.438096][T11029] CPU: 0 UID: 0 PID: 11029 Comm: syz.3.1331 Not tainted syzkaller #0 PREEMPT(full) [ 496.438130][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 496.438149][T11029] Call Trace: [ 496.438161][T11029] [ 496.438173][T11029] dump_stack_lvl+0x100/0x190 [ 496.438221][T11029] should_fail_ex.cold+0x5/0xa [ 496.438255][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.438297][T11029] should_failslab+0xc2/0x120 [ 496.438335][T11029] __kmalloc_cache_noprof+0x91/0x6d0 [ 496.438382][T11029] ? sctp_association_new+0xbb/0x2990 [ 496.438431][T11029] sctp_association_new+0xbb/0x2990 [ 496.438475][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.438517][T11029] sctp_connect_new_asoc+0x1a8/0x770 [ 496.438562][T11029] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 496.438610][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.438647][T11029] ? __ipv6_addr_type+0xe8/0x2e0 [ 496.438689][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.438725][T11029] ? __ipv6_addr_type+0xe8/0x2e0 [ 496.438773][T11029] __sctp_connect+0x3e7/0xc70 [ 496.438816][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.438852][T11029] ? lock_acquire+0x1d1/0x380 [ 496.438892][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.438931][T11029] ? __pfx___sctp_connect+0x10/0x10 [ 496.438972][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439015][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439057][T11029] __sctp_setsockopt_connectx+0x100/0x190 [ 496.439105][T11029] sctp_getsockopt+0x3f06/0x7160 [ 496.439148][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439183][T11029] ? aa_inet_opt_perm+0x30d/0x970 [ 496.439237][T11029] ? __pfx_sctp_getsockopt+0x10/0x10 [ 496.439278][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439320][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439356][T11029] ? __lock_acquire+0x5c0/0x1f40 [ 496.439407][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439443][T11029] ? lock_acquire+0x1d1/0x380 [ 496.439474][T11029] ? __might_fault+0xc5/0x140 [ 496.439517][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439553][T11029] ? find_held_lock+0x2b/0x80 [ 496.439597][T11029] ? __might_fault+0xc5/0x140 [ 496.439638][T11029] ? __might_fault+0xc5/0x140 [ 496.439679][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439727][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439762][T11029] ? _copy_from_user+0x59/0xd0 [ 496.439793][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439829][T11029] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 496.439883][T11029] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 496.439931][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.439974][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.440011][T11029] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 496.440060][T11029] do_sock_getsockopt+0x50a/0x6e0 [ 496.440112][T11029] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 496.440166][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.440204][T11029] ? __fget_files+0x34/0x3d0 [ 496.440241][T11029] ? find_held_lock+0x2b/0x80 [ 496.440294][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.440330][T11029] ? __fget_files+0x21f/0x3d0 [ 496.440375][T11029] __sys_getsockopt+0x148/0x260 [ 496.440411][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.440458][T11029] ? __x64_sys_getsockopt+0xbd/0x160 [ 496.440493][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.440528][T11029] __x64_sys_getsockopt+0xbd/0x160 [ 496.440563][T11029] ? do_syscall_64+0xae/0x790 [ 496.440593][T11029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.440629][T11029] ? lockdep_hardirqs_on+0x7d/0x110 [ 496.440659][T11029] do_syscall_64+0x123/0x790 [ 496.440693][T11029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.440725][T11029] RIP: 0033:0x7f070df9e559 [ 496.440749][T11029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.440778][T11029] RSP: 002b:00007f070ee35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 496.440824][T11029] RAX: ffffffffffffffda RBX: 00007f070e225fa0 RCX: 00007f070df9e559 [ 496.440844][T11029] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 496.440863][T11029] RBP: 00007f070e035ab8 R08: 0000200000000080 R09: 0000000000000000 [ 496.440888][T11029] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.440908][T11029] R13: 00007f070e226038 R14: 00007f070e225fa0 R15: 00007ffcb8fb2eb8 [ 496.440949][T11029] [ 497.190269][ C0] ------------[ cut here ]------------ [ 497.190287][ C0] cpu_t != t [ 497.190297][ C0] WARNING: arch/x86/kernel/cpu/mce/core.c:1770 at mce_timer_fn+0x289/0x2e0, CPU#0: syz-executor/9979 [ 497.211567][ C0] Modules linked in: [ 497.215460][ C0] CPU: 0 UID: 0 PID: 9979 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 497.224953][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 497.235073][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 497.240410][ C0] Code: 59 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 4b 3f 59 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 98 44 59 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 a0 ef bf 8f e8 e0 d0 84 [ 497.260097][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 497.266167][ C0] RAX: 0000000000000000 RBX: ffff8880b8223440 RCX: 0000000000000100 [ 497.274177][ C0] RDX: ffff8880369abe80 RSI: ffffffff81b301b8 RDI: ffffffff8e6ae920 [ 497.282193][ C0] RBP: ffff8880b8323440 R08: 0000000000000001 R09: 0000000000000000 [ 497.290191][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 497.298192][ C0] R13: 8000000000000100 R14: 1ffff92000000f8d R15: ffffffff81b2ff30 [ 497.306190][ C0] FS: 0000555582560500(0000) GS:ffff888122944000(0000) knlGS:0000000000000000 [ 497.315169][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.321785][ C0] CR2: 00007f360066ed58 CR3: 0000000077aac000 CR4: 0000000000350ef0 [ 497.329794][ C0] Call Trace: [ 497.333063][ C0] [ 497.335898][ C0] call_timer_fn+0x198/0x5f0 [ 497.340526][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 497.345646][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 497.350710][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.356350][ C0] ? mark_held_locks+0x40/0x70 [ 497.361151][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 497.366176][ C0] __run_timers+0x757/0xb00 [ 497.370725][ C0] ? __pfx___run_timers+0x10/0x10 [ 497.375755][ C0] ? clockevents_program_event+0x23e/0x820 [ 497.381612][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.387256][ C0] ? lock_acquire+0x1d1/0x380 [ 497.391970][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.397639][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 497.402686][ C0] run_timer_base+0x114/0x190 [ 497.407365][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 497.412598][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.418269][ C0] run_timer_softirq+0x10/0x50 [ 497.423037][ C0] handle_softirqs+0x1e6/0x9d0 [ 497.427844][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 497.433139][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.438806][ C0] ? _raw_spin_unlock+0x28/0x50 [ 497.443674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.449337][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 497.454993][ C0] __irq_exit_rcu+0x16a/0x210 [ 497.459713][ C0] irq_exit_rcu+0x9/0x30 [ 497.463967][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 497.469653][ C0] [ 497.472573][ C0] [ 497.475490][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.481500][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 497.486702][ C0] Code: 05 cf 4d a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de 29 5e 10 0f 82 c9 02 00 00 8b 35 5e 5b 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 4d a6 13 0f 85 09 03 00 00 48 83 c4 [ 497.506343][ C0] RSP: 0018:ffffc90004617708 EFLAGS: 00000206 [ 497.512431][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 497.520419][ C0] RDX: 0000000000000000 RSI: ffffffff8e3bcfdc RDI: ffffffff8c625c80 [ 497.528430][ C0] RBP: ffffffff8fdec5e0 R08: 000000001801ee01 R09: 0000000000000007 [ 497.536396][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 497.544387][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.552496][ C0] ? unwind_next_frame+0x3be/0x2090 [ 497.557738][ C0] ? unwind_next_frame+0x3be/0x2090 [ 497.562949][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.568625][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.574780][ C0] unwind_next_frame+0xd1/0x2090 [ 497.579756][ C0] ? unwind_next_frame+0xbd/0x2090 [ 497.584881][ C0] ? kasan_save_track+0x14/0x30 [ 497.589773][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.595927][ C0] arch_stack_walk+0x94/0xf0 [ 497.600562][ C0] ? kasan_save_track+0x14/0x30 [ 497.605422][ C0] ? tomoyo_realpath_from_path+0x19c/0x690 [ 497.611276][ C0] stack_trace_save+0x8e/0xc0 [ 497.615953][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 497.621363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.627002][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 497.631971][ C0] ? __x64_sys_ioctl+0xb7/0x210 [ 497.636841][ C0] ? do_syscall_64+0x123/0x790 [ 497.641637][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.647732][ C0] kasan_save_stack+0x30/0x50 [ 497.652412][ C0] ? kasan_save_stack+0x30/0x50 [ 497.657259][ C0] ? kasan_save_track+0x14/0x30 [ 497.662191][ C0] kasan_save_track+0x14/0x30 [ 497.666870][ C0] kasan_save_free_info+0x3b/0x70 [ 497.671942][ C0] __kasan_slab_free+0x5f/0x80 [ 497.676723][ C0] ? tomoyo_realpath_from_path+0x130/0x690 [ 497.682578][ C0] kfree+0x22b/0x6d0 [ 497.686493][ C0] tomoyo_realpath_from_path+0x19c/0x690 [ 497.692181][ C0] tomoyo_path_number_perm+0x23c/0x580 [ 497.697670][ C0] ? tomoyo_path_number_perm+0x22e/0x580 [ 497.703313][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.709362][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.715001][ C0] ? hook_file_ioctl_common+0x140/0x440 [ 497.720583][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.726221][ C0] ? __x64_sys_openat+0x12d/0x210 [ 497.731292][ C0] security_file_ioctl+0xd3/0x230 [ 497.736324][ C0] __x64_sys_ioctl+0xb7/0x210 [ 497.741058][ C0] do_syscall_64+0x123/0x790 [ 497.745655][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.751583][ C0] RIP: 0033:0x7f070df9e1eb [ 497.755997][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 497.775658][ C0] RSP: 002b:00007ffcb8fb31c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.784107][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f070df9e1eb [ 497.792098][ C0] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 497.800086][ C0] RBP: 00007ffcb8fb325c R08: 0000000000000000 R09: 0000000000000000 [ 497.808075][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 497.816041][ C0] R13: 00000000000927c0 R14: 000000000007957a R15: 00007ffcb8fb32b0 [ 497.824059][ C0] [ 497.827070][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 497.834335][ C0] CPU: 0 UID: 0 PID: 9979 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 497.843786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 497.853829][ C0] Call Trace: [ 497.857099][ C0] [ 497.859928][ C0] dump_stack_lvl+0x100/0x190 [ 497.864618][ C0] vpanic+0x553/0x970 [ 497.868598][ C0] ? __pfx_vpanic+0x10/0x10 [ 497.873108][ C0] panic+0xd1/0xe0 [ 497.876827][ C0] ? __pfx_panic+0x10/0x10 [ 497.881262][ C0] check_panic_on_warn.cold+0x19/0x34 [ 497.886635][ C0] ? mce_timer_fn+0x289/0x2e0 [ 497.891310][ C0] __warn.cold+0x191/0x318 [ 497.895750][ C0] __report_bug+0x30f/0x440 [ 497.900250][ C0] ? mce_timer_fn+0x289/0x2e0 [ 497.904931][ C0] ? __pfx___report_bug+0x10/0x10 [ 497.909954][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 497.915689][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.921333][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.926969][ C0] ? mark_held_locks+0x40/0x70 [ 497.931749][ C0] ? irqentry_exit+0x24d/0xa10 [ 497.936522][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.942159][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 497.947355][ C0] ? mce_timer_fn+0x289/0x2e0 [ 497.952055][ C0] report_bug+0xb3/0x220 [ 497.956310][ C0] ? mce_timer_fn+0x289/0x2e0 [ 497.960989][ C0] handle_bug+0x16a/0x2a0 [ 497.965321][ C0] exc_invalid_op+0x17/0x50 [ 497.969828][ C0] asm_exc_invalid_op+0x1a/0x20 [ 497.974683][ C0] RIP: 0010:mce_timer_fn+0x289/0x2e0 [ 497.979983][ C0] Code: 59 00 4d 01 e4 4d 39 ec 4d 0f 47 e5 31 ff 4c 89 e6 e8 4b 3f 59 00 4d 85 e4 0f 84 20 ff ff ff e9 f7 fe ff ff e8 98 44 59 00 90 <0f> 0b 90 e9 cf fd ff ff 4c 89 f6 48 c7 c7 a0 ef bf 8f e8 e0 d0 84 [ 497.999592][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00010246 [ 498.005655][ C0] RAX: 0000000000000000 RBX: ffff8880b8223440 RCX: 0000000000000100 [ 498.013618][ C0] RDX: ffff8880369abe80 RSI: ffffffff81b301b8 RDI: ffffffff8e6ae920 [ 498.021583][ C0] RBP: ffff8880b8323440 R08: 0000000000000001 R09: 0000000000000000 [ 498.029546][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 498.037506][ C0] R13: 8000000000000100 R14: 1ffff92000000f8d R15: ffffffff81b2ff30 [ 498.045470][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 498.050514][ C0] ? mce_timer_fn+0x288/0x2e0 [ 498.055211][ C0] call_timer_fn+0x198/0x5f0 [ 498.059801][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 498.064920][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 498.069965][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.075602][ C0] ? mark_held_locks+0x40/0x70 [ 498.080376][ C0] ? __pfx_mce_timer_fn+0x10/0x10 [ 498.085400][ C0] __run_timers+0x757/0xb00 [ 498.089916][ C0] ? __pfx___run_timers+0x10/0x10 [ 498.094940][ C0] ? clockevents_program_event+0x23e/0x820 [ 498.100765][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.106413][ C0] ? lock_acquire+0x1d1/0x380 [ 498.111097][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.116751][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 498.121794][ C0] run_timer_base+0x114/0x190 [ 498.126476][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 498.131673][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.137314][ C0] run_timer_softirq+0x10/0x50 [ 498.142076][ C0] handle_softirqs+0x1e6/0x9d0 [ 498.146844][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 498.152129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.157763][ C0] ? _raw_spin_unlock+0x28/0x50 [ 498.162626][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.168260][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 498.173914][ C0] __irq_exit_rcu+0x16a/0x210 [ 498.178590][ C0] irq_exit_rcu+0x9/0x30 [ 498.182830][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 498.188510][ C0] [ 498.191430][ C0] [ 498.194363][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.200346][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 498.205544][ C0] Code: 05 cf 4d a6 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 de 29 5e 10 0f 82 c9 02 00 00 8b 35 5e 5b 5e 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 6d 4d a6 13 0f 85 09 03 00 00 48 83 c4 [ 498.225148][ C0] RSP: 0018:ffffc90004617708 EFLAGS: 00000206 [ 498.231223][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 498.239185][ C0] RDX: 0000000000000000 RSI: ffffffff8e3bcfdc RDI: ffffffff8c625c80 [ 498.247149][ C0] RBP: ffffffff8fdec5e0 R08: 000000001801ee01 R09: 0000000000000007 [ 498.255109][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 498.263070][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.271056][ C0] ? unwind_next_frame+0x3be/0x2090 [ 498.276355][ C0] ? unwind_next_frame+0x3be/0x2090 [ 498.281562][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.287204][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.293355][ C0] unwind_next_frame+0xd1/0x2090 [ 498.298313][ C0] ? unwind_next_frame+0xbd/0x2090 [ 498.303432][ C0] ? kasan_save_track+0x14/0x30 [ 498.308289][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.314440][ C0] arch_stack_walk+0x94/0xf0 [ 498.319041][ C0] ? kasan_save_track+0x14/0x30 [ 498.323893][ C0] ? tomoyo_realpath_from_path+0x19c/0x690 [ 498.329712][ C0] stack_trace_save+0x8e/0xc0 [ 498.334383][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 498.339753][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.345390][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 498.350328][ C0] ? __x64_sys_ioctl+0xb7/0x210 [ 498.355193][ C0] ? do_syscall_64+0x123/0x790 [ 498.359955][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.366021][ C0] kasan_save_stack+0x30/0x50 [ 498.370700][ C0] ? kasan_save_stack+0x30/0x50 [ 498.375546][ C0] ? kasan_save_track+0x14/0x30 [ 498.380448][ C0] kasan_save_track+0x14/0x30 [ 498.385125][ C0] kasan_save_free_info+0x3b/0x70 [ 498.390162][ C0] __kasan_slab_free+0x5f/0x80 [ 498.394943][ C0] ? tomoyo_realpath_from_path+0x130/0x690 [ 498.400761][ C0] kfree+0x22b/0x6d0 [ 498.404685][ C0] tomoyo_realpath_from_path+0x19c/0x690 [ 498.410336][ C0] tomoyo_path_number_perm+0x23c/0x580 [ 498.415797][ C0] ? tomoyo_path_number_perm+0x22e/0x580 [ 498.421440][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 498.427461][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.433100][ C0] ? hook_file_ioctl_common+0x140/0x440 [ 498.438673][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.444307][ C0] ? __x64_sys_openat+0x12d/0x210 [ 498.449348][ C0] security_file_ioctl+0xd3/0x230 [ 498.454389][ C0] __x64_sys_ioctl+0xb7/0x210 [ 498.459086][ C0] do_syscall_64+0x123/0x790 [ 498.463678][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.469569][ C0] RIP: 0033:0x7f070df9e1eb [ 498.473978][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 498.493582][ C0] RSP: 002b:00007ffcb8fb31c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.501995][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f070df9e1eb [ 498.509961][ C0] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 498.517921][ C0] RBP: 00007ffcb8fb325c R08: 0000000000000000 R09: 0000000000000000 [ 498.525903][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 498.533870][ C0] R13: 00000000000927c0 R14: 000000000007957a R15: 00007ffcb8fb32b0 [ 498.541853][ C0] [ 498.544909][ C0] Kernel Offset: disabled [ 498.549221][ C0] Rebooting in 86400 seconds..